$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/76bbe8e7-4e16-4d15-9ac9-9ae18ca40a0d.roa File: 76bbe8e7-4e16-4d15-9ac9-9ae18ca40a0d.roa (raw, json) Hash identifier: 38O2qBAe/iTPvGO+Ua2mmpvJls/rDt95DVDBvOFW+C8= Subject key identifier: AB:D1:13:34:FB:D3:BE:58:67:77:95:E5:FB:CE:70:2F:D1:2D:78:4E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 04B746D926998CF73994625BECB8B99353487793 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/76bbe8e7-4e16-4d15-9ac9-9ae18ca40a0d.roa Signing time: Fri 10 Oct 2025 15:56:43 +0000 ROA not before: Fri 10 Oct 2025 15:56:43 +0000 ROA not after: Fri 14 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.195.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:b7:46:d9:26:99:8c:f7:39:94:62:5b:ec:b8:b9:93:53:48:77:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 10 15:56:43 2025 GMT Not After : Nov 14 23:59:59 2025 GMT Subject: serialNumber=566309c240d4eb2757e688a53595c7019c8676b446c0408d4bdc3c84da02f9d7, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f9:8b:f3:3d:45:dd:fd:0d:4f:d2:1f:89:82: df:d3:83:c4:88:bc:a8:cb:74:58:b9:32:5f:17:34: 75:33:72:0c:57:c4:46:16:66:aa:ad:3a:49:f1:61: fa:78:7b:e8:05:a1:39:47:62:37:dc:8e:c0:4b:e8: a5:7b:02:5a:5f:f0:50:66:de:16:ae:5f:5e:56:67: 18:a9:49:95:e2:c8:fa:ef:3f:3e:70:a7:8c:dd:bb: 5b:c0:55:42:19:d8:f9:e8:7b:b2:cb:22:ee:0b:83: fd:39:7f:b4:49:93:ef:58:5c:74:84:a9:d3:ed:c4: 4a:3d:f0:5e:96:de:8d:e0:fb:35:18:c4:4a:d2:ca: 50:da:b0:8a:bd:62:56:a9:69:27:2b:20:b1:2d:ee: 04:1e:0d:8c:57:26:62:ee:1e:7b:ad:71:84:77:ba: 23:0c:b0:c3:33:16:99:fb:dd:cf:e5:7a:84:e2:5e: 79:40:c3:ee:c8:21:bb:78:a3:6f:1f:90:fa:88:c2: a5:eb:fa:28:c5:99:fa:78:3e:47:02:37:dd:61:a6: 9d:8e:4a:07:29:02:de:7c:1b:5d:78:0b:29:74:cb: 77:f2:f4:0c:ba:92:06:7d:2b:3d:29:83:50:89:ff: 01:4e:ca:fb:53:18:c1:d9:a8:e1:6c:93:86:2c:dd: 87:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:D1:13:34:FB:D3:BE:58:67:77:95:E5:FB:CE:70:2F:D1:2D:78:4E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/76bbe8e7-4e16-4d15-9ac9-9ae18ca40a0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.195.200.0/22 Signature Algorithm: sha256WithRSAEncryption aa:c1:88:d5:ff:de:5b:74:d0:41:9a:69:75:46:8c:81:ad:1f: d9:e7:b8:66:9c:39:ee:78:88:5a:68:28:de:6f:ec:21:ad:b4: c0:f1:4a:eb:87:58:3a:e1:ed:55:61:8c:52:47:fe:77:f1:4a: 74:ef:a4:cd:6a:e1:52:14:18:d7:45:25:29:48:00:2b:eb:70: b9:69:2f:da:d8:65:d7:8b:ef:b1:62:21:43:43:ba:10:fc:b2: d5:7e:77:23:3d:b1:b0:44:58:18:73:e7:44:57:2e:6b:dc:5f: ba:42:1f:60:57:8b:14:10:e3:1b:f7:40:14:37:32:6e:8e:5a: 8f:87:01:b8:e6:09:b8:40:ea:c4:8b:23:2d:8e:84:30:1e:4d: 23:e3:e1:df:87:ef:9f:48:81:31:c1:14:16:74:78:88:ec:79: 4d:0d:48:5d:09:b3:61:f1:48:14:a8:88:b6:2f:c4:33:56:86: a0:5f:2a:76:86:cf:e9:ab:f7:ad:fb:bf:1c:1f:cc:3e:13:bf: 03:56:c6:32:28:10:eb:90:b8:66:8c:78:b3:48:04:c7:15:79: 1d:29:0e:c1:f5:62:a1:9e:11:ec:39:da:e7:66:c5:51:1d:59: ee:48:46:31:a8:b5:a0:3d:a2:d0:08:b0:1b:c7:c3:54:7b:f2: 10:eb:92:9c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBLdG2SaZjPc5lGJb7Li5k1NId5MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDEwMTU1NjQzWhcNMjUxMTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A1NjYzMDljMjQwZDRlYjI3NTdlNjg4YTUzNTk1YzcwMTlj ODY3NmI0NDZjMDQwOGQ0YmRjM2M4NGRhMDJmOWQ3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCs+YvzPUXd/Q1P0h+Jgt/Tg8SIvKjLdFi5Ml8XNHUzcgxX xEYWZqqtOknxYfp4e+gFoTlHYjfcjsBL6KV7Alpf8FBm3hauX15WZxipSZXiyPrv Pz5wp4zdu1vAVUIZ2Pnoe7LLIu4Lg/05f7RJk+9YXHSEqdPtxEo98F6W3o3g+zUY xErSylDasIq9YlapaScrILEt7gQeDYxXJmLuHnutcYR3uiMMsMMzFpn73c/leoTi XnlAw+7IIbt4o28fkPqIwqXr+ijFmfp4PkcCN91hpp2OSgcpAt58G114Cyl0y3fy 9Ay6kgZ9Kz0pg1CJ/wFOyvtTGMHZqOFsk4Ys3YfNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUq9ETNPvTvlhnd5Xl+85wL9EteE4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzc2YmJlOGU3LTRlMTYtNGQxNS05YWM5LTlhZTE4Y2E0MGEwZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI0w8gwDQYJKoZIhvcNAQELBQADggEBAKrBiNX/3lt00EGaaXVGjIGtH9nn uGacOe54iFpoKN5v7CGttMDxSuuHWDrh7VVhjFJH/nfxSnTvpM1q4VIUGNdFJSlI ACvrcLlpL9rYZdeL77FiIUNDuhD8stV+dyM9sbBEWBhz50RXLmvcX7pCH2BXixQQ 4xv3QBQ3Mm6OWo+HAbjmCbhA6sSLIy2OhDAeTSPj4d+H759IgTHBFBZ0eIjseU0N SF0Js2HxSBSoiLYvxDNWhqBfKnaGz+mr9637vxwfzD4TvwNWxjIoEOuQuGaMeLNI BMcVeR0pDsH1YqGeEew52udmxVEdWe5IRjGotaA9otAIsBvHw1R78hDrkpw= -----END CERTIFICATE-----Generated at Fri Oct 17 23:54:21 2025 by rpki-client