$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7fe50caf-5af4-4e72-99b5-492a7d6a6090.roa File: 7fe50caf-5af4-4e72-99b5-492a7d6a6090.roa (raw, json) Hash identifier: Piv8BzJReWZZdvqP4RAOp/5kfV1CXNcWFWe9r4aVvao= Subject key identifier: C3:3D:D6:54:70:D9:67:8F:F3:D5:57:1A:43:CA:25:9D:9D:3E:20:D0 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 14538789EA87FA476233E41C0348F5955B479CE9 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7fe50caf-5af4-4e72-99b5-492a7d6a6090.roa Signing time: Mon 22 Sep 2025 23:53:47 +0000 ROA not before: Mon 22 Sep 2025 23:53:47 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.84.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:53:87:89:ea:87:fa:47:62:33:e4:1c:03:48:f5:95:5b:47:9c:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 23:53:47 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=67e47549f4f863bc8198cf8c366e377b472ce2767d7996e4f7b826cd18ee2287, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:7c:0f:f2:f2:8d:81:b0:9a:0d:a2:c4:8d:7e: b5:46:6d:36:ee:b6:63:21:7b:31:52:d9:92:24:5b: 66:72:16:9a:e5:5d:53:a6:af:c0:95:1f:7f:58:4e: 99:48:00:28:8e:bd:ce:72:3e:ff:27:c2:9d:92:16: 28:ae:af:0f:42:7f:75:49:db:23:29:2e:fb:fe:1f: eb:70:25:aa:c8:54:d9:91:80:af:b3:03:b0:51:56: 24:54:f9:a2:64:d5:86:bd:4b:f8:75:d7:8f:72:cd: 38:7a:44:90:ba:4a:61:d8:86:49:f8:7d:29:73:f6: c5:0d:a5:da:27:7f:41:79:6e:ad:72:1f:71:a6:8f: 8e:30:9c:ff:f4:1f:93:ff:15:6a:fd:11:b1:89:8b: 8c:d6:e1:81:19:b2:a4:80:64:d6:a6:09:f7:a0:cb: f8:6b:0f:d4:96:64:65:c4:81:19:cf:5c:e4:a5:1d: bc:13:ca:7a:f2:3c:6e:b4:ac:4f:11:71:22:08:0b: d0:27:f9:36:4d:5a:8d:a4:e8:93:c0:83:c0:64:8a: fe:d6:bf:64:dd:b4:8a:0d:1c:40:dc:c2:59:e4:83: 5c:3a:9e:9b:f7:8f:53:2d:e8:63:29:3e:eb:a6:d9: 40:3c:20:02:bd:31:b7:b2:21:bf:16:27:5a:f0:9f: 40:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:3D:D6:54:70:D9:67:8F:F3:D5:57:1A:43:CA:25:9D:9D:3E:20:D0 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7fe50caf-5af4-4e72-99b5-492a7d6a6090.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.84.26.0/24 Signature Algorithm: sha256WithRSAEncryption ae:e7:76:2b:82:a8:b7:14:85:5a:aa:67:1b:45:4c:b7:5e:10: a7:39:90:a1:cb:d4:79:6b:62:80:25:4a:f0:28:1f:b1:84:bb: 2a:6b:9b:f8:35:13:4d:65:25:fb:33:11:39:42:52:4b:cc:08: 3e:50:32:0c:02:e3:d8:9a:be:9b:4f:25:af:74:7e:f9:d4:40: 1d:d1:ee:17:ee:e8:e5:e2:19:39:b6:3c:fd:43:bc:92:2f:83: 4d:01:79:51:df:cf:23:48:bc:75:3e:5d:b4:5b:13:99:29:a8: 01:a8:e3:fe:87:c4:6f:d3:74:a3:95:15:22:96:02:99:05:72: a7:1f:9d:9f:ed:8d:48:6c:a9:d4:d7:f8:cd:7e:e7:8f:22:65: 26:36:21:4e:b9:3a:b6:50:56:9d:35:6a:3a:6f:31:d6:a9:bc: 48:14:75:c3:af:7b:4a:58:34:0f:47:0b:5a:22:15:42:f8:42: 97:3a:82:43:18:2a:10:28:95:d1:c9:43:a9:c1:d2:34:3a:ca: bd:c5:16:75:df:ae:4f:f6:ab:3c:6c:51:f9:36:87:6f:07:8a: 32:41:85:07:3e:95:2a:bf:30:62:d3:cd:55:7a:ea:14:b4:d7: 9b:a6:ab:4c:51:50:c0:51:83:5f:11:cf:cc:85:ee:c4:c2:01: 51:f2:b8:a5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFFOHieqH+kdiM+QcA0j1lVtHnOkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjM1MzQ3WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A2N2U0NzU0OWY0Zjg2M2JjODE5OGNmOGMzNjZlMzc3YjQ3 MmNlMjc2N2Q3OTk2ZTRmN2I4MjZjZDE4ZWUyMjg3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDZfA/y8o2BsJoNosSNfrVGbTbutmMhezFS2ZIkW2ZyFprl XVOmr8CVH39YTplIACiOvc5yPv8nwp2SFiiurw9Cf3VJ2yMpLvv+H+twJarIVNmR gK+zA7BRViRU+aJk1Ya9S/h1149yzTh6RJC6SmHYhkn4fSlz9sUNpdonf0F5bq1y H3Gmj44wnP/0H5P/FWr9EbGJi4zW4YEZsqSAZNamCfegy/hrD9SWZGXEgRnPXOSl HbwTynryPG60rE8RcSIIC9An+TZNWo2k6JPAg8Bkiv7Wv2TdtIoNHEDcwlnkg1w6 npv3j1Mt6GMpPuum2UA8IAK9MbeyIb8WJ1rwn0ABAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUwz3WVHDZZ4/z1VcaQ8olnZ0+INAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzdmZTUwY2FmLTVhZjQtNGU3Mi05OWI1LTQ5MmE3ZDZhNjA5MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0VBowDQYJKoZIhvcNAQELBQADggEBAK7ndiuCqLcUhVqqZxtFTLdeEKc5 kKHL1HlrYoAlSvAoH7GEuyprm/g1E01lJfszETlCUkvMCD5QMgwC49iavptPJa90 fvnUQB3R7hfu6OXiGTm2PP1DvJIvg00BeVHfzyNIvHU+XbRbE5kpqAGo4/6HxG/T dKOVFSKWApkFcqcfnZ/tjUhsqdTX+M1+548iZSY2IU65OrZQVp01ajpvMdapvEgU dcOve0pYNA9HC1oiFUL4Qpc6gkMYKhAoldHJQ6nB0jQ6yr3FFnXfrk/2qzxsUfk2 h28HijJBhQc+lSq/MGLTzVV66hS015umq0xRUMBRg18Rz8yF7sTCAVHyuKU= -----END CERTIFICATE-----Generated at Fri Oct 17 22:05:43 2025 by rpki-client