$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1218d181-c755-42cf-8aae-17dafc5ad0fc.roa File: 1218d181-c755-42cf-8aae-17dafc5ad0fc.roa (raw, json) Hash identifier: c4Og7LwIx+vCJCPnO5ASscndyKxVmVY7R/wtExxgz/E= Subject key identifier: 36:17:9B:66:4A:D5:A7:27:3D:94:22:C6:2D:FA:59:F8:7D:11:0E:6A Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 25594AD9D6E00F287F5A258E79C4B716CD47B67D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1218d181-c755-42cf-8aae-17dafc5ad0fc.roa Signing time: Sun 19 Oct 2025 05:41:17 +0000 ROA not before: Sun 19 Oct 2025 05:41:17 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.84.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:59:4a:d9:d6:e0:0f:28:7f:5a:25:8e:79:c4:b7:16:cd:47:b6:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 05:41:17 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=34436f2e5dc9dc7055f34f29f7614c3cc1c34cb914d099e08e97b4361dc909e3, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:91:07:e1:9b:da:a9:86:80:7c:7d:3a:4f:d6: 32:8f:6e:aa:8f:4f:c4:5e:bd:76:00:c2:c5:ae:28: aa:61:df:90:62:d7:1e:ed:24:fa:63:b1:eb:44:04: 88:8d:83:ef:af:a2:7f:76:3c:33:c0:fc:55:2c:f9: af:62:34:06:e5:da:5a:b3:48:f0:8b:cf:ae:48:00: ca:3f:ee:8d:36:af:12:8d:74:e5:37:49:18:0c:2d: a5:34:6a:7f:4b:7c:2e:87:d3:69:34:e0:c1:c8:6f: 14:67:58:41:cc:0c:83:82:b8:aa:f6:f6:44:f5:7e: 69:a5:86:84:63:0d:cf:d1:2f:dc:49:57:54:37:c5: 34:75:56:e8:6a:f5:cb:79:93:9d:40:27:65:f3:f0: 83:28:06:63:18:8d:63:7f:30:11:88:e3:d6:f2:2e: eb:81:1e:8a:50:f4:0f:cd:ee:96:f3:c9:12:1a:5e: d9:c0:9b:e3:92:37:8b:ff:e5:8b:a3:d4:88:2b:c8: 2b:ff:8e:32:83:db:af:e6:39:73:cd:6f:b5:37:22: 21:0c:5a:5c:8c:98:2b:53:4d:ae:e7:8f:fd:a2:8e: 24:38:54:ea:b5:c8:2a:75:5d:87:4c:da:e7:f2:12: 2b:e5:95:24:43:bd:04:fd:bf:bd:8c:ba:5a:61:61: 4a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:17:9B:66:4A:D5:A7:27:3D:94:22:C6:2D:FA:59:F8:7D:11:0E:6A X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1218d181-c755-42cf-8aae-17dafc5ad0fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.84.120.0/23 Signature Algorithm: sha256WithRSAEncryption a5:43:42:c3:1a:87:e4:33:87:ef:4c:e9:b2:c7:f1:14:1f:c3: 12:bd:fb:62:59:27:dc:d5:b5:57:59:c7:8e:f2:76:0d:4d:5d: 4b:66:1b:3f:59:e5:22:3b:0f:c7:2d:10:77:b3:15:d8:c3:5d: 54:ac:aa:cf:1b:1f:3a:46:fd:38:13:98:10:77:26:dd:9b:b3: 9b:46:76:46:ea:32:35:0a:e9:de:e2:1e:9a:6d:f8:fa:77:fd: 28:66:63:ce:2c:68:33:16:dd:cb:75:30:1a:0e:21:de:d7:60: 57:d2:5e:69:31:24:b5:9d:14:ab:b2:f9:89:a4:90:d9:f8:9f: b8:d1:df:65:fa:6c:56:a5:a0:28:74:ad:34:bd:53:59:da:a1: 98:b1:69:03:48:e9:57:4d:cb:f8:0e:ec:9e:76:da:f3:dd:bf: 43:67:d1:a3:64:c7:3b:2d:d8:d1:01:ab:ab:19:8a:97:26:0f: d7:16:09:4b:f0:f7:59:23:1c:2a:16:70:38:af:27:f8:a8:f9: 6c:a3:01:4c:e5:b9:54:5d:83:24:60:11:85:e5:c7:72:e1:97: 02:09:4d:db:8e:92:ca:c1:20:20:ae:99:4e:b4:0c:04:55:0e: 41:cd:29:8d:09:f5:2d:4c:40:1f:25:e2:bb:cd:18:00:41:e6: 3f:9e:63:63 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJVlK2dbgDyh/WiWOecS3Fs1Htn0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MDU0MTE3WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AzNDQzNmYyZTVkYzlkYzcwNTVmMzRmMjlmNzYxNGMzY2Mx YzM0Y2I5MTRkMDk5ZTA4ZTk3YjQzNjFkYzkwOWUzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtkQfhm9qphoB8fTpP1jKPbqqPT8RevXYAwsWuKKph35Bi 1x7tJPpjsetEBIiNg++von92PDPA/FUs+a9iNAbl2lqzSPCLz65IAMo/7o02rxKN dOU3SRgMLaU0an9LfC6H02k04MHIbxRnWEHMDIOCuKr29kT1fmmlhoRjDc/RL9xJ V1Q3xTR1Vuhq9ct5k51AJ2Xz8IMoBmMYjWN/MBGI49byLuuBHopQ9A/N7pbzyRIa XtnAm+OSN4v/5Yuj1IgryCv/jjKD26/mOXPNb7U3IiEMWlyMmCtTTa7nj/2ijiQ4 VOq1yCp1XYdM2ufyEivllSRDvQT9v72MulphYUqzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUNhebZkrVpyc9lCLGLfpZ+H0RDmowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzEyMThkMTgxLWM3NTUtNDJjZi04YWFlLTE3ZGFmYzVhZDBmYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE0VHgwDQYJKoZIhvcNAQELBQADggEBAKVDQsMah+Qzh+9M6bLH8RQfwxK9 +2JZJ9zVtVdZx47ydg1NXUtmGz9Z5SI7D8ctEHezFdjDXVSsqs8bHzpG/TgTmBB3 Jt2bs5tGdkbqMjUK6d7iHppt+Pp3/ShmY84saDMW3ct1MBoOId7XYFfSXmkxJLWd FKuy+YmkkNn4n7jR32X6bFaloCh0rTS9U1naoZixaQNI6VdNy/gO7J522vPdv0Nn 0aNkxzst2NEBq6sZipcmD9cWCUvw91kjHCoWcDivJ/io+WyjAUzluVRdgyRgEYXl x3LhlwIJTduOksrBICCumU60DARVDkHNKY0J9S1MQB8l4rvNGABB5j+eY2M= -----END CERTIFICATE-----Generated at Mon Oct 20 03:11:28 2025 by rpki-client