$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/486403c1-e188-4728-a0a7-f4ca72634a99.roa File: 486403c1-e188-4728-a0a7-f4ca72634a99.roa (raw, json) Hash identifier: Fb+NdHzk0iBzB4lJRxIJpGmzJFb6FqrSKfwKnAM6/fs= Subject key identifier: 5C:29:63:5D:04:26:83:F9:23:AA:4D:D9:86:E4:C1:53:9B:14:AE:E5 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0B8E6C6BB887A73709DEAADA53E767C24AA583D6 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/486403c1-e188-4728-a0a7-f4ca72634a99.roa Signing time: Tue 23 Sep 2025 00:17:19 +0000 ROA not before: Tue 23 Sep 2025 00:17:19 +0000 ROA not after: Tue 28 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.84.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:8e:6c:6b:b8:87:a7:37:09:de:aa:da:53:e7:67:c2:4a:a5:83:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 23 00:17:19 2025 GMT Not After : Oct 28 23:59:59 2025 GMT Subject: serialNumber=b94257af5955c5554917b672a648ff43b4fdc3374ffed653ed37563d7d787b03, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:97:b5:b9:a4:f7:bd:5b:77:aa:68:70:63:4d: 36:b0:74:ac:b0:3c:be:4b:fc:a5:01:12:70:31:92: af:ea:22:ab:db:43:db:f6:7e:45:01:cd:ac:f7:70: 22:a3:1d:3a:a7:33:38:46:6b:e3:fe:b6:6c:b9:ce: f5:94:68:4e:b9:95:48:c5:2d:2b:92:c8:a5:cc:9b: 0f:b7:64:0d:e5:8c:89:32:1e:eb:58:25:1b:65:2a: 8e:03:e7:e8:a5:07:6f:19:39:e3:7d:2a:5f:d4:07: 63:d6:b6:ce:df:ca:03:69:2a:5b:3f:e5:f0:50:31: 52:65:55:1f:b0:d2:7d:0d:be:e8:ac:f8:10:d6:6d: 9c:05:2a:d6:13:5d:e8:6f:75:07:f9:32:1f:8b:25: 15:a3:38:2c:bf:d9:ac:4b:fb:08:a4:ac:bd:e5:f0: e1:eb:ba:7a:e6:bd:a1:bb:21:83:e7:aa:55:bb:d8: b6:2b:cb:5e:af:d0:91:ee:92:53:20:76:7f:cc:5a: 74:31:45:2f:a5:2a:05:17:d7:35:df:69:60:63:aa: 0b:27:54:9d:70:dd:d8:ed:5b:ad:65:b8:70:94:dd: fc:7e:fc:d0:17:e5:2d:0f:57:39:1d:1a:95:b5:06: 41:6a:6a:f3:ad:77:66:fa:cb:28:c3:23:f4:6a:f2: c8:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:29:63:5D:04:26:83:F9:23:AA:4D:D9:86:E4:C1:53:9B:14:AE:E5 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/486403c1-e188-4728-a0a7-f4ca72634a99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.84.228.0/23 Signature Algorithm: sha256WithRSAEncryption 90:9a:48:e8:88:09:b7:77:ae:60:bc:42:c5:80:39:76:aa:1e: 4d:91:db:b7:75:8d:a3:8b:61:2a:1c:99:49:c2:14:68:be:60: b6:00:dc:8c:85:42:00:24:8c:18:ce:e9:21:d0:60:3c:d4:5f: 7d:bc:fb:41:1d:50:69:41:5e:f0:35:bb:cd:d2:9a:5d:5e:c3: e4:e1:c9:66:db:64:e3:f6:25:d2:6f:cb:9f:be:ac:0b:b1:11: c0:78:c0:9c:b3:8c:30:bb:9e:84:34:6c:1b:26:e3:2c:86:b6: 8f:cb:86:2f:76:ad:17:79:8e:16:36:a1:f5:7f:3e:a2:6f:26: 46:11:b9:32:bb:03:f1:2d:6f:16:ba:59:d0:ea:c5:51:a9:78: 4e:1b:c1:16:e0:50:07:26:a8:62:89:73:de:04:84:a8:28:1d: 1a:1b:dc:d6:9a:17:a3:45:21:3d:5c:dc:3e:0b:c9:f1:0d:2f: e5:fb:f3:0c:a4:c1:65:ae:f8:83:5e:2d:cc:4d:ca:1f:c1:9b: f2:84:e2:7a:68:89:1a:0c:1a:bb:42:fe:e9:1c:35:fa:66:48: ea:e4:9e:08:51:ee:c0:97:d1:e3:04:7c:84:48:42:9a:51:98: 0a:eb:46:74:38:34:98:43:7d:9d:56:0e:db:99:2d:96:52:50: e6:3a:7d:06 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUC45sa7iHpzcJ3qraU+dnwkqlg9YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIzMDAxNzE5WhcNMjUxMDI4MjM1OTU5 WjB6MUkwRwYDVQQFE0BiOTQyNTdhZjU5NTVjNTU1NDkxN2I2NzJhNjQ4ZmY0M2I0 ZmRjMzM3NGZmZWQ2NTNlZDM3NTYzZDdkNzg3YjAzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDgl7W5pPe9W3eqaHBjTTawdKywPL5L/KUBEnAxkq/qIqvb Q9v2fkUBzaz3cCKjHTqnMzhGa+P+tmy5zvWUaE65lUjFLSuSyKXMmw+3ZA3ljIky HutYJRtlKo4D5+ilB28ZOeN9Kl/UB2PWts7fygNpKls/5fBQMVJlVR+w0n0Nvuis +BDWbZwFKtYTXehvdQf5Mh+LJRWjOCy/2axL+wikrL3l8OHrunrmvaG7IYPnqlW7 2LYry16v0JHuklMgdn/MWnQxRS+lKgUX1zXfaWBjqgsnVJ1w3djtW61luHCU3fx+ /NAX5S0PVzkdGpW1BkFqavOtd2b6yyjDI/Rq8sgdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUXCljXQQmg/kjqk3ZhuTBU5sUruUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQ4NjQwM2MxLWUxODgtNDcyOC1hMGE3LWY0Y2E3MjYzNGE5OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE0VOQwDQYJKoZIhvcNAQELBQADggEBAJCaSOiICbd3rmC8QsWAOXaqHk2R 27d1jaOLYSocmUnCFGi+YLYA3IyFQgAkjBjO6SHQYDzUX328+0EdUGlBXvA1u83S ml1ew+ThyWbbZOP2JdJvy5++rAuxEcB4wJyzjDC7noQ0bBsm4yyGto/Lhi92rRd5 jhY2ofV/PqJvJkYRuTK7A/Etbxa6WdDqxVGpeE4bwRbgUAcmqGKJc94EhKgoHRob 3NaaF6NFIT1c3D4LyfENL+X78wykwWWu+INeLcxNyh/Bm/KE4npoiRoMGrtC/ukc NfpmSOrknghR7sCX0eMEfIRIQppRmArrRnQ4NJhDfZ1WDtuZLZZSUOY6fQY= -----END CERTIFICATE-----Generated at Fri Oct 17 22:17:19 2025 by rpki-client