$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/930be211-84bc-4690-ad24-5973aacacabf.roa File: 930be211-84bc-4690-ad24-5973aacacabf.roa (raw, json) Hash identifier: UHqMWeYeBE5kLsPT7p+6NuUloZIjGyjS9/Zvu2EIAR4= Subject key identifier: 7F:C9:49:F9:7A:32:E9:4C:35:A7:F9:EE:9B:62:65:82:97:CD:1F:D4 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 46291C48DFF9AA2B99A7E56CB43B91B4FD891BFD Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/930be211-84bc-4690-ad24-5973aacacabf.roa Signing time: Tue 23 Sep 2025 00:23:54 +0000 ROA not before: Tue 23 Sep 2025 00:23:54 +0000 ROA not after: Tue 28 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.85.162.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:29:1c:48:df:f9:aa:2b:99:a7:e5:6c:b4:3b:91:b4:fd:89:1b:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 23 00:23:54 2025 GMT Not After : Oct 28 23:59:59 2025 GMT Subject: serialNumber=aec89f2c4b29c557511cb30067d1f20a1252d205ff7ac6f0c4b99c0dc767ffa5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f2:a9:dc:9e:47:67:6e:de:2d:d5:16:cb:2b: 74:fe:85:ab:48:8c:c3:0f:fb:b6:7c:19:0a:1c:86: 7d:8c:8d:61:72:fe:f5:11:93:e8:28:7a:94:04:de: a3:2a:6e:8a:2e:0f:2c:78:db:fe:4c:d5:ce:db:2e: 6e:ff:12:7c:91:9d:a4:d8:ee:b4:51:dc:d6:ff:a0: f5:a2:b6:dd:47:e1:cb:e8:84:7d:c5:62:1f:3c:f8: e9:89:76:79:91:a4:3c:17:4b:a7:c7:6c:09:37:6c: 3d:95:7f:92:06:3e:67:e5:f8:df:a7:a5:1f:1b:74: 2a:79:95:fc:77:28:a4:29:1d:7b:07:b7:01:de:bd: 8d:6f:4c:ae:ae:03:15:e9:73:ef:dd:d3:14:d6:da: 00:1e:3c:c1:54:20:b2:9a:3e:45:ed:70:44:72:e0: f2:a0:34:3b:ba:45:f7:76:37:44:26:d4:94:97:c8: 53:32:5d:fa:23:43:de:4f:eb:ad:93:be:4f:70:d3: cf:82:66:80:c0:71:c4:a0:55:81:9b:af:50:89:23: f9:f2:ca:1e:e1:9e:64:ee:a2:f9:e7:30:a7:dd:42: 96:8b:c3:2c:2f:cf:fb:bc:ed:06:7f:67:b2:d2:f6: 8c:49:c9:dd:8d:37:41:d0:c6:b3:a4:ff:fb:a5:5a: cb:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:C9:49:F9:7A:32:E9:4C:35:A7:F9:EE:9B:62:65:82:97:CD:1F:D4 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/930be211-84bc-4690-ad24-5973aacacabf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.85.162.0/23 Signature Algorithm: sha256WithRSAEncryption 86:b7:33:b9:71:f9:bb:c2:ee:a1:29:63:09:01:16:97:be:c2: bc:23:40:66:ba:c2:fb:b1:17:6e:4d:06:f4:c5:69:db:57:2c: d8:29:ba:1d:c2:06:ef:f5:c3:68:f6:20:a2:2c:e5:4f:02:06: 56:c1:f2:c4:84:ca:75:d2:b1:0a:b1:c8:4f:5d:a4:ee:3d:39: 4c:0e:93:a9:46:c9:bb:36:3c:47:8c:94:6e:69:57:79:c2:a4: 14:0d:85:c9:c9:9d:7b:43:83:89:c7:0f:b3:cf:2e:e3:d0:68: 42:77:e9:66:94:8e:61:1c:5e:b6:c6:20:f8:f2:b5:43:b5:51: 8f:9c:9c:04:ff:93:42:84:ed:3f:1e:39:02:03:19:11:80:1a: df:9b:e3:88:85:cb:f5:2f:bc:96:09:a6:94:c4:9c:9e:61:37: f8:0c:b6:fe:70:0d:e5:5f:ed:2d:74:db:08:eb:e2:a8:de:76: e6:ad:48:04:59:5c:7e:1f:b1:d2:36:62:7f:7f:dc:c1:11:8d: 61:eb:8a:69:67:e8:22:18:de:75:63:8b:49:fa:e4:6f:4c:da: a9:63:65:b7:d9:3d:b7:cb:40:a8:7b:a2:f9:77:f3:c3:ff:a2: 2e:cf:5a:3c:e1:f7:fe:28:78:5e:4e:90:dc:4d:d3:a1:58:20: 78:31:89:cb -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURikcSN/5qiuZp+VstDuRtP2JG/0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIzMDAyMzU0WhcNMjUxMDI4MjM1OTU5 WjB6MUkwRwYDVQQFE0BhZWM4OWYyYzRiMjljNTU3NTExY2IzMDA2N2QxZjIwYTEy NTJkMjA1ZmY3YWM2ZjBjNGI5OWMwZGM3NjdmZmE1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDG8qncnkdnbt4t1RbLK3T+hatIjMMP+7Z8GQochn2MjWFy /vURk+goepQE3qMqboouDyx42/5M1c7bLm7/EnyRnaTY7rRR3Nb/oPWitt1H4cvo hH3FYh88+OmJdnmRpDwXS6fHbAk3bD2Vf5IGPmfl+N+npR8bdCp5lfx3KKQpHXsH twHevY1vTK6uAxXpc+/d0xTW2gAePMFUILKaPkXtcERy4PKgNDu6Rfd2N0Qm1JSX yFMyXfojQ95P662Tvk9w08+CZoDAccSgVYGbr1CJI/nyyh7hnmTuovnnMKfdQpaL wywvz/u87QZ/Z7LS9oxJyd2NN0HQxrOk//ulWstFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUf8lJ+Xoy6Uw1p/num2JlgpfNH9QwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzkzMGJlMjExLTg0YmMtNDY5MC1hZDI0LTU5NzNhYWNhY2FiZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE0VaIwDQYJKoZIhvcNAQELBQADggEBAIa3M7lx+bvC7qEpYwkBFpe+wrwj QGa6wvuxF25NBvTFadtXLNgpuh3CBu/1w2j2IKIs5U8CBlbB8sSEynXSsQqxyE9d pO49OUwOk6lGybs2PEeMlG5pV3nCpBQNhcnJnXtDg4nHD7PPLuPQaEJ36WaUjmEc XrbGIPjytUO1UY+cnAT/k0KE7T8eOQIDGRGAGt+b44iFy/UvvJYJppTEnJ5hN/gM tv5wDeVf7S102wjr4qjeduatSARZXH4fsdI2Yn9/3MERjWHrimln6CIY3nVji0n6 5G9M2qljZbfZPbfLQKh7ovl388P/oi7PWjzh9/4oeF5OkNxN06FYIHgxics= -----END CERTIFICATE-----Generated at Fri Oct 17 23:54:04 2025 by rpki-client