$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5968078b-457f-4114-8100-7587f939670e.roa File: 5968078b-457f-4114-8100-7587f939670e.roa (raw, json) Hash identifier: VWsJDtsyMPoAEJx7P0IFGS6+mUh3sAYqlbcxFZaNmbw= Subject key identifier: 97:14:C8:66:65:EB:3A:1B:B0:49:7A:AB:F8:87:10:C5:16:A4:F4:0F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 695ED3742D99E748331178390FDA94158A18CDDD Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5968078b-457f-4114-8100-7587f939670e.roa Signing time: Thu 16 Oct 2025 17:13:46 +0000 ROA not before: Thu 16 Oct 2025 17:13:46 +0000 ROA not after: Thu 20 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.222.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:5e:d3:74:2d:99:e7:48:33:11:78:39:0f:da:94:15:8a:18:cd:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 16 17:13:46 2025 GMT Not After : Nov 20 23:59:59 2025 GMT Subject: serialNumber=83f88e2dbf8c60b6cf1f17f36df6589a1c5176c34c639999cd0dc10b66d5d3d4, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ca:b8:84:81:0b:f8:a4:07:a4:c0:f0:92:8f: 48:3d:a3:ad:8e:1f:e5:2c:a7:a5:81:8b:8e:73:67: 5d:ea:21:4f:cd:62:3e:79:76:60:da:79:37:e3:c1: c8:a2:5d:2d:ee:c1:e6:16:4a:24:48:d2:a0:cd:27: ee:a4:b7:5a:7d:12:f0:a0:39:88:ea:bb:79:51:e0: 05:1f:91:88:fa:13:86:dd:cb:a8:77:be:e2:9a:04: ac:b9:66:36:66:ab:1e:ea:ec:5e:6a:fc:98:32:62: 85:3d:a2:80:20:4c:13:4b:3a:73:97:aa:3e:70:65: 68:d4:4e:f0:d5:99:d5:5f:1a:e8:92:3f:39:20:40: 2c:1e:67:57:ee:9c:44:c2:73:b4:1b:2c:01:f2:34: 8a:44:8f:05:c0:fc:bf:85:6d:cd:7c:5e:2c:de:5d: cf:b9:ad:49:75:ed:5f:6f:4e:0a:e0:53:8f:3a:69: 10:8d:38:87:7f:2e:8a:4e:af:ec:a5:7a:9c:b5:a8: ff:38:99:ad:72:cf:4d:18:2e:65:ae:82:f4:06:a4: 42:0d:fa:6c:cf:e0:ea:1b:68:93:b5:e0:41:43:7f: ed:b7:60:c6:41:20:64:04:d5:6d:8c:b9:af:a6:fc: 2f:f1:5c:c6:93:97:ab:eb:b9:21:91:c3:ca:b0:62: 96:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:14:C8:66:65:EB:3A:1B:B0:49:7A:AB:F8:87:10:C5:16:A4:F4:0F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5968078b-457f-4114-8100-7587f939670e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.222.249.0/24 Signature Algorithm: sha256WithRSAEncryption 16:d2:50:96:88:92:90:af:7f:a1:c7:0b:99:6f:13:4e:41:94: 65:c5:8f:3d:f7:28:ae:b1:7d:a0:3e:f8:d7:85:c5:75:e1:d5: cd:0b:a4:f5:a0:24:ed:ea:12:53:e4:ad:76:d0:d4:b7:78:17: e1:eb:58:d9:56:bc:47:29:d4:f5:07:00:11:a6:eb:82:a4:ba: b6:25:00:08:7a:b5:94:ae:93:8b:c2:e1:ff:b8:72:0f:db:6c: 76:96:25:8d:9e:b1:ba:c0:ea:e2:1b:11:13:80:18:cc:80:bc: 0c:54:88:a9:5c:4e:ef:58:17:39:82:5d:a1:f5:5b:93:aa:17: 14:f7:80:87:4a:23:5c:b1:c1:f8:ce:43:fe:f4:1d:05:2b:14: 06:fb:87:2c:7c:98:cc:72:1d:e7:6a:27:10:b8:26:24:7f:4e: 96:a9:57:b3:24:38:27:87:10:40:70:23:cb:00:51:b8:fb:c5: 4f:c6:37:e5:8f:e9:d6:cc:90:4a:98:19:35:b0:c1:5c:61:cc: 8a:24:c0:9c:d3:e7:13:b5:5d:d7:e9:25:95:9b:b1:8c:c3:c8: dc:94:8b:f0:ba:c5:89:1a:66:85:85:21:41:af:93:c4:e3:44: 8a:9b:f2:f4:4d:57:45:eb:dc:87:bb:95:2b:d6:bd:b5:9c:ea: 31:c9:8b:fc -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUaV7TdC2Z50gzEXg5D9qUFYoYzd0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE2MTcxMzQ2WhcNMjUxMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A4M2Y4OGUyZGJmOGM2MGI2Y2YxZjE3ZjM2ZGY2NTg5YTFj NTE3NmMzNGM2Mzk5OTljZDBkYzEwYjY2ZDVkM2Q0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDAyriEgQv4pAekwPCSj0g9o62OH+Usp6WBi45zZ13qIU/N Yj55dmDaeTfjwciiXS3uweYWSiRI0qDNJ+6kt1p9EvCgOYjqu3lR4AUfkYj6E4bd y6h3vuKaBKy5ZjZmqx7q7F5q/JgyYoU9ooAgTBNLOnOXqj5wZWjUTvDVmdVfGuiS PzkgQCweZ1funETCc7QbLAHyNIpEjwXA/L+Fbc18XizeXc+5rUl17V9vTgrgU486 aRCNOId/LopOr+ylepy1qP84ma1yz00YLmWugvQGpEIN+mzP4OobaJO14EFDf+23 YMZBIGQE1W2Mua+m/C/xXMaTl6vruSGRw8qwYpbhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUlxTIZmXrOhuwSXqr+IcQxRak9A8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzU5NjgwNzhiLTQ1N2YtNDExNC04MTAwLTc1ODdmOTM5NjcwZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA03vkwDQYJKoZIhvcNAQELBQADggEBABbSUJaIkpCvf6HHC5lvE05BlGXF jz33KK6xfaA++NeFxXXh1c0LpPWgJO3qElPkrXbQ1Ld4F+HrWNlWvEcp1PUHABGm 64KkurYlAAh6tZSuk4vC4f+4cg/bbHaWJY2esbrA6uIbEROAGMyAvAxUiKlcTu9Y FzmCXaH1W5OqFxT3gIdKI1yxwfjOQ/70HQUrFAb7hyx8mMxyHedqJxC4JiR/Tpap V7MkOCeHEEBwI8sAUbj7xU/GN+WP6dbMkEqYGTWwwVxhzIokwJzT5xO1XdfpJZWb sYzDyNyUi/C6xYkaZoWFIUGvk8TjRIqb8vRNV0Xr3Ie7lSvWvbWc6jHJi/w= -----END CERTIFICATE-----Generated at Fri Oct 17 22:04:57 2025 by rpki-client