$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4d260853-a6a9-426d-b511-61d10c9aaf6d.roa File: 4d260853-a6a9-426d-b511-61d10c9aaf6d.roa (raw, json) Hash identifier: ASpZDfaCIclQ5zT5PJneCqYZW6J0WEfxPGBimbUPggE= Subject key identifier: 7C:89:2C:A0:9A:B9:53:1B:1B:D7:A2:89:0C:77:08:94:FA:F7:18:73 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 58B6E88163497ABA5C2ADE72BC4B7CD1BA0BB204 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4d260853-a6a9-426d-b511-61d10c9aaf6d.roa Signing time: Mon 22 Sep 2025 23:44:20 +0000 ROA not before: Mon 22 Sep 2025 23:44:20 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.84.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:b6:e8:81:63:49:7a:ba:5c:2a:de:72:bc:4b:7c:d1:ba:0b:b2:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 23:44:20 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=09a51da802955d966faec486bef326ae4bf2af0098aa2243343b4844077189a1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:7b:60:9a:ac:b7:2f:4a:0b:b5:c5:a0:c9:c6: e8:72:e6:65:c8:5e:2c:e8:c4:ce:21:1e:05:9d:c5: 8c:80:06:c7:0c:9f:f3:9c:5d:03:6f:d2:b5:6a:11: 97:11:5b:2d:99:66:e0:19:eb:c0:3d:d7:13:ab:4a: a3:db:4d:a7:78:a4:da:3c:31:65:0c:ee:2a:7b:50: 39:dc:20:98:1c:84:06:71:72:83:dc:69:34:b4:6f: f3:a1:c1:82:95:cb:e6:e3:fa:c2:05:44:73:ec:0e: 9d:5f:f4:e6:b6:33:3a:94:02:46:d4:c1:41:a6:ef: 3a:23:9e:47:f1:d2:cf:fc:2f:10:b4:0c:61:43:00: 5e:73:49:2c:91:15:76:f7:2b:8e:70:eb:9b:ad:c0: 73:d8:39:f9:33:e1:fd:ff:84:40:66:55:71:fa:a6: e9:71:e5:ed:69:3b:c6:d4:c1:94:db:b6:ef:cd:2a: fd:b5:76:2e:e1:c2:96:a0:2d:c0:57:13:f2:b8:ee: 0e:6f:dc:6c:fa:d6:0c:5f:4c:b3:ed:3b:56:15:aa: cc:77:08:d0:3d:04:71:ae:72:32:d2:9b:35:d1:6e: 45:c9:06:d0:07:e9:3a:9e:0f:d6:10:08:7b:ae:67: 81:50:2c:f9:0a:63:c8:3e:83:16:67:61:b1:43:02: e6:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:89:2C:A0:9A:B9:53:1B:1B:D7:A2:89:0C:77:08:94:FA:F7:18:73 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4d260853-a6a9-426d-b511-61d10c9aaf6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.84.151.0/24 Signature Algorithm: sha256WithRSAEncryption b3:c0:72:f0:0a:9b:ee:a9:d0:3e:45:64:08:b5:6a:d6:43:60: 2a:20:65:f4:37:4e:ef:3b:15:c3:bf:a4:88:a8:d9:dc:7f:bf: a6:6b:2c:fb:2a:6c:22:54:b4:f5:61:89:c6:bb:1a:93:0b:9d: d8:4d:71:04:5c:5b:bd:8b:a8:e5:f3:0e:7f:62:57:c1:26:b1: 8b:d3:e6:ba:9f:42:1b:5f:56:03:f1:b5:73:a7:c2:13:c3:ab: 67:9b:41:22:1c:ce:55:af:d4:08:a7:f0:0e:42:2a:cb:a9:a4: 4d:42:34:1a:9c:31:59:f6:1a:ea:33:8d:44:1a:f6:f7:6b:cc: 65:11:03:e3:41:3c:de:e7:36:4d:6b:2b:3c:0d:0f:f5:c2:42: ad:ad:9d:66:3e:1d:33:e6:a9:1b:58:bb:4c:f7:fa:8e:e1:ff: c4:bc:4c:9e:b0:ba:19:9a:17:32:05:2d:95:a2:03:d3:ad:09: 08:ab:21:37:f8:1c:62:bb:55:d1:e4:cb:e6:bc:2a:72:a4:bf: 0b:49:66:e4:32:f2:bd:16:56:49:e8:c9:8c:2c:05:b9:af:cf: cd:e0:09:41:91:b4:73:fc:04:e5:31:28:82:9a:fe:e0:66:c0: af:51:1d:cd:ee:6b:13:e6:2a:fb:29:57:27:f6:63:a7:59:48: 33:55:ca:30 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWLbogWNJerpcKt5yvEt80boLsgQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjM0NDIwWhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AwOWE1MWRhODAyOTU1ZDk2NmZhZWM0ODZiZWYzMjZhZTRi ZjJhZjAwOThhYTIyNDMzNDNiNDg0NDA3NzE4OWExMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDSe2CarLcvSgu1xaDJxuhy5mXIXizoxM4hHgWdxYyABscM n/OcXQNv0rVqEZcRWy2ZZuAZ68A91xOrSqPbTad4pNo8MWUM7ip7UDncIJgchAZx coPcaTS0b/OhwYKVy+bj+sIFRHPsDp1f9Oa2MzqUAkbUwUGm7zojnkfx0s/8LxC0 DGFDAF5zSSyRFXb3K45w65utwHPYOfkz4f3/hEBmVXH6pulx5e1pO8bUwZTbtu/N Kv21di7hwpagLcBXE/K47g5v3Gz61gxfTLPtO1YVqsx3CNA9BHGucjLSmzXRbkXJ BtAH6TqeD9YQCHuuZ4FQLPkKY8g+gxZnYbFDAuZfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUfIksoJq5Uxsb16KJDHcIlPr3GHMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzRkMjYwODUzLWE2YTktNDI2ZC1iNTExLTYxZDEwYzlhYWY2ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0VJcwDQYJKoZIhvcNAQELBQADggEBALPAcvAKm+6p0D5FZAi1atZDYCog ZfQ3Tu87FcO/pIio2dx/v6ZrLPsqbCJUtPVhica7GpMLndhNcQRcW72LqOXzDn9i V8EmsYvT5rqfQhtfVgPxtXOnwhPDq2ebQSIczlWv1Ain8A5CKsuppE1CNBqcMVn2 GuozjUQa9vdrzGURA+NBPN7nNk1rKzwND/XCQq2tnWY+HTPmqRtYu0z3+o7h/8S8 TJ6wuhmaFzIFLZWiA9OtCQirITf4HGK7VdHky+a8KnKkvwtJZuQy8r0WVknoyYws Bbmvz83gCUGRtHP8BOUxKIKa/uBmwK9RHc3uaxPmKvspVyf2Y6dZSDNVyjA= -----END CERTIFICATE-----Generated at Sat Oct 18 02:14:12 2025 by rpki-client