$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7f23c04b-8487-4746-b4d3-353f824374f3.roa File: 7f23c04b-8487-4746-b4d3-353f824374f3.roa (raw, json) Hash identifier: SGy3s9YYCjVunVHS6YFNBVrW2yWwteRi3B7GSLiEzi0= Subject key identifier: CF:1A:EE:85:93:AA:A0:2F:02:AA:6B:7C:CD:0C:37:E1:0B:43:B6:7E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 013FFD7408D7A471EF7A310485FA6D6EA4B2A538 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7f23c04b-8487-4746-b4d3-353f824374f3.roa Signing time: Mon 22 Sep 2025 23:58:32 +0000 ROA not before: Mon 22 Sep 2025 23:58:32 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.85.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:3f:fd:74:08:d7:a4:71:ef:7a:31:04:85:fa:6d:6e:a4:b2:a5:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 23:58:32 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=58e64ed2aa298f786b4dc7c192ab0d868fff5107a28e01fee9a9e7fcc253e0d0, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2e:f2:4c:b0:5e:b7:b3:b3:5c:71:2b:6c:14: a3:43:0f:95:6d:19:28:e8:e4:0d:5e:21:a9:f3:41: ae:9c:a3:88:17:5b:45:cf:d5:2f:60:18:05:50:db: 14:d3:27:a3:5e:cd:44:91:be:97:db:87:79:ef:c7: d4:8c:b1:b3:5e:09:f9:12:02:7a:ae:c7:47:5f:78: 45:17:1d:37:6b:7c:e6:a3:48:80:3a:77:fc:0f:45: d0:88:2e:ce:9e:ce:be:4c:b0:8a:42:f3:0f:45:85: d4:e6:49:c5:e3:90:70:34:bb:5b:72:04:90:71:9f: 41:5d:b6:87:1c:19:2e:c6:9c:db:10:b3:76:5b:14: 3f:a9:23:fb:90:81:ef:0b:aa:b0:55:65:8f:d4:36: 42:f0:83:4c:15:4c:4d:3b:da:8f:6f:74:11:77:2b: b3:6c:c3:99:be:90:d6:2b:76:1c:3a:c0:05:f2:9b: 98:31:9d:40:87:63:8c:15:f1:df:dc:56:1c:5d:45: 0d:45:ea:f4:c3:c9:1c:0f:70:eb:24:05:b4:7f:f7: c4:f4:b1:93:a7:21:71:4a:17:c9:35:02:b0:df:f4: f1:81:fc:9f:89:28:5e:16:1b:47:1e:f5:32:3a:f7: 86:cc:53:d4:84:5e:f3:32:f4:6b:3b:4a:da:87:28: de:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:1A:EE:85:93:AA:A0:2F:02:AA:6B:7C:CD:0C:37:E1:0B:43:B6:7E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7f23c04b-8487-4746-b4d3-353f824374f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.85.114.0/24 Signature Algorithm: sha256WithRSAEncryption 20:f2:12:25:c8:4b:3b:9c:bb:c3:9a:97:ed:6c:0e:c2:d3:ed: 2c:92:70:08:33:e9:54:96:d1:cd:35:11:f9:5d:0d:60:3e:3f: 0a:80:11:65:74:e2:06:11:97:ac:6f:a1:8b:0c:eb:23:93:0a: c2:6e:41:e6:52:07:7a:c0:27:cf:aa:c1:40:bd:f2:99:2b:2d: 9b:68:e6:35:d9:f9:7b:dc:b7:73:54:b3:9d:44:ba:66:6d:2e: 35:68:fd:37:18:4d:e6:ff:50:ac:fe:00:c3:54:d4:b1:18:9c: 90:68:8e:d3:6f:44:a8:fd:43:c5:d3:9d:36:16:ea:e6:5d:d9: a2:d4:05:5d:ea:3c:c5:72:33:1b:e9:08:86:8c:91:18:0a:15: 47:d4:28:61:96:c4:90:0a:8a:20:93:f0:e5:4c:f3:52:71:a8: 36:f4:d1:27:85:18:9c:f3:e4:17:5f:dc:5e:2e:58:21:83:b1: 50:cf:29:a1:7a:24:d8:36:86:d8:b6:8c:33:4b:1d:cb:b6:86: 34:a2:11:f4:59:06:14:4a:cb:5c:bc:80:42:c9:82:7f:72:8f: b0:10:52:1c:cd:08:c6:2b:59:c0:86:42:cc:36:61:f3:fc:ad: b6:bd:80:10:8e:8d:97:45:0c:1d:6c:42:19:92:f9:95:62:31: 69:03:8c:ba -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAT/9dAjXpHHvejEEhfptbqSypTgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjM1ODMyWhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A1OGU2NGVkMmFhMjk4Zjc4NmI0ZGM3YzE5MmFiMGQ4Njhm ZmY1MTA3YTI4ZTAxZmVlOWE5ZTdmY2MyNTNlMGQwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDMLvJMsF63s7NccStsFKNDD5VtGSjo5A1eIanzQa6co4gX W0XP1S9gGAVQ2xTTJ6NezUSRvpfbh3nvx9SMsbNeCfkSAnqux0dfeEUXHTdrfOaj SIA6d/wPRdCILs6ezr5MsIpC8w9FhdTmScXjkHA0u1tyBJBxn0FdtoccGS7GnNsQ s3ZbFD+pI/uQge8LqrBVZY/UNkLwg0wVTE072o9vdBF3K7Nsw5m+kNYrdhw6wAXy m5gxnUCHY4wV8d/cVhxdRQ1F6vTDyRwPcOskBbR/98T0sZOnIXFKF8k1ArDf9PGB /J+JKF4WG0ce9TI694bMU9SEXvMy9Gs7StqHKN4NAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUzxruhZOqoC8Cqmt8zQw34QtDtn4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzdmMjNjMDRiLTg0ODctNDc0Ni1iNGQzLTM1M2Y4MjQzNzRmMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0VXIwDQYJKoZIhvcNAQELBQADggEBACDyEiXISzucu8Oal+1sDsLT7SyS cAgz6VSW0c01EfldDWA+PwqAEWV04gYRl6xvoYsM6yOTCsJuQeZSB3rAJ8+qwUC9 8pkrLZto5jXZ+Xvct3NUs51EumZtLjVo/TcYTeb/UKz+AMNU1LEYnJBojtNvRKj9 Q8XTnTYW6uZd2aLUBV3qPMVyMxvpCIaMkRgKFUfUKGGWxJAKiiCT8OVM81JxqDb0 0SeFGJzz5Bdf3F4uWCGDsVDPKaF6JNg2hti2jDNLHcu2hjSiEfRZBhRKy1y8gELJ gn9yj7AQUhzNCMYrWcCGQsw2YfP8rba9gBCOjZdFDB1sQhmS+ZViMWkDjLo= -----END CERTIFICATE-----Generated at Fri Oct 17 22:04:29 2025 by rpki-client