$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cecc949f-9618-4e8d-bdfc-f8d755eb1695.roa File: cecc949f-9618-4e8d-bdfc-f8d755eb1695.roa (raw, json) Hash identifier: BVMgFJiVOJ5sUMZpIfdTZjYnX6ngRZS7OrHLmb+Rb0g= Subject key identifier: 42:0C:8E:97:FA:E3:87:0F:B8:0F:3D:1C:4D:0C:54:C2:36:D6:0C:55 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 523A35923087F9A952EADBE558D1CC86F22B31BC Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cecc949f-9618-4e8d-bdfc-f8d755eb1695.roa Signing time: Fri 07 Nov 2025 01:20:10 +0000 ROA not before: Fri 07 Nov 2025 01:20:10 +0000 ROA not after: Fri 12 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.94.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:3a:35:92:30:87:f9:a9:52:ea:db:e5:58:d1:cc:86:f2:2b:31:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Nov 7 01:20:10 2025 GMT Not After : Dec 12 23:59:59 2025 GMT Subject: serialNumber=5dd108d01aa3536ddb9440b807349e498bdc2ea420174956324446f79d11f124, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9c:b2:77:bd:05:21:07:c2:b4:9a:c2:08:c0: 66:3a:ee:42:db:80:56:a1:59:c1:ee:d3:3d:50:40: ea:ce:f9:db:0f:95:34:86:91:4c:af:c2:07:1d:bf: d9:ad:7c:02:b7:6e:7c:c3:61:42:fb:4a:b0:2c:db: 4f:03:48:c2:c6:15:98:55:d9:12:c2:c3:eb:c3:f4: f0:42:75:9f:1f:fb:1f:05:1d:48:d1:56:91:64:48: 9d:81:0c:7e:a3:6f:bc:d2:ca:cd:a6:51:f3:1e:0a: df:5f:75:0d:11:05:5d:d9:fd:66:f3:ed:c1:92:5d: da:3c:62:1a:30:d3:f3:b2:8f:f8:a0:c7:e5:42:e8: 96:01:b9:af:5d:9d:3e:31:91:01:6c:7a:eb:f2:91: 55:f5:b2:9d:de:d9:a1:01:81:da:11:9d:ac:98:5a: 9e:eb:05:c2:5d:cb:24:28:22:4e:2f:ad:e1:07:24: ea:f8:0f:c0:51:cf:f9:69:75:0e:a7:86:25:64:8c: c0:65:cb:ec:b2:a6:2d:ef:15:48:74:7f:85:38:02: 13:41:13:2b:bd:45:32:b1:ac:2b:50:d9:50:de:f4: 3d:f5:a3:8d:b5:22:a3:2d:53:f7:26:41:ff:7a:7e: 89:9f:38:b9:0a:0a:2d:4f:c4:f8:d1:e0:07:54:eb: bb:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:0C:8E:97:FA:E3:87:0F:B8:0F:3D:1C:4D:0C:54:C2:36:D6:0C:55 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cecc949f-9618-4e8d-bdfc-f8d755eb1695.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.94.248.0/22 Signature Algorithm: sha256WithRSAEncryption a2:c8:e1:4a:65:c8:4f:43:91:0b:0c:ee:d0:9a:a6:4c:f1:f9: 42:7e:a6:57:75:82:5d:64:6e:93:1b:90:68:61:2d:19:46:57: 33:6e:cc:ba:3c:e4:72:29:c6:72:64:42:f3:c0:50:9f:b3:98: 95:5b:7a:cf:aa:54:13:a8:02:09:f3:fc:21:e9:27:d1:bb:07: 7c:8a:f2:5d:8f:91:9f:e2:48:92:a4:57:dd:82:3b:de:ab:03: 6a:f8:43:71:8c:9b:d7:74:8e:ae:ff:da:c8:a3:cf:a4:32:50: 6a:e9:64:93:d7:cc:cf:7d:90:c2:d5:90:d1:d8:d5:9a:45:b8: e9:94:74:f2:ed:b9:8a:fe:4b:d6:42:f4:ee:d8:48:ec:9b:42: ba:c7:31:fb:2f:b3:00:ee:e4:a6:f5:a2:8c:58:0b:53:90:fc: 5a:84:af:49:00:8b:e4:cf:a4:56:c9:d2:34:cf:f5:04:6b:bb: 76:0e:b8:f9:d3:84:0e:88:16:4c:78:da:dd:11:f0:92:c2:a1: 6b:cb:20:9b:50:7e:49:80:54:bc:99:b4:0d:78:44:9c:a8:9d: cb:31:f3:c4:22:5e:67:49:55:b3:1a:af:e1:f5:ea:87:9e:ca: 48:56:b1:b1:80:71:73:2d:56:93:13:1e:79:a4:76:3c:e5:06: 4f:73:32:8c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUjo1kjCH+alS6tvlWNHMhvIrMbwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMTA3MDEyMDEwWhcNMjUxMjEyMjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZGQxMDhkMDFhYTM1MzZkZGI5NDQwYjgwNzM0OWU0OThi ZGMyZWE0MjAxNzQ5NTYzMjQ0NDZmNzlkMTFmMTI0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0nLJ3vQUhB8K0msIIwGY67kLbgFahWcHu0z1QQOrO+dsP lTSGkUyvwgcdv9mtfAK3bnzDYUL7SrAs208DSMLGFZhV2RLCw+vD9PBCdZ8f+x8F HUjRVpFkSJ2BDH6jb7zSys2mUfMeCt9fdQ0RBV3Z/Wbz7cGSXdo8Yhow0/Oyj/ig x+VC6JYBua9dnT4xkQFseuvykVX1sp3e2aEBgdoRnayYWp7rBcJdyyQoIk4vreEH JOr4D8BRz/lpdQ6nhiVkjMBly+yypi3vFUh0f4U4AhNBEyu9RTKxrCtQ2VDe9D31 o421IqMtU/cmQf96fomfOLkKCi1PxPjR4AdU67vrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUQgyOl/rjhw+4Dz0cTQxUwjbWDFUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2NlY2M5NDlmLTk2MTgtNGU4ZC1iZGZjLWY4ZDc1NWViMTY5NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI0XvgwDQYJKoZIhvcNAQELBQADggEBAKLI4UplyE9DkQsM7tCapkzx+UJ+ pld1gl1kbpMbkGhhLRlGVzNuzLo85HIpxnJkQvPAUJ+zmJVbes+qVBOoAgnz/CHp J9G7B3yK8l2PkZ/iSJKkV92CO96rA2r4Q3GMm9d0jq7/2sijz6QyUGrpZJPXzM99 kMLVkNHY1ZpFuOmUdPLtuYr+S9ZC9O7YSOybQrrHMfsvswDu5Kb1ooxYC1OQ/FqE r0kAi+TPpFbJ0jTP9QRru3YOuPnThA6IFkx42t0R8JLCoWvLIJtQfkmAVLyZtA14 RJyoncsx88QiXmdJVbMar+H16oeeykhWsbGAcXMtVpMTHnmkdjzlBk9zMow= -----END CERTIFICATE-----Generated at Fri Nov 7 20:21:02 2025 by rpki-client