$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7455588b-0aa5-40bc-95b4-32de62cba9a8.roa File: 7455588b-0aa5-40bc-95b4-32de62cba9a8.roa (raw, json) Hash identifier: 6wiSq/aZdWuojwqRDJJVrpqvyqUl3liNvDM1pmV+Ea4= Subject key identifier: 44:0D:0F:7F:94:0E:4F:E3:C7:99:21:DB:84:C7:23:AF:E7:F2:6B:74 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1789CBAE89AD63A43BEF7E5DACCB18D8354BCEF1 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7455588b-0aa5-40bc-95b4-32de62cba9a8.roa Signing time: Tue 23 Sep 2025 17:13:15 +0000 ROA not before: Tue 23 Sep 2025 17:13:15 +0000 ROA not after: Tue 28 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.93.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:89:cb:ae:89:ad:63:a4:3b:ef:7e:5d:ac:cb:18:d8:35:4b:ce:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 23 17:13:15 2025 GMT Not After : Oct 28 23:59:59 2025 GMT Subject: serialNumber=826b467d132c6f6d386ea9f6cb49380c13686f292ad97b4c09d727099602e43a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b1:c6:92:e9:43:39:39:a1:26:44:7d:7b:9f: ef:f7:af:96:eb:b2:be:f9:b0:9c:e5:6b:9c:87:c9: 54:62:2a:5d:f2:c0:74:bf:dd:d7:7f:ef:cc:fa:83: 4c:df:70:32:5b:80:9e:63:2e:42:25:3f:91:c9:88: c5:cd:3d:b3:db:8e:07:61:cf:1e:4f:0d:e5:b7:ed: d1:0a:01:9e:f4:dd:50:53:7e:f9:06:25:a0:04:34: 30:96:d4:b3:78:cc:05:5f:d8:fd:b5:53:d3:b0:81: 5b:4b:f5:8b:f4:19:86:90:6a:1b:87:20:35:c4:a9: a0:56:ab:b4:20:c0:0a:f2:91:b7:02:bd:cb:9e:f9: fa:68:2c:7d:a0:31:ee:e8:77:04:d9:a3:21:30:9f: ca:1d:61:99:c8:2b:b2:7f:74:69:d3:97:c4:60:8c: f3:0b:e2:98:7e:7a:fb:c3:df:e5:bd:96:25:d7:9c: 26:59:37:b0:1c:9d:d2:af:c8:26:a5:a2:71:a9:e4: 25:c7:ad:f3:83:73:d0:ab:69:12:d8:24:d0:c7:b3: ab:14:53:ab:aa:cc:a4:96:41:48:d7:1e:ae:5e:9c: 22:c4:a8:d1:c2:52:87:6f:38:e2:86:a6:df:58:46: e6:16:a7:59:0c:f8:ba:55:b6:ae:a8:a4:60:df:be: 63:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:0D:0F:7F:94:0E:4F:E3:C7:99:21:DB:84:C7:23:AF:E7:F2:6B:74 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7455588b-0aa5-40bc-95b4-32de62cba9a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.93.60.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:8b:b4:c6:05:10:23:fe:c0:cb:20:e8:6c:38:e4:b7:86:90: 25:b6:51:c8:d0:8f:93:00:85:ec:13:b4:ac:fe:50:83:85:17: 12:98:1b:a0:1b:70:07:68:32:a2:a9:ac:03:a2:5b:28:f8:ab: 7a:a2:be:c5:e1:b8:87:2a:16:e7:3d:23:d9:96:4a:08:a4:d7: a4:0f:63:31:90:7b:8d:7d:8f:92:89:36:b7:f4:0f:cf:bc:38: 93:0f:4f:a7:40:53:16:07:91:4b:ee:bd:b6:97:91:21:8d:47: e9:85:5b:18:ff:0f:99:16:21:4c:2b:38:75:a2:5b:94:51:c9: b3:25:d1:f8:42:ae:6a:ef:de:30:77:88:f2:7c:8e:a4:7e:2f: 97:15:27:bd:93:49:e0:98:ee:86:70:0e:42:94:e1:4c:17:2d: bc:63:ff:9e:9f:8c:b2:7c:ab:31:a5:c2:b6:bd:b5:bd:79:85: 27:2a:23:47:a2:95:0b:d1:4f:7a:8c:93:e6:cd:76:fd:de:2b: fb:95:5b:e1:3a:b9:ac:8c:85:ff:95:e9:d0:a4:6f:8c:73:11: b3:6a:da:78:45:4a:37:72:c0:3e:85:9b:e1:21:43:0e:66:82: e4:b3:4e:4f:67:4f:a0:af:dd:a3:1c:b5:02:bf:fc:5d:df:04: 16:73:4b:75 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUF4nLromtY6Q7735drMsY2DVLzvEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIzMTcxMzE1WhcNMjUxMDI4MjM1OTU5 WjB6MUkwRwYDVQQFE0A4MjZiNDY3ZDEzMmM2ZjZkMzg2ZWE5ZjZjYjQ5MzgwYzEz Njg2ZjI5MmFkOTdiNGMwOWQ3MjcwOTk2MDJlNDNhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDPscaS6UM5OaEmRH17n+/3r5brsr75sJzla5yHyVRiKl3y wHS/3dd/78z6g0zfcDJbgJ5jLkIlP5HJiMXNPbPbjgdhzx5PDeW37dEKAZ703VBT fvkGJaAENDCW1LN4zAVf2P21U9OwgVtL9Yv0GYaQahuHIDXEqaBWq7QgwArykbcC vcue+fpoLH2gMe7odwTZoyEwn8odYZnIK7J/dGnTl8RgjPML4ph+evvD3+W9liXX nCZZN7AcndKvyCalonGp5CXHrfODc9CraRLYJNDHs6sUU6uqzKSWQUjXHq5enCLE qNHCUodvOOKGpt9YRuYWp1kM+LpVtq6opGDfvmN3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQURA0Pf5QOT+PHmSHbhMcjr+fya3QwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzc0NTU1ODhiLTBhYTUtNDBiYy05NWI0LTMyZGU2MmNiYTlhOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0XTwwDQYJKoZIhvcNAQELBQADggEBAH+LtMYFECP+wMsg6Gw45LeGkCW2 UcjQj5MAhewTtKz+UIOFFxKYG6AbcAdoMqKprAOiWyj4q3qivsXhuIcqFuc9I9mW Sgik16QPYzGQe419j5KJNrf0D8+8OJMPT6dAUxYHkUvuvbaXkSGNR+mFWxj/D5kW IUwrOHWiW5RRybMl0fhCrmrv3jB3iPJ8jqR+L5cVJ72TSeCY7oZwDkKU4UwXLbxj /56fjLJ8qzGlwra9tb15hScqI0eilQvRT3qMk+bNdv3eK/uVW+E6uayMhf+V6dCk b4xzEbNq2nhFSjdywD6Fm+EhQw5mguSzTk9nT6Cv3aMctQK//F3fBBZzS3U= -----END CERTIFICATE-----Generated at Sat Oct 18 04:53:02 2025 by rpki-client