$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7d3cb66f-f779-4c78-bb1f-8532a6a972c2.roa File: 7d3cb66f-f779-4c78-bb1f-8532a6a972c2.roa (raw, json) Hash identifier: /PWdtKP5AT9CYShPHNkUH3cIj9juLaKbtxAPsAwwZ/s= Subject key identifier: C7:9F:73:BF:E8:68:AA:7D:A1:99:E2:47:68:10:58:32:8B:B9:1C:F6 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 074AE74FA8946BA40B3521CAEA9BC933FAF8F135 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7d3cb66f-f779-4c78-bb1f-8532a6a972c2.roa Signing time: Thu 16 Oct 2025 16:51:44 +0000 ROA not before: Thu 16 Oct 2025 16:51:44 +0000 ROA not after: Thu 20 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.124.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:4a:e7:4f:a8:94:6b:a4:0b:35:21:ca:ea:9b:c9:33:fa:f8:f1:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 16 16:51:44 2025 GMT Not After : Nov 20 23:59:59 2025 GMT Subject: serialNumber=4207c7f87a08cdb0f61df158884c3f63e0aa514d44dbbdb8d7cef3adeb8e525e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:71:59:ce:b9:d7:a6:ea:9c:c4:28:15:6c:0c: 2b:1b:c3:83:91:ea:1f:a8:ab:2f:96:3a:7e:e4:c4: b3:58:d1:a2:e7:c4:1b:8a:d2:91:f8:9c:e5:98:65: de:c5:b9:58:8c:24:a0:48:67:58:ca:21:47:95:88: d9:c9:81:14:eb:57:2d:6c:88:06:ee:7e:2b:54:75: 27:ba:24:92:09:99:5a:d1:ef:d7:45:bd:1a:0e:8c: 66:82:cd:b7:5f:ec:12:4f:b0:25:25:66:f8:a6:52: 79:65:f2:23:77:ba:d1:48:25:f1:a6:8b:07:42:00: 16:57:d1:03:a6:b2:92:c1:0a:a5:24:34:32:bf:11: f0:db:c8:54:08:a7:14:9e:89:40:29:5e:80:2e:54: 10:5d:47:a9:f4:f7:dc:80:f7:aa:d1:a8:b5:83:2c: 6f:4b:3e:eb:d3:c8:af:89:61:0e:81:6c:82:7a:a9: 2e:53:c7:3f:aa:ae:2a:5d:93:4f:c0:f1:ae:13:1d: 52:aa:b6:e2:6c:af:74:c2:84:f5:a1:35:d9:e2:fc: 24:ca:c5:24:23:a4:05:d9:e9:c8:8b:f0:8d:52:3d: d2:4e:0e:76:6d:dc:3c:98:b3:b2:35:6a:ef:2f:36: 11:83:6f:7e:1d:0d:c8:8f:ec:5d:69:7a:5a:64:d5: 88:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:9F:73:BF:E8:68:AA:7D:A1:99:E2:47:68:10:58:32:8B:B9:1C:F6 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7d3cb66f-f779-4c78-bb1f-8532a6a972c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.124.147.0/24 Signature Algorithm: sha256WithRSAEncryption 36:13:e3:5f:22:fc:0d:b9:26:ad:b0:91:25:b1:0a:65:78:43: 1b:cf:51:15:77:1f:19:31:8f:df:57:07:32:77:03:cf:53:fb: bb:0b:4d:ed:a3:87:19:2a:54:c2:ab:ed:49:ca:1d:bd:2d:a6: 0f:29:90:41:36:b7:fa:00:94:98:bb:26:7e:d8:b9:5c:50:e1: 9f:a8:9e:8f:79:b9:59:2e:00:e4:08:31:38:65:4f:f6:7d:52: a6:4a:5a:26:9e:b9:76:c9:1a:d9:a8:20:03:96:77:c3:cb:4b: 9a:57:ae:df:be:93:17:b7:81:c2:bd:44:21:59:50:8d:60:e8: 24:58:ce:5d:01:f2:bd:52:69:fd:07:e1:e0:90:4e:ef:00:8f: 96:82:6e:c0:1a:07:18:58:6a:fc:7d:9b:2b:a9:08:85:51:a9: c0:e4:c5:7b:15:e7:1b:dc:b3:34:21:63:87:41:01:fa:80:6b: 2c:71:1b:8d:75:ea:a9:47:96:d2:50:e8:14:da:6f:87:95:81: b4:04:53:67:83:51:73:b8:ab:4b:d6:78:c5:93:83:ef:77:d8: f1:31:e4:9c:55:78:70:c1:63:a5:71:84:b6:b5:04:0c:a0:e8: 90:1f:0f:59:20:69:c6:b1:b5:ea:6a:b2:05:37:32:d6:b0:fe: 2f:90:d3:b7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUB0rnT6iUa6QLNSHK6pvJM/r48TUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE2MTY1MTQ0WhcNMjUxMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A0MjA3YzdmODdhMDhjZGIwZjYxZGYxNTg4ODRjM2Y2M2Uw YWE1MTRkNDRkYmJkYjhkN2NlZjNhZGViOGU1MjVlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDvcVnOudem6pzEKBVsDCsbw4OR6h+oqy+WOn7kxLNY0aLn xBuK0pH4nOWYZd7FuViMJKBIZ1jKIUeViNnJgRTrVy1siAbufitUdSe6JJIJmVrR 79dFvRoOjGaCzbdf7BJPsCUlZvimUnll8iN3utFIJfGmiwdCABZX0QOmspLBCqUk NDK/EfDbyFQIpxSeiUApXoAuVBBdR6n099yA96rRqLWDLG9LPuvTyK+JYQ6BbIJ6 qS5Txz+qripdk0/A8a4THVKqtuJsr3TChPWhNdni/CTKxSQjpAXZ6ciL8I1SPdJO DnZt3DyYs7I1au8vNhGDb34dDciP7F1pelpk1YjnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUx59zv+hoqn2hmeJHaBBYMou5HPYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzdkM2NiNjZmLWY3NzktNGM3OC1iYjFmLTg1MzJhNmE5NzJjMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0fJMwDQYJKoZIhvcNAQELBQADggEBADYT418i/A25Jq2wkSWxCmV4QxvP URV3Hxkxj99XBzJ3A89T+7sLTe2jhxkqVMKr7UnKHb0tpg8pkEE2t/oAlJi7Jn7Y uVxQ4Z+ono95uVkuAOQIMThlT/Z9UqZKWiaeuXbJGtmoIAOWd8PLS5pXrt++kxe3 gcK9RCFZUI1g6CRYzl0B8r1Saf0H4eCQTu8Aj5aCbsAaBxhYavx9myupCIVRqcDk xXsV5xvcszQhY4dBAfqAayxxG4116qlHltJQ6BTab4eVgbQEU2eDUXO4q0vWeMWT g+932PEx5JxVeHDBY6VxhLa1BAyg6JAfD1kgacaxtepqsgU3Mtaw/i+Q07c= -----END CERTIFICATE-----Generated at Mon Oct 20 02:59:42 2025 by rpki-client