$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9d3b5607-f43c-43ba-bd4c-7dcac9db1a97.roa File: 9d3b5607-f43c-43ba-bd4c-7dcac9db1a97.roa (raw, json) Hash identifier: mn8ehn9aNVPAh8NcXBJkVqRYOSeVO5wIRoz6bXtIMDA= Subject key identifier: F5:79:2F:36:97:25:59:2A:17:F3:DF:C9:28:43:AD:80:91:13:D9:1E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3B76C4E299A80EC9B9889902DAB576F766EE274D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9d3b5607-f43c-43ba-bd4c-7dcac9db1a97.roa Signing time: Sun 19 Oct 2025 07:20:12 +0000 ROA not before: Sun 19 Oct 2025 07:20:12 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.85.136.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:76:c4:e2:99:a8:0e:c9:b9:88:99:02:da:b5:76:f7:66:ee:27:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 07:20:12 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=606513dfd612ac5d5f3bf4ff93fc23315799af2ee93774b6cc575203c75752c3, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:fc:8e:50:4d:05:49:d7:81:e6:83:10:88:5b: 44:0b:41:55:9b:5d:fb:89:1d:8b:0c:ce:44:6a:7f: 87:38:e9:27:3b:79:0f:49:56:82:7a:a0:7c:1c:0d: da:d5:91:0d:fe:f6:b3:3d:0c:ec:7c:e6:00:92:1d: ed:54:37:29:bd:69:59:f6:ee:7d:f2:e5:fa:76:f3: 7f:24:ab:e2:82:f0:dd:20:65:32:c4:e2:fa:2b:02: 3b:39:f5:7d:ea:af:a9:b5:bc:25:b2:36:96:87:c7: e2:bc:9b:c4:b5:a1:17:9f:aa:b1:c7:c3:2e:24:5b: bb:21:28:be:30:4f:cc:8a:23:c1:d4:de:d2:d7:4f: 61:38:b6:d8:7e:e6:cc:03:ff:bf:97:a8:97:00:e3: 74:8e:5f:9e:42:73:fb:8b:e3:3c:31:74:e9:5d:8c: ce:c7:b0:34:05:a0:eb:ef:73:63:0b:ed:b4:88:08: e9:28:e0:35:ed:a3:99:ff:cf:fd:14:c7:71:f4:e5: c0:e8:66:ce:81:0e:82:7c:4e:32:77:27:ca:2b:9d: a6:55:f6:a1:81:08:e3:0e:66:c0:28:42:3a:5c:79: 35:6b:bb:fb:bd:7b:90:c4:c3:30:98:b9:1f:d7:98: 42:20:64:ad:14:f5:30:d6:ba:db:05:a4:2e:9c:56: fa:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:79:2F:36:97:25:59:2A:17:F3:DF:C9:28:43:AD:80:91:13:D9:1E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9d3b5607-f43c-43ba-bd4c-7dcac9db1a97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.85.136.0/23 Signature Algorithm: sha256WithRSAEncryption 2b:ad:f7:e8:10:c4:ac:c8:93:3f:54:fe:83:d4:33:17:4e:9e: 94:c3:1a:db:f9:1c:5b:4e:76:c1:f8:c0:00:81:51:f1:ad:66: 33:70:71:6e:f0:2a:49:33:66:29:2e:20:04:be:13:3b:2c:6d: 5c:6a:68:fd:0e:63:81:e8:2e:cf:7c:12:85:c6:67:98:ce:5d: 91:b2:c9:1c:4f:89:09:24:bc:93:72:14:71:f7:db:55:00:b7: 7b:18:1f:05:ec:90:af:d4:ba:94:0c:10:56:d9:fd:7b:68:ee: 37:4f:49:17:9e:b4:e3:df:31:2f:30:fe:92:05:a2:57:6a:3f: 99:29:4b:0d:5c:af:d4:0e:a4:79:55:c8:dd:bf:64:f1:39:e7: 68:35:d0:84:81:30:d1:0e:67:97:14:62:e3:c7:ea:9a:64:2b: dd:c8:48:10:6a:20:bf:21:41:6f:e5:ab:1f:a2:33:42:fb:24: 84:e1:f6:fa:6b:37:c7:ee:ba:79:f2:90:22:87:be:35:b7:aa: 13:c4:81:67:ea:1b:aa:af:05:df:8e:80:a9:93:34:ce:1f:0b: 34:c3:6d:4e:d1:76:18:93:31:1d:18:57:a2:a8:9f:c9:23:7f: a7:f4:ae:d0:fb:9a:e7:48:14:39:95:16:8b:83:63:04:9d:41: 98:01:cb:48 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUO3bE4pmoDsm5iJkC2rV292buJ00wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MDcyMDEyWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A2MDY1MTNkZmQ2MTJhYzVkNWYzYmY0ZmY5M2ZjMjMzMTU3 OTlhZjJlZTkzNzc0YjZjYzU3NTIwM2M3NTc1MmMzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCa/I5QTQVJ14HmgxCIW0QLQVWbXfuJHYsMzkRqf4c46Sc7 eQ9JVoJ6oHwcDdrVkQ3+9rM9DOx85gCSHe1UNym9aVn27n3y5fp2838kq+KC8N0g ZTLE4vorAjs59X3qr6m1vCWyNpaHx+K8m8S1oRefqrHHwy4kW7shKL4wT8yKI8HU 3tLXT2E4tth+5swD/7+XqJcA43SOX55Cc/uL4zwxdOldjM7HsDQFoOvvc2ML7bSI COko4DXto5n/z/0Ux3H05cDoZs6BDoJ8TjJ3J8ornaZV9qGBCOMOZsAoQjpceTVr u/u9e5DEwzCYuR/XmEIgZK0U9TDWutsFpC6cVvpdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU9XkvNpclWSoX89/JKEOtgJET2R4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzlkM2I1NjA3LWY0M2MtNDNiYS1iZDRjLTdkY2FjOWRiMWE5Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE0VYgwDQYJKoZIhvcNAQELBQADggEBACut9+gQxKzIkz9U/oPUMxdOnpTD Gtv5HFtOdsH4wACBUfGtZjNwcW7wKkkzZikuIAS+EzssbVxqaP0OY4HoLs98EoXG Z5jOXZGyyRxPiQkkvJNyFHH321UAt3sYHwXskK/UupQMEFbZ/Xto7jdPSReetOPf MS8w/pIFoldqP5kpSw1cr9QOpHlVyN2/ZPE552g10ISBMNEOZ5cUYuPH6ppkK93I SBBqIL8hQW/lqx+iM0L7JITh9vprN8fuunnykCKHvjW3qhPEgWfqG6qvBd+OgKmT NM4fCzTDbU7RdhiTMR0YV6Kon8kjf6f0rtD7mudIFDmVFouDYwSdQZgBy0g= -----END CERTIFICATE-----Generated at Mon Oct 20 02:57:11 2025 by rpki-client