$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/74900fde-0a63-4643-85ee-3b9877b59549.roa File: 74900fde-0a63-4643-85ee-3b9877b59549.roa (raw, json) Hash identifier: y0ABRoCfc/aZjfrSx/unqesQn55JN9a5Fs3E4vrV55Y= Subject key identifier: AF:46:25:1C:88:25:E7:4B:BD:E1:EA:D8:78:5A:F0:88:F2:33:4D:97 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4CD03C5E79F3FCBBD85F307E102C6D0A96C5ECC1 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/74900fde-0a63-4643-85ee-3b9877b59549.roa Signing time: Fri 26 Sep 2025 17:06:21 +0000 ROA not before: Fri 26 Sep 2025 17:06:21 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.94.216.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:d0:3c:5e:79:f3:fc:bb:d8:5f:30:7e:10:2c:6d:0a:96:c5:ec:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 17:06:21 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=5295a4a6f401483d29ef7c356b8d7008246f68aecca974170668752a517c6ca6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a1:ad:6a:8f:6b:a8:96:a3:ab:94:08:68:91: ae:d6:48:e9:4f:04:5f:8f:30:1b:f7:34:e7:93:cd: 17:ac:64:77:aa:c3:94:4d:4c:4e:b2:e7:3c:67:af: 01:06:93:db:a2:4d:2c:19:94:3b:f2:ee:db:e5:0b: 15:31:ba:69:94:11:f8:6c:5d:4e:b0:70:b1:90:28: 06:da:92:8c:a4:97:47:d9:71:80:9b:98:73:03:03: bd:6d:74:6e:52:c3:3a:00:ad:cb:6a:1f:ca:5a:27: 8b:22:03:b6:7f:55:d5:45:15:5e:b7:ce:7a:98:7a: d4:f4:2e:69:d1:76:70:3e:30:f4:5a:ce:1c:fb:15: 83:0c:2c:b5:97:36:a2:3d:f3:d8:c2:5f:9b:ec:10: 7b:45:fe:0a:67:21:18:b6:dc:4d:2c:02:08:40:8d: 22:03:62:d8:24:39:7b:65:53:24:6c:cd:20:8b:33: 5e:d8:90:bd:77:a1:36:30:a4:84:22:fe:ba:b8:4c: 0c:70:f2:4e:97:bd:c3:bf:85:0c:b4:42:a8:65:c1: 7a:7b:6d:ee:7a:15:99:16:72:7b:e1:8a:31:06:4a: 25:0a:0e:3c:ab:bf:3a:13:ee:71:70:41:b0:0b:09: 15:ef:a1:0a:37:6b:d3:6e:07:e5:f8:2d:19:37:7b: 25:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:46:25:1C:88:25:E7:4B:BD:E1:EA:D8:78:5A:F0:88:F2:33:4D:97 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/74900fde-0a63-4643-85ee-3b9877b59549.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.94.216.0/21 Signature Algorithm: sha256WithRSAEncryption 30:3e:0e:8b:4b:71:dc:f6:62:5e:96:96:50:1e:3d:42:89:46: 65:bd:53:fd:48:89:b6:4a:1f:ea:14:fb:4c:c1:ed:a6:f4:d9: 5d:b0:c2:37:82:14:87:bc:60:fe:97:0d:95:15:fb:15:79:ef: ae:bc:2f:36:85:42:a7:c7:2f:88:22:90:d2:36:4d:e3:20:70: 10:55:4f:3b:b3:4c:9f:41:f8:af:00:d8:c2:0d:44:ac:bf:df: 9a:69:8c:a2:e1:77:e6:b0:69:55:c7:99:00:51:c0:3a:b1:ba: b9:13:94:42:32:dd:9b:5a:27:97:c6:96:11:30:33:ed:1c:9e: e4:66:26:4c:f3:eb:76:df:fb:c1:09:de:00:84:ae:61:ec:94: 9d:f8:1d:27:7b:74:95:53:24:7c:c2:e3:bc:4b:f6:54:ef:77: fe:c3:c2:27:33:38:bc:be:a7:71:c2:76:7d:50:65:50:4e:36: 37:59:72:48:20:1b:ea:e6:07:39:8f:50:fc:33:af:e0:6b:9e: b1:e4:a0:24:db:85:18:c3:44:0a:2e:2e:ed:fb:c0:62:a1:83: 60:4f:28:e1:47:3c:a2:f3:c6:13:8d:01:bc:aa:9f:b8:99:a1: 0b:ae:06:f0:f4:43:56:4e:27:c4:d1:7b:ca:4f:a9:b4:45:6a: 05:8b:04:91 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTNA8Xnnz/LvYXzB+ECxtCpbF7MEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MTcwNjIxWhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A1Mjk1YTRhNmY0MDE0ODNkMjllZjdjMzU2YjhkNzAwODI0 NmY2OGFlY2NhOTc0MTcwNjY4NzUyYTUxN2M2Y2E2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtoa1qj2uolqOrlAhoka7WSOlPBF+PMBv3NOeTzResZHeq w5RNTE6y5zxnrwEGk9uiTSwZlDvy7tvlCxUxummUEfhsXU6wcLGQKAbakoykl0fZ cYCbmHMDA71tdG5SwzoArctqH8paJ4siA7Z/VdVFFV63znqYetT0LmnRdnA+MPRa zhz7FYMMLLWXNqI989jCX5vsEHtF/gpnIRi23E0sAghAjSIDYtgkOXtlUyRszSCL M17YkL13oTYwpIQi/rq4TAxw8k6XvcO/hQy0QqhlwXp7be56FZkWcnvhijEGSiUK DjyrvzoT7nFwQbALCRXvoQo3a9NuB+X4LRk3eyX3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUr0YlHIgl50u94erYeFrwiPIzTZcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzc0OTAwZmRlLTBhNjMtNDY0My04NWVlLTNiOTg3N2I1OTU0OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAM0XtgwDQYJKoZIhvcNAQELBQADggEBADA+DotLcdz2Yl6WllAePUKJRmW9 U/1IibZKH+oU+0zB7ab02V2wwjeCFIe8YP6XDZUV+xV57668LzaFQqfHL4gikNI2 TeMgcBBVTzuzTJ9B+K8A2MINRKy/35ppjKLhd+awaVXHmQBRwDqxurkTlEIy3Zta J5fGlhEwM+0cnuRmJkzz63bf+8EJ3gCErmHslJ34HSd7dJVTJHzC47xL9lTvd/7D wiczOLy+p3HCdn1QZVBONjdZckggG+rmBzmPUPwzr+BrnrHkoCTbhRjDRAouLu37 wGKhg2BPKOFHPKLzxhONAbyqn7iZoQuuBvD0Q1ZOJ8TRe8pPqbRFagWLBJE= -----END CERTIFICATE-----Generated at Mon Oct 20 06:22:32 2025 by rpki-client