$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4d260853-a6a9-426d-b511-61d10c9aaf6d.roa File: 4d260853-a6a9-426d-b511-61d10c9aaf6d.roa (raw, json) Hash identifier: NLvT+L/8uqno4xatm5fvIPxVh0q+//uX6xDNe7Azjj4= Subject key identifier: 44:4E:A6:DB:47:5A:33:BC:A4:5E:C9:8E:32:30:DF:AD:C8:C5:7E:55 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 698C3A98F948B918E3CDE5121587BC981E9260D8 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4d260853-a6a9-426d-b511-61d10c9aaf6d.roa Signing time: Sat 18 Oct 2025 19:22:42 +0000 ROA not before: Sat 18 Oct 2025 19:22:42 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.84.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:8c:3a:98:f9:48:b9:18:e3:cd:e5:12:15:87:bc:98:1e:92:60:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 19:22:42 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=2d396269634306e521005e9401a344a3c62c41c2c76ec8b99886093a056f23dc, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:28:21:b0:30:ab:86:10:b2:2b:bf:54:b1:8a: 2c:89:06:9e:15:6b:13:d8:ab:f5:3e:1e:5c:99:64: 2f:a2:d7:32:e1:b9:96:fd:03:9a:7c:16:f6:31:8b: 4c:61:8b:c9:97:06:c3:9d:76:fe:da:8a:0f:28:41: 5e:ab:5c:bb:11:20:54:67:ac:f0:23:36:ee:87:08: 86:37:5c:1c:76:c8:bf:62:2d:9b:08:da:24:0e:41: 94:df:af:dd:51:9b:3b:3a:d3:b3:df:51:67:5e:e3: f5:82:16:24:16:08:8a:68:83:0f:71:2d:ff:2b:ad: a2:70:86:2c:59:df:90:71:85:f3:44:b4:f3:bc:ba: 50:f3:17:5f:9e:12:0f:4f:12:b7:8e:97:93:92:a4: 02:a2:4e:9b:88:bd:f3:49:9f:c3:5e:c6:3a:eb:e9: 77:9d:9f:60:39:40:12:ed:82:97:7d:6b:c1:6d:ec: 52:2b:8c:63:1f:4f:51:cc:62:8a:99:01:01:dc:2d: e5:9d:72:e3:19:0d:3f:b8:1e:3c:ae:9e:5f:07:dd: 3e:d9:ab:b5:49:4c:8a:ca:c2:80:4c:a0:aa:d2:ce: ff:5c:68:c1:e8:2f:a8:41:8b:e3:3d:98:c6:52:0c: 70:38:88:1d:e2:8c:38:da:4c:62:34:70:d0:b4:b1: 58:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:4E:A6:DB:47:5A:33:BC:A4:5E:C9:8E:32:30:DF:AD:C8:C5:7E:55 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4d260853-a6a9-426d-b511-61d10c9aaf6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.84.151.0/24 Signature Algorithm: sha256WithRSAEncryption 97:f4:25:49:5e:77:94:6d:ac:50:5c:23:9a:09:01:16:59:da: c3:b0:48:8c:9c:ae:2e:92:a2:6e:25:ba:10:01:05:e2:2b:19: 4b:87:08:44:c6:de:7a:0b:68:fd:3b:7b:6a:35:7f:3c:15:15: 40:36:08:9d:e6:00:8b:2f:a8:71:26:cf:29:53:46:31:38:91: b7:82:2c:dc:18:da:63:b7:af:ca:8c:56:99:44:39:61:d0:b2: 1e:34:dc:33:ae:07:fb:86:8e:a7:fe:1a:89:94:e5:da:b8:f8: b0:ca:68:e3:78:f3:28:3c:9e:21:00:57:c5:70:58:d8:99:8f: 8b:26:b1:e8:c1:89:7d:23:fb:70:8f:58:8d:bd:be:9c:c0:09: b1:33:68:dc:40:0c:43:45:d6:25:67:3c:5a:0f:f8:60:f7:46: d6:30:4c:41:a5:e7:75:d3:cd:83:9c:91:4b:7e:e7:5a:f9:d9: 87:93:7e:b0:48:ab:6c:51:1f:12:15:9e:8b:93:1c:93:36:41: 3d:15:ba:54:83:b2:e1:bd:01:8c:ea:5c:d5:07:87:65:ef:80: 5b:e4:78:f8:c5:fc:89:73:f7:24:f5:17:53:02:1d:47:56:28: e8:a8:df:11:6d:65:fa:fb:67:11:3a:de:c1:53:5b:23:8d:3e: 87:e5:cd:34 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUaYw6mPlIuRjjzeUSFYe8mB6SYNgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTkyMjQyWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AyZDM5NjI2OTYzNDMwNmU1MjEwMDVlOTQwMWEzNDRhM2M2 MmM0MWMyYzc2ZWM4Yjk5ODg2MDkzYTA1NmYyM2RjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCLKCGwMKuGELIrv1SxiiyJBp4VaxPYq/U+HlyZZC+i1zLh uZb9A5p8FvYxi0xhi8mXBsOddv7aig8oQV6rXLsRIFRnrPAjNu6HCIY3XBx2yL9i LZsI2iQOQZTfr91Rmzs607PfUWde4/WCFiQWCIpogw9xLf8rraJwhixZ35BxhfNE tPO8ulDzF1+eEg9PEreOl5OSpAKiTpuIvfNJn8Nexjrr6Xedn2A5QBLtgpd9a8Ft 7FIrjGMfT1HMYoqZAQHcLeWdcuMZDT+4Hjyunl8H3T7Zq7VJTIrKwoBMoKrSzv9c aMHoL6hBi+M9mMZSDHA4iB3ijDjaTGI0cNC0sViHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQURE6m20daM7ykXsmOMjDfrcjFflUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzRkMjYwODUzLWE2YTktNDI2ZC1iNTExLTYxZDEwYzlhYWY2ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0VJcwDQYJKoZIhvcNAQELBQADggEBAJf0JUled5RtrFBcI5oJARZZ2sOw SIycri6Som4luhABBeIrGUuHCETG3noLaP07e2o1fzwVFUA2CJ3mAIsvqHEmzylT RjE4kbeCLNwY2mO3r8qMVplEOWHQsh403DOuB/uGjqf+GomU5dq4+LDKaON48yg8 niEAV8VwWNiZj4smsejBiX0j+3CPWI29vpzACbEzaNxADENF1iVnPFoP+GD3RtYw TEGl53XTzYOckUt+51r52YeTfrBIq2xRHxIVnouTHJM2QT0VulSDsuG9AYzqXNUH h2XvgFvkePjF/Ilz9yT1F1MCHUdWKOio3xFtZfr7ZxE63sFTWyONPoflzTQ= -----END CERTIFICATE-----Generated at Mon Oct 20 06:00:52 2025 by rpki-client