$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/42dd78df-c0bb-45b9-b9c6-78d8e779c655.roa File: 42dd78df-c0bb-45b9-b9c6-78d8e779c655.roa (raw, json) Hash identifier: eOokIuIba0Gs9MibKRdN/NOIwxZlHmnS5De0ShsQ2Ic= Subject key identifier: C5:19:8C:DD:69:AB:2D:C1:84:AC:AC:11:1E:9A:A1:56:B0:E1:43:EA Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 50B17C2D59B6A709329CD46D37EA9F49B68951A8 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/42dd78df-c0bb-45b9-b9c6-78d8e779c655.roa Signing time: Sun 19 Oct 2025 05:31:42 +0000 ROA not before: Sun 19 Oct 2025 05:31:42 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.84.216.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:b1:7c:2d:59:b6:a7:09:32:9c:d4:6d:37:ea:9f:49:b6:89:51:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 05:31:42 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=fefa799cbabeedb2108923205036ac877621d64d651330f9df761ea2cab3093f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0a:80:d4:06:6b:bd:4b:ed:7d:24:e3:79:f9: 6b:2f:20:e5:b9:52:02:58:95:53:99:aa:aa:ba:69: ae:cd:50:a7:20:15:41:8c:4e:0a:ea:b8:5f:a5:57: 91:87:de:a6:b4:5b:f0:b5:5b:b4:27:32:43:ba:73: 47:61:45:2e:4f:44:8b:90:74:6b:76:cd:dc:a3:e3: 6c:3e:47:2e:ce:c5:d0:15:b5:5e:d6:60:87:d0:8b: 77:9d:3e:53:51:f4:95:da:38:79:8a:16:dc:ab:f8: 29:a3:28:10:54:0a:15:a2:47:60:58:59:80:e9:d5: 55:cc:b3:68:67:e8:56:61:6a:d7:ee:e8:61:e0:6a: 6d:ba:93:e4:08:37:c8:2e:e1:2a:b8:92:1f:8b:fd: 89:d2:d5:f0:86:d7:e9:f7:64:fb:46:74:93:33:69: cf:cd:4d:2d:5f:10:bc:c0:1e:41:20:77:82:80:3c: ed:1d:f6:02:6e:fd:32:1a:21:d4:c3:3b:5b:bb:db: 10:da:1d:d3:f9:7d:a2:38:dd:cc:70:1a:a0:fa:57: a9:e1:be:ad:a0:42:d8:50:ad:d1:43:57:3d:84:36: 73:3e:99:ef:73:59:45:a2:de:01:27:d6:e7:93:ec: 94:c3:34:12:f2:34:a4:46:df:9b:18:fc:db:05:06: 89:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:19:8C:DD:69:AB:2D:C1:84:AC:AC:11:1E:9A:A1:56:B0:E1:43:EA X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/42dd78df-c0bb-45b9-b9c6-78d8e779c655.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.84.216.0/23 Signature Algorithm: sha256WithRSAEncryption a0:dd:e6:73:ac:5c:68:dd:7a:93:27:e5:8f:aa:16:3e:6e:6a: db:a6:40:99:76:2e:84:24:62:f1:7b:05:1b:df:d1:e8:14:bd: a4:a0:77:d6:79:8b:49:e6:a1:f7:c6:4f:62:cb:37:b2:9b:89: 9f:53:a1:81:a2:73:84:a0:c3:53:ce:5d:1f:37:59:fc:fc:59: 81:ad:e3:11:fa:e0:b8:c3:0b:71:8c:c4:5d:34:31:91:4a:6f: 84:4b:a1:d5:20:e2:6e:cc:d3:89:d1:99:a9:40:fd:a1:2f:26: 4c:d9:a7:62:75:60:50:0c:0b:fc:0c:1d:70:a6:52:17:7d:d6: b5:65:77:02:6a:57:ee:88:1c:28:34:b6:27:19:d4:d0:d6:0d: 19:10:b5:d6:3f:8b:b3:50:2e:90:4b:a6:9e:31:9e:af:a7:05: 58:21:8b:ac:a5:9c:d0:f5:58:1d:9d:e6:27:01:93:01:d3:e7: 28:d6:ae:df:8a:f5:f1:94:55:50:f6:df:3f:98:62:7e:27:0c: 20:4e:14:2d:4b:19:09:35:9a:b9:92:f0:96:d1:eb:09:7d:64: 08:05:ff:06:cf:4e:6d:1d:dd:aa:58:f0:e5:3a:8c:1f:fd:e8: 38:59:18:88:6f:70:b3:c7:23:45:19:9a:e2:f3:bf:95:13:53: 2b:b5:54:fa -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUULF8LVm2pwkynNRtN+qfSbaJUagwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MDUzMTQyWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BmZWZhNzk5Y2JhYmVlZGIyMTA4OTIzMjA1MDM2YWM4Nzc2 MjFkNjRkNjUxMzMwZjlkZjc2MWVhMmNhYjMwOTNmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9CoDUBmu9S+19JON5+WsvIOW5UgJYlVOZqqq6aa7NUKcg FUGMTgrquF+lV5GH3qa0W/C1W7QnMkO6c0dhRS5PRIuQdGt2zdyj42w+Ry7OxdAV tV7WYIfQi3edPlNR9JXaOHmKFtyr+CmjKBBUChWiR2BYWYDp1VXMs2hn6FZhatfu 6GHgam26k+QIN8gu4Sq4kh+L/YnS1fCG1+n3ZPtGdJMzac/NTS1fELzAHkEgd4KA PO0d9gJu/TIaIdTDO1u72xDaHdP5faI43cxwGqD6V6nhvq2gQthQrdFDVz2ENnM+ me9zWUWi3gEn1ueT7JTDNBLyNKRG35sY/NsFBonTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUxRmM3WmrLcGErKwRHpqhVrDhQ+owHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQyZGQ3OGRmLWMwYmItNDViOS1iOWM2LTc4ZDhlNzc5YzY1NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE0VNgwDQYJKoZIhvcNAQELBQADggEBAKDd5nOsXGjdepMn5Y+qFj5uatum QJl2LoQkYvF7BRvf0egUvaSgd9Z5i0nmoffGT2LLN7KbiZ9ToYGic4Sgw1POXR83 Wfz8WYGt4xH64LjDC3GMxF00MZFKb4RLodUg4m7M04nRmalA/aEvJkzZp2J1YFAM C/wMHXCmUhd91rVldwJqV+6IHCg0ticZ1NDWDRkQtdY/i7NQLpBLpp4xnq+nBVgh i6ylnND1WB2d5icBkwHT5yjWrt+K9fGUVVD23z+YYn4nDCBOFC1LGQk1mrmS8JbR 6wl9ZAgF/wbPTm0d3apY8OU6jB/96DhZGIhvcLPHI0UZmuLzv5UTUyu1VPo= -----END CERTIFICATE-----Generated at Mon Oct 20 11:11:22 2025 by rpki-client