$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/36c744fe-193a-49aa-b75c-c8b33a39ef72.roa File: 36c744fe-193a-49aa-b75c-c8b33a39ef72.roa (raw, json) Hash identifier: EzOmuJLITlj0CU+fpm8gx3eKjiLVoRhJcpG6C2ZLJtU= Subject key identifier: 00:E0:BC:62:8C:44:C9:DD:59:E9:2A:7D:56:D8:AF:29:90:5E:DF:06 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 31A31E794FA0066CBE264B0935D990AAE3E29B32 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/36c744fe-193a-49aa-b75c-c8b33a39ef72.roa Signing time: Tue 23 Sep 2025 00:38:28 +0000 ROA not before: Tue 23 Sep 2025 00:38:28 +0000 ROA not after: Tue 28 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.85.80.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:a3:1e:79:4f:a0:06:6c:be:26:4b:09:35:d9:90:aa:e3:e2:9b:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 23 00:38:28 2025 GMT Not After : Oct 28 23:59:59 2025 GMT Subject: serialNumber=8c6669b0d5c53f8dabb4efb149fc7278861211204c5c2962ece94992472bfb28, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:8e:23:90:1f:83:b2:33:98:10:4e:f9:af:bd: b6:22:ed:c4:51:42:22:5e:84:87:e6:93:10:b5:14: 14:35:ef:23:08:07:44:34:43:19:ec:2c:2a:db:4d: fb:14:fe:33:87:61:7f:08:5f:1e:18:11:79:5e:49: 99:b1:25:d5:9b:5a:ce:2b:b4:0d:00:57:dd:09:52: c6:02:86:ea:8e:6a:e2:ff:dc:e8:ca:10:09:ff:33: d4:6d:56:f2:2e:01:f4:5e:2d:c3:2b:75:2b:b3:ea: 00:ce:6b:84:4c:2d:a6:5b:e5:26:45:de:6a:84:d5: 5e:4b:b5:6e:e9:db:6a:3b:1f:cd:c5:3e:2f:28:2f: 24:13:49:6a:35:f7:46:20:36:07:25:2b:b9:1e:48: 84:65:e5:26:1b:9d:20:b0:59:75:e4:a4:75:57:8a: d5:6b:7a:c5:bb:b6:38:69:ab:65:96:d3:21:dc:83: 54:91:82:42:d1:b2:b2:f7:ff:85:01:9a:86:41:f8: c4:7a:ef:57:d3:0a:6e:c1:8d:83:ea:65:7d:fe:15: 51:f1:d1:c4:ab:b4:35:c0:bf:04:4e:8a:6a:1c:51: b5:fd:a4:5c:5c:23:f5:c6:a1:e6:fa:5c:47:43:f9: 29:66:aa:b8:4e:99:3d:b5:8e:23:bf:29:58:c0:db: f6:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:E0:BC:62:8C:44:C9:DD:59:E9:2A:7D:56:D8:AF:29:90:5E:DF:06 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/36c744fe-193a-49aa-b75c-c8b33a39ef72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.85.80.0/22 Signature Algorithm: sha256WithRSAEncryption 69:a7:f7:89:4e:fe:f1:11:4f:0d:b6:b0:dd:c4:ac:1d:dc:23: 92:cd:b2:5a:6e:45:0f:ea:40:ef:5e:c4:d5:c1:42:20:18:8b: d2:79:59:02:f9:6a:51:6e:43:ac:a0:a4:42:7f:40:dd:6d:26: 35:8a:ce:a4:17:20:c7:ba:94:02:64:b0:5c:89:78:94:4a:a9: be:d9:4e:9e:f1:00:42:2b:26:d7:43:8d:9c:55:f7:a9:cb:12: b5:e7:a6:6b:53:af:93:42:af:5a:88:48:4f:8e:ae:f2:1b:f5: 96:e1:a7:ce:ea:a0:2d:20:42:10:b4:30:ce:db:a2:cb:04:7a: f0:ad:73:21:cd:c6:36:68:d9:9b:ed:7f:60:e6:f7:4f:8c:b2: 5c:e2:11:32:be:1b:3c:90:85:3b:43:af:b2:fd:8d:8f:3c:6c: 59:60:d9:64:99:ac:e1:98:8c:50:9d:df:ad:2c:95:d9:3f:c4: cf:78:f2:20:f2:a3:08:17:26:43:b8:f5:7f:69:c7:53:84:20: d9:b8:6e:52:fa:51:1d:7d:8a:2f:53:0d:a2:f0:47:8e:79:c7: 66:32:29:78:90:2d:7e:cf:e1:1d:b8:04:fd:54:59:fd:e3:79: 8b:a5:6e:8f:9e:53:dd:9d:e5:9e:55:60:c0:52:56:db:ee:bc: 19:c6:76:eb -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMaMeeU+gBmy+JksJNdmQquPimzIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIzMDAzODI4WhcNMjUxMDI4MjM1OTU5 WjB6MUkwRwYDVQQFE0A4YzY2NjliMGQ1YzUzZjhkYWJiNGVmYjE0OWZjNzI3ODg2 MTIxMTIwNGM1YzI5NjJlY2U5NDk5MjQ3MmJmYjI4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDnjiOQH4OyM5gQTvmvvbYi7cRRQiJehIfmkxC1FBQ17yMI B0Q0QxnsLCrbTfsU/jOHYX8IXx4YEXleSZmxJdWbWs4rtA0AV90JUsYChuqOauL/ 3OjKEAn/M9RtVvIuAfReLcMrdSuz6gDOa4RMLaZb5SZF3mqE1V5LtW7p22o7H83F Pi8oLyQTSWo190YgNgclK7keSIRl5SYbnSCwWXXkpHVXitVresW7tjhpq2WW0yHc g1SRgkLRsrL3/4UBmoZB+MR671fTCm7BjYPqZX3+FVHx0cSrtDXAvwROimocUbX9 pFxcI/XGoeb6XEdD+SlmqrhOmT21jiO/KVjA2/YnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUAOC8YoxEyd1Z6Sp9VtivKZBe3wYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzM2Yzc0NGZlLTE5M2EtNDlhYS1iNzVjLWM4YjMzYTM5ZWY3Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI0VVAwDQYJKoZIhvcNAQELBQADggEBAGmn94lO/vERTw22sN3ErB3cI5LN slpuRQ/qQO9exNXBQiAYi9J5WQL5alFuQ6ygpEJ/QN1tJjWKzqQXIMe6lAJksFyJ eJRKqb7ZTp7xAEIrJtdDjZxV96nLErXnpmtTr5NCr1qISE+OrvIb9Zbhp87qoC0g QhC0MM7bossEevCtcyHNxjZo2Zvtf2Dm90+MslziETK+GzyQhTtDr7L9jY88bFlg 2WSZrOGYjFCd360sldk/xM948iDyowgXJkO49X9px1OEINm4blL6UR19ii9TDaLw R455x2YyKXiQLX7P4R24BP1UWf3jeYulbo+eU92d5Z5VYMBSVtvuvBnGdus= -----END CERTIFICATE-----Generated at Fri Oct 17 22:14:51 2025 by rpki-client