$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9d3b5607-f43c-43ba-bd4c-7dcac9db1a97.roa File: 9d3b5607-f43c-43ba-bd4c-7dcac9db1a97.roa (raw, json) Hash identifier: 07X25S/fifVROcdKK5lZU2P9u+A4Fqj79bjrnBdqEPg= Subject key identifier: DF:AA:4E:89:B5:2E:80:BD:37:15:7F:14:7D:FC:3E:F1:E7:F9:E0:F5 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 666EA3C5AD7927C2CAEEDED3180CE32091BD27E1 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9d3b5607-f43c-43ba-bd4c-7dcac9db1a97.roa Signing time: Tue 23 Sep 2025 00:23:36 +0000 ROA not before: Tue 23 Sep 2025 00:23:36 +0000 ROA not after: Tue 28 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.85.136.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:6e:a3:c5:ad:79:27:c2:ca:ee:de:d3:18:0c:e3:20:91:bd:27:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 23 00:23:36 2025 GMT Not After : Oct 28 23:59:59 2025 GMT Subject: serialNumber=f8ed87560e588a6a1c3797bb5b563f11a0676f0abbf65797ad3576b624eaeca1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1f:39:8e:1a:42:80:28:28:5f:6f:b2:d3:16: 25:e2:5a:5a:8e:d1:4e:ed:c5:66:22:9c:bd:87:db: 3d:03:99:1b:f0:88:83:bb:0f:4b:ca:31:68:79:22: bd:17:3d:97:52:42:6b:f8:a5:a1:5c:1d:93:19:3e: 76:ff:a5:41:d4:12:b6:48:a7:f0:04:03:a3:bb:13: 62:c0:28:6e:53:d0:01:0f:21:84:e1:92:dd:a7:0e: 24:fe:cd:cb:c7:e1:df:0a:03:69:f8:27:4e:cb:0e: 9e:51:6a:be:38:d1:60:23:bb:bd:25:2f:38:ae:4c: ac:34:aa:58:c5:ea:6d:79:ff:4c:13:c8:bb:93:7e: 62:5d:e7:ea:b2:82:08:c9:26:7a:0c:fa:4b:99:80: 2e:49:f0:14:4a:76:64:4f:19:2d:8d:38:b0:5b:c3: 1f:5d:0d:b2:d1:bf:9f:11:0b:d4:db:a4:d6:82:c3: f2:8c:3b:27:ad:11:76:62:c0:b9:5d:72:fd:29:9b: d5:ac:b8:70:a2:d4:52:0e:23:74:89:f0:6d:7a:2a: 10:37:ee:fc:c2:78:ee:ec:5e:fd:80:bf:99:4f:f2: 21:8f:36:e5:57:ff:de:9a:0e:99:4c:13:c5:d1:60: 0b:c3:ea:93:0e:b9:26:dc:c1:16:2b:a9:46:6f:37: 4d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:AA:4E:89:B5:2E:80:BD:37:15:7F:14:7D:FC:3E:F1:E7:F9:E0:F5 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9d3b5607-f43c-43ba-bd4c-7dcac9db1a97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.85.136.0/23 Signature Algorithm: sha256WithRSAEncryption 86:ee:77:b1:17:3e:3d:b2:0b:3b:cd:e7:63:46:a9:06:e3:ac: 8c:72:98:5b:34:4c:78:0c:73:4e:aa:bb:e5:4d:3c:83:6c:0e: 8e:83:af:5e:69:ac:fe:1a:e8:09:25:2f:96:d6:05:da:f7:fb: 54:1b:b6:35:53:05:8e:27:2d:05:f0:99:ca:64:0c:6f:ec:21: b2:a1:2e:fb:8d:e8:05:f9:88:33:0d:ac:35:3c:0e:f8:bd:b9: 60:8b:21:18:f9:13:c7:a7:21:d6:53:1d:22:61:be:29:4f:b8: 72:c8:eb:bd:1a:66:76:0f:de:7b:da:7a:d6:b8:2a:95:14:e6: 56:e6:bf:f6:7f:f9:fc:59:07:ed:5d:49:6b:df:50:2d:7f:2e: 0c:05:78:63:75:d4:16:d7:bb:fc:a1:10:90:69:4b:ae:5d:f3: ed:f8:cb:47:ee:d5:0f:35:65:99:64:ce:a3:40:11:01:d3:d3: 5d:33:19:69:1c:76:35:23:09:8c:25:a4:36:39:2e:6b:fe:b2: ac:a1:61:93:67:c2:6f:38:02:f4:cb:e0:83:17:44:0a:ee:0b: 60:8a:b9:fa:93:6c:b7:5c:80:56:4e:2a:66:61:74:d4:95:32: 46:66:69:5d:86:fa:96:91:ef:fa:6d:85:d5:cf:20:02:0d:f2: 74:86:c3:29 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZm6jxa15J8LK7t7TGAzjIJG9J+EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIzMDAyMzM2WhcNMjUxMDI4MjM1OTU5 WjB6MUkwRwYDVQQFE0BmOGVkODc1NjBlNTg4YTZhMWMzNzk3YmI1YjU2M2YxMWEw Njc2ZjBhYmJmNjU3OTdhZDM1NzZiNjI0ZWFlY2ExMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8HzmOGkKAKChfb7LTFiXiWlqO0U7txWYinL2H2z0DmRvw iIO7D0vKMWh5Ir0XPZdSQmv4paFcHZMZPnb/pUHUErZIp/AEA6O7E2LAKG5T0AEP IYThkt2nDiT+zcvH4d8KA2n4J07LDp5Rar440WAju70lLziuTKw0qljF6m15/0wT yLuTfmJd5+qyggjJJnoM+kuZgC5J8BRKdmRPGS2NOLBbwx9dDbLRv58RC9TbpNaC w/KMOyetEXZiwLldcv0pm9WsuHCi1FIOI3SJ8G16KhA37vzCeO7sXv2Av5lP8iGP NuVX/96aDplME8XRYAvD6pMOuSbcwRYrqUZvN02RAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU36pOibUugL03FX8Uffw+8ef54PUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzlkM2I1NjA3LWY0M2MtNDNiYS1iZDRjLTdkY2FjOWRiMWE5Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE0VYgwDQYJKoZIhvcNAQELBQADggEBAIbud7EXPj2yCzvN52NGqQbjrIxy mFs0THgMc06qu+VNPINsDo6Dr15prP4a6AklL5bWBdr3+1QbtjVTBY4nLQXwmcpk DG/sIbKhLvuN6AX5iDMNrDU8Dvi9uWCLIRj5E8enIdZTHSJhvilPuHLI670aZnYP 3nvaeta4KpUU5lbmv/Z/+fxZB+1dSWvfUC1/LgwFeGN11BbXu/yhEJBpS65d8+34 y0fu1Q81ZZlkzqNAEQHT010zGWkcdjUjCYwlpDY5Lmv+sqyhYZNnwm84AvTL4IMX RAruC2CKufqTbLdcgFZOKmZhdNSVMkZmaV2G+paR7/pthdXPIAIN8nSGwyk= -----END CERTIFICATE-----Generated at Fri Oct 17 22:03:11 2025 by rpki-client