$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/519e6a07-2534-4c46-ab36-321df0567c07.roa File: 519e6a07-2534-4c46-ab36-321df0567c07.roa (raw, json) Hash identifier: jhATu8eF1r88iz1ZzERlSv428wAP8/ljOOKRpZFfPCI= Subject key identifier: 7E:11:6D:04:CB:9F:DE:15:9B:64:5F:29:B1:6B:35:0E:86:EE:09:33 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 10B26E0ED16308203588E52D833277C6A7BC288F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/519e6a07-2534-4c46-ab36-321df0567c07.roa Signing time: Thu 16 Oct 2025 18:46:40 +0000 ROA not before: Thu 16 Oct 2025 18:46:40 +0000 ROA not after: Thu 20 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.222.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:b2:6e:0e:d1:63:08:20:35:88:e5:2d:83:32:77:c6:a7:bc:28:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 16 18:46:40 2025 GMT Not After : Nov 20 23:59:59 2025 GMT Subject: serialNumber=e12338ca2363f6a28acba9a8c2e607af2231946fa41a6f4f80cc9197a2abf00e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:46:17:9b:36:7d:d5:e9:1d:3e:d4:82:24:a3: e4:3c:5b:62:78:d9:5a:2e:83:ea:1e:3b:36:19:08: 1f:8a:94:a9:83:a4:36:9f:62:45:70:4d:bb:d4:26: 08:b2:4c:3a:83:2a:f6:5c:d9:d9:db:fa:3f:d0:0e: bf:c0:0b:0e:b9:1c:10:85:3f:6b:44:26:56:f9:bc: ee:8d:08:d8:0e:43:cc:98:aa:04:d3:0a:22:47:d1: 4c:6a:b7:63:44:6a:14:3d:21:d7:94:8c:b6:d4:7c: 5c:7e:7f:36:13:79:f9:ca:6e:42:31:71:52:2c:6f: ec:b2:58:c1:c1:3c:cc:10:5d:31:02:f6:2a:bb:06: d4:10:06:12:14:97:37:46:b5:55:e0:6d:65:30:38: 8c:b6:55:ce:09:6a:b1:47:10:a6:3e:21:7d:99:d4: b0:71:74:4c:e6:9e:cb:33:4e:a0:3f:e6:6d:da:ad: 8d:8f:71:2a:e4:11:23:05:28:ee:bf:24:23:16:d4: 5c:97:d9:a7:25:46:5c:f8:38:10:a2:e9:a3:80:4d: a6:23:18:62:d0:e4:9e:4d:2c:64:92:c2:f2:24:61: 95:b1:e3:c5:82:b7:4e:03:89:05:1a:39:f4:fd:8b: 19:bf:87:b4:74:ed:3d:d5:fa:4f:ea:4b:5d:34:8c: 87:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:11:6D:04:CB:9F:DE:15:9B:64:5F:29:B1:6B:35:0E:86:EE:09:33 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/519e6a07-2534-4c46-ab36-321df0567c07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.222.232.0/22 Signature Algorithm: sha256WithRSAEncryption 87:82:2f:44:b1:ec:33:6b:48:00:72:dc:fe:59:c9:cf:17:31: 60:a7:de:f4:61:7f:bf:8e:89:e7:9d:03:33:cd:86:71:3e:a6: 7a:ab:9e:a7:54:8a:93:92:27:6d:0b:98:96:30:4f:85:f4:ec: 9b:81:7b:02:f4:7f:97:c0:0a:05:33:08:94:53:e5:c6:c3:6d: e6:14:9c:3b:19:e8:ed:10:2a:ab:a0:3c:1f:b3:bf:4b:60:f1: b7:54:6c:e9:e3:d7:b0:f8:16:43:3f:74:e9:36:b3:30:dc:13: 96:67:5f:26:56:52:99:96:b4:1d:81:22:1d:0b:6d:c9:8e:32: 74:04:c9:ae:6b:43:d1:26:3a:80:8d:ed:46:58:bf:79:89:5e: e1:94:92:06:5b:65:4f:aa:8f:ac:48:af:1b:6b:8e:77:81:a5: bf:05:b8:f1:03:da:9e:24:e7:ef:eb:dc:2b:7d:af:b1:84:71: 37:60:86:bc:90:06:91:ee:ac:0c:8e:89:6a:21:26:57:0d:53: 88:e0:a2:e0:38:f2:96:fb:96:f8:39:8a:b8:95:d0:d6:59:9f: 41:41:04:de:ef:c7:1d:92:32:6c:39:9f:e4:fb:56:1e:50:ba: a4:b0:93:2e:a8:00:17:29:2a:99:e7:94:0b:eb:6f:4d:7b:f6: 4a:d4:f9:e3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUELJuDtFjCCA1iOUtgzJ3xqe8KI8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE2MTg0NjQwWhcNMjUxMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BlMTIzMzhjYTIzNjNmNmEyOGFjYmE5YThjMmU2MDdhZjIy MzE5NDZmYTQxYTZmNGY4MGNjOTE5N2EyYWJmMDBlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCERhebNn3V6R0+1IIko+Q8W2J42Voug+oeOzYZCB+KlKmD pDafYkVwTbvUJgiyTDqDKvZc2dnb+j/QDr/ACw65HBCFP2tEJlb5vO6NCNgOQ8yY qgTTCiJH0Uxqt2NEahQ9IdeUjLbUfFx+fzYTefnKbkIxcVIsb+yyWMHBPMwQXTEC 9iq7BtQQBhIUlzdGtVXgbWUwOIy2Vc4JarFHEKY+IX2Z1LBxdEzmnsszTqA/5m3a rY2PcSrkESMFKO6/JCMW1FyX2aclRlz4OBCi6aOATaYjGGLQ5J5NLGSSwvIkYZWx 48WCt04DiQUaOfT9ixm/h7R07T3V+k/qS100jIfhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUfhFtBMuf3hWbZF8psWs1DobuCTMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzUxOWU2YTA3LTI1MzQtNGM0Ni1hYjM2LTMyMWRmMDU2N2MwNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI03ugwDQYJKoZIhvcNAQELBQADggEBAIeCL0Sx7DNrSABy3P5Zyc8XMWCn 3vRhf7+OieedAzPNhnE+pnqrnqdUipOSJ20LmJYwT4X07JuBewL0f5fACgUzCJRT 5cbDbeYUnDsZ6O0QKqugPB+zv0tg8bdUbOnj17D4FkM/dOk2szDcE5ZnXyZWUpmW tB2BIh0LbcmOMnQEya5rQ9EmOoCN7UZYv3mJXuGUkgZbZU+qj6xIrxtrjneBpb8F uPED2p4k5+/r3Ct9r7GEcTdghryQBpHurAyOiWohJlcNU4jgouA48pb7lvg5iriV 0NZZn0FBBN7vxx2SMmw5n+T7Vh5QuqSwky6oABcpKpnnlAvrb0179krU+eM= -----END CERTIFICATE-----Generated at Sat Oct 18 02:36:49 2025 by rpki-client