$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/67ec1dad-4b96-4285-8e25-c1f502586f43.roa File: 67ec1dad-4b96-4285-8e25-c1f502586f43.roa (raw, json) Hash identifier: R0DNR7TuCme9u/6ejKX02qjHZl3Trg3cpCX4IoI/Y5M= Subject key identifier: ED:24:A0:1D:0B:00:C1:7F:85:64:D7:23:4D:03:C4:FA:0E:44:57:C8 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 29C7C63A7B0D7DC1FD28ECC3AA162536CEC5C048 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/67ec1dad-4b96-4285-8e25-c1f502586f43.roa Signing time: Tue 23 Sep 2025 00:07:10 +0000 ROA not before: Tue 23 Sep 2025 00:07:10 +0000 ROA not after: Tue 28 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.85.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:c7:c6:3a:7b:0d:7d:c1:fd:28:ec:c3:aa:16:25:36:ce:c5:c0:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 23 00:07:10 2025 GMT Not After : Oct 28 23:59:59 2025 GMT Subject: serialNumber=9e3a1dc0730225089d1e262438df9abdebb71fa01d6b888d5d8985449a539288, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:bd:f5:c0:d8:7a:7c:9f:8d:82:b7:35:47:2c: 19:38:d2:65:6b:08:2f:ee:09:87:d9:bb:27:6c:8c: 68:51:2b:1e:7b:14:8d:67:e5:6b:1b:7b:15:dd:e7: 36:31:74:ca:a8:04:c6:64:5f:ef:e6:a7:51:db:24: 13:fb:7a:4c:f2:0a:83:6b:47:5c:6a:05:b8:f0:07: 37:8e:cb:32:5d:d8:a2:38:72:ca:cc:7a:09:41:7f: aa:ec:4d:dd:12:c5:cd:5d:1f:c5:d5:7b:e5:b2:49: 07:28:6f:9c:f1:ef:df:f0:ec:4b:1a:54:e5:5c:8c: c8:3e:e2:e2:6c:30:fc:f5:c7:8c:b6:89:94:31:87: 0a:9a:53:1a:ef:5d:f5:51:8e:a6:2d:00:31:a7:74: 7c:c4:76:ce:71:c7:78:91:34:4f:a9:cc:d7:40:42: 1e:0d:2c:c7:70:5c:bf:a9:c3:f4:1f:7f:f1:76:91: 79:ce:72:4b:98:d7:ed:a0:86:72:aa:17:4f:f6:14: 73:c0:82:16:e1:1a:c5:37:46:6b:94:6a:6e:10:57: 0a:5c:e7:5d:8e:81:0b:78:83:5a:6c:61:40:e0:ec: e5:65:09:83:5b:75:35:22:17:95:84:bb:c9:18:cb: 25:d6:21:c6:18:c8:80:1d:e5:13:fc:00:f4:74:b0: 24:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:24:A0:1D:0B:00:C1:7F:85:64:D7:23:4D:03:C4:FA:0E:44:57:C8 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/67ec1dad-4b96-4285-8e25-c1f502586f43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.85.230.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:50:98:50:c6:e8:0a:4b:87:02:bd:44:72:94:69:ee:40:d7: 1d:a4:2f:be:da:81:67:e2:4c:10:73:00:8b:fb:3c:4b:3b:93: 74:f1:8d:6a:74:a0:29:ab:b0:34:4c:cd:29:0f:bd:39:60:d9: b0:a7:10:04:d0:a6:b2:5b:38:e0:9c:18:fb:1b:4b:38:67:39: c0:0e:71:40:36:6f:02:69:0b:a2:1d:96:de:4a:4b:47:d3:a0: 81:fa:cb:99:a7:ea:cf:ea:b7:71:b8:1e:a5:8f:66:ab:20:0a: 18:de:1b:73:b3:70:46:f5:de:c2:59:a2:25:4e:5f:be:9f:5b: 21:27:a7:60:5c:36:04:26:e6:65:17:27:18:bc:71:ed:a8:72: 74:0f:21:31:a8:3f:49:e1:df:52:cf:c6:36:b3:2e:ba:1b:11: e2:14:ba:98:07:ec:bd:34:4d:ec:6a:ec:1e:8f:fc:d7:66:d3: f7:2d:a7:a7:48:33:1f:b8:c0:62:24:14:04:4c:72:5f:77:42: 02:f8:e9:ef:41:26:fe:d2:43:ab:48:e8:e5:1d:a7:ea:0c:91: bc:de:c7:6a:e2:8e:56:2b:8a:d6:05:45:02:69:6a:bd:e1:60: b6:66:24:82:4f:d3:52:fd:4b:b5:b9:f7:f2:b4:d1:8c:7a:af: 7c:fa:76:f7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKcfGOnsNfcH9KOzDqhYlNs7FwEgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIzMDAwNzEwWhcNMjUxMDI4MjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZTNhMWRjMDczMDIyNTA4OWQxZTI2MjQzOGRmOWFiZGVi YjcxZmEwMWQ2Yjg4OGQ1ZDg5ODU0NDlhNTM5Mjg4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6vfXA2Hp8n42CtzVHLBk40mVrCC/uCYfZuydsjGhRKx57 FI1n5WsbexXd5zYxdMqoBMZkX+/mp1HbJBP7ekzyCoNrR1xqBbjwBzeOyzJd2KI4 csrMeglBf6rsTd0Sxc1dH8XVe+WySQcob5zx79/w7EsaVOVcjMg+4uJsMPz1x4y2 iZQxhwqaUxrvXfVRjqYtADGndHzEds5xx3iRNE+pzNdAQh4NLMdwXL+pw/Qff/F2 kXnOckuY1+2ghnKqF0/2FHPAghbhGsU3RmuUam4QVwpc512OgQt4g1psYUDg7OVl CYNbdTUiF5WEu8kYyyXWIcYYyIAd5RP8APR0sCRhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU7SSgHQsAwX+FZNcjTQPE+g5EV8gwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzY3ZWMxZGFkLTRiOTYtNDI4NS04ZTI1LWMxZjUwMjU4NmY0My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0VeYwDQYJKoZIhvcNAQELBQADggEBAB1QmFDG6ApLhwK9RHKUae5A1x2k L77agWfiTBBzAIv7PEs7k3TxjWp0oCmrsDRMzSkPvTlg2bCnEATQprJbOOCcGPsb SzhnOcAOcUA2bwJpC6Idlt5KS0fToIH6y5mn6s/qt3G4HqWPZqsgChjeG3OzcEb1 3sJZoiVOX76fWyEnp2BcNgQm5mUXJxi8ce2ocnQPITGoP0nh31LPxjazLrobEeIU upgH7L00Texq7B6P/Ndm0/ctp6dIMx+4wGIkFARMcl93QgL46e9BJv7SQ6tI6OUd p+oMkbzex2rijlYritYFRQJpar3hYLZmJIJP01L9S7W59/K00Yx6r3z6dvc= -----END CERTIFICATE-----Generated at Fri Oct 17 22:04:28 2025 by rpki-client