$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/51df04af-4ca3-40c6-8095-bd339475265a.roa File: 51df04af-4ca3-40c6-8095-bd339475265a.roa (raw, json) Hash identifier: PBJCLYAAKkdayDbpBu+tWWBgl4seh/VLdaFA4Zo3BFg= Subject key identifier: F6:52:91:28:15:2A:DB:2E:D6:69:55:DD:BA:35:9C:D3:51:94:08:5B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 28616120B79273AEBADC452CCDD58EC7DDDFD080 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/51df04af-4ca3-40c6-8095-bd339475265a.roa Signing time: Sat 11 Oct 2025 01:04:10 +0000 ROA not before: Sat 11 Oct 2025 01:04:10 +0000 ROA not after: Sat 15 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.95.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:61:61:20:b7:92:73:ae:ba:dc:45:2c:cd:d5:8e:c7:dd:df:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 11 01:04:10 2025 GMT Not After : Nov 15 23:59:59 2025 GMT Subject: serialNumber=87253984eb414d1b403757b1edd6bdba37cff4032c05a5b8a86d5b4e013ccfe7, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4c:ec:d9:83:51:46:38:b4:f1:e2:b8:4e:fa: d9:bc:d9:6e:7a:cb:2d:45:01:39:e6:33:33:16:4a: 12:c2:ed:ef:93:cd:0d:0a:14:d1:e5:ce:53:d2:95: cd:38:68:73:ef:02:0c:45:50:8f:13:dd:0d:7e:55: 2d:39:6e:69:64:cc:35:8d:b1:66:7e:43:ef:8a:59: 03:ca:d3:61:e8:7f:48:39:b2:30:16:66:69:c1:bf: a0:c3:d3:4f:2c:94:a7:3d:87:96:df:7d:57:e3:eb: 62:02:38:0a:75:c6:6c:2a:ad:b7:bd:f0:27:ec:fa: f4:80:90:fa:7a:d4:5d:aa:a7:e0:8c:48:82:3f:22: cf:63:67:25:20:8d:b2:d9:24:f8:a2:c6:e7:cc:73: d6:40:ad:2d:0a:8c:91:8c:fc:b1:d0:3b:1f:5f:86: c1:67:12:c2:84:80:2b:35:95:ea:4c:5d:1d:c6:ce: b1:92:66:6a:06:56:b2:91:fe:a5:60:c3:56:ab:a4: d8:3f:aa:d9:4e:b8:76:f2:9c:24:9c:0e:73:0f:0b: 98:02:6a:be:d4:7c:b8:b5:8e:07:ab:b9:82:53:53: ca:ae:4d:8c:56:76:0b:f9:48:1a:f4:fe:b3:9b:64: f4:40:10:ee:c5:a9:fc:d7:30:ef:cf:c9:ef:b4:f4: e4:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:52:91:28:15:2A:DB:2E:D6:69:55:DD:BA:35:9C:D3:51:94:08:5B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/51df04af-4ca3-40c6-8095-bd339475265a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.95.240.0/24 Signature Algorithm: sha256WithRSAEncryption 21:fb:f7:1a:b0:b5:51:8d:93:42:45:25:4d:58:00:22:45:6f: d2:d2:76:4e:f3:7a:a2:37:83:1c:35:69:0b:38:cc:26:93:27: cb:dd:f9:ac:aa:10:ea:10:aa:9e:81:45:ed:a9:18:e1:d4:5e: b1:ed:41:09:f9:85:0b:a6:22:45:a5:2b:ac:9b:b2:69:a7:f6: 69:93:d6:79:10:81:a5:24:d4:20:1f:f0:ec:89:83:a6:5f:9f: 9f:99:4f:9c:22:78:7c:7a:8b:e7:54:bf:61:ec:0a:0e:fa:57: 74:fe:cf:9f:30:27:25:1e:f5:54:3f:84:20:44:70:ab:9b:5c: dd:b2:74:9b:d0:bc:d8:5e:36:2f:08:d3:a3:5f:f9:03:13:88: 48:1a:a7:0f:57:8e:83:27:38:31:57:a3:dd:e7:24:81:0d:41: fb:7e:3f:b0:9c:f3:b1:a5:90:5e:44:cf:f2:53:36:3c:39:a5: 3f:9c:eb:b8:ae:b8:fb:0e:48:ee:d7:31:90:0b:68:d3:e1:aa: a8:a6:60:8f:d0:2b:0a:1f:9c:33:8c:9e:64:b9:30:5b:63:96: 1d:ec:40:d0:68:db:be:b0:59:de:99:e9:a4:13:75:fc:22:f0: e8:96:42:cb:aa:33:76:f3:2f:c6:97:f1:01:ff:2b:a4:e8:c3: 40:8a:03:ed -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKGFhILeSc6663EUszdWOx93f0IAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDExMDEwNDEwWhcNMjUxMTE1MjM1OTU5 WjB6MUkwRwYDVQQFE0A4NzI1Mzk4NGViNDE0ZDFiNDAzNzU3YjFlZGQ2YmRiYTM3 Y2ZmNDAzMmMwNWE1YjhhODZkNWI0ZTAxM2NjZmU3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFTOzZg1FGOLTx4rhO+tm82W56yy1FATnmMzMWShLC7e+T zQ0KFNHlzlPSlc04aHPvAgxFUI8T3Q1+VS05bmlkzDWNsWZ+Q++KWQPK02Hof0g5 sjAWZmnBv6DD008slKc9h5bffVfj62ICOAp1xmwqrbe98Cfs+vSAkPp61F2qp+CM SII/Is9jZyUgjbLZJPiixufMc9ZArS0KjJGM/LHQOx9fhsFnEsKEgCs1lepMXR3G zrGSZmoGVrKR/qVgw1arpNg/qtlOuHbynCScDnMPC5gCar7UfLi1jgeruYJTU8qu TYxWdgv5SBr0/rObZPRAEO7FqfzXMO/Pye+09OTNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU9lKRKBUq2y7WaVXdujWc01GUCFswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzUxZGYwNGFmLTRjYTMtNDBjNi04MDk1LWJkMzM5NDc1MjY1YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0X/AwDQYJKoZIhvcNAQELBQADggEBACH79xqwtVGNk0JFJU1YACJFb9LS dk7zeqI3gxw1aQs4zCaTJ8vd+ayqEOoQqp6BRe2pGOHUXrHtQQn5hQumIkWlK6yb smmn9mmT1nkQgaUk1CAf8OyJg6Zfn5+ZT5wieHx6i+dUv2HsCg76V3T+z58wJyUe 9VQ/hCBEcKubXN2ydJvQvNheNi8I06Nf+QMTiEgapw9XjoMnODFXo93nJIENQft+ P7Cc87GlkF5Ez/JTNjw5pT+c67iuuPsOSO7XMZALaNPhqqimYI/QKwofnDOMnmS5 MFtjlh3sQNBo276wWd6Z6aQTdfwi8OiWQsuqM3bzL8aX8QH/K6Tow0CKA+0= -----END CERTIFICATE-----Generated at Fri Oct 17 22:19:39 2025 by rpki-client