$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/13879ff8-b61e-427a-950e-6512a72ea2ec.roa File: 13879ff8-b61e-427a-950e-6512a72ea2ec.roa (raw, json) Hash identifier: 4aa3uVxAGA66tux0Tvt3w0UFC+hYQHnhK2foY6Ej7GE= Subject key identifier: 0F:A0:00:C0:E2:12:A7:49:03:25:D4:FA:DD:25:13:A1:3F:FD:27:85 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 56D7E1D39714CEE811C5233A4009E80B97312BB4 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/13879ff8-b61e-427a-950e-6512a72ea2ec.roa Signing time: Sat 18 Oct 2025 14:51:18 +0000 ROA not before: Sat 18 Oct 2025 14:51:18 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.46.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:d7:e1:d3:97:14:ce:e8:11:c5:23:3a:40:09:e8:0b:97:31:2b:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 14:51:18 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=ca9ec371e9177069c1ae396a201bb69e158775e1925d5c23a05e68f29b8279e9, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d5:d0:c5:37:b6:99:1f:61:15:ea:4f:10:df: 81:b0:cd:09:65:e0:16:eb:ac:95:f9:6d:62:33:f9: b0:b7:7c:07:72:5a:e6:bb:a0:02:55:4f:83:8c:8b: d6:49:f5:78:2d:ed:e2:88:b8:32:13:44:5d:fa:ef: dd:b6:a7:8a:47:45:48:0c:0d:c7:25:8c:05:ac:d8: b7:de:0d:f5:c9:12:42:7c:c2:3b:1b:71:94:b7:14: a6:9f:33:3f:86:05:0a:12:77:53:2e:50:7a:0b:ab: bd:6d:e0:32:2e:c8:ec:ad:16:cd:05:9f:4e:af:9a: 86:47:1d:a9:8d:ab:0d:36:6e:8e:51:62:26:20:63: c0:f5:21:8f:a2:b2:26:9a:bf:19:c1:63:9d:51:50: 10:bb:6e:7f:6d:2f:28:5b:a7:34:ca:bf:58:94:e1: 18:20:66:d8:1a:78:5b:ae:cd:f4:3a:de:cc:bf:08: c6:7c:5c:97:05:0a:bc:c9:5d:ae:1b:d7:18:e8:cc: 98:cf:c4:62:cd:66:61:76:d9:19:41:4e:e1:d1:bd: e4:ed:b9:85:a5:b8:8f:d5:90:9a:c6:0b:02:14:bc: 96:23:a0:f9:94:c9:0b:84:48:25:8a:ab:21:52:5a: af:ae:02:78:e6:57:a7:57:b4:d7:66:5a:d3:5d:5a: 89:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:A0:00:C0:E2:12:A7:49:03:25:D4:FA:DD:25:13:A1:3F:FD:27:85 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/13879ff8-b61e-427a-950e-6512a72ea2ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.46.51.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:d7:23:06:32:ce:f4:ed:d4:d7:71:ab:38:46:29:7c:84:35: 34:57:e5:db:2b:80:f5:df:a4:82:fa:f5:6b:c7:92:3a:ce:cf: 86:d9:ba:71:69:b2:9d:3e:32:4a:8a:35:df:44:27:8b:77:40: f1:eb:73:cd:fa:a6:80:99:ba:2d:e6:ae:98:fb:cd:00:c3:83: d8:53:3a:64:41:fc:c3:cc:ae:dd:83:69:2a:0a:dd:4b:e4:e9: 51:a1:55:17:53:13:ec:ac:af:89:91:30:16:5b:b5:5d:16:c0: 22:bd:74:c2:84:94:a6:19:0b:fa:67:93:f8:de:a6:4a:70:4f: 1e:a1:18:ef:d1:3d:44:df:8e:80:22:df:4a:22:89:c9:ff:14: 1f:49:f0:17:85:8d:ca:88:1f:ce:af:bf:32:5c:7a:66:55:a8: 57:46:f3:45:6e:63:91:fd:9b:d2:d5:38:e7:b4:b8:9b:9b:63: e8:75:23:1b:05:fe:ca:0d:11:6f:d8:1d:9f:04:57:40:f2:3d: 3f:ed:68:72:f4:99:08:08:a9:e1:eb:18:4e:d8:25:19:cd:ca: 7d:87:c3:44:b4:b1:69:04:f5:0f:8c:69:5e:79:47:9e:f7:94: ef:14:2e:d4:57:1b:4b:89:be:9a:66:92:90:3f:dc:e5:a3:92: 74:12:77:11 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVtfh05cUzugRxSM6QAnoC5cxK7QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTQ1MTE4WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BjYTllYzM3MWU5MTc3MDY5YzFhZTM5NmEyMDFiYjY5ZTE1 ODc3NWUxOTI1ZDVjMjNhMDVlNjhmMjliODI3OWU5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDB1dDFN7aZH2EV6k8Q34GwzQll4BbrrJX5bWIz+bC3fAdy Wua7oAJVT4OMi9ZJ9Xgt7eKIuDITRF367922p4pHRUgMDccljAWs2LfeDfXJEkJ8 wjsbcZS3FKafMz+GBQoSd1MuUHoLq71t4DIuyOytFs0Fn06vmoZHHamNqw02bo5R YiYgY8D1IY+isiaavxnBY51RUBC7bn9tLyhbpzTKv1iU4RggZtgaeFuuzfQ63sy/ CMZ8XJcFCrzJXa4b1xjozJjPxGLNZmF22RlBTuHRveTtuYWluI/VkJrGCwIUvJYj oPmUyQuESCWKqyFSWq+uAnjmV6dXtNdmWtNdWoklAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUD6AAwOISp0kDJdT63SUToT/9J4UwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzEzODc5ZmY4LWI2MWUtNDI3YS05NTBlLTY1MTJhNzJlYTJlYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0LjMwDQYJKoZIhvcNAQELBQADggEBAH7XIwYyzvTt1NdxqzhGKXyENTRX 5dsrgPXfpIL69WvHkjrOz4bZunFpsp0+MkqKNd9EJ4t3QPHrc836poCZui3mrpj7 zQDDg9hTOmRB/MPMrt2DaSoK3Uvk6VGhVRdTE+ysr4mRMBZbtV0WwCK9dMKElKYZ C/pnk/jepkpwTx6hGO/RPUTfjoAi30oiicn/FB9J8BeFjcqIH86vvzJcemZVqFdG 80VuY5H9m9LVOOe0uJubY+h1IxsF/soNEW/YHZ8EV0DyPT/taHL0mQgIqeHrGE7Y JRnNyn2Hw0S0sWkE9Q+MaV55R573lO8ULtRXG0uJvppmkpA/3OWjknQSdxE= -----END CERTIFICATE-----Generated at Mon Oct 20 08:29:38 2025 by rpki-client