$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/224bab75-b1a8-421e-8f75-2be4fda8961e.roa File: 224bab75-b1a8-421e-8f75-2be4fda8961e.roa (raw, json) Hash identifier: 6KXmiZLSz+nONWpFa+wyWIwF425aOqIWpcHT59/YQmg= Subject key identifier: DD:BF:4A:C7:F7:BC:54:E0:2A:98:CA:4A:E9:11:88:82:D9:87:2E:3C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 19F29D6445C41261F21B5E804C1A9B52FBC4AD73 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/224bab75-b1a8-421e-8f75-2be4fda8961e.roa Signing time: Sat 18 Oct 2025 07:01:15 +0000 ROA not before: Sat 18 Oct 2025 07:01:15 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.84.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:f2:9d:64:45:c4:12:61:f2:1b:5e:80:4c:1a:9b:52:fb:c4:ad:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 07:01:15 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=8d2e43d775b8648bc3fdfd2567e875f27f979dfb7c906cf40a35dddfa402aaf1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:55:87:17:03:d2:40:76:29:85:39:15:90:66: 21:b6:f3:d0:e7:27:40:17:be:b2:4e:42:ae:a2:46: 24:16:d8:9e:45:7a:df:aa:9e:6c:c9:e9:66:25:e7: 4e:ed:d2:c4:60:70:01:0d:af:79:fd:23:0e:25:68: 81:3e:9b:e5:7b:7e:97:59:a9:d2:04:ad:87:0e:75: 07:97:bb:a6:a3:f2:0e:02:b6:d8:4a:61:4a:b0:56: f6:33:32:ea:65:88:4f:1b:5f:2f:a8:53:b0:0d:c6: 88:cd:58:ca:95:85:0f:d8:e1:b9:a1:56:1b:de:22: 7c:86:fb:06:21:ed:44:96:40:49:59:d5:00:c8:7a: 0e:48:55:fc:de:34:9f:62:5a:ed:e4:40:26:6b:fc: f6:72:92:d1:fa:ff:e0:4a:3a:d4:5a:13:0b:3e:62: 03:b4:41:02:e3:68:80:5c:cd:8e:05:e9:b2:cb:00: 80:5a:93:02:3a:12:3c:74:5a:40:d1:78:37:32:fc: 93:e8:e4:e3:e5:74:5d:cb:0f:47:3d:3d:fc:84:30: b3:b8:fa:60:42:e6:43:c4:85:6d:62:15:23:80:6a: ae:4b:63:33:be:ce:ee:ce:13:f2:73:dd:0a:a0:2c: d6:09:74:e7:d8:49:ea:cd:3c:8a:d5:80:ec:67:85: f2:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:BF:4A:C7:F7:BC:54:E0:2A:98:CA:4A:E9:11:88:82:D9:87:2E:3C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/224bab75-b1a8-421e-8f75-2be4fda8961e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.84.182.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:a1:c8:1a:b2:2a:45:85:02:72:bd:42:57:68:0e:44:39:19: 51:a1:65:e1:7c:cb:89:e5:c8:27:cc:d6:8c:11:cc:a2:47:48: fe:1f:71:2a:e6:54:42:f0:93:e6:39:51:e7:62:87:c7:4c:67: 32:56:5d:15:b8:00:d6:00:b2:e1:07:ef:ea:83:83:9e:c8:87: 58:5a:54:0d:81:bb:4d:b8:70:16:ab:33:3f:ed:55:0f:10:2c: 7f:84:43:f4:f7:83:0a:49:78:c4:0f:02:bf:2f:3f:6c:56:aa: 00:89:7a:d4:4e:e7:eb:d6:9c:a0:32:5e:5d:9a:6d:1e:e7:53: d5:51:69:d2:1c:8d:e4:28:c0:a6:d0:96:f4:1e:29:93:b2:e9: 34:08:01:26:2c:a3:23:5a:d9:c5:d8:f3:3a:31:0a:b8:3d:07: 24:d2:5f:44:e7:b7:24:85:61:70:10:c0:16:7a:be:28:0b:7a: df:93:10:d0:7f:fa:95:a7:18:0a:58:31:29:ff:8f:45:0b:02: ca:5e:77:c3:1a:42:92:19:09:18:fc:a9:39:08:6d:a7:29:b4: 37:e0:c8:4c:0f:ba:00:03:3f:a0:c0:f7:71:9b:d9:69:45:87: fe:c2:cc:6f:ff:c3:00:e4:e4:a7:e5:cd:25:c5:69:53:70:e7: b4:5f:9d:da -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGfKdZEXEEmHyG16ATBqbUvvErXMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MDcwMTE1WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZDJlNDNkNzc1Yjg2NDhiYzNmZGZkMjU2N2U4NzVmMjdm OTc5ZGZiN2M5MDZjZjQwYTM1ZGRkZmE0MDJhYWYxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpVYcXA9JAdimFORWQZiG289DnJ0AXvrJOQq6iRiQW2J5F et+qnmzJ6WYl507t0sRgcAENr3n9Iw4laIE+m+V7fpdZqdIErYcOdQeXu6aj8g4C tthKYUqwVvYzMupliE8bXy+oU7ANxojNWMqVhQ/Y4bmhVhveInyG+wYh7USWQElZ 1QDIeg5IVfzeNJ9iWu3kQCZr/PZyktH6/+BKOtRaEws+YgO0QQLjaIBczY4F6bLL AIBakwI6Ejx0WkDReDcy/JPo5OPldF3LD0c9PfyEMLO4+mBC5kPEhW1iFSOAaq5L YzO+zu7OE/Jz3QqgLNYJdOfYSerNPIrVgOxnhfJ1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU3b9Kx/e8VOAqmMpK6RGIgtmHLjwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzIyNGJhYjc1LWIxYTgtNDIxZS04Zjc1LTJiZTRmZGE4OTYxZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0VLYwDQYJKoZIhvcNAQELBQADggEBAJ+hyBqyKkWFAnK9QldoDkQ5GVGh ZeF8y4nlyCfM1owRzKJHSP4fcSrmVELwk+Y5Uedih8dMZzJWXRW4ANYAsuEH7+qD g57Ih1haVA2Bu024cBarMz/tVQ8QLH+EQ/T3gwpJeMQPAr8vP2xWqgCJetRO5+vW nKAyXl2abR7nU9VRadIcjeQowKbQlvQeKZOy6TQIASYsoyNa2cXY8zoxCrg9ByTS X0TntySFYXAQwBZ6vigLet+TENB/+pWnGApYMSn/j0ULAsped8MaQpIZCRj8qTkI bacptDfgyEwPugADP6DA93Gb2WlFh/7CzG//wwDk5KflzSXFaVNw57Rfndo= -----END CERTIFICATE-----Generated at Mon Oct 20 06:12:00 2025 by rpki-client