$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/63c972f4-aeaf-41f2-8843-8220d8ca6497.roa File: 63c972f4-aeaf-41f2-8843-8220d8ca6497.roa (raw, json) Hash identifier: 6+/2lgx189iYSfrtH7emtdyk+ShZm96nyfxre7123Vo= Subject key identifier: 52:4D:C6:40:6B:D4:37:3D:83:76:02:39:11:67:3E:B9:45:59:55:EB Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0976BB5274EE5025C7B1C6D0038DE8B204732490 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/63c972f4-aeaf-41f2-8843-8220d8ca6497.roa Signing time: Tue 23 Sep 2025 00:11:30 +0000 ROA not before: Tue 23 Sep 2025 00:11:30 +0000 ROA not after: Tue 28 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.85.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:76:bb:52:74:ee:50:25:c7:b1:c6:d0:03:8d:e8:b2:04:73:24:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 23 00:11:30 2025 GMT Not After : Oct 28 23:59:59 2025 GMT Subject: serialNumber=a2e14ad6a2cdd7a143346b65ac07785cf437bd8c1540393bf623074d3a292bc5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2b:91:43:0a:ae:a1:79:86:2d:85:02:53:b6: 41:44:32:88:60:61:6a:0b:3c:44:26:7b:cf:e1:e8: a2:fe:1a:90:e4:24:94:df:c2:d0:02:4b:59:0e:90: 09:40:a5:40:99:04:4f:24:6e:7d:26:4c:25:c4:ee: 4c:78:62:5f:43:2c:c4:1f:1d:80:41:a9:05:c5:c0: 60:a9:52:3a:2c:c6:5b:79:a9:d0:f6:cb:9a:c0:33: 40:69:a0:8f:2a:e7:65:ec:16:40:fd:c0:ce:5e:91: 29:54:88:1c:98:6b:e9:c7:2c:e5:b1:c2:32:9d:0a: ba:9c:66:bb:b2:bd:4e:37:be:2d:2b:6c:7f:4d:25: c4:65:ac:4b:9b:10:17:98:87:15:6a:c1:53:e5:9c: 17:d8:98:f2:5b:57:4f:20:8d:72:c8:3c:bd:f2:27: 25:2a:4f:9f:6a:2b:5a:3a:16:64:ef:5e:16:8b:0c: 1b:e7:1f:28:8e:55:d5:cb:42:c9:8a:ad:23:e1:87: 36:e7:88:d2:99:89:01:00:f8:26:77:99:32:d0:ae: 71:bf:e3:38:77:9f:eb:f9:7d:b3:2d:82:a1:1c:e0: 96:3c:07:eb:98:7f:5d:22:6a:f6:af:81:cc:1e:33: 49:b5:54:b4:3a:13:a8:0d:3c:24:78:07:bf:36:82: e5:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:4D:C6:40:6B:D4:37:3D:83:76:02:39:11:67:3E:B9:45:59:55:EB X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/63c972f4-aeaf-41f2-8843-8220d8ca6497.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.85.75.0/24 Signature Algorithm: sha256WithRSAEncryption b0:17:8b:85:f8:fd:20:ca:eb:bd:d2:d9:c0:d5:db:11:7d:dc: b8:71:d9:b1:15:2c:8f:86:4d:39:b7:64:ee:ce:03:26:a6:5e: 03:30:ea:90:be:5f:fd:66:d7:7b:f3:a7:3e:79:8e:e4:5e:d4: 4e:79:8a:c3:ac:02:7b:b6:fa:82:5b:f2:4d:f5:ee:7e:38:f7: 07:34:96:86:39:90:62:e3:b8:4b:70:8a:0e:b1:65:fb:1e:45: ab:f4:97:a6:d0:b8:2b:d3:4d:6a:6c:3c:c4:74:6e:ce:8f:84: 3a:e9:b9:11:55:6f:8d:a4:43:49:d6:d8:b4:7e:ff:4e:85:6a: ba:a6:0a:14:ec:67:ff:59:29:bd:98:3b:29:7f:cc:e6:23:21: 0b:db:f8:34:23:15:db:6d:f0:28:02:2d:db:c3:7a:0b:ff:a0: 92:6e:14:c9:b4:20:15:96:34:4e:52:ac:8b:74:ae:14:28:d4: 80:41:5e:49:e0:9a:d0:b5:ea:9a:fb:c7:d6:67:d3:90:9b:ae: 57:2d:b9:98:d6:92:c8:7e:6e:84:cb:38:dd:5c:3c:7c:bf:dc: 81:63:22:ca:0f:45:79:68:4b:86:de:29:ba:ed:4d:a3:9b:d1: e8:ea:1c:b5:de:ae:5a:1a:64:8b:d6:0f:b7:ef:24:f5:10:45: 82:1e:c5:26 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCXa7UnTuUCXHscbQA43osgRzJJAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIzMDAxMTMwWhcNMjUxMDI4MjM1OTU5 WjB6MUkwRwYDVQQFE0BhMmUxNGFkNmEyY2RkN2ExNDMzNDZiNjVhYzA3Nzg1Y2Y0 MzdiZDhjMTU0MDM5M2JmNjIzMDc0ZDNhMjkyYmM1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDEK5FDCq6heYYthQJTtkFEMohgYWoLPEQme8/h6KL+GpDk JJTfwtACS1kOkAlApUCZBE8kbn0mTCXE7kx4Yl9DLMQfHYBBqQXFwGCpUjosxlt5 qdD2y5rAM0BpoI8q52XsFkD9wM5ekSlUiByYa+nHLOWxwjKdCrqcZruyvU43vi0r bH9NJcRlrEubEBeYhxVqwVPlnBfYmPJbV08gjXLIPL3yJyUqT59qK1o6FmTvXhaL DBvnHyiOVdXLQsmKrSPhhzbniNKZiQEA+CZ3mTLQrnG/4zh3n+v5fbMtgqEc4JY8 B+uYf10iavavgcweM0m1VLQ6E6gNPCR4B782guXjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUUk3GQGvUNz2DdgI5EWc+uUVZVeswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzYzYzk3MmY0LWFlYWYtNDFmMi04ODQzLTgyMjBkOGNhNjQ5Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0VUswDQYJKoZIhvcNAQELBQADggEBALAXi4X4/SDK673S2cDV2xF93Lhx 2bEVLI+GTTm3ZO7OAyamXgMw6pC+X/1m13vzpz55juRe1E55isOsAnu2+oJb8k31 7n449wc0loY5kGLjuEtwig6xZfseRav0l6bQuCvTTWpsPMR0bs6PhDrpuRFVb42k Q0nW2LR+/06FarqmChTsZ/9ZKb2YOyl/zOYjIQvb+DQjFdtt8CgCLdvDegv/oJJu FMm0IBWWNE5SrIt0rhQo1IBBXkngmtC16pr7x9Zn05CbrlctuZjWksh+boTLON1c PHy/3IFjIsoPRXloS4beKbrtTaOb0ejqHLXerloaZIvWD7fvJPUQRYIexSY= -----END CERTIFICATE-----Generated at Fri Oct 17 23:51:56 2025 by rpki-client