$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/68ebf9e2-8d64-4fdc-91f7-38f64ee627dc.roa File: 68ebf9e2-8d64-4fdc-91f7-38f64ee627dc.roa (raw, json) Hash identifier: NXE8m6nr7wp3Hj+V6p9WRMUrA4FhvA30fRXHhGDlOz8= Subject key identifier: FB:A7:2F:59:33:76:27:47:28:FD:15:7D:11:C5:52:C1:21:09:D1:4A Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 51F99A466FEAE8A09843E4A170BE0B17CE743236 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/68ebf9e2-8d64-4fdc-91f7-38f64ee627dc.roa Signing time: Sun 19 Oct 2025 07:11:14 +0000 ROA not before: Sun 19 Oct 2025 07:11:14 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.84.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:f9:9a:46:6f:ea:e8:a0:98:43:e4:a1:70:be:0b:17:ce:74:32:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 07:11:14 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=64f29bd7b5956d4db3a4138660c626e2c309efe040b27cb7d8140760aec8c490, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:49:82:1c:e1:d0:d9:e4:07:a7:30:55:94:75: fc:b6:8f:ed:6f:26:5c:d1:90:11:2d:b7:45:fa:69: 46:26:e2:98:03:f5:da:ca:7d:56:ca:81:44:ea:a3: bf:16:20:af:8c:e0:84:41:85:0d:6a:6b:c4:89:21: 9d:03:8c:8d:7f:e6:28:e8:c9:f0:9a:bf:1e:93:a2: d7:e1:46:f2:83:fe:24:a2:9a:a6:a5:20:b1:f6:c6: 83:49:14:ed:b6:1a:11:f1:be:bf:19:6a:5c:49:94: f5:37:51:8e:83:6a:f2:6b:ef:24:5c:73:cd:70:53: 98:cf:7f:48:3d:70:ac:4a:0a:bd:74:87:68:aa:d1: 3c:c1:ac:4e:3d:b6:7e:34:c1:92:14:d8:7b:71:88: 12:f6:56:63:73:02:a2:aa:5c:a2:04:65:56:fa:4a: 1c:db:0b:8f:83:c0:5d:67:0f:cf:d0:9e:48:1b:26: 06:85:d2:ee:c3:20:83:2e:c8:d7:51:3b:37:e6:6f: 48:a1:90:9e:4c:8c:bc:42:b5:b0:2a:8b:bc:a9:0f: 91:c1:6f:bd:89:05:ad:ca:3e:bc:f7:1a:e6:db:71: 48:cc:46:8c:35:36:8b:ad:c6:4f:6d:5e:83:fe:9d: 13:37:3b:5e:98:9f:c7:e4:97:77:b0:dd:c7:ac:17: d9:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:A7:2F:59:33:76:27:47:28:FD:15:7D:11:C5:52:C1:21:09:D1:4A X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/68ebf9e2-8d64-4fdc-91f7-38f64ee627dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.84.132.0/22 Signature Algorithm: sha256WithRSAEncryption 8d:dd:93:44:cb:e2:4c:fc:05:a7:0a:7a:a6:60:f1:54:46:2e: 29:37:9a:f0:aa:a6:49:86:e6:bf:a8:33:a2:aa:20:77:c8:34: 88:74:7e:87:63:2b:a1:32:23:7b:9a:24:b8:50:5a:52:ba:42: e8:e9:e6:35:67:53:a4:18:57:b5:bd:59:49:b9:24:f5:74:ed: af:2b:fb:fa:a6:52:31:37:d9:6d:4c:75:9d:4b:34:c7:4d:2c: ec:15:1f:cb:2a:d6:53:6a:6b:82:05:de:c3:ff:52:4a:c3:48: 3c:eb:0c:0a:c8:4c:26:74:b6:c5:ff:93:9a:f5:67:6b:47:58: dc:35:16:12:08:3a:9f:af:02:72:9d:6e:b2:42:35:65:f9:10: 9a:7b:4d:7a:cb:bc:06:33:2a:3d:6b:84:28:1e:11:cf:68:ae: 7f:b8:05:61:08:ec:b7:bb:84:22:08:d7:0a:a9:ef:36:ec:0d: 06:c3:13:43:b1:b3:c2:e0:7a:b4:74:f0:d6:40:2c:56:01:b2: 97:d3:7d:f3:19:04:54:ac:b9:31:ce:0a:55:27:df:c0:49:88: c4:44:2f:8d:56:00:65:be:0c:3d:c4:cb:7c:b1:e2:8d:7b:e2: 37:de:19:04:69:eb:fe:cd:59:71:29:1e:20:7b:79:79:3c:78: 76:fa:6d:54 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUfmaRm/q6KCYQ+ShcL4LF850MjYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MDcxMTE0WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A2NGYyOWJkN2I1OTU2ZDRkYjNhNDEzODY2MGM2MjZlMmMz MDllZmUwNDBiMjdjYjdkODE0MDc2MGFlYzhjNDkwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD3SYIc4dDZ5AenMFWUdfy2j+1vJlzRkBEtt0X6aUYm4pgD 9drKfVbKgUTqo78WIK+M4IRBhQ1qa8SJIZ0DjI1/5ijoyfCavx6TotfhRvKD/iSi mqalILH2xoNJFO22GhHxvr8ZalxJlPU3UY6DavJr7yRcc81wU5jPf0g9cKxKCr10 h2iq0TzBrE49tn40wZIU2HtxiBL2VmNzAqKqXKIEZVb6ShzbC4+DwF1nD8/Qnkgb JgaF0u7DIIMuyNdROzfmb0ihkJ5MjLxCtbAqi7ypD5HBb72JBa3KPrz3GubbcUjM Row1Noutxk9tXoP+nRM3O16Yn8fkl3ew3cesF9m9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU+6cvWTN2J0co/RV9EcVSwSEJ0UowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzY4ZWJmOWUyLThkNjQtNGZkYy05MWY3LTM4ZjY0ZWU2MjdkYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI0VIQwDQYJKoZIhvcNAQELBQADggEBAI3dk0TL4kz8BacKeqZg8VRGLik3 mvCqpkmG5r+oM6KqIHfINIh0fodjK6EyI3uaJLhQWlK6Qujp5jVnU6QYV7W9WUm5 JPV07a8r+/qmUjE32W1MdZ1LNMdNLOwVH8sq1lNqa4IF3sP/UkrDSDzrDArITCZ0 tsX/k5r1Z2tHWNw1FhIIOp+vAnKdbrJCNWX5EJp7TXrLvAYzKj1rhCgeEc9orn+4 BWEI7Le7hCII1wqp7zbsDQbDE0Oxs8LgerR08NZALFYBspfTffMZBFSsuTHOClUn 38BJiMREL41WAGW+DD3Ey3yx4o174jfeGQRp6/7NWXEpHiB7eXk8eHb6bVQ= -----END CERTIFICATE-----Generated at Mon Oct 20 02:55:26 2025 by rpki-client