$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/23083bec-0ddc-4a1b-98e2-c71a1f08d4e7.roa File: 23083bec-0ddc-4a1b-98e2-c71a1f08d4e7.roa (raw, json) Hash identifier: ogR+arsBODg8C4JrvNTnmCGXHRPe5HSU2SHjpkZyMEw= Subject key identifier: 6A:CC:73:61:74:9B:2B:E3:55:61:15:E0:C6:3D:87:F2:28:1A:AE:F7 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 26F5C8B941FA5FE4533E5F0DEC51E7F60AF0C879 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/23083bec-0ddc-4a1b-98e2-c71a1f08d4e7.roa Signing time: Sat 18 Oct 2025 18:32:57 +0000 ROA not before: Sat 18 Oct 2025 18:32:57 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.84.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:f5:c8:b9:41:fa:5f:e4:53:3e:5f:0d:ec:51:e7:f6:0a:f0:c8:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 18:32:57 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=9536f414cccc7467a6b835274aa89c7d0d65fcacf75196556640abd4aacee18d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:18:b5:d6:01:81:4a:a3:f8:e0:d0:69:d4:f0: a8:cf:44:7d:11:c4:89:24:58:b0:3e:44:1e:a5:f6: 3e:ce:8e:ba:37:e3:7f:69:95:af:b7:00:37:9b:86: 5b:49:80:f7:74:71:25:81:74:24:e7:dd:24:de:a8: 06:8a:d0:21:30:70:d7:e0:ef:dd:bc:b2:da:f5:88: c8:6d:52:58:e7:25:16:ca:77:16:29:a9:63:41:96: 28:66:0a:91:cd:59:a5:80:74:04:d1:fe:82:de:89: 4d:99:03:ae:ea:b5:b9:d5:06:3a:37:d2:6b:5b:9e: ad:4e:2a:19:08:38:3e:41:cc:0c:c7:20:97:58:3d: b9:74:bb:5a:2d:1e:d0:2a:8b:96:91:ab:7a:db:5f: cf:fa:ec:47:70:ab:16:3f:c7:6f:39:50:8c:e3:d2: 74:89:b9:b8:99:e0:ff:ca:0c:bd:e6:73:47:42:1b: 4a:b0:74:b1:f7:0e:53:4a:81:a7:34:19:62:36:5c: 9e:61:a2:13:87:c8:8a:ad:5f:94:82:f6:9b:ce:72: 28:fc:97:b3:4c:62:22:b9:75:f8:b7:88:f0:36:51: 5c:16:eb:5f:41:60:a0:1d:cc:a3:56:e3:f1:73:0f: 9a:1c:93:70:ca:89:8d:2f:d1:85:1a:c5:6f:35:35: a0:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:CC:73:61:74:9B:2B:E3:55:61:15:E0:C6:3D:87:F2:28:1A:AE:F7 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/23083bec-0ddc-4a1b-98e2-c71a1f08d4e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.84.203.0/24 Signature Algorithm: sha256WithRSAEncryption 85:34:55:b1:ca:57:f4:63:67:22:e1:41:cc:7b:b9:5f:7f:ed: 54:60:d5:b4:05:a7:47:4b:69:3c:fc:58:35:9f:a0:77:8a:27: 01:73:21:b3:6b:29:50:0e:2c:35:8d:21:e0:80:a3:35:c6:eb: c4:fe:2d:ce:ac:a6:19:56:37:95:c5:b2:e8:25:16:74:bf:19: 4a:f2:45:03:84:8a:49:44:a6:52:a4:19:5e:a0:6b:5a:48:de: e8:63:4a:5c:e4:75:a6:88:cc:4f:ab:00:09:f9:5b:2f:08:2c: 87:90:93:5e:07:85:2a:eb:14:8f:0e:9f:78:1c:8a:2f:a9:c3: cb:d8:0e:cb:57:a2:ed:38:ec:e6:42:86:c9:8b:e6:82:d2:63: c8:cb:87:38:9b:d1:04:8b:70:f8:f3:22:99:dc:46:d0:14:b8: a3:1f:19:35:ca:82:9c:77:a4:93:5e:91:80:5c:33:ff:8d:71: d9:6e:36:ef:4e:42:31:fe:c2:1c:c4:0d:0d:5f:3e:41:d1:55: 28:52:96:ad:34:b4:8b:94:3e:7c:68:ee:ca:bc:df:27:58:b2: c6:29:e6:99:48:d5:cc:44:39:a7:88:45:75:ae:40:b2:d3:f7: 69:8b:54:eb:25:c0:77:3f:ca:b9:ee:f8:ce:7c:20:9f:2f:21: d8:71:6a:93 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJvXIuUH6X+RTPl8N7FHn9grwyHkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTgzMjU3WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A5NTM2ZjQxNGNjY2M3NDY3YTZiODM1Mjc0YWE4OWM3ZDBk NjVmY2FjZjc1MTk2NTU2NjQwYWJkNGFhY2VlMThkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrGLXWAYFKo/jg0GnU8KjPRH0RxIkkWLA+RB6l9j7Ojro3 439pla+3ADebhltJgPd0cSWBdCTn3STeqAaK0CEwcNfg7928str1iMhtUljnJRbK dxYpqWNBlihmCpHNWaWAdATR/oLeiU2ZA67qtbnVBjo30mtbnq1OKhkIOD5BzAzH IJdYPbl0u1otHtAqi5aRq3rbX8/67EdwqxY/x285UIzj0nSJubiZ4P/KDL3mc0dC G0qwdLH3DlNKgac0GWI2XJ5hohOHyIqtX5SC9pvOcij8l7NMYiK5dfi3iPA2UVwW 619BYKAdzKNW4/FzD5ock3DKiY0v0YUaxW81NaDvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUasxzYXSbK+NVYRXgxj2H8igarvcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzIzMDgzYmVjLTBkZGMtNGExYi05OGUyLWM3MWExZjA4ZDRlNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0VMswDQYJKoZIhvcNAQELBQADggEBAIU0VbHKV/RjZyLhQcx7uV9/7VRg 1bQFp0dLaTz8WDWfoHeKJwFzIbNrKVAOLDWNIeCAozXG68T+Lc6sphlWN5XFsugl FnS/GUryRQOEiklEplKkGV6ga1pI3uhjSlzkdaaIzE+rAAn5Wy8ILIeQk14HhSrr FI8On3gcii+pw8vYDstXou047OZChsmL5oLSY8jLhzib0QSLcPjzIpncRtAUuKMf GTXKgpx3pJNekYBcM/+NcdluNu9OQjH+whzEDQ1fPkHRVShSlq00tIuUPnxo7sq8 3ydYssYp5plI1cxEOaeIRXWuQLLT92mLVOslwHc/yrnu+M58IJ8vIdhxapM= -----END CERTIFICATE-----Generated at Mon Oct 20 18:12:30 2025 by rpki-client