$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/80f21ab3-6127-4fe5-b618-c416c56e6f8d.roa File: 80f21ab3-6127-4fe5-b618-c416c56e6f8d.roa (raw, json) Hash identifier: +rTdwUJXG/I6x/Hin1niRaFo9P05tRsd0Y5PVXwVLcI= Subject key identifier: 78:EF:C9:2C:54:8D:4E:76:E4:7F:EE:11:23:D6:A5:1E:BB:07:5C:0C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 32DDA4D53218CB72EC40668E3AD4FB1B4EAF43F0 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/80f21ab3-6127-4fe5-b618-c416c56e6f8d.roa Signing time: Sun 19 Oct 2025 07:31:27 +0000 ROA not before: Sun 19 Oct 2025 07:31:27 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.84.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:dd:a4:d5:32:18:cb:72:ec:40:66:8e:3a:d4:fb:1b:4e:af:43:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 07:31:27 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=b3afd33c89d1af7d32270b54a2ea82ebf6f0db7c3bcc53b533928893119e84b7, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:7b:18:f2:0c:f3:d8:73:fb:f7:a7:6c:75:07: b0:6b:5f:fe:06:3c:92:7a:8b:cd:7a:37:65:8e:e2: aa:e8:e2:0e:87:e7:63:e9:eb:f3:f8:ec:ec:78:43: b7:fb:81:21:45:be:d4:40:92:59:40:4b:6b:a9:ea: 13:83:c9:46:cc:2f:b8:6e:86:3e:3a:a0:9b:f3:06: 87:33:f4:8a:79:d9:50:fb:4c:e8:17:8a:6f:9a:9a: 77:51:fa:8b:4f:69:11:65:9d:54:19:5d:99:a5:10: 21:a1:81:6b:9d:3f:47:07:da:e5:3f:1d:a1:ca:7f: 30:35:55:c9:ec:b7:77:59:91:14:4c:3c:41:ad:34: 98:47:4c:71:40:b7:f8:9a:e0:62:c2:4b:80:9c:e2: 56:46:75:47:70:20:1b:2c:f8:d1:28:6f:66:7b:83: 44:ac:c8:cb:0d:c8:a8:16:ec:58:5e:49:b2:5c:45: 42:5d:8b:d6:fa:05:e1:30:45:b2:2f:5b:37:ae:17: f1:8f:d2:21:27:f7:02:eb:81:82:0a:39:44:80:0b: 91:76:3b:6c:ca:75:ad:e0:0a:39:aa:2d:2e:6d:e3: de:4e:35:a5:ec:12:f7:d8:f3:85:c2:e4:4a:aa:77: b3:05:3c:2d:b1:ce:f5:12:d1:30:d8:8b:73:44:6d: 90:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:EF:C9:2C:54:8D:4E:76:E4:7F:EE:11:23:D6:A5:1E:BB:07:5C:0C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/80f21ab3-6127-4fe5-b618-c416c56e6f8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.84.84.0/22 Signature Algorithm: sha256WithRSAEncryption 3a:ee:44:df:65:2b:6f:98:0a:4f:f6:c7:67:93:3d:1d:67:e4: 2d:ba:ad:e8:48:5e:03:14:4b:a9:94:8a:51:b6:a3:fb:95:d4: ef:73:2a:ba:64:3c:ec:e6:69:6b:33:3a:a2:ba:5b:30:b1:b2: 1f:5d:65:3b:6c:6f:97:73:90:1f:b1:81:0b:24:83:4b:39:b3: 80:ba:59:11:b6:dd:af:2e:be:49:51:e4:46:10:1f:09:73:7d: 91:37:ad:31:b9:6f:82:23:a5:fe:b3:93:8a:c5:73:74:89:06: 12:71:90:96:31:f2:04:a6:52:42:34:6e:62:21:ab:9f:40:a2: 14:fe:0a:15:bb:ca:40:83:2e:9e:4a:d0:8e:31:f8:3a:4d:d7: 96:bc:b5:90:51:db:4c:9c:55:9f:a2:46:d0:ed:e8:95:29:4e: 28:93:d7:9d:f6:a1:b3:a0:a8:ee:3a:23:c4:af:16:45:97:12: 93:a1:08:ca:a1:13:ed:76:61:8b:84:cd:4d:d8:37:d5:f8:1f: 3a:3b:13:b3:83:c9:53:c4:e0:d9:5a:bb:bf:ec:6a:d6:27:4d: 30:2b:df:43:40:51:d3:86:38:ed:36:36:cb:da:43:7b:9f:17: d2:23:a6:25:e2:55:90:f5:fb:4e:cd:7c:29:76:97:e0:68:19: 07:dc:ed:13 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMt2k1TIYy3LsQGaOOtT7G06vQ/AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MDczMTI3WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BiM2FmZDMzYzg5ZDFhZjdkMzIyNzBiNTRhMmVhODJlYmY2 ZjBkYjdjM2JjYzUzYjUzMzkyODg5MzExOWU4NGI3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDpexjyDPPYc/v3p2x1B7BrX/4GPJJ6i816N2WO4qro4g6H 52Pp6/P47Ox4Q7f7gSFFvtRAkllAS2up6hODyUbML7huhj46oJvzBocz9Ip52VD7 TOgXim+amndR+otPaRFlnVQZXZmlECGhgWudP0cH2uU/HaHKfzA1Vcnst3dZkRRM PEGtNJhHTHFAt/ia4GLCS4Cc4lZGdUdwIBss+NEob2Z7g0SsyMsNyKgW7FheSbJc RUJdi9b6BeEwRbIvWzeuF/GP0iEn9wLrgYIKOUSAC5F2O2zKda3gCjmqLS5t495O NaXsEvfY84XC5Eqqd7MFPC2xzvUS0TDYi3NEbZAvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUeO/JLFSNTnbkf+4RI9alHrsHXAwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzgwZjIxYWIzLTYxMjctNGZlNS1iNjE4LWM0MTZjNTZlNmY4ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI0VFQwDQYJKoZIhvcNAQELBQADggEBADruRN9lK2+YCk/2x2eTPR1n5C26 rehIXgMUS6mUilG2o/uV1O9zKrpkPOzmaWszOqK6WzCxsh9dZTtsb5dzkB+xgQsk g0s5s4C6WRG23a8uvklR5EYQHwlzfZE3rTG5b4Ijpf6zk4rFc3SJBhJxkJYx8gSm UkI0bmIhq59AohT+ChW7ykCDLp5K0I4x+DpN15a8tZBR20ycVZ+iRtDt6JUpTiiT 1532obOgqO46I8SvFkWXEpOhCMqhE+12YYuEzU3YN9X4Hzo7E7ODyVPE4Nlau7/s atYnTTAr30NAUdOGOO02NsvaQ3ufF9IjpiXiVZD1+07NfCl2l+BoGQfc7RM= -----END CERTIFICATE-----Generated at Mon Oct 20 12:20:50 2025 by rpki-client