$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a5b74fad-4cb7-4971-b978-87635a48a390.roa File: a5b74fad-4cb7-4971-b978-87635a48a390.roa (raw, json) Hash identifier: JMF9TwGPwh3Ov41X0UyclYSGOeGjF/lXiqRl16AjyHw= Subject key identifier: 35:65:0E:B8:5C:21:92:C6:E6:5E:B6:6F:AA:20:FF:68:8F:1D:99:7F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 317B646A27016046E9CBCD524972E7A291A24FAA Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a5b74fad-4cb7-4971-b978-87635a48a390.roa Signing time: Mon 22 Sep 2025 23:46:47 +0000 ROA not before: Mon 22 Sep 2025 23:46:47 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.84.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:7b:64:6a:27:01:60:46:e9:cb:cd:52:49:72:e7:a2:91:a2:4f:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 23:46:47 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=8b62f03748a9129fbb1e959e5f5e4adbe3c469ebb41eb0ae7d9da2984fb05c7a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:1c:b3:71:b5:a6:73:4c:53:53:45:aa:a1:39: d9:69:c7:d4:8c:b0:92:f3:be:7a:2b:5d:c0:b8:80: f2:a1:82:77:50:e9:d0:80:95:d3:51:5d:9e:ba:88: 50:d6:d9:15:0b:e3:62:75:b4:db:46:93:31:08:a3: 9f:88:9a:c9:32:a0:39:22:f2:1d:3e:c8:a1:3e:3d: 7c:5c:21:ab:55:69:76:77:57:33:2c:23:71:a3:6f: 31:43:ba:db:55:9e:32:2d:0d:8d:5f:0f:58:0d:1a: de:03:66:01:55:14:c0:72:ba:ee:ec:1e:6b:5c:b6: 5d:2f:30:c1:15:03:7f:8e:c4:ff:ac:e9:75:0a:a0: 3d:0f:ad:0d:41:c6:85:98:51:94:82:7f:fd:0a:1a: e7:bf:29:a1:5c:b6:de:e8:b6:c6:be:c7:4a:7d:b0: 7f:98:25:9c:07:8d:de:7a:1f:9c:b4:d3:57:d5:68: bc:75:b7:6d:21:b6:77:65:c2:d9:77:dc:cd:5d:a7: f8:ce:f7:79:2d:30:c2:3d:ce:2d:a5:85:1a:1f:08: fb:f3:34:9a:ee:03:e9:b9:18:2a:a9:a3:84:b1:67: 08:bd:c4:04:f9:84:19:79:aa:e5:fe:7c:f0:59:77: 12:dc:09:85:44:e2:23:8f:71:d3:4c:36:dd:3e:8a: 9e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:65:0E:B8:5C:21:92:C6:E6:5E:B6:6F:AA:20:FF:68:8F:1D:99:7F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a5b74fad-4cb7-4971-b978-87635a48a390.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.84.207.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:ba:df:ab:04:77:f4:9d:09:9c:aa:cf:4c:f6:72:37:da:69: e7:4b:8c:03:b9:57:b3:7b:15:68:12:f5:2c:1e:68:65:f3:37: 89:48:00:1d:3f:a2:08:7b:e4:70:83:29:0d:3f:92:cd:95:e7: 5c:84:61:d7:a0:d0:35:c3:1b:d7:b0:5c:e5:5a:fd:34:fc:f8: c8:a2:7a:b9:a7:29:0e:95:aa:74:24:8b:62:05:04:b7:b4:d5: 97:f9:54:d4:56:af:d2:91:41:ce:a3:d1:06:a3:10:dc:c6:93: 04:64:e1:de:70:a2:7e:6c:29:e7:97:6e:bb:dd:1a:ba:3b:d2: 50:37:bf:e0:c4:12:f4:d4:80:be:1a:41:83:53:79:00:7f:b1: 91:fc:fd:3d:e0:cb:28:44:a3:4f:8a:cc:9e:0b:d6:a5:57:da: 8e:1a:42:2f:83:48:31:6a:95:47:e8:a5:5a:2c:01:38:48:72: b3:a3:6a:62:b8:69:2f:e8:53:04:47:4c:a1:62:cf:e5:21:bc: 53:d2:d7:15:9f:35:04:ba:38:98:8f:5d:3e:51:2a:f5:b3:3d: 16:4a:45:04:8c:2b:6f:d2:7d:73:8b:49:34:18:ee:cb:63:1f: 7a:72:a9:08:80:bf:b6:e7:9a:0b:27:21:bb:a0:e4:19:87:8c: de:cd:30:82 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMXtkaicBYEbpy81SSXLnopGiT6owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjM0NjQ3WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A4YjYyZjAzNzQ4YTkxMjlmYmIxZTk1OWU1ZjVlNGFkYmUz YzQ2OWViYjQxZWIwYWU3ZDlkYTI5ODRmYjA1YzdhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCgHLNxtaZzTFNTRaqhOdlpx9SMsJLzvnorXcC4gPKhgndQ 6dCAldNRXZ66iFDW2RUL42J1tNtGkzEIo5+ImskyoDki8h0+yKE+PXxcIatVaXZ3 VzMsI3GjbzFDuttVnjItDY1fD1gNGt4DZgFVFMByuu7sHmtctl0vMMEVA3+OxP+s 6XUKoD0PrQ1BxoWYUZSCf/0KGue/KaFctt7otsa+x0p9sH+YJZwHjd56H5y001fV aLx1t20htndlwtl33M1dp/jO93ktMMI9zi2lhRofCPvzNJruA+m5GCqpo4SxZwi9 xAT5hBl5quX+fPBZdxLcCYVE4iOPcdNMNt0+ip79AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUNWUOuFwhksbmXrZvqiD/aI8dmX8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2E1Yjc0ZmFkLTRjYjctNDk3MS1iOTc4LTg3NjM1YTQ4YTM5MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0VM8wDQYJKoZIhvcNAQELBQADggEBABu636sEd/SdCZyqz0z2cjfaaedL jAO5V7N7FWgS9SweaGXzN4lIAB0/ogh75HCDKQ0/ks2V51yEYdeg0DXDG9ewXOVa /TT8+MiiermnKQ6VqnQki2IFBLe01Zf5VNRWr9KRQc6j0QajENzGkwRk4d5won5s KeeXbrvdGro70lA3v+DEEvTUgL4aQYNTeQB/sZH8/T3gyyhEo0+KzJ4L1qVX2o4a Qi+DSDFqlUfopVosAThIcrOjamK4aS/oUwRHTKFiz+UhvFPS1xWfNQS6OJiPXT5R KvWzPRZKRQSMK2/SfXOLSTQY7stjH3pyqQiAv7bnmgsnIbug5BmHjN7NMII= -----END CERTIFICATE-----Generated at Sat Oct 18 02:17:29 2025 by rpki-client