$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c98041a2-3ce3-4ab6-8d66-948896bb00b0.roa File: c98041a2-3ce3-4ab6-8d66-948896bb00b0.roa (raw, json) Hash identifier: sOhBmW5nQ2lIv5feZIF/Px4+WYzP48W6UHalE+muqU4= Subject key identifier: DF:D5:28:4A:65:6C:F6:9D:85:A5:1E:F7:A8:52:FD:5C:30:27:81:C8 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4BB7CA96C63B64EA3148FB506B7DBDEA6397EA4E Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c98041a2-3ce3-4ab6-8d66-948896bb00b0.roa Signing time: Tue 04 Nov 2025 02:11:14 +0000 ROA not before: Tue 04 Nov 2025 02:11:14 +0000 ROA not after: Tue 09 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.20.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:b7:ca:96:c6:3b:64:ea:31:48:fb:50:6b:7d:bd:ea:63:97:ea:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Nov 4 02:11:14 2025 GMT Not After : Dec 9 23:59:59 2025 GMT Subject: serialNumber=006c1160be7254f6c351ddf8c2cd8e1ed9b74b60949c1f82e30172715882a228, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:9e:26:de:81:5a:bc:bc:06:49:4c:cd:8c:fc: ff:1f:72:20:1b:54:e9:f7:7e:9e:53:b7:2d:b6:6d: 02:ce:8a:cd:93:cb:06:71:33:16:21:ab:b8:d2:ca: 39:61:27:d5:d4:02:69:12:10:71:47:3d:98:33:b6: 47:4a:43:ad:e4:28:d2:f7:2b:9e:79:d9:40:95:99: 24:e7:52:e3:8f:28:c2:f7:82:db:e1:77:9b:c5:d0: ca:a1:18:35:de:9f:0e:44:35:f1:01:97:5f:de:ec: 4b:ef:34:4c:f7:79:a7:94:e6:ef:04:cc:46:2d:c8: dc:25:e3:4c:23:29:98:30:93:63:12:1e:9e:e9:2f: 52:76:5f:3e:5d:ae:30:c8:b3:e4:01:9b:6e:2a:ce: e7:06:bd:99:ec:a4:57:82:2c:3a:94:5f:e1:85:2c: ec:19:7e:4d:88:9b:7e:e5:91:e6:c4:31:d4:2e:76: bd:12:6b:f8:65:72:04:82:8d:a9:14:83:e0:7f:2a: c6:0a:a6:b7:d2:45:86:2d:3c:44:68:7f:d6:18:dd: ae:9d:81:28:b2:e8:1f:a1:e4:5e:69:ad:c5:15:c6: 75:90:85:d4:72:37:fe:c4:fe:e0:8c:f1:94:b4:7f: 8e:77:bc:6b:f7:d8:81:19:c4:03:26:44:4b:68:30: ef:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:D5:28:4A:65:6C:F6:9D:85:A5:1E:F7:A8:52:FD:5C:30:27:81:C8 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c98041a2-3ce3-4ab6-8d66-948896bb00b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.20.0.0/14 Signature Algorithm: sha256WithRSAEncryption 5d:61:cb:69:46:e9:b1:21:33:b0:72:fc:c0:5c:24:be:2a:8a: eb:c8:6a:4a:dc:7d:55:5c:1a:65:31:76:43:f8:b2:29:ba:32: cb:bc:dc:16:f0:59:96:06:f9:bf:54:09:0e:56:30:ec:91:13: 8a:88:33:95:b2:2a:be:1f:ee:78:56:37:a3:29:ad:49:c6:e8: bf:0f:5e:f1:0b:69:d7:c0:3d:34:5a:bd:c6:2f:bc:65:4e:a3: 8e:58:b0:3a:5d:d3:c7:f0:85:0b:bf:10:3c:de:0b:01:f5:72: 32:da:6b:aa:14:8b:c7:b7:d8:da:4f:53:14:3f:0c:a3:74:ac: f3:c6:33:3a:e8:15:f9:ee:69:49:19:4d:99:55:05:7c:c2:7a: 37:96:22:b5:2d:a7:67:fc:09:4b:f2:72:7c:57:c4:67:20:60: 55:16:21:9b:8f:b1:c4:7b:30:a8:02:6e:58:e7:df:0f:2d:38: 1e:30:50:07:0b:10:1c:9b:a1:00:03:ca:f6:6c:aa:3c:69:de: 28:b5:3d:f6:a1:f9:f1:5b:df:2a:33:09:8f:36:4f:b5:e5:20: e4:8e:ae:d0:f5:da:fb:67:cf:ca:93:29:02:69:e8:88:2d:a1: 47:ba:9d:1f:3a:7e:9e:de:75:be:39:08:cf:ad:d9:32:6e:38: 6d:49:02:42 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUS7fKlsY7ZOoxSPtQa3296mOX6k4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMTA0MDIxMTE0WhcNMjUxMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AwMDZjMTE2MGJlNzI1NGY2YzM1MWRkZjhjMmNkOGUxZWQ5 Yjc0YjYwOTQ5YzFmODJlMzAxNzI3MTU4ODJhMjI4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDrnibegVq8vAZJTM2M/P8fciAbVOn3fp5Tty22bQLOis2T ywZxMxYhq7jSyjlhJ9XUAmkSEHFHPZgztkdKQ63kKNL3K5552UCVmSTnUuOPKML3 gtvhd5vF0MqhGDXenw5ENfEBl1/e7EvvNEz3eaeU5u8EzEYtyNwl40wjKZgwk2MS Hp7pL1J2Xz5drjDIs+QBm24qzucGvZnspFeCLDqUX+GFLOwZfk2Im37lkebEMdQu dr0Sa/hlcgSCjakUg+B/KsYKprfSRYYtPERof9YY3a6dgSiy6B+h5F5prcUVxnWQ hdRyN/7E/uCM8ZS0f453vGv32IEZxAMmREtoMO+JAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU39UoSmVs9p2FpR73qFL9XDAngcgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2M5ODA0MWEyLTNjZTMtNGFiNi04ZDY2LTk0ODg5NmJiMDBiMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwI0FDANBgkqhkiG9w0BAQsFAAOCAQEAXWHLaUbpsSEzsHL8wFwkviqK68hq Stx9VVwaZTF2Q/iyKboyy7zcFvBZlgb5v1QJDlYw7JETiogzlbIqvh/ueFY3oymt Scbovw9e8Qtp18A9NFq9xi+8ZU6jjliwOl3Tx/CFC78QPN4LAfVyMtprqhSLx7fY 2k9TFD8Mo3Ss88YzOugV+e5pSRlNmVUFfMJ6N5YitS2nZ/wJS/JyfFfEZyBgVRYh m4+xxHswqAJuWOffDy04HjBQBwsQHJuhAAPK9myqPGneKLU99qH58VvfKjMJjzZP teUg5I6u0PXa+2fPypMpAmnoiC2hR7qdHzp+nt51vjkIz63ZMm44bUkCQg== -----END CERTIFICATE-----Generated at Fri Nov 7 20:17:31 2025 by rpki-client