$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/77e90897-d5da-4293-a4d0-8024137bc362.roa File: 77e90897-d5da-4293-a4d0-8024137bc362.roa (raw, json) Hash identifier: H58LsTPvS8Lxe6+QW5CNXs0kJuKBM6EX33N0Sf9JLxQ= Subject key identifier: 05:5A:1E:43:5F:31:17:35:B4:A2:80:45:B7:6D:AB:52:D0:ED:25:12 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 754AA8116A48C1C51379A8A376C249ABA85FCED8 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/77e90897-d5da-4293-a4d0-8024137bc362.roa Signing time: Sat 11 Oct 2025 01:02:49 +0000 ROA not before: Sat 11 Oct 2025 01:02:49 +0000 ROA not after: Sat 15 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.60.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:4a:a8:11:6a:48:c1:c5:13:79:a8:a3:76:c2:49:ab:a8:5f:ce:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 11 01:02:49 2025 GMT Not After : Nov 15 23:59:59 2025 GMT Subject: serialNumber=ba52a8a61c9264fde1641f695b2ff5eb785f97caeb6d5c31d67f8a5cd54795f0, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e1:f8:65:aa:1c:5d:f9:0d:9b:59:5c:84:dd: e6:9a:60:cb:aa:d9:27:f9:d4:af:f6:4b:6b:13:50: 70:37:e4:90:cb:37:2c:bc:32:c7:62:4a:f3:50:b1: 95:98:aa:4a:e8:87:a3:ff:1f:24:f3:62:6f:bd:cd: 65:14:c1:c1:bc:2f:92:75:94:f0:f8:64:db:24:7c: 79:66:29:5c:50:dc:47:77:73:65:67:b6:31:3e:cd: 1b:d4:1d:93:c2:c4:72:01:ef:55:4e:0c:fa:d3:01: fc:a3:35:90:73:f1:e6:ae:15:c9:43:63:a9:be:7e: 17:a9:1c:f1:bb:23:cf:36:5c:e1:aa:84:72:e3:2e: a7:f6:4a:ec:ea:dc:1e:9c:96:9f:00:dd:5a:60:5c: 6b:db:cd:a4:17:f0:c4:0d:89:5d:01:cd:3a:2c:69: dd:fe:0a:28:76:d2:ae:b8:a6:bd:48:43:22:5c:1f: 0b:d7:d6:b7:2c:a7:bc:72:27:66:54:b6:e5:51:a5: 1a:51:df:d5:f9:e8:ac:91:c1:7b:fe:ff:a6:e3:10: 7a:5e:be:d4:d6:a9:6b:23:04:66:e0:ec:70:7d:dd: 00:51:08:3c:3f:fe:9b:12:4c:d1:12:e5:61:80:58: 8c:67:ea:28:76:a3:dc:6e:8e:42:89:7b:4e:6e:6e: 43:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:5A:1E:43:5F:31:17:35:B4:A2:80:45:B7:6D:AB:52:D0:ED:25:12 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/77e90897-d5da-4293-a4d0-8024137bc362.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.60.128.0/17 Signature Algorithm: sha256WithRSAEncryption 39:ff:c5:71:64:d6:ab:78:f7:b0:81:6f:9e:34:1c:6d:ff:58: 90:c8:06:4d:50:f6:02:f0:02:ea:48:be:cf:26:39:c0:7b:52: bb:78:b9:22:64:ae:89:ae:be:3a:6e:42:57:45:14:97:a4:4c: 9c:46:57:4a:ee:ae:ff:b1:d1:89:53:2b:76:5d:d6:22:bd:b7: 5d:d9:de:c3:56:fa:a4:00:0b:1a:a9:53:1b:85:01:c9:05:16: 5c:d6:e3:6a:b3:0a:c3:7a:14:17:27:79:72:6f:1c:4d:23:ba: 19:fc:23:5f:92:74:28:a9:b4:58:25:3f:e2:6f:69:60:4d:c7: 1c:57:8f:fb:d9:4a:ca:41:5d:76:60:f7:0f:ec:e9:0f:71:4b: 44:13:e3:23:9c:c2:58:c1:87:b0:0f:df:63:99:5e:f1:80:68: ba:69:2d:d6:86:bc:f5:59:de:91:11:fb:81:a8:c5:cb:d8:45: c6:10:07:79:a3:ab:93:0e:f7:06:6b:1c:e8:f7:e4:4e:fc:9e: a0:41:80:80:3e:30:0e:c9:a3:ed:7a:f6:65:4f:a2:b3:28:eb: 38:1b:a5:9f:aa:f9:52:08:df:47:ff:12:6c:97:ff:79:89:b8: 4a:03:f5:f5:90:2d:b4:d9:e3:4a:f3:19:b9:5a:37:80:af:bb: 30:25:c4:83 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdUqoEWpIwcUTeaijdsJJq6hfztgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDExMDEwMjQ5WhcNMjUxMTE1MjM1OTU5 WjB6MUkwRwYDVQQFE0BiYTUyYThhNjFjOTI2NGZkZTE2NDFmNjk1YjJmZjVlYjc4 NWY5N2NhZWI2ZDVjMzFkNjdmOGE1Y2Q1NDc5NWYwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC24fhlqhxd+Q2bWVyE3eaaYMuq2Sf51K/2S2sTUHA35JDL Nyy8MsdiSvNQsZWYqkroh6P/HyTzYm+9zWUUwcG8L5J1lPD4ZNskfHlmKVxQ3Ed3 c2VntjE+zRvUHZPCxHIB71VODPrTAfyjNZBz8eauFclDY6m+fhepHPG7I882XOGq hHLjLqf2Suzq3B6clp8A3VpgXGvbzaQX8MQNiV0BzTosad3+Cih20q64pr1IQyJc HwvX1rcsp7xyJ2ZUtuVRpRpR39X56KyRwXv+/6bjEHpevtTWqWsjBGbg7HB93QBR CDw//psSTNES5WGAWIxn6ih2o9xujkKJe05ubkPzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUBVoeQ18xFzW0ooBFt22rUtDtJRIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzc3ZTkwODk3LWQ1ZGEtNDI5My1hNGQwLTgwMjQxMzdiYzM2Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAc0PIAwDQYJKoZIhvcNAQELBQADggEBADn/xXFk1qt497CBb540HG3/WJDI Bk1Q9gLwAupIvs8mOcB7Urt4uSJkromuvjpuQldFFJekTJxGV0rurv+x0YlTK3Zd 1iK9t13Z3sNW+qQACxqpUxuFAckFFlzW42qzCsN6FBcneXJvHE0juhn8I1+SdCip tFglP+JvaWBNxxxXj/vZSspBXXZg9w/s6Q9xS0QT4yOcwljBh7AP32OZXvGAaLpp LdaGvPVZ3pER+4GoxcvYRcYQB3mjq5MO9wZrHOj35E78nqBBgIA+MA7Jo+169mVP orMo6zgbpZ+q+VII30f/EmyX/3mJuEoD9fWQLbTZ40rzGblaN4CvuzAlxIM= -----END CERTIFICATE-----Generated at Fri Oct 17 23:56:44 2025 by rpki-client