$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/31ac4a5d-1fd2-4965-a3c4-80c151549a86.roa File: 31ac4a5d-1fd2-4965-a3c4-80c151549a86.roa (raw, json) Hash identifier: xE/4N3LUh3N79mto3yl0z36Qvwofv8QE2Oc9wiPwwGw= Subject key identifier: CC:DC:94:8C:F9:77:5B:9C:19:5C:C0:11:BD:1D:47:B9:64:0E:74:A5 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 109EF51062F6DBF758AD5B32D46ED75228B54D04 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/31ac4a5d-1fd2-4965-a3c4-80c151549a86.roa Signing time: Sun 19 Oct 2025 05:11:29 +0000 ROA not before: Sun 19 Oct 2025 05:11:29 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.85.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:9e:f5:10:62:f6:db:f7:58:ad:5b:32:d4:6e:d7:52:28:b5:4d:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 05:11:29 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=c75e289535d72b904dc644a01bd38460b1a008bc70ac0c4161bf487e72661429, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:04:b4:af:bd:36:a8:7a:32:15:c1:91:04:3b: d1:de:b1:ed:36:a3:e1:0b:55:da:22:22:b0:d8:43: ba:0c:de:b2:f3:bd:f5:70:2e:61:cf:07:cf:ac:a4: cf:03:7f:98:4c:59:6d:86:cc:a8:fa:24:d1:67:2c: 47:78:fc:b9:43:12:83:7a:31:f0:d0:98:29:d8:f6: 98:0d:58:d6:ec:08:0d:24:bd:02:fb:0e:58:62:d9: 91:ca:33:08:36:0e:38:6e:0f:a0:44:c5:b4:c6:6b: c8:72:f3:a3:9b:a3:97:05:9f:d0:c2:6d:92:28:39: ee:0b:94:61:94:a3:9f:0a:a6:a3:a5:b0:1f:80:27: f3:9f:da:b7:82:9a:1a:ac:77:2b:21:f5:d7:20:1d: 53:77:3e:06:c9:96:7e:ba:b7:0f:44:c4:d3:be:71: 31:fa:9b:3d:e6:25:ea:fd:33:98:f8:f2:06:e4:a5: 92:d6:09:d9:f2:36:3c:49:6b:84:9e:32:be:c4:cc: aa:01:fc:0f:62:62:c8:2b:c6:65:46:71:19:03:5f: 77:73:04:e8:a5:a2:52:85:60:47:c2:3c:62:42:53: 9b:28:71:59:b4:29:0c:ea:3f:16:ce:3c:5f:be:96: 3b:c7:0a:d9:37:07:dc:ec:6f:65:7d:41:8d:7f:52: 93:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:DC:94:8C:F9:77:5B:9C:19:5C:C0:11:BD:1D:47:B9:64:0E:74:A5 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/31ac4a5d-1fd2-4965-a3c4-80c151549a86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.85.159.0/24 Signature Algorithm: sha256WithRSAEncryption 90:5c:52:09:a5:ab:f9:ec:33:43:b5:37:8c:89:70:9f:5c:af: da:55:f5:b7:37:3a:34:37:e5:ee:c9:64:dd:4e:db:d0:fa:23: 48:a7:1a:82:fd:94:2e:74:9f:34:61:c7:f4:67:2a:ca:d8:b7: d6:7b:8a:45:35:69:46:96:66:1d:5e:22:0b:f7:87:38:72:ef: e9:34:a3:7b:60:c9:15:91:0b:4c:dd:fe:7f:17:f6:ee:0a:c2: 83:56:6f:a9:9c:2c:bb:0b:4b:1f:44:56:68:02:e1:99:9e:30: 49:93:f1:09:69:af:61:4b:81:e0:4a:45:31:48:6e:3d:57:04: ca:11:b3:ad:da:f4:de:f4:7a:24:29:a7:17:31:35:1d:d7:5c: 15:1e:ce:f8:aa:65:cd:b5:c3:2e:b0:50:be:cc:ef:85:cb:5c: 5f:0b:6b:91:5c:9c:b2:5e:24:39:4f:b5:f9:cc:67:8c:a5:1f: 1d:54:eb:4a:88:a5:e9:85:d1:cf:26:fb:1e:f7:2c:51:9e:8f: 78:85:e8:93:7b:d7:ba:09:52:07:df:53:96:96:28:35:a4:d8: a7:76:5a:69:8a:6d:1e:b3:dd:59:2c:2f:8e:6f:bf:14:57:aa: fe:89:61:b2:b1:66:ce:ab:09:66:50:e8:e6:0c:e6:97:28:bb: a0:26:2f:97 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEJ71EGL22/dYrVsy1G7XUii1TQQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MDUxMTI5WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BjNzVlMjg5NTM1ZDcyYjkwNGRjNjQ0YTAxYmQzODQ2MGIx YTAwOGJjNzBhYzBjNDE2MWJmNDg3ZTcyNjYxNDI5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDYBLSvvTaoejIVwZEEO9Hese02o+ELVdoiIrDYQ7oM3rLz vfVwLmHPB8+spM8Df5hMWW2GzKj6JNFnLEd4/LlDEoN6MfDQmCnY9pgNWNbsCA0k vQL7Dlhi2ZHKMwg2DjhuD6BExbTGa8hy86Obo5cFn9DCbZIoOe4LlGGUo58KpqOl sB+AJ/Of2reCmhqsdysh9dcgHVN3PgbJln66tw9ExNO+cTH6mz3mJer9M5j48gbk pZLWCdnyNjxJa4SeMr7EzKoB/A9iYsgrxmVGcRkDX3dzBOilolKFYEfCPGJCU5so cVm0KQzqPxbOPF++ljvHCtk3B9zsb2V9QY1/UpMtAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUzNyUjPl3W5wZXMARvR1HuWQOdKUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzMxYWM0YTVkLTFmZDItNDk2NS1hM2M0LTgwYzE1MTU0OWE4Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0VZ8wDQYJKoZIhvcNAQELBQADggEBAJBcUgmlq/nsM0O1N4yJcJ9cr9pV 9bc3OjQ35e7JZN1O29D6I0inGoL9lC50nzRhx/RnKsrYt9Z7ikU1aUaWZh1eIgv3 hzhy7+k0o3tgyRWRC0zd/n8X9u4KwoNWb6mcLLsLSx9EVmgC4ZmeMEmT8Qlpr2FL geBKRTFIbj1XBMoRs63a9N70eiQppxcxNR3XXBUezviqZc21wy6wUL7M74XLXF8L a5FcnLJeJDlPtfnMZ4ylHx1U60qIpemF0c8m+x73LFGej3iF6JN717oJUgffU5aW KDWk2Kd2WmmKbR6z3VksL45vvxRXqv6JYbKxZs6rCWZQ6OYM5pcou6AmL5c= -----END CERTIFICATE-----Generated at Mon Oct 20 11:09:55 2025 by rpki-client