$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8f39fa74-3b7d-4315-a2f0-0ca64498ac72.roa File: 8f39fa74-3b7d-4315-a2f0-0ca64498ac72.roa (raw, json) Hash identifier: 3EHUfJbc7W5YEyWBOk8NSDu/tkuH+6Bvgfd4H6S9lHw= Subject key identifier: 14:6C:F4:2D:6D:9D:3A:F0:B9:73:E1:DF:6C:C2:6B:5B:93:36:A8:1C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5CB3CF53723D845D8B24098743A3B0CAF4329113 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8f39fa74-3b7d-4315-a2f0-0ca64498ac72.roa Signing time: Sat 18 Oct 2025 08:51:30 +0000 ROA not before: Sat 18 Oct 2025 08:51:30 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.84.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:b3:cf:53:72:3d:84:5d:8b:24:09:87:43:a3:b0:ca:f4:32:91:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 08:51:30 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=31916ccd656087a5ecd3167a27e6bd216258ff10ec2a61c42d068179f1207957, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2f:e2:b1:cd:64:fa:52:81:70:72:32:0d:23: d3:de:ca:c8:25:07:16:27:ae:da:dc:93:68:87:03: 82:7f:d1:39:af:08:04:14:bd:ac:20:34:3a:9d:56: cf:cc:7c:92:12:5f:40:b3:60:1f:54:d6:ab:f6:57: d9:a2:ae:08:d8:94:2e:32:99:81:a3:de:0d:6d:db: 76:0c:43:bc:51:5f:33:98:25:42:81:1f:22:77:ed: 79:32:35:5b:be:36:39:2c:8d:3e:3e:78:b7:e1:d0: b9:0f:b4:46:b1:c7:34:db:1a:30:54:7b:45:a8:e9: ac:03:8d:c8:c8:ab:b5:6d:9f:94:3e:f3:a0:f6:41: de:34:9f:22:02:39:c3:3a:8b:9e:cc:28:1a:e5:b5: 72:3c:ce:94:2b:39:1a:a3:2d:1d:3a:51:c0:ee:c9: b4:cf:0f:96:b8:ab:74:4e:ab:d9:31:ce:b4:9f:87: 45:0c:5a:61:1b:e8:bd:f6:d4:69:19:e2:0a:80:7c: 03:ce:a9:3e:00:04:99:03:a1:43:6c:d2:7d:f1:b1: bd:7b:ed:6d:75:e9:e7:a6:a4:66:3c:99:21:c7:03: 40:c0:6f:ab:0a:88:be:0b:90:0f:7e:d2:34:a2:9f: ff:0f:59:b0:d6:73:f3:3d:f8:21:34:b2:1b:56:57: 50:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:6C:F4:2D:6D:9D:3A:F0:B9:73:E1:DF:6C:C2:6B:5B:93:36:A8:1C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8f39fa74-3b7d-4315-a2f0-0ca64498ac72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.84.173.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:6e:1c:ae:b5:be:34:e3:31:53:b2:a8:64:52:38:00:9a:58: 4a:f6:d1:f0:a0:ad:7e:22:85:bf:cd:68:cc:7d:39:6f:e1:45: 4f:5a:5c:69:57:8b:3e:9e:7e:00:13:61:e5:a9:c0:bb:15:de: aa:e5:56:ac:06:86:f5:4a:07:f4:44:cb:e7:8a:62:91:69:5f: e6:9e:09:12:39:4e:a5:b0:79:e0:82:d0:d2:f1:11:78:5a:ad: 2e:39:06:10:43:05:94:e3:ca:46:6e:75:50:e3:13:54:3f:75: e1:2d:c2:fa:db:fe:99:19:ea:84:bf:68:13:c8:fe:a4:fa:35: 60:b5:8e:86:4c:54:65:e9:d2:7e:81:35:7c:f6:7b:86:5a:a6: 94:5e:70:bd:22:7c:ae:46:5a:33:5e:49:b9:43:b8:ab:78:f9: 0d:63:09:75:8f:8a:88:b2:31:75:81:69:31:68:fb:3d:9e:a6: 97:e0:ac:bb:76:69:8d:cc:34:56:89:d7:49:a5:cb:c6:10:e0: 50:86:4f:9b:e3:b7:c6:ed:79:dd:d1:e0:4a:73:ac:85:38:1b: 15:b7:18:c1:28:4f:ee:7f:d0:ee:82:14:f3:95:5f:85:eb:cb: c6:96:e3:54:b5:f5:21:ee:bb:72:e0:5b:31:d2:9b:03:30:19: ad:81:55:a5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXLPPU3I9hF2LJAmHQ6OwyvQykRMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MDg1MTMwWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AzMTkxNmNjZDY1NjA4N2E1ZWNkMzE2N2EyN2U2YmQyMTYy NThmZjEwZWMyYTYxYzQyZDA2ODE3OWYxMjA3OTU3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7L+KxzWT6UoFwcjINI9PeysglBxYnrtrck2iHA4J/0Tmv CAQUvawgNDqdVs/MfJISX0CzYB9U1qv2V9mirgjYlC4ymYGj3g1t23YMQ7xRXzOY JUKBHyJ37XkyNVu+NjksjT4+eLfh0LkPtEaxxzTbGjBUe0Wo6awDjcjIq7Vtn5Q+ 86D2Qd40nyICOcM6i57MKBrltXI8zpQrORqjLR06UcDuybTPD5a4q3ROq9kxzrSf h0UMWmEb6L321GkZ4gqAfAPOqT4ABJkDoUNs0n3xsb177W116eempGY8mSHHA0DA b6sKiL4LkA9+0jSin/8PWbDWc/M9+CE0shtWV1CdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUFGz0LW2dOvC5c+HfbMJrW5M2qBwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzhmMzlmYTc0LTNiN2QtNDMxNS1hMmYwLTBjYTY0NDk4YWM3Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0VK0wDQYJKoZIhvcNAQELBQADggEBAG5uHK61vjTjMVOyqGRSOACaWEr2 0fCgrX4ihb/NaMx9OW/hRU9aXGlXiz6efgATYeWpwLsV3qrlVqwGhvVKB/REy+eK YpFpX+aeCRI5TqWweeCC0NLxEXharS45BhBDBZTjykZudVDjE1Q/deEtwvrb/pkZ 6oS/aBPI/qT6NWC1joZMVGXp0n6BNXz2e4ZappRecL0ifK5GWjNeSblDuKt4+Q1j CXWPioiyMXWBaTFo+z2eppfgrLt2aY3MNFaJ10mly8YQ4FCGT5vjt8bted3R4Epz rIU4GxW3GMEoT+5/0O6CFPOVX4Xry8aW41S19SHuu3LgWzHSmwMwGa2BVaU= -----END CERTIFICATE-----Generated at Mon Oct 20 11:10:09 2025 by rpki-client