$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aed9db2a-2d9d-4d5d-af31-4fc76b8eaf53.roa File: aed9db2a-2d9d-4d5d-af31-4fc76b8eaf53.roa (raw, json) Hash identifier: VFJhLqo+knEqYJ9gULu3nI11Rg3m5/v62yq3B8zvaR8= Subject key identifier: BC:04:E2:EF:57:DD:B3:42:9D:01:A2:1B:11:C2:3B:27:C3:F6:1F:76 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1DCBDAC2C9E2D0244B177B84E94754AC8148056D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aed9db2a-2d9d-4d5d-af31-4fc76b8eaf53.roa Signing time: Sun 19 Oct 2025 05:42:28 +0000 ROA not before: Sun 19 Oct 2025 05:42:28 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 52.46.164.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:cb:da:c2:c9:e2:d0:24:4b:17:7b:84:e9:47:54:ac:81:48:05:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 05:42:28 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=d521a70e4bfc6621f1ec80bd5832f8592f9ad56959f5be17c7a9607abb59af37, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:fd:e2:6f:03:5d:bb:50:df:6c:c4:c0:52:a1: df:cd:91:37:4d:93:2e:77:9a:9e:d8:42:5d:a8:82: 78:38:8b:9d:76:8c:05:be:55:33:86:79:fa:ac:f7: a8:e0:67:8c:98:40:51:ed:3e:e4:f9:7b:87:70:c2: 5a:cb:70:19:6f:53:03:0b:0d:75:fe:61:38:27:70: 0c:27:c7:d2:85:cb:80:63:71:5d:66:69:f6:c7:ba: dc:71:b7:d8:82:73:57:f6:31:ed:d2:e5:02:4a:12: 21:ce:b2:05:a1:80:5d:51:17:41:c2:65:a4:9e:41: 7d:e7:ee:b8:7d:17:6f:b4:00:70:71:2a:78:d9:f5: fd:df:c4:ba:56:1d:29:85:e7:a1:09:7e:04:b4:d8: 20:85:d7:dd:fe:b8:dc:fa:16:35:ad:60:ce:8f:2e: d4:2c:35:d5:ac:b1:85:3c:d7:f5:23:af:5f:21:cb: f9:d4:cb:a7:92:45:40:55:1c:23:7c:a1:a1:be:d8: 72:70:1d:03:fb:b3:e7:f3:d3:a2:d9:23:a6:7c:35: cc:d3:bc:a5:26:ea:54:ec:eb:bb:08:e1:60:74:32: 9c:89:fd:ea:23:ea:ee:70:90:d9:1a:d2:aa:1d:70: c8:4a:ec:2d:da:c6:f9:0d:fd:8c:d3:06:dd:81:03: ef:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:04:E2:EF:57:DD:B3:42:9D:01:A2:1B:11:C2:3B:27:C3:F6:1F:76 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aed9db2a-2d9d-4d5d-af31-4fc76b8eaf53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.46.164.0/23 Signature Algorithm: sha256WithRSAEncryption 15:09:7a:d9:28:c6:4a:5e:45:d1:f4:71:8d:a0:65:77:99:1f: 17:ae:88:c2:c9:cc:b8:ab:d3:d2:0e:1e:83:69:cc:a9:cc:c3: c0:b5:1b:cd:b0:98:bb:1b:a6:5b:13:2c:c1:d5:64:b3:36:b7: 97:41:04:52:8d:95:eb:5e:39:4f:a6:ca:38:0d:cc:b7:07:8a: 6a:0d:e2:f1:3c:9f:23:84:3b:9e:49:70:2f:d0:8f:e3:24:e2: d4:27:76:59:04:ff:7d:02:1b:15:6b:41:26:b4:ef:0e:d2:90: 24:72:f7:b0:c8:3b:d2:4e:05:83:25:aa:ab:59:a1:91:fc:ef: 91:cd:ec:29:a6:bf:b4:68:73:9a:26:cd:30:dd:99:9c:04:cd: 34:45:ff:6e:f8:49:ed:e9:07:0a:53:3f:62:80:68:88:97:7b: 18:a2:f0:14:6c:68:b8:a8:0a:0a:e5:66:5e:fc:bb:b1:67:be: 0f:61:d1:5b:64:d0:63:fc:ec:36:ee:13:44:c7:8a:ee:bd:08: a1:fc:9a:bb:ad:62:db:07:01:89:f8:cb:5b:35:7a:0a:0d:c1: eb:74:57:c3:c3:38:7f:5d:cd:1c:a3:cd:bb:8d:ce:1f:a2:7d: 50:88:b5:03:56:0e:9f:c3:60:dc:c9:14:50:b7:21:4f:39:b3: 41:f8:96:4e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHcvawsni0CRLF3uE6UdUrIFIBW0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MDU0MjI4WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BkNTIxYTcwZTRiZmM2NjIxZjFlYzgwYmQ1ODMyZjg1OTJm OWFkNTY5NTlmNWJlMTdjN2E5NjA3YWJiNTlhZjM3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDT/eJvA127UN9sxMBSod/NkTdNky53mp7YQl2ogng4i512 jAW+VTOGefqs96jgZ4yYQFHtPuT5e4dwwlrLcBlvUwMLDXX+YTgncAwnx9KFy4Bj cV1mafbHutxxt9iCc1f2Me3S5QJKEiHOsgWhgF1RF0HCZaSeQX3n7rh9F2+0AHBx KnjZ9f3fxLpWHSmF56EJfgS02CCF193+uNz6FjWtYM6PLtQsNdWssYU81/Ujr18h y/nUy6eSRUBVHCN8oaG+2HJwHQP7s+fz06LZI6Z8NczTvKUm6lTs67sI4WB0MpyJ /eoj6u5wkNka0qodcMhK7C3axvkN/YzTBt2BA++pAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUvATi71fds0KdAaIbEcI7J8P2H3YwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2FlZDlkYjJhLTJkOWQtNGQ1ZC1hZjMxLTRmYzc2YjhlYWY1My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE0LqQwDQYJKoZIhvcNAQELBQADggEBABUJetkoxkpeRdH0cY2gZXeZHxeu iMLJzLir09IOHoNpzKnMw8C1G82wmLsbplsTLMHVZLM2t5dBBFKNleteOU+myjgN zLcHimoN4vE8nyOEO55JcC/Qj+Mk4tQndlkE/30CGxVrQSa07w7SkCRy97DIO9JO BYMlqqtZoZH875HN7Cmmv7Roc5omzTDdmZwEzTRF/274Se3pBwpTP2KAaIiXexii 8BRsaLioCgrlZl78u7Fnvg9h0Vtk0GP87DbuE0THiu69CKH8mrutYtsHAYn4y1s1 egoNwet0V8PDOH9dzRyjzbuNzh+ifVCItQNWDp/DYNzJFFC3IU85s0H4lk4= -----END CERTIFICATE-----Generated at Sun Oct 19 22:59:38 2025 by rpki-client