$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ac0690bf-6485-464e-a7d2-10dd7b2d1afd.roa File: ac0690bf-6485-464e-a7d2-10dd7b2d1afd.roa (raw, json) Hash identifier: x0MjEtsmH0A713YI2FR30sL4FktFb/CJWQBQpeC6vfE= Subject key identifier: 84:F1:B5:27:2E:3F:02:C9:4B:B2:20:0A:D1:D4:7B:8A:35:67:92:9F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 51A8D7A5E91FBF419E9F8A200D73440F354081D5 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ac0690bf-6485-464e-a7d2-10dd7b2d1afd.roa Signing time: Sun 19 Oct 2025 07:12:25 +0000 ROA not before: Sun 19 Oct 2025 07:12:25 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.84.236.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:a8:d7:a5:e9:1f:bf:41:9e:9f:8a:20:0d:73:44:0f:35:40:81:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 07:12:25 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=2767bc1c3c2ce1bb10ac769a2738232ae12c14c825de8f4843e2da01dbc16464, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:97:6a:81:ea:4f:73:30:b6:92:a2:ae:4d:eb: 52:c0:8d:15:68:37:53:1a:2d:f2:04:90:90:89:14: b8:46:7a:89:5e:e8:5e:88:42:8c:20:a7:6e:5b:d2: a4:84:ae:6e:4e:0b:fd:88:47:87:5b:3f:c9:6a:8c: 89:c6:19:ea:84:49:10:d2:5c:6a:73:95:76:06:ea: b5:18:7c:bc:00:70:66:34:6c:81:55:d0:13:d0:fa: 50:12:38:a6:ef:e6:6d:45:27:e2:30:8e:77:42:8b: da:f1:62:dc:18:1b:e0:ac:7a:9d:55:ac:ce:94:50: eb:bc:4e:f8:6a:ad:22:bf:7e:25:45:91:db:26:c8: c2:0c:0f:86:c3:a3:87:5c:aa:4e:be:8a:82:2b:2c: d2:77:8f:aa:05:24:99:5e:60:6c:8b:ca:95:3a:61: fd:44:94:b6:dc:2f:5f:48:df:98:03:88:59:e7:95: 45:15:54:0d:11:68:e5:91:c5:8d:fb:02:97:49:c0: c3:ef:aa:5a:45:4a:7c:ca:7a:ed:0a:64:b7:34:88: a7:3a:40:8a:f0:9d:a8:9d:62:77:b3:8c:81:97:3d: f7:3a:88:10:f3:ed:d6:2a:a7:8b:88:9d:8f:79:ec: 43:60:3b:c1:13:fe:6a:f0:83:d7:39:1f:3c:16:6b: 82:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:F1:B5:27:2E:3F:02:C9:4B:B2:20:0A:D1:D4:7B:8A:35:67:92:9F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ac0690bf-6485-464e-a7d2-10dd7b2d1afd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.84.236.0/23 Signature Algorithm: sha256WithRSAEncryption 1c:c3:cd:83:74:43:0c:db:83:8e:d0:72:d5:bb:ef:45:f2:2d: 86:3b:e7:9c:f9:66:ec:c9:d4:9e:58:7b:90:cf:a6:5a:7c:1e: 03:67:a6:cb:5c:87:fc:6c:f9:48:57:63:c7:a1:cc:63:5b:cd: a3:bf:8c:5e:e8:e1:40:ee:12:84:23:42:7a:1f:5e:d5:f5:f3: 21:48:aa:c4:d8:a5:05:84:57:99:0e:13:8b:12:c1:a9:1b:54: 9d:1c:c8:bf:60:ed:31:cf:59:9e:66:57:7d:75:ce:1b:14:93: 09:ea:6f:31:2f:6f:7f:c3:29:14:3e:47:17:18:b5:61:ce:ff: 5c:ef:c3:0d:55:51:f1:93:6e:1b:a8:db:1b:a3:d7:8b:3a:01: 73:3d:c2:ae:ef:48:88:a9:0a:2f:76:a7:02:d1:90:db:0c:c2: cc:8a:38:39:3a:29:d0:d0:ba:94:f4:dc:1a:cc:fc:a2:42:1b: 92:e7:d6:79:09:6c:9b:cc:60:72:1d:a3:6a:3f:fa:23:c7:92: c5:48:e2:0d:54:58:6d:23:6c:bc:93:5c:16:12:38:9a:06:75: 5c:87:38:b8:6a:31:a9:b3:c2:e9:a2:0a:09:53:05:58:54:ef: bf:ae:b4:b9:be:0f:1a:49:2a:9b:19:72:f4:b6:95:32:32:8e: 02:21:e7:68 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUajXpekfv0Gen4ogDXNEDzVAgdUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MDcxMjI1WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AyNzY3YmMxYzNjMmNlMWJiMTBhYzc2OWEyNzM4MjMyYWUx MmMxNGM4MjVkZThmNDg0M2UyZGEwMWRiYzE2NDY0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCRl2qB6k9zMLaSoq5N61LAjRVoN1MaLfIEkJCJFLhGeole 6F6IQowgp25b0qSErm5OC/2IR4dbP8lqjInGGeqESRDSXGpzlXYG6rUYfLwAcGY0 bIFV0BPQ+lASOKbv5m1FJ+IwjndCi9rxYtwYG+Csep1VrM6UUOu8TvhqrSK/fiVF kdsmyMIMD4bDo4dcqk6+ioIrLNJ3j6oFJJleYGyLypU6Yf1ElLbcL19I35gDiFnn lUUVVA0RaOWRxY37ApdJwMPvqlpFSnzKeu0KZLc0iKc6QIrwnaidYnezjIGXPfc6 iBDz7dYqp4uInY957ENgO8ET/mrwg9c5HzwWa4LZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUhPG1Jy4/AslLsiAK0dR7ijVnkp8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2FjMDY5MGJmLTY0ODUtNDY0ZS1hN2QyLTEwZGQ3YjJkMWFmZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE0VOwwDQYJKoZIhvcNAQELBQADggEBABzDzYN0Qwzbg47QctW770XyLYY7 55z5ZuzJ1J5Ye5DPplp8HgNnpstch/xs+UhXY8ehzGNbzaO/jF7o4UDuEoQjQnof XtX18yFIqsTYpQWEV5kOE4sSwakbVJ0cyL9g7THPWZ5mV311zhsUkwnqbzEvb3/D KRQ+RxcYtWHO/1zvww1VUfGTbhuo2xuj14s6AXM9wq7vSIipCi92pwLRkNsMwsyK ODk6KdDQupT03BrM/KJCG5Ln1nkJbJvMYHIdo2o/+iPHksVI4g1UWG0jbLyTXBYS OJoGdVyHOLhqMamzwumiCglTBVhU77+utLm+DxpJKpsZcvS2lTIyjgIh52g= -----END CERTIFICATE-----Generated at Mon Oct 20 11:08:38 2025 by rpki-client