$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4845659a-c570-4da2-b81d-c44577589208.roa File: 4845659a-c570-4da2-b81d-c44577589208.roa (raw, json) Hash identifier: 9wSH6c8BlNrk6eMnkVzq3alKbhmlYjXMi1VPYaUNHWI= Subject key identifier: CB:10:33:FB:07:CD:D0:69:66:19:07:34:BB:9F:C8:CE:0E:76:B5:90 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1BEE8B31BB972D9CDB66F9B6BF3615AAF07AACAF Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4845659a-c570-4da2-b81d-c44577589208.roa Signing time: Tue 23 Sep 2025 00:38:25 +0000 ROA not before: Tue 23 Sep 2025 00:38:25 +0000 ROA not after: Tue 28 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.85.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:ee:8b:31:bb:97:2d:9c:db:66:f9:b6:bf:36:15:aa:f0:7a:ac:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 23 00:38:25 2025 GMT Not After : Oct 28 23:59:59 2025 GMT Subject: serialNumber=daf7fb64b6a81554c3ad57155b50ee90dbff2a430f973bd871a8e35f5a3b512f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b2:de:5c:73:b3:49:3e:d1:1e:fe:72:39:b9: c7:44:63:16:6d:9f:a4:7a:a2:a4:d0:6d:f6:58:f1: 2a:2f:bf:5a:15:9c:4a:e4:c4:26:54:67:1e:50:c1: 93:75:08:12:17:ac:fe:ed:cd:5e:e7:6b:10:21:0e: 1c:dd:82:c7:07:72:5a:4c:32:c5:3b:e5:3a:4c:82: 90:6f:0a:9f:fc:16:f7:55:ae:46:59:5a:e4:4f:d1: f8:9d:f9:3e:64:84:d8:cc:39:77:08:12:20:b2:99: 0d:3e:6b:e6:65:51:6d:29:2d:92:18:08:01:bd:ee: 36:ea:df:85:af:e4:76:31:04:09:69:cf:1b:b7:bb: af:fe:8f:14:33:16:d4:c7:5b:25:d2:73:5c:34:f8: 05:dd:ed:83:e5:41:a5:44:6c:6b:fd:0a:2a:51:aa: 06:85:78:60:e5:3a:f6:53:d6:4a:b1:fa:31:a5:2d: b6:eb:86:23:e3:ef:82:55:ba:55:af:fd:e0:41:53: 5b:ae:bb:63:ad:9f:53:09:d4:65:3c:99:b5:ba:c2: 55:c6:26:45:f3:59:44:77:91:39:81:a5:b4:5f:a4: ba:14:b4:e4:4a:44:71:65:5c:f7:11:b1:09:9c:a7: 5e:26:1a:1e:55:e9:6a:d8:dc:9a:cc:7b:8a:19:38: 81:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:10:33:FB:07:CD:D0:69:66:19:07:34:BB:9F:C8:CE:0E:76:B5:90 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4845659a-c570-4da2-b81d-c44577589208.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.85.76.0/22 Signature Algorithm: sha256WithRSAEncryption 52:fd:56:e1:0b:de:72:07:44:ec:0a:60:35:a7:5f:20:29:9d: ec:92:4f:26:99:b5:c8:e8:9d:8d:f8:8d:e5:6c:9a:ed:0a:46: 99:35:66:63:cd:56:72:d3:cc:fc:90:d8:8e:71:c9:1e:2c:1d: ee:46:d0:2a:6d:89:62:4c:a5:49:13:f0:2c:e2:86:92:78:fd: 1f:05:90:86:64:3a:57:d1:80:bf:82:59:f0:77:23:40:97:6d: c2:9b:b5:70:39:64:5e:f4:9d:5f:89:a4:fb:2a:a9:9c:d1:d5: 66:10:1f:3a:19:7b:84:b4:b2:89:d1:2a:06:6d:71:81:05:92: 6b:7a:0f:9e:1a:cc:0e:5d:f5:6e:07:e7:0c:11:b1:f6:18:b5: e4:80:5e:da:19:6e:61:26:09:e1:d4:9a:72:08:c9:9f:ba:fd: ee:ea:79:dc:81:9d:23:a9:a6:fc:5f:d2:89:19:42:3c:73:00: bb:e5:c3:a6:13:29:ac:2c:d5:9b:0a:9f:9d:b4:d8:db:86:23: f1:95:b0:3b:e5:9d:b7:ea:de:67:93:75:8f:60:eb:97:78:e8: 7a:d2:eb:61:fa:8f:cb:50:6d:ab:7f:07:f3:d1:ec:12:87:d7: e7:a7:c9:3d:15:14:cd:c4:7c:51:b3:26:6c:fc:bd:6d:83:b8: 2f:c5:6f:0e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUG+6LMbuXLZzbZvm2vzYVqvB6rK8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIzMDAzODI1WhcNMjUxMDI4MjM1OTU5 WjB6MUkwRwYDVQQFE0BkYWY3ZmI2NGI2YTgxNTU0YzNhZDU3MTU1YjUwZWU5MGRi ZmYyYTQzMGY5NzNiZDg3MWE4ZTM1ZjVhM2I1MTJmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDMst5cc7NJPtEe/nI5ucdEYxZtn6R6oqTQbfZY8Sovv1oV nErkxCZUZx5QwZN1CBIXrP7tzV7naxAhDhzdgscHclpMMsU75TpMgpBvCp/8FvdV rkZZWuRP0fid+T5khNjMOXcIEiCymQ0+a+ZlUW0pLZIYCAG97jbq34Wv5HYxBAlp zxu3u6/+jxQzFtTHWyXSc1w0+AXd7YPlQaVEbGv9CipRqgaFeGDlOvZT1kqx+jGl LbbrhiPj74JVulWv/eBBU1uuu2Otn1MJ1GU8mbW6wlXGJkXzWUR3kTmBpbRfpLoU tORKRHFlXPcRsQmcp14mGh5V6WrY3JrMe4oZOIFxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUyxAz+wfN0GlmGQc0u5/Izg52tZAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQ4NDU2NTlhLWM1NzAtNGRhMi1iODFkLWM0NDU3NzU4OTIwOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI0VUwwDQYJKoZIhvcNAQELBQADggEBAFL9VuEL3nIHROwKYDWnXyApneyS TyaZtcjonY34jeVsmu0KRpk1ZmPNVnLTzPyQ2I5xyR4sHe5G0CptiWJMpUkT8Czi hpJ4/R8FkIZkOlfRgL+CWfB3I0CXbcKbtXA5ZF70nV+JpPsqqZzR1WYQHzoZe4S0 sonRKgZtcYEFkmt6D54azA5d9W4H5wwRsfYYteSAXtoZbmEmCeHUmnIIyZ+6/e7q edyBnSOppvxf0okZQjxzALvlw6YTKaws1ZsKn5202NuGI/GVsDvlnbfq3meTdY9g 65d46HrS62H6j8tQbat/B/PR7BKH1+enyT0VFM3EfFGzJmz8vW2DuC/Fbw4= -----END CERTIFICATE-----Generated at Sat Oct 18 00:16:45 2025 by rpki-client