$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8ec94fe6-911b-426a-997c-9876d00f7300.roa File: 8ec94fe6-911b-426a-997c-9876d00f7300.roa (raw, json) Hash identifier: Yk/yQVovhXa53NLmQ30fRTmtQMZzJlHGZdIw8wUsgGo= Subject key identifier: 5D:81:2F:45:55:95:8C:F2:8C:44:0D:C7:34:70:92:4D:D8:04:E8:1A Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7813C181C87FE684623D8AC55AB31582746EE9DF Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8ec94fe6-911b-426a-997c-9876d00f7300.roa Signing time: Tue 23 Sep 2025 00:02:27 +0000 ROA not before: Tue 23 Sep 2025 00:02:27 +0000 ROA not after: Tue 28 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.85.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:13:c1:81:c8:7f:e6:84:62:3d:8a:c5:5a:b3:15:82:74:6e:e9:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 23 00:02:27 2025 GMT Not After : Oct 28 23:59:59 2025 GMT Subject: serialNumber=5de2b896b9fca7763b903b27cc4a399d060c7c121e999a65264792a7934d570a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:77:f7:12:16:78:ce:82:a8:44:26:ac:34:1f: ac:c6:55:f5:80:29:04:37:6f:fa:2d:87:f8:0d:b6: 2a:65:fd:f7:09:46:c7:00:7a:a4:06:f7:3f:1c:57: 19:57:42:25:45:4c:96:a3:2b:95:73:5e:db:1e:3d: 9f:e6:b4:7e:6b:51:43:17:52:3f:c5:2d:d5:fb:c1: c8:7f:f2:a5:aa:93:87:44:05:eb:07:bf:ac:16:a1: db:58:d0:02:47:3e:b8:0b:cc:22:0c:17:73:db:c7: b6:90:cc:bd:7d:ed:e5:09:d7:6b:9a:e6:fd:37:ca: 56:46:47:ad:a2:32:58:1b:9b:85:ff:80:e4:2e:13: ad:d4:a3:e5:0b:61:19:57:50:71:1f:eb:7d:2b:07: 51:33:e4:35:3a:c7:ae:cf:9f:09:56:a2:df:ca:97: 3a:8a:0f:c5:94:ff:62:7b:57:7c:c3:62:b8:d6:8d: 07:10:10:65:1b:9d:f7:c3:6a:de:9e:9c:c0:a8:76: 74:10:67:49:32:b7:52:aa:91:d2:eb:b1:52:2e:86: 7e:49:0b:60:5d:50:ab:7a:37:7e:ec:2a:d5:45:83: b5:66:c7:d8:50:5a:f8:71:cb:7c:21:5a:88:e0:89: 0f:04:8d:55:8b:c8:57:c7:c6:76:9c:87:89:66:7d: 50:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:81:2F:45:55:95:8C:F2:8C:44:0D:C7:34:70:92:4D:D8:04:E8:1A X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8ec94fe6-911b-426a-997c-9876d00f7300.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.85.162.0/24 Signature Algorithm: sha256WithRSAEncryption 03:9d:6c:7b:61:63:cc:e3:b0:96:a1:3c:7e:58:fa:a6:1a:64: 05:c8:b9:4d:e7:b9:9d:c9:21:99:b2:6f:cf:de:19:f6:91:93: 21:1d:92:99:08:4e:03:10:f2:6e:7b:7b:42:c3:de:a4:79:e5: d6:7b:c7:f5:ec:96:32:ac:12:f3:c4:d6:68:b9:d0:37:98:46: 47:70:2c:44:ad:da:fc:be:55:e5:9d:b8:45:f6:b0:99:6f:60: c5:ea:5d:2e:9c:ec:26:18:d0:df:45:6e:1e:e9:4d:14:93:de: 4b:8f:00:34:cc:40:f5:4c:77:be:4e:61:e4:c3:27:83:93:88: d9:6f:ac:3a:b8:43:04:ee:68:dc:10:66:75:1e:4c:4f:aa:e1: de:54:a5:1c:63:9c:88:1f:19:b1:c7:2d:5e:ab:c7:49:36:29: a0:5d:48:9a:0c:9c:94:c9:96:49:9a:26:9e:4b:9d:eb:83:ab: 37:bd:c9:91:86:a1:7a:14:6f:86:ef:45:7a:ec:0e:19:37:02: 95:aa:d6:9d:bb:53:99:57:c7:b1:a2:cb:05:ff:14:0b:e0:44: ea:97:d1:9a:fa:3c:15:a9:0c:62:78:0f:1b:ba:4e:2a:9c:1b: 18:c5:ef:c4:74:0c:8e:c7:a2:ea:be:2b:0d:af:9d:e2:3e:17: 30:e8:23:b2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUeBPBgch/5oRiPYrFWrMVgnRu6d8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIzMDAwMjI3WhcNMjUxMDI4MjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZGUyYjg5NmI5ZmNhNzc2M2I5MDNiMjdjYzRhMzk5ZDA2 MGM3YzEyMWU5OTlhNjUyNjQ3OTJhNzkzNGQ1NzBhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8d/cSFnjOgqhEJqw0H6zGVfWAKQQ3b/oth/gNtipl/fcJ RscAeqQG9z8cVxlXQiVFTJajK5VzXtsePZ/mtH5rUUMXUj/FLdX7wch/8qWqk4dE BesHv6wWodtY0AJHPrgLzCIMF3Pbx7aQzL197eUJ12ua5v03ylZGR62iMlgbm4X/ gOQuE63Uo+ULYRlXUHEf630rB1Ez5DU6x67PnwlWot/KlzqKD8WU/2J7V3zDYrjW jQcQEGUbnffDat6enMCodnQQZ0kyt1KqkdLrsVIuhn5JC2BdUKt6N37sKtVFg7Vm x9hQWvhxy3whWojgiQ8EjVWLyFfHxnach4lmfVCrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUXYEvRVWVjPKMRA3HNHCSTdgE6BowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzhlYzk0ZmU2LTkxMWItNDI2YS05OTdjLTk4NzZkMDBmNzMwMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0VaIwDQYJKoZIhvcNAQELBQADggEBAAOdbHthY8zjsJahPH5Y+qYaZAXI uU3nuZ3JIZmyb8/eGfaRkyEdkpkITgMQ8m57e0LD3qR55dZ7x/XsljKsEvPE1mi5 0DeYRkdwLESt2vy+VeWduEX2sJlvYMXqXS6c7CYY0N9Fbh7pTRST3kuPADTMQPVM d75OYeTDJ4OTiNlvrDq4QwTuaNwQZnUeTE+q4d5UpRxjnIgfGbHHLV6rx0k2KaBd SJoMnJTJlkmaJp5LneuDqze9yZGGoXoUb4bvRXrsDhk3ApWq1p27U5lXx7GiywX/ FAvgROqX0Zr6PBWpDGJ4Dxu6TiqcGxjF78R0DI7Houq+Kw2vneI+FzDoI7I= -----END CERTIFICATE-----Generated at Fri Oct 17 23:56:33 2025 by rpki-client