$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a4e55434-f055-4193-ada4-b391845ea9b8.roa File: a4e55434-f055-4193-ada4-b391845ea9b8.roa (raw, json) Hash identifier: QuY05chn/deVRMU2K58KSkf3pTpIoT+9o6WYGqSbsIc= Subject key identifier: 4B:AE:AE:B2:BF:D0:54:E2:65:00:6A:7A:F4:40:CB:1C:C8:49:E3:DE Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 754DB739282DB0BEB785D9E4FC04B7AB3EE70167 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a4e55434-f055-4193-ada4-b391845ea9b8.roa Signing time: Tue 23 Sep 2025 00:23:25 +0000 ROA not before: Tue 23 Sep 2025 00:23:25 +0000 ROA not after: Tue 28 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.85.116.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:4d:b7:39:28:2d:b0:be:b7:85:d9:e4:fc:04:b7:ab:3e:e7:01:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 23 00:23:25 2025 GMT Not After : Oct 28 23:59:59 2025 GMT Subject: serialNumber=7f62affb39dbdd7a7d0e3c2c7aef247607aa24c263b05e507321a6a6117ff36a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:82:48:73:36:ba:87:90:e1:bd:b6:92:14:ab: 06:39:9a:e5:0a:ea:10:65:0f:ce:a7:d8:b3:94:c2: 47:ab:cf:9d:af:a4:82:9b:d9:df:ec:43:c1:98:d6: 94:e3:64:9b:6d:69:dd:57:e5:8f:b0:3b:2f:98:79: 3e:15:2f:16:6a:7f:bc:04:3d:15:00:cd:de:73:96: e0:1d:b2:eb:75:1c:f4:cf:c5:a6:e9:ad:e7:20:7c: 9a:0e:f9:9e:88:07:bf:88:5e:a6:51:4b:6b:a5:3d: de:46:a3:05:12:4b:5b:27:4a:22:5d:90:ed:d6:37: 01:13:73:7c:5e:4d:32:53:cb:a1:a7:6d:ec:68:cc: f5:ca:47:9f:fe:e3:c9:64:55:ee:77:d6:da:a3:8b: 29:ad:77:6e:91:1d:5c:96:91:ff:c7:d9:75:11:f3: 54:64:24:5c:66:34:3c:46:29:ac:f0:c8:b0:61:8f: 05:2d:d1:f6:3b:2a:0a:1b:91:0c:bc:af:89:b7:98: de:b3:8d:6a:98:64:b1:cb:96:cc:b3:a1:a1:67:14: 67:2d:69:8e:7f:4f:6b:3a:a4:e7:da:8d:9b:39:3c: 3d:9d:56:48:3e:07:96:e0:73:8d:1d:46:3d:d6:da: 6b:74:7a:45:b1:30:f0:53:04:ac:0e:e2:ba:c1:5e: 14:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:AE:AE:B2:BF:D0:54:E2:65:00:6A:7A:F4:40:CB:1C:C8:49:E3:DE X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a4e55434-f055-4193-ada4-b391845ea9b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.85.116.0/23 Signature Algorithm: sha256WithRSAEncryption 66:f0:76:59:a1:24:d9:8f:a6:81:17:f3:e8:cf:ad:00:cf:a5: cb:76:87:0d:b0:58:92:f4:5e:d4:63:93:4c:de:35:8a:31:14: f7:50:dc:5f:49:63:ec:57:56:45:12:74:32:97:ca:e7:49:60: ce:91:66:b2:d1:23:9c:a4:fa:4c:97:8f:2e:ef:0d:cb:c0:97: 52:98:84:12:fd:81:e7:4b:df:0d:80:ff:ca:5c:01:c3:47:48: 3d:6c:ef:29:12:b7:fe:3b:bc:b8:ba:2e:2b:eb:c7:6f:c7:d7: 3d:4f:46:17:d0:2a:f2:f8:5b:94:7b:94:f7:f1:fe:eb:60:9c: a7:27:20:af:0d:12:42:80:7e:7a:4b:6b:58:b2:a1:9d:d2:fc: 0b:41:58:83:62:32:44:39:44:6c:74:a1:ae:8e:0b:94:f7:79: 09:30:4c:2d:d6:f0:85:19:e3:92:9c:4f:46:b2:69:3b:55:84: 7b:9c:23:0c:e2:93:93:35:2b:fe:d9:fd:16:bf:90:c1:cc:4b: 2c:89:bc:3f:94:e7:c0:85:31:b1:79:b0:fa:81:c9:f9:cb:1f: ed:cf:e9:7b:50:bb:1c:97:3f:19:ad:04:81:ae:0b:b8:f7:71: b7:be:17:0b:72:32:4b:2b:24:75:9a:e9:b5:51:ae:41:4c:4e: 56:dd:d6:67 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdU23OSgtsL63hdnk/AS3qz7nAWcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIzMDAyMzI1WhcNMjUxMDI4MjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZjYyYWZmYjM5ZGJkZDdhN2QwZTNjMmM3YWVmMjQ3NjA3 YWEyNGMyNjNiMDVlNTA3MzIxYTZhNjExN2ZmMzZhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCngkhzNrqHkOG9tpIUqwY5muUK6hBlD86n2LOUwkerz52v pIKb2d/sQ8GY1pTjZJttad1X5Y+wOy+YeT4VLxZqf7wEPRUAzd5zluAdsut1HPTP xabprecgfJoO+Z6IB7+IXqZRS2ulPd5GowUSS1snSiJdkO3WNwETc3xeTTJTy6Gn bexozPXKR5/+48lkVe531tqjiymtd26RHVyWkf/H2XUR81RkJFxmNDxGKazwyLBh jwUt0fY7KgobkQy8r4m3mN6zjWqYZLHLlsyzoaFnFGctaY5/T2s6pOfajZs5PD2d Vkg+B5bgc40dRj3W2mt0ekWxMPBTBKwO4rrBXhR3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUS66usr/QVOJlAGp69EDLHMhJ494wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2E0ZTU1NDM0LWYwNTUtNDE5My1hZGE0LWIzOTE4NDVlYTliOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE0VXQwDQYJKoZIhvcNAQELBQADggEBAGbwdlmhJNmPpoEX8+jPrQDPpct2 hw2wWJL0XtRjk0zeNYoxFPdQ3F9JY+xXVkUSdDKXyudJYM6RZrLRI5yk+kyXjy7v DcvAl1KYhBL9gedL3w2A/8pcAcNHSD1s7ykSt/47vLi6Livrx2/H1z1PRhfQKvL4 W5R7lPfx/utgnKcnIK8NEkKAfnpLa1iyoZ3S/AtBWINiMkQ5RGx0oa6OC5T3eQkw TC3W8IUZ45KcT0ayaTtVhHucIwzik5M1K/7Z/Ra/kMHMSyyJvD+U58CFMbF5sPqB yfnLH+3P6XtQuxyXPxmtBIGuC7j3cbe+FwtyMksrJHWa6bVRrkFMTlbd1mc= -----END CERTIFICATE-----Generated at Fri Oct 17 23:46:24 2025 by rpki-client