$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/531f7a26-5a74-4f0a-a624-92de4db666ba.roa File: 531f7a26-5a74-4f0a-a624-92de4db666ba.roa (raw, json) Hash identifier: QdKysIBY9ju1BJiB5DMOdwNAR/mehTnaXBRdWCwpxIo= Subject key identifier: EF:5D:42:69:F2:36:B4:E2:10:55:61:38:A0:3C:CA:96:68:9D:45:83 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 26DF9ADB5C5F736B073B62677BE5B9B1670481FB Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/531f7a26-5a74-4f0a-a624-92de4db666ba.roa Signing time: Sun 19 Oct 2025 05:42:30 +0000 ROA not before: Sun 19 Oct 2025 05:42:30 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.84.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:df:9a:db:5c:5f:73:6b:07:3b:62:67:7b:e5:b9:b1:67:04:81:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 05:42:30 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=a9a6f9c533e97221ef178f3494b05a118d14f37b82336649ef3ab78804503557, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:15:b2:22:1b:d1:30:b5:4e:e3:86:16:89:f0: 85:5a:c5:ae:4c:1d:6d:2a:25:dd:6e:bd:7f:ac:31: 9c:9f:5e:e6:e6:55:45:c4:03:4b:66:78:92:a9:2f: 16:8b:37:50:eb:d4:7a:3f:34:ae:70:8a:74:20:8f: d2:98:b8:fc:7b:c3:d8:e5:ed:58:59:99:3c:df:65: 3f:ac:58:01:77:32:47:6c:24:43:4c:a5:11:b6:db: 12:b7:fb:e5:ea:82:45:f9:c4:5e:92:00:a2:26:62: 6d:4a:60:09:17:ab:d1:9f:53:76:59:a2:28:c9:0b: ca:4f:6a:d8:68:40:d4:de:be:01:29:14:20:91:f0: 92:9e:00:bd:4e:ec:5d:91:45:4f:f1:b2:c1:9f:44: af:7a:b3:35:f7:a5:f4:19:ca:c7:bf:26:1c:da:50: a8:34:cf:a8:73:bc:5a:b6:d7:36:ae:f2:94:c4:06: f8:51:f1:90:1c:52:2c:bb:32:3d:30:73:7a:1d:15: 12:52:f4:40:57:29:55:92:e1:9a:b1:7c:0f:b8:f9: fc:b1:0d:91:65:6a:1c:73:62:b1:4b:00:de:b9:b1: eb:45:4b:6c:18:b8:a7:fb:db:2f:d0:5b:6c:0d:14: 84:64:5f:8d:0e:21:33:f7:ef:8c:af:f5:4d:db:09: e2:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:5D:42:69:F2:36:B4:E2:10:55:61:38:A0:3C:CA:96:68:9D:45:83 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/531f7a26-5a74-4f0a-a624-92de4db666ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.84.108.0/22 Signature Algorithm: sha256WithRSAEncryption 94:96:1d:c8:1b:5a:3b:6b:8b:df:36:25:2e:77:db:e8:fa:e5: 5f:65:f7:61:1b:c0:44:3f:d2:59:b7:b0:96:a1:2e:0c:6f:28: 01:89:2b:a4:2b:dc:7a:b6:b5:da:75:6c:21:d9:c5:7f:fd:d8: ad:64:82:94:c9:66:7a:31:4e:fd:78:6a:a5:83:2c:8a:82:81: 4e:8e:ad:49:35:ce:7b:52:47:34:db:df:b7:8d:9c:73:de:1d: 95:4f:25:44:45:5a:64:e3:cf:03:9c:d6:e2:6b:a0:5d:ed:0f: a9:f9:d7:3b:3e:de:06:f7:a0:03:26:d1:5d:e7:1e:2d:ec:9b: 42:fc:b4:7e:a7:a5:77:e5:8b:ed:94:77:bd:d0:20:62:a6:b6: d8:e0:42:58:84:3c:af:6c:ee:c0:f2:1b:06:99:3d:6b:81:44: 8a:0b:de:3e:fc:14:0d:75:ab:88:fd:ab:13:50:3b:81:f9:db: a1:7f:ae:b8:a8:f1:a0:51:02:fd:64:1e:8f:9a:92:41:41:a5: 43:b9:15:f1:06:3a:a3:87:b5:ab:e4:57:5d:ef:f1:c1:2a:ba: a4:bb:55:ad:6d:af:93:85:fc:b6:67:4b:7d:cb:2b:48:c4:82: 80:23:ee:51:ed:bd:f7:37:c7:1b:07:e6:1e:8d:b0:0c:97:24: 55:8b:50:36 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJt+a21xfc2sHO2Jne+W5sWcEgfswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MDU0MjMwWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BhOWE2ZjljNTMzZTk3MjIxZWYxNzhmMzQ5NGIwNWExMThk MTRmMzdiODIzMzY2NDllZjNhYjc4ODA0NTAzNTU3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2FbIiG9EwtU7jhhaJ8IVaxa5MHW0qJd1uvX+sMZyfXubm VUXEA0tmeJKpLxaLN1Dr1Ho/NK5winQgj9KYuPx7w9jl7VhZmTzfZT+sWAF3Mkds JENMpRG22xK3++XqgkX5xF6SAKImYm1KYAkXq9GfU3ZZoijJC8pPathoQNTevgEp FCCR8JKeAL1O7F2RRU/xssGfRK96szX3pfQZyse/JhzaUKg0z6hzvFq21zau8pTE BvhR8ZAcUiy7Mj0wc3odFRJS9EBXKVWS4ZqxfA+4+fyxDZFlahxzYrFLAN65setF S2wYuKf72y/QW2wNFIRkX40OITP374yv9U3bCeIfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU711CafI2tOIQVWE4oDzKlmidRYMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzUzMWY3YTI2LTVhNzQtNGYwYS1hNjI0LTkyZGU0ZGI2NjZiYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI0VGwwDQYJKoZIhvcNAQELBQADggEBAJSWHcgbWjtri982JS532+j65V9l 92EbwEQ/0lm3sJahLgxvKAGJK6Qr3Hq2tdp1bCHZxX/92K1kgpTJZnoxTv14aqWD LIqCgU6OrUk1zntSRzTb37eNnHPeHZVPJURFWmTjzwOc1uJroF3tD6n51zs+3gb3 oAMm0V3nHi3sm0L8tH6npXfli+2Ud73QIGKmttjgQliEPK9s7sDyGwaZPWuBRIoL 3j78FA11q4j9qxNQO4H526F/rrio8aBRAv1kHo+akkFBpUO5FfEGOqOHtavkV13v 8cEquqS7Va1tr5OF/LZnS33LK0jEgoAj7lHtvfc3xxsH5h6NsAyXJFWLUDY= -----END CERTIFICATE-----Generated at Mon Oct 20 11:10:18 2025 by rpki-client