$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9c118bab-db8a-4611-b584-7819d69418db.roa File: 9c118bab-db8a-4611-b584-7819d69418db.roa (raw, json) Hash identifier: EYwV73KFSk2xsvz12q/6NpujkOHDOeWG+moA/xizgGg= Subject key identifier: 26:EA:2B:46:8D:61:04:AF:83:EC:E9:44:92:72:24:36:45:36:87:6C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1A5FBF21BFB803A846161471E22BBD85ADE1525D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9c118bab-db8a-4611-b584-7819d69418db.roa Signing time: Tue 23 Sep 2025 00:15:28 +0000 ROA not before: Tue 23 Sep 2025 00:15:28 +0000 ROA not after: Tue 28 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.84.184.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:5f:bf:21:bf:b8:03:a8:46:16:14:71:e2:2b:bd:85:ad:e1:52:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 23 00:15:28 2025 GMT Not After : Oct 28 23:59:59 2025 GMT Subject: serialNumber=e465551dc514240b1fdfc08f38a9c85630771e2354e49ae274c7a53b5d924062, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:02:ec:df:89:4e:3d:bd:68:56:24:20:95:ef: 18:6e:e1:5b:4b:a4:fe:e8:c8:19:af:59:77:54:74: e1:78:25:c1:bf:24:39:e5:cc:1f:11:01:41:07:b6: 05:f5:df:d8:95:7b:cc:3b:3a:04:b1:63:ee:71:12: 3a:d9:19:d4:ad:fa:c9:cb:56:d2:53:dd:3e:36:8d: 59:61:bb:66:20:cf:ea:ee:fb:c0:f9:10:1e:19:93: 23:10:ed:aa:1c:d1:18:52:00:6f:5e:8a:c3:bc:84: b4:8b:e3:c0:91:ed:c9:3a:95:89:ab:4b:a2:e0:1c: 96:45:ef:ee:a4:60:0d:41:da:c9:91:73:30:ea:d8: b0:02:9e:9e:87:b8:8a:38:79:e8:09:72:f0:dc:0b: 5c:b0:b8:20:6c:fc:5a:af:65:dc:0f:fa:78:31:a4: 62:70:0a:55:e0:f0:e1:5a:93:a9:ea:f9:29:ec:97: bc:7a:ea:bf:e3:90:21:87:d6:f1:43:c9:8a:11:c9: 4c:5f:60:53:80:f1:06:0f:63:66:38:d1:eb:44:34: 31:d1:f9:b9:cb:65:34:3e:07:ec:9d:89:c5:18:ad: ce:b3:2f:20:39:95:bf:71:0e:fb:59:e3:d4:9d:d8: 52:96:aa:7e:ed:9e:88:e7:7e:c6:6d:5c:84:ba:72: f9:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:EA:2B:46:8D:61:04:AF:83:EC:E9:44:92:72:24:36:45:36:87:6C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9c118bab-db8a-4611-b584-7819d69418db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.84.184.0/23 Signature Algorithm: sha256WithRSAEncryption 7e:ba:c6:89:3b:7d:c6:56:48:90:00:62:9e:42:f7:08:ed:3c: 25:49:f9:43:bc:2d:cd:48:a2:9f:03:33:90:db:65:b3:59:0c: 6a:9c:69:11:9e:97:e5:10:1b:fa:13:8e:1f:67:49:5c:59:71: 90:88:25:6e:ac:94:18:df:70:05:f2:88:9e:0d:57:e3:6f:52: 1c:24:42:0f:f4:37:01:15:8a:47:2a:75:f1:e7:1b:1a:0f:94: ee:f5:b0:4e:7f:08:e6:68:58:03:b6:24:a1:27:9b:44:9b:f2: 4a:88:a7:be:08:6b:45:53:37:86:ee:54:95:ab:11:15:61:02: 38:32:de:7f:36:e7:4f:80:6f:6a:d5:7b:fa:fd:bd:36:dd:66: 7b:15:4c:5c:56:f2:66:54:75:d9:d9:f9:a3:a9:f2:06:d1:c9: c4:7f:e4:b5:01:8a:56:91:23:66:6a:bb:19:f7:34:d6:47:8f: 26:32:f3:24:2f:42:78:ef:ac:c8:f3:e7:3f:be:4c:80:03:2e: 16:d4:5a:16:6b:df:5f:48:a3:5b:2a:e2:9f:5b:3e:e3:71:3a: a8:16:86:2e:19:a5:08:b8:6b:3e:0e:73:3f:40:98:4b:3b:ab: 7c:b8:40:11:3a:b9:50:25:f6:98:82:cc:ce:00:36:f4:af:9e: 8b:34:df:6b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGl+/Ib+4A6hGFhRx4iu9ha3hUl0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIzMDAxNTI4WhcNMjUxMDI4MjM1OTU5 WjB6MUkwRwYDVQQFE0BlNDY1NTUxZGM1MTQyNDBiMWZkZmMwOGYzOGE5Yzg1NjMw NzcxZTIzNTRlNDlhZTI3NGM3YTUzYjVkOTI0MDYyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCXAuzfiU49vWhWJCCV7xhu4VtLpP7oyBmvWXdUdOF4JcG/ JDnlzB8RAUEHtgX139iVe8w7OgSxY+5xEjrZGdSt+snLVtJT3T42jVlhu2Ygz+ru +8D5EB4ZkyMQ7aoc0RhSAG9eisO8hLSL48CR7ck6lYmrS6LgHJZF7+6kYA1B2smR czDq2LACnp6HuIo4eegJcvDcC1ywuCBs/FqvZdwP+ngxpGJwClXg8OFak6nq+Sns l7x66r/jkCGH1vFDyYoRyUxfYFOA8QYPY2Y40etENDHR+bnLZTQ+B+ydicUYrc6z LyA5lb9xDvtZ49Sd2FKWqn7tnojnfsZtXIS6cvlRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJuorRo1hBK+D7OlEknIkNkU2h2wwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzljMTE4YmFiLWRiOGEtNDYxMS1iNTg0LTc4MTlkNjk0MThkYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE0VLgwDQYJKoZIhvcNAQELBQADggEBAH66xok7fcZWSJAAYp5C9wjtPCVJ +UO8Lc1Iop8DM5DbZbNZDGqcaRGel+UQG/oTjh9nSVxZcZCIJW6slBjfcAXyiJ4N V+NvUhwkQg/0NwEVikcqdfHnGxoPlO71sE5/COZoWAO2JKEnm0Sb8kqIp74Ia0VT N4buVJWrERVhAjgy3n8250+Ab2rVe/r9vTbdZnsVTFxW8mZUddnZ+aOp8gbRycR/ 5LUBilaRI2Zquxn3NNZHjyYy8yQvQnjvrMjz5z++TIADLhbUWhZr319Io1sq4p9b PuNxOqgWhi4ZpQi4az4Ocz9AmEs7q3y4QBE6uVAl9piCzM4ANvSvnos032s= -----END CERTIFICATE-----Generated at Fri Oct 17 22:05:34 2025 by rpki-client