$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/48c8e156-564e-409e-88b9-938f289a4be5.roa File: 48c8e156-564e-409e-88b9-938f289a4be5.roa (raw, json) Hash identifier: +AUcG4yha2jww5p10dgPlf6C1Cu2ChfLbsETrAdUfkQ= Subject key identifier: D7:AC:5A:75:D5:72:92:EF:4F:CF:08:9A:77:52:E4:BE:89:4B:60:E0 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 35E71B323ADCFF552F9E2BCC04159955518E952D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/48c8e156-564e-409e-88b9-938f289a4be5.roa Signing time: Sun 19 Oct 2025 05:41:18 +0000 ROA not before: Sun 19 Oct 2025 05:41:18 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.85.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:e7:1b:32:3a:dc:ff:55:2f:9e:2b:cc:04:15:99:55:51:8e:95:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 05:41:18 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=7abf4d60f0a725dcf8431aa796a27951fb54c04f33676e623237c9d5847bc3d0, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:81:e6:b6:39:f3:e6:f7:cd:b0:9c:2a:76:6e: 4c:49:74:f7:3f:58:f9:ca:d8:e3:a4:3f:21:35:3a: ee:86:4d:10:d5:dd:08:9c:68:14:b1:70:65:55:96: 9d:4c:cd:e8:86:8d:89:fc:7b:45:99:ae:6f:0f:7c: 6d:3b:09:b2:34:00:67:a1:7b:ff:49:4f:d8:46:d7: 32:9b:c1:44:07:63:e4:fa:b8:2b:10:15:37:35:17: 19:ba:cf:af:37:b1:84:f8:ab:e1:2b:b6:59:9e:ad: 72:4b:17:79:b7:2f:bb:13:16:75:72:5c:f6:c3:14: db:43:bb:23:fa:53:ae:e8:d7:12:00:a0:7f:f7:b1: 3b:29:92:26:4f:e5:d7:5a:f7:07:0a:f6:1e:27:b7: 52:1b:bd:ae:90:85:d6:6b:72:ea:1e:26:d2:a2:72: 26:49:42:bd:52:ae:3b:50:8d:77:d4:25:cd:58:f6: b3:7c:96:6b:56:9c:0a:2b:73:c2:88:af:38:a0:c4: a2:66:fa:3c:e0:2c:ee:17:7e:ce:f5:d7:ab:a5:91: 96:9c:9c:a1:24:ed:70:59:94:32:26:21:63:96:78: bd:db:97:42:e5:70:df:56:79:de:8a:45:26:a7:4f: 8b:7e:bc:6b:44:ac:b4:94:b3:28:c2:4e:4f:b6:0e: 0c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:AC:5A:75:D5:72:92:EF:4F:CF:08:9A:77:52:E4:BE:89:4B:60:E0 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/48c8e156-564e-409e-88b9-938f289a4be5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.85.168.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:f2:20:19:8e:fe:2a:ae:ce:b4:10:b3:7a:41:e8:5d:c5:0b: 52:2f:af:48:84:f3:17:96:71:a5:14:76:50:b8:65:e3:35:70: 90:c3:2d:dc:f0:4b:fb:1d:34:7a:f7:d9:4c:dd:49:b8:0e:8a: 83:b8:dc:18:23:73:25:a6:3c:5b:28:79:4d:4a:ac:45:24:51: 82:27:4d:c6:74:82:b8:c6:56:0e:9a:b2:48:7f:5b:e4:ce:e6: 21:5a:df:51:1c:7c:3f:18:95:2b:dd:fc:05:f5:17:35:35:48: 35:e1:38:a1:b7:ec:42:5a:b0:55:1d:e4:4c:73:90:2d:28:53: d0:6a:53:dd:01:88:d4:52:e4:61:4c:77:76:8b:b4:bc:43:1e: e3:a7:ac:9a:55:f3:69:46:15:06:8e:3e:15:16:cc:a9:24:25: f5:f8:79:29:5d:30:87:ac:ef:cc:1f:82:13:97:7e:5a:f6:79: 85:ec:5b:83:8e:c7:b3:4d:dc:6c:59:ff:56:2e:d3:79:1b:77: 0d:69:df:9a:55:3c:35:0d:19:3b:cc:6f:47:84:09:0c:bb:44: 8c:76:b2:15:b4:cd:fd:55:39:f3:91:05:98:bc:b4:03:15:d9: f7:e8:94:5f:ad:e8:15:90:44:c1:fb:2d:ad:09:61:77:c3:ad: 58:21:68:d1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNecbMjrc/1UvnivMBBWZVVGOlS0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MDU0MTE4WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A3YWJmNGQ2MGYwYTcyNWRjZjg0MzFhYTc5NmEyNzk1MWZi NTRjMDRmMzM2NzZlNjIzMjM3YzlkNTg0N2JjM2QwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDjgea2OfPm982wnCp2bkxJdPc/WPnK2OOkPyE1Ou6GTRDV 3QicaBSxcGVVlp1MzeiGjYn8e0WZrm8PfG07CbI0AGehe/9JT9hG1zKbwUQHY+T6 uCsQFTc1Fxm6z683sYT4q+ErtlmerXJLF3m3L7sTFnVyXPbDFNtDuyP6U67o1xIA oH/3sTspkiZP5dda9wcK9h4nt1Ibva6QhdZrcuoeJtKiciZJQr1SrjtQjXfUJc1Y 9rN8lmtWnAorc8KIrzigxKJm+jzgLO4Xfs7116ulkZacnKEk7XBZlDImIWOWeL3b l0LlcN9Wed6KRSanT4t+vGtErLSUsyjCTk+2DgzvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU16xaddVyku9Pzwiad1LkvolLYOAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQ4YzhlMTU2LTU2NGUtNDA5ZS04OGI5LTkzOGYyODlhNGJlNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0VagwDQYJKoZIhvcNAQELBQADggEBAB7yIBmO/iquzrQQs3pB6F3FC1Iv r0iE8xeWcaUUdlC4ZeM1cJDDLdzwS/sdNHr32UzdSbgOioO43BgjcyWmPFsoeU1K rEUkUYInTcZ0grjGVg6askh/W+TO5iFa31EcfD8YlSvd/AX1FzU1SDXhOKG37EJa sFUd5ExzkC0oU9BqU90BiNRS5GFMd3aLtLxDHuOnrJpV82lGFQaOPhUWzKkkJfX4 eSldMIes78wfghOXflr2eYXsW4OOx7NN3GxZ/1Yu03kbdw1p35pVPDUNGTvMb0eE CQy7RIx2shW0zf1VOfORBZi8tAMV2ffolF+t6BWQRMH7La0JYXfDrVghaNE= -----END CERTIFICATE-----Generated at Mon Oct 20 08:29:32 2025 by rpki-client