$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/32b0e2fb-b0e1-4db5-ac88-13c5be45947c.roa File: 32b0e2fb-b0e1-4db5-ac88-13c5be45947c.roa (raw, json) Hash identifier: te7mol5BRtXeJn9If15+JHttP72qmk6f4zBl5o/qAYA= Subject key identifier: E2:7C:48:A0:E8:20:05:34:EC:F5:BE:4E:B4:72:2C:94:67:52:CE:5D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 164911B8DB0B6C3DDE5B76B7F8BCBDC629D706D0 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/32b0e2fb-b0e1-4db5-ac88-13c5be45947c.roa Signing time: Tue 23 Sep 2025 00:10:54 +0000 ROA not before: Tue 23 Sep 2025 00:10:54 +0000 ROA not after: Tue 28 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.85.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:49:11:b8:db:0b:6c:3d:de:5b:76:b7:f8:bc:bd:c6:29:d7:06:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 23 00:10:54 2025 GMT Not After : Oct 28 23:59:59 2025 GMT Subject: serialNumber=548424b54c9304e44db833eace5d2a77c9c7b30adaa9c6094dc3dbd29c4355e4, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a8:9a:93:83:da:00:88:02:d0:35:af:74:10: d2:03:0a:57:d8:05:6b:7e:02:d8:3f:99:3d:46:ca: 4c:dc:19:4c:e7:b5:4b:3b:dc:e7:c3:24:05:36:59: ea:0e:6c:23:49:f0:d6:f6:fc:84:a1:4b:df:79:2c: 3e:d3:9a:dd:ad:d3:95:e8:e8:2f:26:c5:86:a4:c2: 6a:a9:07:36:52:2a:2c:66:c0:30:cb:9e:fc:96:90: 3a:1b:70:2d:06:3c:7c:93:40:73:65:67:b5:d7:07: c7:02:50:23:02:70:3d:f3:a4:62:87:84:19:93:43: e0:c9:44:c4:1a:83:02:7b:57:7d:a9:17:c4:00:25: ff:24:0b:3c:5f:b9:d1:9b:57:2c:ca:97:b0:ec:55: a0:b8:86:30:0a:18:25:39:1d:09:8d:fc:14:43:c3: bf:df:a6:b1:1d:f1:b8:d6:71:84:9c:03:d7:95:e9: ab:2d:f5:be:2c:b2:da:73:51:f4:04:9a:2a:5f:a8: 76:6f:c0:ec:a0:70:04:5d:45:f1:5f:5d:03:0b:72: 85:c6:40:2a:cf:47:4d:62:5c:07:5a:3e:aa:a1:f8: fc:bb:60:05:c0:74:b2:7e:5c:0a:92:f5:bc:56:55: 90:94:9c:83:95:c0:aa:62:a7:ad:d4:37:1b:67:d2: 8f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:7C:48:A0:E8:20:05:34:EC:F5:BE:4E:B4:72:2C:94:67:52:CE:5D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/32b0e2fb-b0e1-4db5-ac88-13c5be45947c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.85.41.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:9a:c9:6b:c9:f3:9f:57:78:6e:2a:8f:61:9e:de:ed:4f:3c: 51:5a:65:6f:86:3b:54:78:db:5d:18:e7:48:b5:95:49:8a:c5: 8b:c2:5a:ca:79:5d:a4:cc:db:f5:9a:4c:c9:8d:d5:1c:81:ba: 66:4a:e2:18:57:c4:a9:7d:15:91:4b:4c:fc:95:20:8e:35:b4: 2d:bc:e5:dd:8c:be:b9:45:c2:57:1c:57:b3:83:de:f1:f0:26: cd:a7:57:d4:31:86:2c:8b:47:04:fd:eb:c4:fc:7b:77:0b:66: 98:15:55:f9:ed:a6:06:29:72:52:22:98:f6:cd:25:45:d9:ef: f8:48:9e:b9:a0:6d:6a:1e:a2:20:92:e1:7e:6c:fd:3e:b4:0c: cb:ae:8a:52:0d:a0:cc:6b:f0:75:86:c6:25:86:23:ec:47:f6: 16:8a:97:d2:ac:e3:43:1d:36:a7:84:71:5c:fc:8a:2c:4c:8a: 22:df:96:9d:62:47:af:6d:c1:57:4a:8c:7b:f0:b6:a6:c4:31: 21:7d:ec:02:fa:c8:0d:0b:1e:ba:76:84:e0:d5:69:51:e5:6f: 02:41:e9:7d:08:fb:0e:e9:92:51:19:ce:15:9d:9c:5c:08:02: f1:87:46:64:86:bd:e1:84:0c:2d:2a:e8:65:0e:0a:f0:5f:aa: 2c:2e:ae:81 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFkkRuNsLbD3eW3a3+Ly9xinXBtAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIzMDAxMDU0WhcNMjUxMDI4MjM1OTU5 WjB6MUkwRwYDVQQFE0A1NDg0MjRiNTRjOTMwNGU0NGRiODMzZWFjZTVkMmE3N2M5 YzdiMzBhZGFhOWM2MDk0ZGMzZGJkMjljNDM1NWU0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDeqJqTg9oAiALQNa90ENIDClfYBWt+Atg/mT1GykzcGUzn tUs73OfDJAU2WeoObCNJ8Nb2/IShS995LD7Tmt2t05Xo6C8mxYakwmqpBzZSKixm wDDLnvyWkDobcC0GPHyTQHNlZ7XXB8cCUCMCcD3zpGKHhBmTQ+DJRMQagwJ7V32p F8QAJf8kCzxfudGbVyzKl7DsVaC4hjAKGCU5HQmN/BRDw7/fprEd8bjWcYScA9eV 6ast9b4sstpzUfQEmipfqHZvwOygcARdRfFfXQMLcoXGQCrPR01iXAdaPqqh+Py7 YAXAdLJ+XAqS9bxWVZCUnIOVwKpip63UNxtn0o+xAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU4nxIoOggBTTs9b5OtHIslGdSzl0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzMyYjBlMmZiLWIwZTEtNGRiNS1hYzg4LTEzYzViZTQ1OTQ3Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0VSkwDQYJKoZIhvcNAQELBQADggEBACqayWvJ859XeG4qj2Ge3u1PPFFa ZW+GO1R4210Y50i1lUmKxYvCWsp5XaTM2/WaTMmN1RyBumZK4hhXxKl9FZFLTPyV II41tC285d2MvrlFwlccV7OD3vHwJs2nV9QxhiyLRwT968T8e3cLZpgVVfntpgYp clIimPbNJUXZ7/hInrmgbWoeoiCS4X5s/T60DMuuilINoMxr8HWGxiWGI+xH9haK l9Ks40MdNqeEcVz8iixMiiLflp1iR69twVdKjHvwtqbEMSF97AL6yA0LHrp2hODV aVHlbwJB6X0I+w7pklEZzhWdnFwIAvGHRmSGveGEDC0q6GUOCvBfqiwuroE= -----END CERTIFICATE-----Generated at Sat Oct 18 02:11:59 2025 by rpki-client