$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/53d71546-eddc-4bac-9a3c-2095fa942a64.roa File: 53d71546-eddc-4bac-9a3c-2095fa942a64.roa (raw, json) Hash identifier: SsWOigX2O+PjizEXpmIAS7SubzVlGp1OIvD+rZ4LMAE= Subject key identifier: E2:DB:4F:4A:49:3C:DE:35:07:9F:F7:09:C5:7A:36:ED:5D:DA:63:2E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 497A698008A38C1C6A527796FC2FCA22110A4030 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/53d71546-eddc-4bac-9a3c-2095fa942a64.roa Signing time: Tue 23 Sep 2025 17:13:18 +0000 ROA not before: Tue 23 Sep 2025 17:13:18 +0000 ROA not after: Tue 28 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.95.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:7a:69:80:08:a3:8c:1c:6a:52:77:96:fc:2f:ca:22:11:0a:40:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 23 17:13:18 2025 GMT Not After : Oct 28 23:59:59 2025 GMT Subject: serialNumber=99426a72e1aac32e6df28d12bc2745a53c2227984ca08dd7e86f9f1189990898, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:55:0f:8b:9f:f8:38:30:46:eb:2d:74:c1:c7: 46:23:a0:e5:61:3b:b1:b2:f9:87:88:3a:74:1a:12: f0:f9:1b:ee:cc:dd:37:a0:eb:3a:d2:47:21:e3:92: d5:3b:54:47:c0:b1:e8:32:af:5a:80:ac:2c:51:9f: 94:99:e5:3d:a5:6e:eb:2f:7c:2b:0f:fc:a4:5a:c1: 28:39:c8:fe:c7:55:a8:5f:89:cb:2b:6f:6d:34:5c: 7d:42:8c:48:ee:77:63:e2:76:16:4f:fd:b0:3f:e3: 2f:db:03:a9:f2:7a:6b:53:6f:31:46:7d:f9:e1:e2: 46:2f:fa:f1:0a:64:b5:46:6c:43:8e:b0:05:6d:4d: 0e:0b:8e:bc:61:5d:4b:9b:8d:c4:34:4e:e9:61:63: ed:62:e3:4e:e4:35:a9:c0:4a:d1:48:13:ba:39:6c: f8:9e:e2:c3:ab:28:36:73:17:a5:92:ce:09:04:dc: 8e:4d:c3:49:d3:73:02:23:47:5d:5d:20:ca:34:8d: 7b:a7:0c:4e:45:10:7f:43:7a:7d:26:59:42:d7:c4: 7d:80:19:07:16:02:45:b9:4b:21:8f:8f:9f:7e:fa: 3c:0f:29:2f:6f:3d:4e:37:6d:a1:48:a4:ea:6d:4f: 79:5d:d5:32:a8:47:28:d3:51:a6:df:d4:99:77:36: 32:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:DB:4F:4A:49:3C:DE:35:07:9F:F7:09:C5:7A:36:ED:5D:DA:63:2E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/53d71546-eddc-4bac-9a3c-2095fa942a64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.95.63.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:5a:6b:c7:25:ac:bd:f7:a5:58:14:a4:65:3c:da:91:ff:2e: b9:65:23:8f:63:7d:cf:1f:85:0a:2b:c5:f6:c6:da:0f:0a:5f: c5:86:10:de:29:58:47:37:eb:e6:f5:a2:53:77:cc:ce:4a:ed: 9c:74:d1:5d:4a:c3:4f:b3:05:95:f9:16:58:44:1f:58:1c:e6: 65:29:e5:52:85:24:c7:bb:fd:c9:8d:dd:38:4c:cc:44:1a:24: 61:ea:b7:c3:47:4c:d2:60:54:9b:e9:65:3b:22:f3:e9:9a:5e: ab:3d:83:06:20:12:a3:b0:83:94:ce:76:12:2d:c9:3a:7a:26: d5:42:b8:94:be:ed:a0:0c:53:38:ff:15:d5:28:b4:d3:9d:51: cc:31:56:f4:31:c4:ba:1a:7e:9b:5d:02:d4:9d:e8:3a:02:4a: e2:25:d8:64:85:3d:98:23:bf:c0:f8:90:4e:75:2d:93:68:28: 27:71:dd:4f:7d:6f:b6:a6:9f:b8:54:02:35:38:1f:68:c2:fa: 8c:6a:49:82:3b:5c:e3:c3:a8:20:4d:2e:01:1e:49:1b:91:49: b4:ad:f5:9c:87:f2:b4:c3:e9:95:4d:97:7c:88:36:c0:b4:7d: e6:00:88:b1:6f:48:7f:eb:bd:12:c5:1b:70:2f:78:2d:83:7b: 7a:23:6f:57 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSXppgAijjBxqUneW/C/KIhEKQDAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIzMTcxMzE4WhcNMjUxMDI4MjM1OTU5 WjB6MUkwRwYDVQQFE0A5OTQyNmE3MmUxYWFjMzJlNmRmMjhkMTJiYzI3NDVhNTNj MjIyNzk4NGNhMDhkZDdlODZmOWYxMTg5OTkwODk4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCqVQ+Ln/g4MEbrLXTBx0YjoOVhO7Gy+YeIOnQaEvD5G+7M 3Teg6zrSRyHjktU7VEfAsegyr1qArCxRn5SZ5T2lbusvfCsP/KRawSg5yP7HVahf icsrb200XH1CjEjud2PidhZP/bA/4y/bA6nyemtTbzFGffnh4kYv+vEKZLVGbEOO sAVtTQ4LjrxhXUubjcQ0TulhY+1i407kNanAStFIE7o5bPie4sOrKDZzF6WSzgkE 3I5Nw0nTcwIjR11dIMo0jXunDE5FEH9Den0mWULXxH2AGQcWAkW5SyGPj59++jwP KS9vPU43baFIpOptT3ld1TKoRyjTUabf1Jl3NjJFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU4ttPSkk83jUHn/cJxXo27V3aYy4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzUzZDcxNTQ2LWVkZGMtNGJhYy05YTNjLTIwOTVmYTk0MmE2NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0Xz8wDQYJKoZIhvcNAQELBQADggEBACpaa8clrL33pVgUpGU82pH/Lrll I49jfc8fhQorxfbG2g8KX8WGEN4pWEc36+b1olN3zM5K7Zx00V1Kw0+zBZX5FlhE H1gc5mUp5VKFJMe7/cmN3ThMzEQaJGHqt8NHTNJgVJvpZTsi8+maXqs9gwYgEqOw g5TOdhItyTp6JtVCuJS+7aAMUzj/FdUotNOdUcwxVvQxxLoafptdAtSd6DoCSuIl 2GSFPZgjv8D4kE51LZNoKCdx3U99b7amn7hUAjU4H2jC+oxqSYI7XOPDqCBNLgEe SRuRSbSt9ZyH8rTD6ZVNl3yINsC0feYAiLFvSH/rvRLFG3AveC2De3ojb1c= -----END CERTIFICATE-----Generated at Sat Oct 18 00:18:23 2025 by rpki-client