$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/478fb621-09ef-4149-8807-4af554484ae5.roa File: 478fb621-09ef-4149-8807-4af554484ae5.roa (raw, json) Hash identifier: U0S0XTPTPP08Shz9+YuISwtLZAEx8ONXss2BqFgSHBM= Subject key identifier: 3B:7C:81:5D:14:37:FB:B8:3F:1E:17:DC:63:7D:2E:29:F2:7D:D4:46 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 45A4319886DEF2F8480E4D8E1BCD44490AD32A52 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/478fb621-09ef-4149-8807-4af554484ae5.roa Signing time: Mon 22 Sep 2025 23:51:58 +0000 ROA not before: Mon 22 Sep 2025 23:51:58 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.84.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:a4:31:98:86:de:f2:f8:48:0e:4d:8e:1b:cd:44:49:0a:d3:2a:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 23:51:58 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=7442012247054166bdadb61107c5dfdc2db32f361f0b49cf54a6249afc160308, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b7:37:66:0d:83:76:99:4f:ed:9f:90:00:0d: fb:58:6f:0f:35:7d:e9:31:24:df:62:59:58:1b:6e: 62:4a:eb:95:c2:02:69:77:47:44:44:25:5f:b0:ff: 0d:2a:59:61:a7:02:1b:3c:2c:ec:ca:7f:53:6a:cf: 3f:99:8d:0b:17:51:af:82:a4:84:5d:b3:07:79:c5: 3e:d1:79:5c:96:64:57:d5:ec:fd:f5:32:17:0e:ab: d4:e5:6a:90:07:fa:cd:cb:af:de:b8:58:0e:45:f4: eb:26:3e:ba:9e:40:a7:c2:4b:ac:61:e4:05:a0:e8: 85:f5:e6:bc:d9:94:dd:3c:20:e4:c1:f3:61:7a:04: 1d:fe:a3:2b:2f:0f:cf:f6:fe:59:90:b9:3d:ce:d4: e7:49:dd:ed:9b:2a:38:fa:01:e2:6f:df:23:85:1a: b7:33:db:a8:1c:c3:66:ea:90:e6:a4:fb:a8:93:8b: 9d:d7:d4:24:da:87:b3:6c:ed:99:32:6f:49:06:00: 28:c8:8b:2e:e9:57:f3:d6:2b:bb:46:ec:07:00:39: f9:92:16:d2:21:61:e2:f9:9f:6c:c6:50:f4:1b:ef: 3b:93:56:36:82:46:b0:31:d9:bb:e0:ff:51:bf:d6: 0b:d7:b2:19:05:4c:5a:37:39:61:df:c6:71:82:f7: 24:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:7C:81:5D:14:37:FB:B8:3F:1E:17:DC:63:7D:2E:29:F2:7D:D4:46 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/478fb621-09ef-4149-8807-4af554484ae5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.84.229.0/24 Signature Algorithm: sha256WithRSAEncryption ae:ad:33:75:2f:74:49:9b:41:dd:38:07:bb:1e:39:d5:61:03: c4:96:84:12:ca:84:89:d2:ad:ce:0b:e8:b8:db:14:69:0e:32: 5c:19:42:32:fe:1a:01:fb:48:2e:81:a9:fa:b2:78:97:e5:a3: 0b:64:06:98:42:20:61:e5:d6:f3:27:4b:0e:e1:fb:a6:b1:7f: 26:30:46:c6:15:85:e6:8b:a0:75:96:b8:ae:d5:e5:76:57:88: 86:28:c1:e7:f8:b8:5b:67:ce:66:da:fa:93:34:59:38:6a:9a: 85:b8:9f:9d:4f:59:ed:90:4c:ed:a0:96:f6:a6:d8:9a:7d:1c: 0c:71:28:47:1e:39:2b:cb:f1:6d:62:f9:da:10:69:fd:0d:d2: fb:14:3d:7f:96:b2:4d:7b:15:bc:95:50:a8:4d:ae:91:13:6d: 4b:1e:52:00:8b:43:be:2c:96:b2:8e:1b:cf:a6:ee:00:6f:4e: 50:0f:d7:45:68:4a:bf:ec:cb:5e:f6:8d:17:a2:09:39:4b:60: 0f:19:9c:6b:4e:f9:67:0b:47:b1:55:47:5b:8d:0d:ce:5d:12: 4a:34:25:8a:2a:ec:20:5a:7a:82:43:b8:95:38:38:46:d0:54: 3b:ce:ad:5d:66:15:f3:f2:42:0b:95:33:35:07:ee:db:51:28: a4:dd:f7:e2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURaQxmIbe8vhIDk2OG81ESQrTKlIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjM1MTU4WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A3NDQyMDEyMjQ3MDU0MTY2YmRhZGI2MTEwN2M1ZGZkYzJk YjMyZjM2MWYwYjQ5Y2Y1NGE2MjQ5YWZjMTYwMzA4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDEtzdmDYN2mU/tn5AADftYbw81fekxJN9iWVgbbmJK65XC Aml3R0REJV+w/w0qWWGnAhs8LOzKf1Nqzz+ZjQsXUa+CpIRdswd5xT7ReVyWZFfV 7P31MhcOq9TlapAH+s3Lr964WA5F9OsmPrqeQKfCS6xh5AWg6IX15rzZlN08IOTB 82F6BB3+oysvD8/2/lmQuT3O1OdJ3e2bKjj6AeJv3yOFGrcz26gcw2bqkOak+6iT i53X1CTah7Ns7Zkyb0kGACjIiy7pV/PWK7tG7AcAOfmSFtIhYeL5n2zGUPQb7zuT VjaCRrAx2bvg/1G/1gvXshkFTFo3OWHfxnGC9yRDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUO3yBXRQ3+7g/HhfcY30uKfJ91EYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQ3OGZiNjIxLTA5ZWYtNDE0OS04ODA3LTRhZjU1NDQ4NGFlNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0VOUwDQYJKoZIhvcNAQELBQADggEBAK6tM3UvdEmbQd04B7seOdVhA8SW hBLKhInSrc4L6LjbFGkOMlwZQjL+GgH7SC6BqfqyeJflowtkBphCIGHl1vMnSw7h +6axfyYwRsYVheaLoHWWuK7V5XZXiIYowef4uFtnzmba+pM0WThqmoW4n51PWe2Q TO2glvam2Jp9HAxxKEceOSvL8W1i+doQaf0N0vsUPX+Wsk17FbyVUKhNrpETbUse UgCLQ74slrKOG8+m7gBvTlAP10VoSr/sy172jReiCTlLYA8ZnGtO+WcLR7FVR1uN Dc5dEko0JYoq7CBaeoJDuJU4OEbQVDvOrV1mFfPyQguVMzUH7ttRKKTd9+I= -----END CERTIFICATE-----Generated at Sat Oct 18 05:06:09 2025 by rpki-client