$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1313221c-3518-452b-a944-1ce47a9a9afb.roa File: 1313221c-3518-452b-a944-1ce47a9a9afb.roa (raw, json) Hash identifier: 5V94FxHi5FRTQRiSdq4g8l1gy2hlNmIOHGDXamqP7tw= Subject key identifier: B5:22:DD:2D:A1:47:05:F6:B2:C5:E3:A1:5A:1A:28:C1:90:79:37:24 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 794E14C3CA4B10D45EFE1D1BBB9BBBE17F5340A2 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1313221c-3518-452b-a944-1ce47a9a9afb.roa Signing time: Sun 19 Oct 2025 07:30:22 +0000 ROA not before: Sun 19 Oct 2025 07:30:22 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.85.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:4e:14:c3:ca:4b:10:d4:5e:fe:1d:1b:bb:9b:bb:e1:7f:53:40:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 07:30:22 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=77fb885fa3dc0a764d825e5d5ae10bc15391b4a9b7994235d763a511e2a36cb7, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:4f:b8:76:21:3c:f0:74:52:a5:b8:52:af:f6: 61:e6:5e:80:e7:12:95:15:10:ce:41:2c:0b:e0:50: 8d:4a:eb:4a:b0:0b:74:b7:4e:37:80:01:9e:d8:1f: 18:90:a5:b4:d7:8e:19:9b:16:5d:c9:66:08:ad:4b: 90:c6:c1:ca:32:76:5c:25:17:73:00:68:43:90:1e: a7:54:c1:44:00:03:3a:a0:97:d5:48:93:cf:4d:67: 2f:a8:e3:81:67:37:aa:21:74:16:b9:bc:b3:ac:7b: 21:87:1c:b6:61:47:f4:0b:34:ec:5c:c6:b2:b9:f7: 5f:8a:d6:65:8b:3f:0d:b9:de:48:2b:1a:03:5e:38: 6f:fc:7b:a1:9d:34:79:15:9f:53:cc:f1:21:d1:e6: e6:34:40:8d:73:59:23:6d:ec:be:69:03:7a:fa:be: 1c:4d:8a:43:24:ae:44:89:52:20:e0:b7:0d:64:be: e4:9d:24:bd:e9:6c:6d:68:86:3f:2d:ba:a7:28:40: 19:10:59:8b:0c:8d:e7:3f:b1:d8:4f:34:28:72:eb: dd:2f:71:86:30:3a:c4:79:c2:f4:f7:f3:8d:d7:58: 6d:01:c6:3e:aa:25:7a:95:0a:02:90:b0:62:c1:0e: d1:45:12:76:b9:b5:f9:bc:04:25:32:d5:61:35:a6: d6:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:22:DD:2D:A1:47:05:F6:B2:C5:E3:A1:5A:1A:28:C1:90:79:37:24 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1313221c-3518-452b-a944-1ce47a9a9afb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.85.183.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:c7:ec:14:a5:d4:39:3a:c8:b3:61:c6:6d:25:9b:d2:da:32: ef:4d:9d:ce:2d:fb:16:f7:92:80:d1:0d:d7:79:87:38:e4:38: 54:d8:2f:21:1c:a2:97:c1:d5:8f:bc:54:8a:ab:82:9b:a8:db: 9d:db:76:be:30:ae:a5:e4:9e:93:bd:80:57:2a:fb:02:2b:1a: ea:3f:5b:04:30:32:84:7e:2f:f3:f4:78:ef:21:2c:fd:b3:5d: 47:b7:57:05:aa:22:b8:fb:e7:03:ef:ab:86:17:94:5d:0e:e4: 6b:78:85:7a:67:d8:ac:55:c1:58:34:3d:36:2e:87:59:35:30: c9:fa:ae:7d:bd:18:2f:59:4e:de:7b:4a:dc:02:2d:1f:2a:16: d4:08:75:ad:f1:16:e6:94:8d:15:d2:f5:0c:56:4b:bf:8d:42: ae:69:6d:a4:62:06:22:4d:12:76:29:ab:dc:02:81:ba:63:91: e2:7f:6b:4a:70:0d:c3:18:e5:6b:b0:ec:e6:98:7d:a6:8a:ee: cb:b4:20:75:a1:c4:7b:41:0a:49:0a:f7:b7:6a:9d:8a:1b:4c: c6:13:7e:28:05:0b:9d:0e:c4:a0:59:61:07:5c:e5:3d:18:a4: cb:a9:3b:bc:42:35:b0:77:4f:73:5c:2f:4c:24:6b:45:c7:55: f2:52:cb:84 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUeU4Uw8pLENRe/h0bu5u74X9TQKIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MDczMDIyWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A3N2ZiODg1ZmEzZGMwYTc2NGQ4MjVlNWQ1YWUxMGJjMTUz OTFiNGE5Yjc5OTQyMzVkNzYzYTUxMWUyYTM2Y2I3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDZT7h2ITzwdFKluFKv9mHmXoDnEpUVEM5BLAvgUI1K60qw C3S3TjeAAZ7YHxiQpbTXjhmbFl3JZgitS5DGwcoydlwlF3MAaEOQHqdUwUQAAzqg l9VIk89NZy+o44FnN6ohdBa5vLOseyGHHLZhR/QLNOxcxrK591+K1mWLPw253kgr GgNeOG/8e6GdNHkVn1PM8SHR5uY0QI1zWSNt7L5pA3r6vhxNikMkrkSJUiDgtw1k vuSdJL3pbG1ohj8tuqcoQBkQWYsMjec/sdhPNChy690vcYYwOsR5wvT3843XWG0B xj6qJXqVCgKQsGLBDtFFEna5tfm8BCUy1WE1ptbTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUtSLdLaFHBfayxeOhWhoowZB5NyQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzEzMTMyMjFjLTM1MTgtNDUyYi1hOTQ0LTFjZTQ3YTlhOWFmYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0VbcwDQYJKoZIhvcNAQELBQADggEBAI7H7BSl1Dk6yLNhxm0lm9LaMu9N nc4t+xb3koDRDdd5hzjkOFTYLyEcopfB1Y+8VIqrgpuo253bdr4wrqXknpO9gFcq +wIrGuo/WwQwMoR+L/P0eO8hLP2zXUe3VwWqIrj75wPvq4YXlF0O5Gt4hXpn2KxV wVg0PTYuh1k1MMn6rn29GC9ZTt57StwCLR8qFtQIda3xFuaUjRXS9QxWS7+NQq5p baRiBiJNEnYpq9wCgbpjkeJ/a0pwDcMY5Wuw7OaYfaaK7su0IHWhxHtBCkkK97dq nYobTMYTfigFC50OxKBZYQdc5T0YpMupO7xCNbB3T3NcL0wka0XHVfJSy4Q= -----END CERTIFICATE-----Generated at Mon Oct 20 11:10:30 2025 by rpki-client