$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7c9642f8-716c-4219-8e11-28b00983bfb8.roa File: 7c9642f8-716c-4219-8e11-28b00983bfb8.roa (raw, json) Hash identifier: 9L4mG1skuT9Y+G0VvHcwN7peycUYJHlqitKwR/8TESg= Subject key identifier: 19:A1:8C:9A:7F:EC:A0:7D:19:E6:30:D4:40:1D:DC:50:AE:CF:4C:55 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6C58360ED57CB8A741587277D3B2904AE3381CAF Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7c9642f8-716c-4219-8e11-28b00983bfb8.roa Signing time: Mon 22 Sep 2025 23:58:22 +0000 ROA not before: Mon 22 Sep 2025 23:58:22 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.85.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:58:36:0e:d5:7c:b8:a7:41:58:72:77:d3:b2:90:4a:e3:38:1c:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 23:58:22 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=7e65352e44adbd206def97737da9dd2a25ebc2885bb22fb71f093224b82d38ff, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:a6:09:d5:46:3b:2b:52:c9:41:4f:13:80:b7: 35:e2:7c:6f:b1:e5:44:54:67:62:b3:a2:02:f6:b3: ed:f1:3e:89:eb:e8:c3:22:74:9d:5f:b8:45:a2:fa: 23:4d:05:ba:3a:19:e2:45:29:b3:df:9a:87:34:31: fe:a8:ff:07:27:07:82:6e:02:cb:46:3b:22:5a:97: ff:08:19:4a:6c:78:53:06:71:13:8f:11:69:e0:54: 4e:24:35:2a:b4:e7:96:98:1e:2c:04:ec:ed:f3:f3: d8:69:e4:77:b9:aa:d3:bb:86:da:71:94:5f:36:af: 70:dc:58:0b:87:51:62:37:04:2b:e8:6e:33:11:7e: b6:23:2d:38:ce:1c:0a:e0:ef:f3:d6:93:2e:fb:04: b5:e4:91:e1:08:cd:bd:ff:11:f4:ac:f2:22:d7:7c: ed:30:2e:00:2c:83:74:3e:b9:dc:6d:c6:84:0e:ad: e5:90:18:00:54:dc:0e:ed:b1:f1:12:e0:68:0d:8a: ad:cf:d9:7b:2d:16:44:61:8d:19:6a:8d:5a:ad:df: 23:e2:24:18:24:41:7b:b5:c7:9e:89:a5:2a:98:09: 39:61:dc:d6:f9:41:64:d3:96:3a:8d:e4:ed:e2:ac: 25:35:72:02:a9:1d:4b:e3:e9:b6:71:dc:97:2e:42: ea:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:A1:8C:9A:7F:EC:A0:7D:19:E6:30:D4:40:1D:DC:50:AE:CF:4C:55 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7c9642f8-716c-4219-8e11-28b00983bfb8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.85.104.0/24 Signature Algorithm: sha256WithRSAEncryption 67:e1:4c:7b:f7:f4:f0:4d:94:70:a7:52:be:e0:42:d7:9b:cc: 11:1e:53:dc:b5:ae:38:35:8e:7d:b6:46:56:9b:63:48:d0:e8: b0:a7:5a:78:cd:55:4a:25:05:07:8c:d5:b5:e0:38:ee:37:e8: 5a:3e:4b:c5:82:2b:02:1b:73:dd:3f:7a:8f:22:0b:6c:c6:67: 38:af:37:50:8a:c9:1e:fa:53:44:7f:bf:07:e6:1f:ae:22:c4: c2:f0:ec:8e:d6:df:5a:42:73:df:c4:bd:6f:62:e7:e7:7a:88: 18:ab:60:57:fc:e7:0b:52:69:7d:01:53:23:1d:e7:74:da:8c: 08:29:cb:be:88:05:ba:a7:64:8c:f0:8b:3f:67:ed:85:45:8c: 96:e8:52:60:77:11:83:f9:fa:10:eb:90:fc:28:5e:d3:50:44: b3:1b:02:13:b7:6d:5a:4a:28:af:82:15:4f:38:b6:51:3a:89: 1b:ad:2b:a0:86:d7:e2:1b:6c:46:f3:9f:a9:ea:05:dd:ae:da: c8:60:9a:b2:4e:a6:2e:04:41:92:07:5a:89:57:82:8b:96:08: 61:b5:c3:ca:f4:5f:bd:e2:b8:2e:3a:a8:47:a2:26:b1:9c:0e: e6:61:e7:61:ba:e3:aa:49:c6:9f:cd:aa:b1:0f:f1:88:f8:12: 66:25:c9:f4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbFg2DtV8uKdBWHJ307KQSuM4HK8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjM1ODIyWhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZTY1MzUyZTQ0YWRiZDIwNmRlZjk3NzM3ZGE5ZGQyYTI1 ZWJjMjg4NWJiMjJmYjcxZjA5MzIyNGI4MmQzOGZmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDppgnVRjsrUslBTxOAtzXifG+x5URUZ2KzogL2s+3xPonr 6MMidJ1fuEWi+iNNBbo6GeJFKbPfmoc0Mf6o/wcnB4JuAstGOyJal/8IGUpseFMG cROPEWngVE4kNSq055aYHiwE7O3z89hp5He5qtO7htpxlF82r3DcWAuHUWI3BCvo bjMRfrYjLTjOHArg7/PWky77BLXkkeEIzb3/EfSs8iLXfO0wLgAsg3Q+udxtxoQO reWQGABU3A7tsfES4GgNiq3P2XstFkRhjRlqjVqt3yPiJBgkQXu1x56JpSqYCTlh 3Nb5QWTTljqN5O3irCU1cgKpHUvj6bZx3JcuQurjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUGaGMmn/soH0Z5jDUQB3cUK7PTFUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzdjOTY0MmY4LTcxNmMtNDIxOS04ZTExLTI4YjAwOTgzYmZiOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0VWgwDQYJKoZIhvcNAQELBQADggEBAGfhTHv39PBNlHCnUr7gQtebzBEe U9y1rjg1jn22RlabY0jQ6LCnWnjNVUolBQeM1bXgOO436Fo+S8WCKwIbc90/eo8i C2zGZzivN1CKyR76U0R/vwfmH64ixMLw7I7W31pCc9/EvW9i5+d6iBirYFf85wtS aX0BUyMd53TajAgpy76IBbqnZIzwiz9n7YVFjJboUmB3EYP5+hDrkPwoXtNQRLMb AhO3bVpKKK+CFU84tlE6iRutK6CG1+IbbEbzn6nqBd2u2shgmrJOpi4EQZIHWolX gouWCGG1w8r0X73iuC46qEeiJrGcDuZh52G646pJxp/NqrEP8Yj4EmYlyfQ= -----END CERTIFICATE-----Generated at Fri Oct 17 23:50:19 2025 by rpki-client