$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/acfe68d6-b8d6-4c75-ba21-2e98007168ad.roa File: acfe68d6-b8d6-4c75-ba21-2e98007168ad.roa (raw, json) Hash identifier: gc8FB157OOjuVuP+miklz7T/BBUWLffluIHGUwEbBE8= Subject key identifier: 0C:39:3B:44:42:90:47:54:6F:3B:23:AF:ED:C6:36:D9:80:95:27:7F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 03299BEBCF042F7F24795D09924E9B22596DC527 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/acfe68d6-b8d6-4c75-ba21-2e98007168ad.roa Signing time: Mon 13 Oct 2025 17:46:20 +0000 ROA not before: Mon 13 Oct 2025 17:46:20 +0000 ROA not after: Mon 17 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 52.90.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:29:9b:eb:cf:04:2f:7f:24:79:5d:09:92:4e:9b:22:59:6d:c5:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 13 17:46:20 2025 GMT Not After : Nov 17 23:59:59 2025 GMT Subject: serialNumber=ebefb8b1296f89d4b7bc56b62571df454eedd0e3f7bbe099d936b77de355c56e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:3e:69:d4:82:33:32:7f:fc:6e:81:46:af:1b: 26:36:b6:38:2c:62:5c:28:b7:ad:8e:16:e0:dd:dd: 4d:b3:9a:50:54:9a:c0:da:8e:f9:6a:71:f7:64:a4: a1:b7:86:6c:a9:bf:36:6a:b5:66:6d:89:49:6c:35: ed:27:69:6b:84:90:51:28:82:a1:d9:79:7d:6b:e2: a0:88:6b:0c:70:9c:6e:43:47:19:a8:21:55:61:6d: c0:cd:c3:e1:fa:aa:5d:23:14:bc:b2:f4:83:b4:4e: fc:cb:33:a7:a4:82:3f:83:78:38:39:61:4e:fb:a4: b4:b1:cf:07:f2:2a:e8:03:24:8e:f7:05:e6:6f:ed: b6:a2:99:07:e9:64:a1:cd:78:7d:ec:bc:92:d0:3c: 76:a5:38:e2:30:df:c0:c1:69:68:93:98:bf:3d:c8: 1c:ca:e4:3d:eb:4c:85:bd:0a:ae:8a:d6:14:0e:0b: cf:38:1e:1f:c1:b9:47:3c:4b:f8:35:1f:fe:8f:03: 7c:9e:68:50:25:70:dd:50:73:03:33:91:ab:ff:44: e3:93:a0:19:0d:0e:ee:1e:a5:ed:ee:fc:56:8f:65: f0:81:db:f7:c5:eb:4f:33:2f:99:3d:d0:a6:4c:56: 68:50:73:8b:cc:5d:4d:25:75:53:5a:29:eb:f9:64: 39:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:39:3B:44:42:90:47:54:6F:3B:23:AF:ED:C6:36:D9:80:95:27:7F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/acfe68d6-b8d6-4c75-ba21-2e98007168ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.90.0.0/15 Signature Algorithm: sha256WithRSAEncryption 47:18:19:e9:29:5a:c2:0e:88:ec:60:34:75:b0:43:0f:51:88: 5b:4f:9c:50:81:33:7b:07:a1:67:76:31:97:a1:83:8e:75:8e: 77:fe:76:5c:23:67:2c:3e:96:69:fb:99:70:3b:1e:3e:93:ad: 74:05:dc:79:cc:ae:b0:da:6a:ec:e7:13:6d:4f:96:af:73:da: 99:c8:6a:5f:d4:1a:ed:08:76:f8:6f:94:7a:d5:46:fd:f2:52: 65:46:df:0a:58:4a:71:90:06:be:d9:ea:ee:0c:ae:0b:5f:7f: 20:77:68:4c:2b:69:8e:2c:ea:54:f1:a8:fc:fe:7a:39:59:03: ab:c7:69:37:c9:01:a4:cb:2e:6f:75:8a:27:39:fe:77:54:66: 5f:16:c1:b8:c9:96:39:56:67:d4:b9:5d:c3:c6:d4:38:a3:f4: c3:b8:03:f1:16:33:04:68:38:36:3a:81:03:06:6f:ea:b0:87: f5:6c:71:ec:77:46:3e:bb:a2:ab:4d:db:01:d0:44:f8:69:df: bb:cf:f7:ec:4a:4f:05:80:09:a8:fd:55:70:f9:30:6c:99:89: c6:cd:f7:7d:29:fc:a9:ef:f6:bb:ee:b3:a0:10:11:4f:cf:e0: ef:d5:7d:dc:b3:05:c8:84:21:c2:97:92:69:09:08:0d:df:66: 70:d1:89:14 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUAymb688EL38keV0Jkk6bIlltxScwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDEzMTc0NjIwWhcNMjUxMTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0BlYmVmYjhiMTI5NmY4OWQ0YjdiYzU2YjYyNTcxZGY0NTRl ZWRkMGUzZjdiYmUwOTlkOTM2Yjc3ZGUzNTVjNTZlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDWPmnUgjMyf/xugUavGyY2tjgsYlwot62OFuDd3U2zmlBU msDajvlqcfdkpKG3hmypvzZqtWZtiUlsNe0naWuEkFEogqHZeX1r4qCIawxwnG5D RxmoIVVhbcDNw+H6ql0jFLyy9IO0TvzLM6ekgj+DeDg5YU77pLSxzwfyKugDJI73 BeZv7baimQfpZKHNeH3svJLQPHalOOIw38DBaWiTmL89yBzK5D3rTIW9Cq6K1hQO C884Hh/BuUc8S/g1H/6PA3yeaFAlcN1QcwMzkav/ROOToBkNDu4epe3u/FaPZfCB 2/fF608zL5k90KZMVmhQc4vMXU0ldVNaKev5ZDn1AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUDDk7REKQR1RvOyOv7cY22YCVJ38wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2FjZmU2OGQ2LWI4ZDYtNGM3NS1iYTIxLTJlOTgwMDcxNjhhZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwE0WjANBgkqhkiG9w0BAQsFAAOCAQEARxgZ6Slawg6I7GA0dbBDD1GIW0+c UIEzewehZ3Yxl6GDjnWOd/52XCNnLD6WafuZcDsePpOtdAXcecyusNpq7OcTbU+W r3PamchqX9Qa7Qh2+G+UetVG/fJSZUbfClhKcZAGvtnq7gyuC19/IHdoTCtpjizq VPGo/P56OVkDq8dpN8kBpMsub3WKJzn+d1RmXxbBuMmWOVZn1Lldw8bUOKP0w7gD 8RYzBGg4NjqBAwZv6rCH9Wxx7HdGPruiq03bAdBE+Gnfu8/37EpPBYAJqP1VcPkw bJmJxs33fSn8qe/2u+6zoBART8/g79V93LMFyIQhwpeSaQkIDd9mcNGJFA== -----END CERTIFICATE-----Generated at Sun Oct 19 23:04:29 2025 by rpki-client