$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5023eea5-a695-4879-a1a0-4caa86a3674b.roa File: 5023eea5-a695-4879-a1a0-4caa86a3674b.roa (raw, json) Hash identifier: narRJ4NZf/yXP3HeUEh2rJ6ue7mM0mgxy/BbZn5Lf8U= Subject key identifier: 23:40:35:82:DE:01:8A:7A:F1:A7:F9:DA:93:5A:99:74:96:84:0F:FE Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0A5A9F2A84A2BFAE139E04EA5420CD3019AB53C5 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5023eea5-a695-4879-a1a0-4caa86a3674b.roa Signing time: Sun 19 Oct 2025 07:01:14 +0000 ROA not before: Sun 19 Oct 2025 07:01:14 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.85.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:5a:9f:2a:84:a2:bf:ae:13:9e:04:ea:54:20:cd:30:19:ab:53:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 07:01:14 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=50da8d826143c3297cace8bd97820b36e1aa4d3a3d65d47053eaf5ffe89b7422, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:20:83:6d:a2:63:b8:db:41:80:91:be:b4:33: 35:83:f5:11:43:11:0d:f0:d3:a3:41:fc:e3:52:48: ac:cf:f3:71:e5:fb:63:42:00:49:89:a2:df:82:f0: 94:e0:27:a4:16:bd:af:65:25:c0:1a:4a:a1:42:8e: cb:e3:74:24:49:83:4b:4d:9b:60:f7:d0:b1:aa:5a: f3:41:ac:38:b6:67:f9:b3:6a:63:18:00:22:e6:d3: 0d:99:c2:03:a8:82:2e:dc:f0:3f:c5:5e:88:14:87: 7c:8a:bf:dd:d8:b2:d6:ee:c1:20:9a:68:2d:76:3a: 41:e7:31:ed:99:b4:eb:33:82:6a:d9:45:de:9d:d7: 73:ce:81:04:31:e0:5d:08:a7:2d:ba:9d:cf:b1:d5: 60:fc:71:e9:3e:9b:a9:46:c7:09:b2:b3:59:db:a9: cd:cc:ad:ea:c2:b0:17:5b:89:7d:5f:96:51:4f:0a: 97:7e:56:63:eb:6c:ad:6c:2f:ff:a1:22:6b:2d:68: c0:a3:40:3c:5c:63:22:5d:cf:e5:50:58:bf:98:f2: 16:c2:b2:0e:bd:47:24:a0:04:c2:6c:f3:db:07:f8: a9:47:9f:ce:3b:2b:f4:13:35:63:fd:f0:9e:15:75: ba:d1:66:05:86:6c:7b:d2:e6:36:4b:ad:0f:b4:eb: 0e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:40:35:82:DE:01:8A:7A:F1:A7:F9:DA:93:5A:99:74:96:84:0F:FE X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5023eea5-a695-4879-a1a0-4caa86a3674b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.85.157.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:dc:5a:73:f2:8d:f9:3c:f1:3b:45:4c:aa:fe:0e:ca:c5:ce: bd:4e:ac:a1:71:30:06:69:c0:d7:fe:2f:f4:87:c1:91:7c:a4: 67:8d:4f:49:5a:26:32:95:af:13:65:2e:cf:2c:00:24:2b:c1: d0:0c:2d:0a:44:f6:20:11:e1:ab:26:df:a8:b4:e6:61:1d:09: ab:bc:11:cd:74:6c:58:64:b6:96:4f:d2:c4:60:2b:e4:21:be: 75:ee:03:71:fb:de:a8:e0:ae:41:d2:6b:3b:63:3f:ec:e3:5a: 72:95:82:95:3b:5c:f5:25:77:db:77:80:53:02:b4:ef:84:90: bf:a4:c2:fe:2c:54:84:c7:fd:70:73:01:e3:65:de:c5:81:d1: 5a:a9:24:41:29:f2:d1:5d:e2:a3:25:04:b4:3f:68:a5:f6:cf: 35:d4:a7:25:8b:1a:6a:ee:2f:f8:05:03:2c:13:5d:e2:d0:60: 60:03:b2:aa:99:dd:46:0f:a5:8c:df:48:34:05:0a:56:30:dd: 9b:c0:b3:77:ab:5b:09:21:12:5d:8b:14:6d:b3:fd:f6:ae:06: af:67:87:3d:60:12:e3:ef:2e:24:ed:62:d4:98:a4:d8:d8:28: 00:7f:7f:64:a6:96:a6:86:3f:d5:fc:07:07:0d:ee:7d:96:80: c7:9e:41:4d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUClqfKoSiv64TngTqVCDNMBmrU8UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MDcwMTE0WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A1MGRhOGQ4MjYxNDNjMzI5N2NhY2U4YmQ5NzgyMGIzNmUx YWE0ZDNhM2Q2NWQ0NzA1M2VhZjVmZmU4OWI3NDIyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCiIINtomO420GAkb60MzWD9RFDEQ3w06NB/ONSSKzP83Hl +2NCAEmJot+C8JTgJ6QWva9lJcAaSqFCjsvjdCRJg0tNm2D30LGqWvNBrDi2Z/mz amMYACLm0w2ZwgOogi7c8D/FXogUh3yKv93YstbuwSCaaC12OkHnMe2ZtOszgmrZ Rd6d13POgQQx4F0Ipy26nc+x1WD8cek+m6lGxwmys1nbqc3MrerCsBdbiX1fllFP Cpd+VmPrbK1sL/+hImstaMCjQDxcYyJdz+VQWL+Y8hbCsg69RySgBMJs89sH+KlH n847K/QTNWP98J4VdbrRZgWGbHvS5jZLrQ+06w4RAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUI0A1gt4Binrxp/nak1qZdJaED/4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzUwMjNlZWE1LWE2OTUtNDg3OS1hMWEwLTRjYWE4NmEzNjc0Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0VZ0wDQYJKoZIhvcNAQELBQADggEBAErcWnPyjfk88TtFTKr+DsrFzr1O rKFxMAZpwNf+L/SHwZF8pGeNT0laJjKVrxNlLs8sACQrwdAMLQpE9iAR4asm36i0 5mEdCau8Ec10bFhktpZP0sRgK+QhvnXuA3H73qjgrkHSaztjP+zjWnKVgpU7XPUl d9t3gFMCtO+EkL+kwv4sVITH/XBzAeNl3sWB0VqpJEEp8tFd4qMlBLQ/aKX2zzXU pyWLGmruL/gFAywTXeLQYGADsqqZ3UYPpYzfSDQFClYw3ZvAs3erWwkhEl2LFG2z /fauBq9nhz1gEuPvLiTtYtSYpNjYKAB/f2SmlqaGP9X8BwcN7n2WgMeeQU0= -----END CERTIFICATE-----Generated at Mon Oct 20 02:58:44 2025 by rpki-client