$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/52d580d4-3f6b-4be1-8762-6379a34ca430.roa File: 52d580d4-3f6b-4be1-8762-6379a34ca430.roa (raw, json) Hash identifier: w8Egyy8Mm2nihEV+VQB9sp2pI8rRMch23OKlElcq+WU= Subject key identifier: B5:E7:84:A4:BF:E3:05:2F:EC:1B:82:C5:89:31:74:89:9C:D2:88:54 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7CB1C8724ADD47E2098661C23149E02FBC3928A7 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/52d580d4-3f6b-4be1-8762-6379a34ca430.roa Signing time: Mon 22 Sep 2025 17:57:34 +0000 ROA not before: Mon 22 Sep 2025 17:57:34 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.154.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:b1:c8:72:4a:dd:47:e2:09:86:61:c2:31:49:e0:2f:bc:39:28:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 17:57:34 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=36fd3c944668443e03d8ac81ad4fe2832b990232ca6c2d2983028dc2b1000efc, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4e:8a:f7:24:ff:1e:b2:87:c2:e3:df:a6:3e: 29:95:9c:7b:39:d2:91:55:5f:b5:16:e2:f1:5a:43: d3:59:02:c4:81:90:1f:1b:0d:03:60:ea:77:20:ae: 01:b4:58:b6:ce:b1:7c:8a:20:5f:20:8d:06:53:dd: 65:40:ef:72:1c:c9:28:e2:6d:2a:68:77:1b:39:8b: be:93:d4:e8:ae:e4:07:2a:78:84:c4:9b:4a:df:61: dc:76:68:5e:fd:fb:e4:99:30:28:dd:b5:4c:73:41: d9:21:17:52:19:cd:18:7e:e1:c3:27:ab:72:f3:cd: 9d:32:ea:ba:9d:60:db:63:5a:6f:18:57:ef:47:62: 50:a7:e6:da:03:9f:c5:d6:61:a0:24:64:7b:34:2f: 31:e4:45:c5:4e:8c:56:a9:e5:76:ba:0c:dc:17:8e: 31:43:77:ed:94:32:6b:d7:e2:53:42:36:43:2e:0b: 97:a9:55:d6:e0:dc:48:a1:4c:21:6a:58:db:04:bd: fb:f4:fe:0c:de:cb:1a:25:76:13:9c:9b:d4:b8:21: 34:f6:c4:34:01:c9:b3:e9:d4:2e:7a:2f:cb:4a:a9: d5:f6:c5:a5:57:44:9b:3b:2e:e4:d7:2b:2f:90:2e: 9f:8b:7f:8b:91:67:4f:92:23:22:97:b5:9a:5d:cd: 60:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:E7:84:A4:BF:E3:05:2F:EC:1B:82:C5:89:31:74:89:9C:D2:88:54 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/52d580d4-3f6b-4be1-8762-6379a34ca430.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.154.212.0/22 Signature Algorithm: sha256WithRSAEncryption 00:9a:b8:74:ac:f0:b9:20:b1:22:5f:86:14:df:cb:02:a6:7a: 08:d9:bd:27:31:6c:07:cb:d6:d1:f7:b0:00:42:93:a3:60:22: 94:aa:a2:12:5a:57:65:2b:f6:69:e4:9c:8b:01:c2:28:5d:30: d7:53:23:65:2c:0e:b2:1f:47:da:2a:61:dd:9f:96:e6:d0:1f: 89:24:7e:62:7c:03:39:cf:d0:cb:83:8d:ec:79:1e:74:ad:da: 24:40:1a:9e:29:79:65:79:07:38:8e:47:a6:8a:d4:dc:ba:55: 1e:3d:dc:09:5e:4a:fd:2d:4c:b9:44:d0:f9:c8:cc:da:1e:70: b5:b0:a6:85:0c:19:5d:b3:cc:1e:e1:bd:9f:91:67:86:bf:65: 8d:ba:6e:9f:e2:32:a8:b5:2d:6b:79:e2:b9:7f:38:93:4f:97: ee:9b:24:c3:9c:e4:62:58:d2:65:1f:cb:6a:bf:b1:30:a9:ba: 35:8a:8a:ae:b0:0a:8f:ee:5b:6a:e3:6b:cb:2f:61:cf:5a:6a: 20:83:ef:24:18:db:21:78:34:c8:45:c2:8d:02:d2:26:25:22: 53:ce:b9:63:65:2c:00:18:f2:69:3c:ae:45:e8:18:ed:a8:b1: 9d:b9:0d:bc:f7:4a:d2:5a:25:cd:ae:f7:53:9c:a8:21:d8:8b: 57:38:be:ff -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfLHIckrdR+IJhmHCMUngL7w5KKcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMTc1NzM0WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AzNmZkM2M5NDQ2Njg0NDNlMDNkOGFjODFhZDRmZTI4MzJi OTkwMjMyY2E2YzJkMjk4MzAyOGRjMmIxMDAwZWZjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNTor3JP8esofC49+mPimVnHs50pFVX7UW4vFaQ9NZAsSB kB8bDQNg6ncgrgG0WLbOsXyKIF8gjQZT3WVA73IcySjibSpodxs5i76T1Oiu5Acq eITEm0rfYdx2aF79++SZMCjdtUxzQdkhF1IZzRh+4cMnq3LzzZ0y6rqdYNtjWm8Y V+9HYlCn5toDn8XWYaAkZHs0LzHkRcVOjFap5Xa6DNwXjjFDd+2UMmvX4lNCNkMu C5epVdbg3EihTCFqWNsEvfv0/gzeyxoldhOcm9S4ITT2xDQBybPp1C56L8tKqdX2 xaVXRJs7LuTXKy+QLp+Lf4uRZ0+SIyKXtZpdzWCLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUteeEpL/jBS/sG4LFiTF0iZzSiFQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzUyZDU4MGQ0LTNmNmItNGJlMS04NzYyLTYzNzlhMzRjYTQzMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAISmtQwDQYJKoZIhvcNAQELBQADggEBAACauHSs8LkgsSJfhhTfywKmegjZ vScxbAfL1tH3sABCk6NgIpSqohJaV2Ur9mnknIsBwihdMNdTI2UsDrIfR9oqYd2f lubQH4kkfmJ8AznP0MuDjex5HnSt2iRAGp4peWV5BziOR6aK1Ny6VR493AleSv0t TLlE0PnIzNoecLWwpoUMGV2zzB7hvZ+RZ4a/ZY26bp/iMqi1LWt54rl/OJNPl+6b JMOc5GJY0mUfy2q/sTCpujWKiq6wCo/uW2rja8svYc9aaiCD7yQY2yF4NMhFwo0C 0iYlIlPOuWNlLAAY8mk8rkXoGO2osZ25Dbz3StJaJc2u91OcqCHYi1c4vv8= -----END CERTIFICATE-----Generated at Sat Oct 18 00:13:37 2025 by rpki-client