$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/46a3c68a-63ec-4417-a6db-61eba1a0f0a8.roa File: 46a3c68a-63ec-4417-a6db-61eba1a0f0a8.roa (raw, json) Hash identifier: eBBEf5oj7v25U7lA/ANz+mSFYkAYkIOE4CtStzm3rfA= Subject key identifier: 74:0F:64:CE:9F:D0:99:3C:0E:15:76:BA:40:C1:02:2D:20:CC:ED:26 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 43FBA6E693F9307FCCD2DE7BE442F5900B78129D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/46a3c68a-63ec-4417-a6db-61eba1a0f0a8.roa Signing time: Sun 19 Oct 2025 05:52:38 +0000 ROA not before: Sun 19 Oct 2025 05:52:38 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.84.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:fb:a6:e6:93:f9:30:7f:cc:d2:de:7b:e4:42:f5:90:0b:78:12:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 05:52:38 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=2017bcd65f637f0d6760c4305d318fbcf56b67e403bfa204d1d302497dedee47, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e3:f4:67:04:04:c9:db:cf:23:1a:0c:91:38: d0:dd:f0:07:0b:cc:20:05:cf:4d:8f:71:3e:b2:f2: 3e:7d:0d:08:19:76:8e:50:88:49:0e:f0:89:34:a1: d1:fb:43:23:a1:69:69:a2:58:27:1d:44:3d:17:dd: 91:3d:55:d3:f4:54:3a:22:7f:57:c5:9a:a5:1f:9b: 62:da:0d:c8:4e:c5:99:af:3d:80:03:87:6d:4e:70: f7:c8:9a:c4:85:7f:66:21:13:a4:a8:b8:48:d4:8f: 03:c2:5d:11:4e:ed:29:3b:60:8d:16:4a:aa:f2:01: 25:6b:4e:9d:9d:96:5a:00:c5:0a:19:8a:cf:de:dd: 77:99:9f:25:8a:41:8f:54:8c:ac:04:dc:76:12:cf: ab:5c:1e:69:7d:f9:63:a1:27:39:e0:26:02:86:4b: 33:be:41:17:1b:32:e5:6a:d7:d5:a6:6d:16:36:3c: 54:20:a9:a2:98:96:17:93:17:75:68:c4:2c:08:15: dd:bb:34:9b:7d:3b:47:13:e3:82:98:e3:44:cb:c6: 7a:1d:c1:24:4a:0b:1d:c9:2e:ce:6f:01:84:09:b2: ba:8c:ad:7a:65:2e:db:5f:61:bd:2a:b2:fd:eb:d5: fe:e2:b4:ab:d1:72:cc:47:e4:ef:57:da:b3:9d:40: 6c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:0F:64:CE:9F:D0:99:3C:0E:15:76:BA:40:C1:02:2D:20:CC:ED:26 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/46a3c68a-63ec-4417-a6db-61eba1a0f0a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.84.86.0/23 Signature Algorithm: sha256WithRSAEncryption 23:ab:ab:e8:c4:bb:79:7c:f0:07:c9:ec:ef:9c:4c:2a:71:fc: c7:b6:f3:b1:f5:3e:77:62:2e:50:a9:f2:ec:9b:d1:56:35:73: 73:68:a2:7c:97:48:94:79:49:a7:66:dd:e5:78:a3:23:bf:30: 22:e1:6c:fd:fa:43:0d:39:9b:17:86:88:22:56:11:b7:40:61: 2e:e1:f6:9c:55:4f:91:02:86:ff:eb:03:5f:00:6e:71:2b:bd: 27:42:8b:e2:68:69:70:12:3d:82:7f:7e:9d:78:56:86:0f:08: 2a:b1:72:12:2c:a6:c1:d3:34:ea:fb:09:6e:83:3f:16:48:62: 1f:04:3b:df:f3:cf:42:3c:fb:27:75:2d:24:c1:99:6e:dd:05: 5c:82:0b:c9:82:94:01:99:ab:37:45:9d:20:8c:6a:eb:14:e9: 71:83:61:43:a0:34:22:91:61:b4:af:71:d5:16:81:b2:92:3f: 6d:53:28:50:56:40:9b:13:0e:aa:f6:6f:e0:74:01:38:f5:0b: 54:bd:99:d9:25:1c:e6:a6:30:f6:99:ad:49:ba:51:ae:3b:8a: bf:95:22:e8:f6:6c:30:d7:ce:e3:30:12:0d:02:c3:ac:b1:26: 54:6d:64:c4:e8:f0:41:d7:3e:50:7b:2d:f1:79:79:5e:17:2c: 64:93:47:e1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQ/um5pP5MH/M0t575EL1kAt4Ep0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MDU1MjM4WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AyMDE3YmNkNjVmNjM3ZjBkNjc2MGM0MzA1ZDMxOGZiY2Y1 NmI2N2U0MDNiZmEyMDRkMWQzMDI0OTdkZWRlZTQ3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/4/RnBATJ288jGgyRONDd8AcLzCAFz02PcT6y8j59DQgZ do5QiEkO8Ik0odH7QyOhaWmiWCcdRD0X3ZE9VdP0VDoif1fFmqUfm2LaDchOxZmv PYADh21OcPfImsSFf2YhE6SouEjUjwPCXRFO7Sk7YI0WSqryASVrTp2dlloAxQoZ is/e3XeZnyWKQY9UjKwE3HYSz6tcHml9+WOhJzngJgKGSzO+QRcbMuVq19WmbRY2 PFQgqaKYlheTF3VoxCwIFd27NJt9O0cT44KY40TLxnodwSRKCx3JLs5vAYQJsrqM rXplLttfYb0qsv3r1f7itKvRcsxH5O9X2rOdQGxJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUdA9kzp/QmTwOFXa6QMECLSDM7SYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQ2YTNjNjhhLTYzZWMtNDQxNy1hNmRiLTYxZWJhMWEwZjBhOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE0VFYwDQYJKoZIhvcNAQELBQADggEBACOrq+jEu3l88AfJ7O+cTCpx/Me2 87H1PndiLlCp8uyb0VY1c3NoonyXSJR5Sadm3eV4oyO/MCLhbP36Qw05mxeGiCJW EbdAYS7h9pxVT5EChv/rA18AbnErvSdCi+JoaXASPYJ/fp14VoYPCCqxchIspsHT NOr7CW6DPxZIYh8EO9/zz0I8+yd1LSTBmW7dBVyCC8mClAGZqzdFnSCMausU6XGD YUOgNCKRYbSvcdUWgbKSP21TKFBWQJsTDqr2b+B0ATj1C1S9mdklHOamMPaZrUm6 Ua47ir+VIuj2bDDXzuMwEg0Cw6yxJlRtZMTo8EHXPlB7LfF5eV4XLGSTR+E= -----END CERTIFICATE-----Generated at Mon Oct 20 12:20:57 2025 by rpki-client