$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/39229699-78d1-4d55-9be5-c59d337684c7.roa File: 39229699-78d1-4d55-9be5-c59d337684c7.roa (raw, json) Hash identifier: 02jGdzD/Qs3DI++xymWG7mxNVNSDZ+724+unag0ykQA= Subject key identifier: DF:80:80:94:0C:CA:3A:D9:24:38:7D:6F:F8:E0:71:D1:5E:3A:F1:A4 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2DD73D2A1BE323095C4F71B2DDEF63B7BF805B89 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/39229699-78d1-4d55-9be5-c59d337684c7.roa Signing time: Tue 23 Sep 2025 00:29:45 +0000 ROA not before: Tue 23 Sep 2025 00:29:45 +0000 ROA not after: Tue 28 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.84.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:d7:3d:2a:1b:e3:23:09:5c:4f:71:b2:dd:ef:63:b7:bf:80:5b:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 23 00:29:45 2025 GMT Not After : Oct 28 23:59:59 2025 GMT Subject: serialNumber=b101e081cace620ffeb24e2f77170c9de0be80678e4307f99a3c76bc6eba888d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:85:8e:6a:eb:bd:66:e1:59:ce:62:5a:10:dd: 97:a6:87:b7:9e:85:69:ba:f8:30:3a:b5:79:d0:69: ef:dc:83:26:df:81:7d:03:49:a3:64:d4:d9:e2:bf: 62:e2:dd:30:95:d0:bf:ef:a9:a1:1a:d7:e3:97:e6: 75:ad:a7:49:f4:e3:32:f2:f7:d9:45:7f:8b:98:b2: 7d:cf:37:f8:84:0a:41:55:98:5e:01:e3:65:7c:26: 13:c7:52:4e:83:23:a0:36:a6:db:a8:58:f0:68:e1: c6:cd:9f:3f:64:5c:f7:bc:ba:b6:5f:6f:34:87:75: 7f:f8:22:c3:17:b5:a7:fe:eb:47:49:86:02:28:0e: 4d:35:9a:c5:43:5c:68:3f:e6:dd:bf:ba:b2:28:c0: 99:ba:39:81:8e:28:d7:4b:fd:bd:35:23:ab:fd:48: 37:f1:20:35:47:2f:8e:1f:3f:e7:3c:51:ba:e9:51: e1:04:26:c4:c2:d0:70:29:45:2b:d9:54:02:a7:59: 40:b5:4d:db:d0:7f:79:83:f7:05:45:9e:7b:fb:e2: fa:37:76:4c:74:96:8c:89:ad:d1:ae:35:f7:ed:7a: 12:0d:62:69:7a:47:47:92:95:4f:de:06:0d:9e:6e: ca:35:60:94:20:b6:71:8c:71:68:63:81:3c:c5:ce: 8e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:80:80:94:0C:CA:3A:D9:24:38:7D:6F:F8:E0:71:D1:5E:3A:F1:A4 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/39229699-78d1-4d55-9be5-c59d337684c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.84.148.0/22 Signature Algorithm: sha256WithRSAEncryption 59:04:71:a4:fd:1e:c9:62:ea:9f:52:e8:d2:23:0c:31:02:4f: 98:43:63:dc:73:b7:f0:38:b3:a4:36:7b:f4:fe:6e:d3:db:d6: a5:97:a5:42:f7:d4:3a:a1:b6:af:d7:57:37:d2:7b:39:38:9e: ee:19:7e:e2:17:44:45:8b:4e:28:f6:f5:4d:34:12:35:d3:6c: a4:ea:31:f3:a1:a0:35:9e:1c:75:38:6d:6b:7e:ca:3a:f3:f7: e1:8a:1e:4b:a8:c0:b0:b0:a5:9b:0f:7f:dc:e4:9e:dc:cb:3e: 15:9f:a6:b5:f5:42:64:a3:6a:a2:fb:77:a1:e1:be:bc:59:95: 2b:ad:ab:d2:a5:79:4f:ce:a2:2b:e2:6e:8b:10:6d:57:fc:4a: e6:7b:b7:c9:ef:59:61:43:41:4d:90:8d:de:82:28:2a:e0:58: 4a:d6:a6:f6:39:e6:c1:0c:c7:26:d7:5f:04:ce:8b:c6:26:02: a4:d8:ce:fc:63:a3:6f:56:20:48:33:78:ab:5f:52:d9:c6:c1: 87:e1:83:43:af:7f:47:78:cb:af:63:31:da:b0:d3:43:bb:92: 92:b3:26:18:b7:ae:e8:e7:ea:ad:fd:01:e7:a7:34:58:da:fe: cc:24:c5:bb:61:79:2a:f6:c9:03:06:5d:9d:9f:51:76:d1:f0: 57:98:33:42 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULdc9KhvjIwlcT3Gy3e9jt7+AW4kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIzMDAyOTQ1WhcNMjUxMDI4MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMTAxZTA4MWNhY2U2MjBmZmViMjRlMmY3NzE3MGM5ZGUw YmU4MDY3OGU0MzA3Zjk5YTNjNzZiYzZlYmE4ODhkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDdhY5q671m4VnOYloQ3Zemh7eehWm6+DA6tXnQae/cgybf gX0DSaNk1Nniv2Li3TCV0L/vqaEa1+OX5nWtp0n04zLy99lFf4uYsn3PN/iECkFV mF4B42V8JhPHUk6DI6A2ptuoWPBo4cbNnz9kXPe8urZfbzSHdX/4IsMXtaf+60dJ hgIoDk01msVDXGg/5t2/urIowJm6OYGOKNdL/b01I6v9SDfxIDVHL44fP+c8Ubrp UeEEJsTC0HApRSvZVAKnWUC1TdvQf3mD9wVFnnv74vo3dkx0loyJrdGuNfftehIN Yml6R0eSlU/eBg2ebso1YJQgtnGMcWhjgTzFzo5DAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU34CAlAzKOtkkOH1v+OBx0V468aQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzM5MjI5Njk5LTc4ZDEtNGQ1NS05YmU1LWM1OWQzMzc2ODRjNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI0VJQwDQYJKoZIhvcNAQELBQADggEBAFkEcaT9Hsli6p9S6NIjDDECT5hD Y9xzt/A4s6Q2e/T+btPb1qWXpUL31Dqhtq/XVzfSezk4nu4ZfuIXREWLTij29U00 EjXTbKTqMfOhoDWeHHU4bWt+yjrz9+GKHkuowLCwpZsPf9zkntzLPhWfprX1QmSj aqL7d6HhvrxZlSutq9KleU/OoivibosQbVf8SuZ7t8nvWWFDQU2Qjd6CKCrgWErW pvY55sEMxybXXwTOi8YmAqTYzvxjo29WIEgzeKtfUtnGwYfhg0Ovf0d4y69jMdqw 00O7kpKzJhi3rujn6q39AeenNFja/swkxbtheSr2yQMGXZ2fUXbR8FeYM0I= -----END CERTIFICATE-----Generated at Fri Oct 17 22:19:08 2025 by rpki-client