$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9ad9b661-22c9-4b77-818c-fb66c5257fa4.roa File: 9ad9b661-22c9-4b77-818c-fb66c5257fa4.roa (raw, json) Hash identifier: zck79Pz7A2nd0xIMC1sGQWVtD9bOrd4lfaB1XYrY/R4= Subject key identifier: 30:C6:6E:44:CD:55:53:54:3E:3D:A1:2A:19:12:5C:BB:A8:85:C9:05 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 594B722A38220FCEFE1449DB9A96585F7112D84E Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9ad9b661-22c9-4b77-818c-fb66c5257fa4.roa Signing time: Sat 18 Oct 2025 12:00:18 +0000 ROA not before: Sat 18 Oct 2025 12:00:18 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.84.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:4b:72:2a:38:22:0f:ce:fe:14:49:db:9a:96:58:5f:71:12:d8:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 12:00:18 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=1d6876d5eb3f250fcdbe08aa975a4aec8b5fe0d228922df5457504e965c6fcc0, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:92:d3:09:d0:51:b8:ca:0f:40:c7:77:32:a8: 17:df:df:a4:be:56:41:bd:eb:95:41:bb:06:13:f3: 3a:a2:23:aa:dc:dd:8e:d1:87:9e:7a:4a:9e:68:1a: 84:d6:e4:8a:83:2e:af:76:a3:6a:71:f1:c7:a3:91: 06:a1:c8:b3:92:d7:23:3b:ed:33:de:de:f6:0f:77: a4:30:95:18:ba:65:71:7a:4d:03:6f:92:ef:16:ed: 22:de:e1:90:a4:68:bf:b1:b6:d2:a6:e4:f7:40:22: d5:b3:1a:08:dc:ad:3e:6c:b7:ca:31:ba:de:82:47: 51:a9:1f:19:f7:01:ae:94:a1:4f:1a:33:73:35:f9: ba:d9:52:4b:2c:58:38:73:d6:55:05:84:bf:4c:eb: 1f:e8:75:19:69:00:88:c2:b2:f1:ed:3a:c5:cb:78: 58:7a:3d:d7:b8:a5:7f:71:9d:6c:7d:11:b5:9a:2a: ec:35:a8:7e:b7:fe:71:db:e4:79:48:2f:d1:bf:b8: e6:b1:ab:bd:7a:28:e6:28:11:41:8f:f9:d5:2d:1f: 51:ee:fa:06:cf:88:3f:ba:9b:9b:a4:15:4b:4a:03: cc:5a:6e:1d:69:85:02:65:70:dd:0e:ee:de:37:83: 4f:ee:d1:cf:9c:25:98:f6:09:ad:05:91:11:a1:5b: 60:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:C6:6E:44:CD:55:53:54:3E:3D:A1:2A:19:12:5C:BB:A8:85:C9:05 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9ad9b661-22c9-4b77-818c-fb66c5257fa4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.84.216.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:99:f2:1b:cd:35:82:fc:31:64:f4:90:86:45:5f:b8:a3:22: 70:b0:e5:35:13:26:6a:01:13:63:82:77:b8:32:49:47:f2:70: 69:6b:4c:38:ec:08:8a:f3:de:8b:d9:8a:c3:20:f2:97:97:76: 8d:3c:7b:1b:9f:5a:b1:db:f4:13:a3:6b:67:3b:e6:75:b8:91: 3d:2a:30:24:0d:f2:07:71:c0:bd:65:b4:7b:8d:b6:43:04:ef: f8:0d:93:da:ea:c3:cf:c8:af:73:0f:94:ca:95:09:79:03:d2: 2e:ee:f6:5f:39:82:52:d2:26:1f:71:03:80:48:54:49:45:40: ac:7c:68:2e:61:ce:7e:ec:a0:1c:d4:da:3b:cf:f5:a1:02:46: 1f:4d:7d:6b:12:4c:65:40:d9:4a:6f:29:b5:1c:db:fc:2d:c2: 18:d5:ce:36:6d:f5:ea:7f:4d:ba:c0:c0:a0:b1:c2:a4:63:e0: b2:ab:52:93:5f:a6:57:a1:59:c7:82:2c:0e:3a:45:55:6d:4d: 2a:aa:a6:a0:0a:e7:33:2c:08:40:3a:9b:04:52:33:f4:d3:14: 37:a2:ff:7e:94:a6:7e:2f:2d:5a:92:01:cf:e9:d8:49:e8:cb: 2e:ab:61:ed:dc:78:87:ba:f5:01:fb:3b:82:56:c7:8f:f0:3c: 20:34:44:5b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWUtyKjgiD87+FEnbmpZYX3ES2E4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTIwMDE4WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AxZDY4NzZkNWViM2YyNTBmY2RiZTA4YWE5NzVhNGFlYzhi NWZlMGQyMjg5MjJkZjU0NTc1MDRlOTY1YzZmY2MwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCmktMJ0FG4yg9Ax3cyqBff36S+VkG965VBuwYT8zqiI6rc 3Y7Rh556Sp5oGoTW5IqDLq92o2px8cejkQahyLOS1yM77TPe3vYPd6QwlRi6ZXF6 TQNvku8W7SLe4ZCkaL+xttKm5PdAItWzGgjcrT5st8oxut6CR1GpHxn3Aa6UoU8a M3M1+brZUkssWDhz1lUFhL9M6x/odRlpAIjCsvHtOsXLeFh6Pde4pX9xnWx9EbWa Kuw1qH63/nHb5HlIL9G/uOaxq716KOYoEUGP+dUtH1Hu+gbPiD+6m5ukFUtKA8xa bh1phQJlcN0O7t43g0/u0c+cJZj2Ca0FkRGhW2BDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUMMZuRM1VU1Q+PaEqGRJcu6iFyQUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzlhZDliNjYxLTIyYzktNGI3Ny04MThjLWZiNjZjNTI1N2ZhNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0VNgwDQYJKoZIhvcNAQELBQADggEBAE6Z8hvNNYL8MWT0kIZFX7ijInCw 5TUTJmoBE2OCd7gySUfycGlrTDjsCIrz3ovZisMg8peXdo08exufWrHb9BOja2c7 5nW4kT0qMCQN8gdxwL1ltHuNtkME7/gNk9rqw8/Ir3MPlMqVCXkD0i7u9l85glLS Jh9xA4BIVElFQKx8aC5hzn7soBzU2jvP9aECRh9NfWsSTGVA2UpvKbUc2/wtwhjV zjZt9ep/TbrAwKCxwqRj4LKrUpNfplehWceCLA46RVVtTSqqpqAK5zMsCEA6mwRS M/TTFDei/36Upn4vLVqSAc/p2Enoyy6rYe3ceIe69QH7O4JWx4/wPCA0RFs= -----END CERTIFICATE-----Generated at Mon Oct 20 08:44:03 2025 by rpki-client