$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4ddea520-3250-486e-9c3c-f61a974f6159.roa File: 4ddea520-3250-486e-9c3c-f61a974f6159.roa (raw, json) Hash identifier: umO7OSI/M+dJWuWzQeMxGqwFLaXwGZvsIUa1VGy5xVM= Subject key identifier: 97:EE:CA:42:33:40:69:93:17:52:62:07:B7:5E:E0:00:6F:7B:AF:CC Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4D346E0624F20B7F8F70339AA97DBB155D532BD6 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4ddea520-3250-486e-9c3c-f61a974f6159.roa Signing time: Thu 16 Oct 2025 19:17:47 +0000 ROA not before: Thu 16 Oct 2025 19:17:47 +0000 ROA not after: Thu 20 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.222.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:34:6e:06:24:f2:0b:7f:8f:70:33:9a:a9:7d:bb:15:5d:53:2b:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 16 19:17:47 2025 GMT Not After : Nov 20 23:59:59 2025 GMT Subject: serialNumber=d6a3b45be9db4ae08fb1e81a7ce903ed1e42c84d354534c2e30a42aa2c846b37, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:1b:39:be:01:6d:68:c0:b8:8a:88:e6:b3:36: 2f:e1:e1:29:3f:11:82:e9:b7:b4:35:ae:86:da:c8: 0d:34:e2:f1:98:1d:9f:bb:49:d2:40:54:c3:e2:20: 57:17:2f:4d:15:12:87:b3:a5:85:1a:43:0f:2d:91: 87:19:a9:b8:61:27:ca:03:5b:a8:7d:7d:cb:57:76: 95:8b:50:0f:ab:bb:b2:8a:d5:f4:81:44:14:45:66: 22:8a:fc:78:bc:83:b6:02:9a:1c:03:2d:19:d0:4e: 95:e9:13:5c:9f:e1:a9:54:9f:55:fe:43:7a:c9:b6: 56:c4:19:4f:74:d4:9f:c5:08:31:92:f8:82:0a:8c: fc:52:40:f6:74:cc:d0:26:d3:7b:29:f0:c5:f7:b9: 48:b1:52:4a:4c:f3:11:f7:d8:f0:af:de:19:7c:4d: 39:44:31:98:c7:7e:b2:3e:d0:1e:1e:cf:3c:6c:54: 8c:bc:16:95:ff:8f:ad:79:18:b2:62:1a:33:fc:fa: b1:ee:08:8c:a0:a7:c1:aa:3b:78:05:ab:23:e9:80: 6e:d3:f4:57:d1:9d:3a:af:43:ea:3a:94:e0:44:f6: 9c:60:34:9c:1b:01:41:24:29:0c:4e:81:05:f2:43: b9:e6:2c:ae:2b:98:28:7e:64:6d:37:90:43:38:e7: 2a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:EE:CA:42:33:40:69:93:17:52:62:07:B7:5E:E0:00:6F:7B:AF:CC X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4ddea520-3250-486e-9c3c-f61a974f6159.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.222.230.0/24 Signature Algorithm: sha256WithRSAEncryption 83:59:06:23:2e:23:b6:25:9a:a3:15:4b:c7:bf:56:a7:00:18: fa:8d:93:be:42:e1:93:d4:07:53:3a:dd:22:4f:ea:f1:d1:b3: a5:0a:a9:36:33:95:79:0f:c1:54:7b:9e:c5:0f:0d:73:0d:ca: 83:e5:7a:3f:bb:0e:04:eb:d7:c0:f7:20:0a:b5:d6:e0:be:a7: cd:54:ea:dd:90:82:b2:06:7a:c7:dc:80:91:3e:2d:f4:fb:1b: 68:e1:d5:d5:4b:ff:7a:33:c1:29:4e:ad:72:d9:4f:c7:6b:3b: 0b:39:c0:ca:b1:ed:7c:41:78:ae:d5:e8:74:cf:70:71:49:75: c1:8a:55:cd:47:df:4b:2d:bd:92:46:90:07:16:58:63:67:e5: 30:9f:a7:68:b8:c8:42:ef:44:c1:29:c7:79:ab:67:57:a0:7e: 68:fc:cd:cd:fa:78:3f:8e:dc:83:0c:c1:e4:48:8e:07:ef:00: f0:b8:36:70:23:bd:29:3b:c0:8b:e3:29:c0:f3:ad:2c:e6:4d: 3c:fe:28:36:5d:fe:7f:0f:c1:93:f6:62:55:44:76:ea:10:64: c9:ce:cd:6f:56:0e:cc:62:85:c3:17:47:1f:26:0b:d0:50:e3: 91:a9:8a:34:42:d4:e9:60:8d:e5:1d:c3:fb:db:6b:d3:da:e4: ab:8e:ca:df -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTTRuBiTyC3+PcDOaqX27FV1TK9YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE2MTkxNzQ3WhcNMjUxMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BkNmEzYjQ1YmU5ZGI0YWUwOGZiMWU4MWE3Y2U5MDNlZDFl NDJjODRkMzU0NTM0YzJlMzBhNDJhYTJjODQ2YjM3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDrGzm+AW1owLiKiOazNi/h4Sk/EYLpt7Q1robayA004vGY HZ+7SdJAVMPiIFcXL00VEoezpYUaQw8tkYcZqbhhJ8oDW6h9fctXdpWLUA+ru7KK 1fSBRBRFZiKK/Hi8g7YCmhwDLRnQTpXpE1yf4alUn1X+Q3rJtlbEGU901J/FCDGS +IIKjPxSQPZ0zNAm03sp8MX3uUixUkpM8xH32PCv3hl8TTlEMZjHfrI+0B4ezzxs VIy8FpX/j615GLJiGjP8+rHuCIygp8GqO3gFqyPpgG7T9FfRnTqvQ+o6lOBE9pxg NJwbAUEkKQxOgQXyQ7nmLK4rmCh+ZG03kEM45yonAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUl+7KQjNAaZMXUmIHt17gAG97r8wwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzRkZGVhNTIwLTMyNTAtNDg2ZS05YzNjLWY2MWE5NzRmNjE1OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA03uYwDQYJKoZIhvcNAQELBQADggEBAINZBiMuI7YlmqMVS8e/VqcAGPqN k75C4ZPUB1M63SJP6vHRs6UKqTYzlXkPwVR7nsUPDXMNyoPlej+7DgTr18D3IAq1 1uC+p81U6t2QgrIGesfcgJE+LfT7G2jh1dVL/3ozwSlOrXLZT8drOws5wMqx7XxB eK7V6HTPcHFJdcGKVc1H30stvZJGkAcWWGNn5TCfp2i4yELvRMEpx3mrZ1egfmj8 zc36eD+O3IMMweRIjgfvAPC4NnAjvSk7wIvjKcDzrSzmTTz+KDZd/n8PwZP2YlVE duoQZMnOzW9WDsxihcMXRx8mC9BQ45GpijRC1OlgjeUdw/vba9Pa5KuOyt8= -----END CERTIFICATE-----Generated at Sat Oct 18 00:00:06 2025 by rpki-client