$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6b8d42c3-7f71-4351-a4d7-bd7061f1badc.roa File: 6b8d42c3-7f71-4351-a4d7-bd7061f1badc.roa (raw, json) Hash identifier: oAU+dibgI+y+mO5nDXh3dvnXzUhe3TNLQoncOLzkpoo= Subject key identifier: 39:0D:A9:D2:1C:72:DB:E7:3D:52:C3:18:A5:9D:67:70:4B:1D:D7:46 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6AF1662DA72F5C844A3F3BEF74556BB72B49B2BF Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6b8d42c3-7f71-4351-a4d7-bd7061f1badc.roa Signing time: Tue 23 Sep 2025 00:02:47 +0000 ROA not before: Tue 23 Sep 2025 00:02:47 +0000 ROA not after: Tue 28 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.85.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:f1:66:2d:a7:2f:5c:84:4a:3f:3b:ef:74:55:6b:b7:2b:49:b2:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 23 00:02:47 2025 GMT Not After : Oct 28 23:59:59 2025 GMT Subject: serialNumber=ad7402487ce17a851f5e2d8f9a4d55df58eca130c0bdc5f684903d4f8f9ecb4c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f7:9d:5e:3c:09:a8:db:62:b5:b4:46:5b:e3: 38:35:bb:3e:1f:2d:71:a2:e4:fb:a0:5a:3f:6d:74: 5d:34:ea:e7:28:9c:61:0f:d1:0c:3a:36:d7:51:2b: 42:d6:1c:5f:e6:da:53:37:f9:1e:5b:df:00:47:ed: 6e:c1:4c:e8:c4:03:ed:4b:4f:ae:62:16:89:14:07: e6:63:7b:2c:42:bf:f4:2b:72:11:2e:25:2b:78:97: 60:ca:b4:14:0a:73:fe:45:e4:3f:17:ea:8e:6b:d2: 47:f6:46:0d:e4:89:b0:59:d3:f1:46:bf:1f:d8:b1: 91:9b:04:97:af:a1:b3:6c:15:dd:c6:6d:82:2a:9d: cb:52:b6:ca:12:0f:65:b8:e7:5b:1d:38:ac:3e:19: 91:a6:84:b7:29:49:60:e4:07:d4:05:e5:23:49:22: 35:73:ec:dd:3d:2e:cb:53:a6:23:3f:16:6a:8b:16: 07:1e:8d:18:08:23:cc:36:99:3c:9a:37:c2:2f:75: 53:e2:6b:26:62:f3:af:b5:21:46:34:ba:dd:1f:69: a7:96:f1:cb:3e:bc:2d:b8:0e:bb:b4:c5:9c:a3:66: 23:4a:76:b0:f1:2b:ab:e4:be:d4:cc:0d:88:d1:e1: a9:35:c5:7a:3d:0b:bb:16:ae:5b:c8:03:71:f1:9d: 32:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:0D:A9:D2:1C:72:DB:E7:3D:52:C3:18:A5:9D:67:70:4B:1D:D7:46 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6b8d42c3-7f71-4351-a4d7-bd7061f1badc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.85.178.0/24 Signature Algorithm: sha256WithRSAEncryption 02:cb:bd:20:c3:0f:7e:74:e1:6b:1b:5f:fb:aa:04:27:4a:93: c7:99:9f:fb:59:83:bf:15:5c:7c:27:9b:e7:fd:24:5e:40:57: 52:f1:96:3b:1d:f6:ce:bd:33:77:4a:20:2b:79:b7:20:be:d6: a5:ac:2f:2d:8b:75:1b:9b:5a:56:f1:f6:de:07:88:9d:80:a0: d0:ca:75:ee:a5:53:1d:cf:de:04:a4:8b:db:fe:02:1d:73:2a: ed:74:52:f3:f3:b8:3e:50:8b:12:76:24:6e:dd:9d:eb:cb:9a: dc:29:ec:d3:f6:4d:69:93:e0:81:aa:72:09:b7:54:df:bc:61: 73:33:3e:ff:41:63:26:0d:ed:48:d7:04:fc:71:1b:a5:35:8f: 5c:47:53:36:5e:d8:b3:1d:d8:7d:ff:8f:e7:9a:78:7a:ae:d1: 6d:29:04:32:f4:00:3b:8a:f2:83:d5:fe:43:2d:5a:7c:23:15: 7a:da:d0:fc:4d:5f:55:00:45:7b:83:e7:98:bd:1c:4d:f6:99: e9:e0:55:79:84:76:2b:50:34:c7:5e:8e:04:2e:9d:a3:d5:0f: 10:c5:2d:51:44:dd:a8:fe:42:53:ce:37:aa:49:d0:51:70:61: 15:27:aa:57:43:bf:54:35:8d:4c:78:51:bf:2e:e9:47:65:e7: 68:46:fe:70 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUavFmLacvXIRKPzvvdFVrtytJsr8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIzMDAwMjQ3WhcNMjUxMDI4MjM1OTU5 WjB6MUkwRwYDVQQFE0BhZDc0MDI0ODdjZTE3YTg1MWY1ZTJkOGY5YTRkNTVkZjU4 ZWNhMTMwYzBiZGM1ZjY4NDkwM2Q0ZjhmOWVjYjRjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+951ePAmo22K1tEZb4zg1uz4fLXGi5PugWj9tdF006uco nGEP0Qw6NtdRK0LWHF/m2lM3+R5b3wBH7W7BTOjEA+1LT65iFokUB+ZjeyxCv/Qr chEuJSt4l2DKtBQKc/5F5D8X6o5r0kf2Rg3kibBZ0/FGvx/YsZGbBJevobNsFd3G bYIqnctStsoSD2W451sdOKw+GZGmhLcpSWDkB9QF5SNJIjVz7N09LstTpiM/FmqL FgcejRgII8w2mTyaN8IvdVPiayZi86+1IUY0ut0faaeW8cs+vC24Dru0xZyjZiNK drDxK6vkvtTMDYjR4ak1xXo9C7sWrlvIA3HxnTIVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUOQ2p0hxy2+c9UsMYpZ1ncEsd10YwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzZiOGQ0MmMzLTdmNzEtNDM1MS1hNGQ3LWJkNzA2MWYxYmFkYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0VbIwDQYJKoZIhvcNAQELBQADggEBAALLvSDDD3504WsbX/uqBCdKk8eZ n/tZg78VXHwnm+f9JF5AV1Lxljsd9s69M3dKICt5tyC+1qWsLy2LdRubWlbx9t4H iJ2AoNDKde6lUx3P3gSki9v+Ah1zKu10UvPzuD5QixJ2JG7dnevLmtwp7NP2TWmT 4IGqcgm3VN+8YXMzPv9BYyYN7UjXBPxxG6U1j1xHUzZe2LMd2H3/j+eaeHqu0W0p BDL0ADuK8oPV/kMtWnwjFXra0PxNX1UARXuD55i9HE32mengVXmEditQNMdejgQu naPVDxDFLVFE3aj+QlPON6pJ0FFwYRUnqldDv1Q1jUx4Ub8u6Udl52hG/nA= -----END CERTIFICATE-----Generated at Fri Oct 17 21:55:13 2025 by rpki-client