$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/96e3a332-094b-4279-89b4-6c5501ee7097.roa File: 96e3a332-094b-4279-89b4-6c5501ee7097.roa (raw, json) Hash identifier: iaZZvBlWQ4fty3RrLYEgw309SuFLFyrHl7CJcUIr/gI= Subject key identifier: DA:88:C2:53:48:85:22:1A:4D:F9:DC:B8:DD:6C:66:F2:C7:BD:E0:35 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 38C4AA7AF40A273A7BC61CFD8AA35747FA65A1D9 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/96e3a332-094b-4279-89b4-6c5501ee7097.roa Signing time: Tue 23 Sep 2025 00:15:22 +0000 ROA not before: Tue 23 Sep 2025 00:15:22 +0000 ROA not after: Tue 28 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.84.176.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:c4:aa:7a:f4:0a:27:3a:7b:c6:1c:fd:8a:a3:57:47:fa:65:a1:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 23 00:15:22 2025 GMT Not After : Oct 28 23:59:59 2025 GMT Subject: serialNumber=d06df9dd8c7b5547c5e8301eed6b10246d308ffba0f97a36aba313d8dc9af30a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:62:a2:2e:bc:74:f5:a0:5e:a8:c5:3b:ea:8a: 5c:d5:68:2b:c6:30:bf:39:01:20:a5:e8:a8:d4:07: 40:68:28:4c:76:36:f1:93:d0:aa:f8:1e:3f:17:3a: da:5c:11:c3:3e:0f:28:9f:f4:43:a0:3d:82:33:90: a7:43:98:08:3f:b2:f7:36:a5:fc:cf:7f:c5:62:a9: 23:ef:2f:d2:33:3f:59:7a:f8:79:32:ff:6a:b7:be: f7:d8:a9:f8:d6:40:13:f5:96:23:4b:74:09:54:73: 46:a5:e6:a2:4f:e7:89:ac:8a:00:96:c1:2c:aa:3e: 3b:4d:9c:89:09:f9:9f:75:b4:b1:12:04:27:b7:12: c9:84:df:ba:b1:e0:31:76:f3:47:e9:7d:79:4e:a8: e7:86:64:71:f1:d2:04:85:f2:19:0f:1c:8b:ea:f8: 6b:a9:2a:03:e2:de:7e:d3:93:63:71:75:ab:35:d5: 04:bb:6f:df:33:82:e9:de:a6:1c:e0:ef:79:2d:b7: 9f:8c:48:e3:6a:42:c4:5e:32:cf:9f:0d:b5:10:e3: 6f:19:fc:a2:ed:14:2f:82:81:8c:94:91:c9:64:08: 24:bf:4e:fc:e4:02:36:f7:cc:3d:f8:fd:49:62:86: 08:00:0c:0b:b5:1a:40:7f:a8:27:d4:79:b7:13:fe: 21:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:88:C2:53:48:85:22:1A:4D:F9:DC:B8:DD:6C:66:F2:C7:BD:E0:35 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/96e3a332-094b-4279-89b4-6c5501ee7097.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.84.176.0/23 Signature Algorithm: sha256WithRSAEncryption 2a:05:5c:97:f0:fc:20:d7:61:5d:ea:58:43:28:e5:00:68:9b: d3:82:0d:52:c7:0e:45:35:c4:13:0f:aa:b6:ba:cf:61:d6:0e: aa:15:51:bc:7f:36:a8:f2:db:2e:a8:b7:54:ac:ed:c6:0f:d0: 1a:54:d2:c7:51:24:b4:0d:f9:c0:66:95:ac:11:64:a1:13:3f: 3a:ae:30:d0:24:56:e0:03:d3:a4:d0:dc:91:25:cc:6c:a3:4a: b2:4c:dc:67:43:76:41:a5:22:67:b4:ae:a6:8d:78:9f:90:a9: 46:87:33:d1:4a:f4:55:d6:0c:ee:6e:fb:e3:13:e4:b2:40:0f: 57:3d:78:63:18:2d:ca:06:28:eb:12:8d:70:e0:cf:a1:54:c1: e1:33:f5:ea:b6:c3:d2:3e:5b:00:eb:bf:33:b4:f4:9f:6c:29: 15:fa:c4:b7:c2:03:20:a2:a4:52:65:e0:c6:cf:39:65:ce:49: 37:2c:96:fc:0c:6d:66:44:c2:0f:5a:9e:ee:4b:43:4d:c7:04: 13:0c:4b:6f:dc:96:10:3a:39:a7:28:12:99:a5:8e:f2:fe:97: d1:77:fd:ec:a5:a8:bf:4b:64:1b:0a:1d:31:0d:ee:5a:24:f5: f0:d9:3b:2e:90:83:4c:81:0d:a3:e3:86:92:32:30:db:8c:ac: f8:5a:38:d2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOMSqevQKJzp7xhz9iqNXR/plodkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIzMDAxNTIyWhcNMjUxMDI4MjM1OTU5 WjB6MUkwRwYDVQQFE0BkMDZkZjlkZDhjN2I1NTQ3YzVlODMwMWVlZDZiMTAyNDZk MzA4ZmZiYTBmOTdhMzZhYmEzMTNkOGRjOWFmMzBhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1YqIuvHT1oF6oxTvqilzVaCvGML85ASCl6KjUB0BoKEx2 NvGT0Kr4Hj8XOtpcEcM+Dyif9EOgPYIzkKdDmAg/svc2pfzPf8ViqSPvL9IzP1l6 +Hky/2q3vvfYqfjWQBP1liNLdAlUc0al5qJP54msigCWwSyqPjtNnIkJ+Z91tLES BCe3EsmE37qx4DF280fpfXlOqOeGZHHx0gSF8hkPHIvq+GupKgPi3n7Tk2Nxdas1 1QS7b98zgunephzg73ktt5+MSONqQsReMs+fDbUQ428Z/KLtFC+CgYyUkclkCCS/ TvzkAjb3zD34/UlihggADAu1GkB/qCfUebcT/iEZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU2ojCU0iFIhpN+dy43Wxm8se94DUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzk2ZTNhMzMyLTA5NGItNDI3OS04OWI0LTZjNTUwMWVlNzA5Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE0VLAwDQYJKoZIhvcNAQELBQADggEBACoFXJfw/CDXYV3qWEMo5QBom9OC DVLHDkU1xBMPqra6z2HWDqoVUbx/Nqjy2y6ot1Ss7cYP0BpU0sdRJLQN+cBmlawR ZKETPzquMNAkVuAD06TQ3JElzGyjSrJM3GdDdkGlIme0rqaNeJ+QqUaHM9FK9FXW DO5u++MT5LJAD1c9eGMYLcoGKOsSjXDgz6FUweEz9eq2w9I+WwDrvzO09J9sKRX6 xLfCAyCipFJl4MbPOWXOSTcslvwMbWZEwg9anu5LQ03HBBMMS2/clhA6OacoEpml jvL+l9F3/eylqL9LZBsKHTEN7lok9fDZOy6Qg0yBDaPjhpIyMNuMrPhaONI= -----END CERTIFICATE-----Generated at Fri Oct 17 23:50:30 2025 by rpki-client