$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b87922c9-ad8e-4b5f-b54a-0047b9e284ab.roa File: b87922c9-ad8e-4b5f-b54a-0047b9e284ab.roa (raw, json) Hash identifier: LB6um9PFa79K6zfCLO+E3cGRnyCSSpjH51q3V1k3zcs= Subject key identifier: 72:0B:71:25:25:35:B1:63:D5:C7:7A:1A:B6:76:49:30:0D:76:88:00 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 18E94BA6FCD25FD349EA386531ABF75B2DAED7AA Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b87922c9-ad8e-4b5f-b54a-0047b9e284ab.roa Signing time: Thu 16 Oct 2025 16:51:49 +0000 ROA not before: Thu 16 Oct 2025 16:51:49 +0000 ROA not after: Thu 20 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.124.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:e9:4b:a6:fc:d2:5f:d3:49:ea:38:65:31:ab:f7:5b:2d:ae:d7:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 16 16:51:49 2025 GMT Not After : Nov 20 23:59:59 2025 GMT Subject: serialNumber=2a283ac56655f1790501fca77401d4e9b80d9dc91f2374115414199bcb39a713, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fa:f6:c5:e6:3d:28:2a:6e:fc:30:81:03:2a: 74:bd:d5:b6:64:b3:a3:d3:44:96:c7:77:3e:da:13: 78:ce:cb:57:0f:59:ab:4f:15:c1:65:97:fb:e8:64: 0b:a6:7c:a3:ce:9d:a7:dd:bc:d1:da:d9:07:90:eb: 68:03:97:1a:d3:20:3c:01:d1:df:87:fe:72:f9:1a: ea:d3:9c:1a:83:8e:cc:e4:6f:80:5f:15:c5:01:e9: e4:f0:a2:9b:3f:73:db:c6:28:87:fc:93:d5:a9:74: 12:a9:ab:3f:65:88:50:85:7c:ef:01:3c:aa:73:13: 0e:84:eb:aa:41:9a:42:88:35:ec:c7:f7:d7:24:e7: a5:43:bb:ab:85:0d:bf:4f:35:2d:29:8d:7e:a7:17: bf:cc:ad:f3:9b:77:18:49:b7:bd:4f:52:dc:55:fe: fa:59:c0:38:36:33:69:89:28:fb:1d:a6:71:bf:0f: 9e:cc:51:9f:0c:0f:85:01:34:1f:5b:17:e4:e7:4a: e0:7d:0f:41:1d:69:0d:a6:f3:8e:b2:bd:ca:1d:93: 76:3a:06:1b:49:e9:a1:3e:1f:cb:42:fa:42:7b:f0: 7d:d9:86:a5:5a:b3:26:ff:f0:c3:5a:0e:bd:21:c4: 8b:d0:fa:72:e4:91:af:f1:55:cc:cf:06:b5:37:17: e5:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:0B:71:25:25:35:B1:63:D5:C7:7A:1A:B6:76:49:30:0D:76:88:00 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b87922c9-ad8e-4b5f-b54a-0047b9e284ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.124.138.0/24 Signature Algorithm: sha256WithRSAEncryption 61:35:7e:52:e0:87:18:aa:7f:73:c2:83:9c:30:2e:cb:8f:7e: d3:0a:92:0f:a1:89:b7:4c:38:c7:8e:fa:c7:3e:14:fe:15:56: f0:2e:6b:4c:e7:55:40:30:a7:e8:37:06:6d:6d:22:cf:e9:37: 1d:d0:60:3f:2c:8b:50:dd:88:e8:bc:b1:15:cf:09:8c:7c:e2: 33:2f:73:c7:c8:7c:0e:ac:0f:52:59:1b:e7:c6:56:2b:73:8d: 09:fe:f5:78:1f:16:7c:be:c5:e1:a0:2a:c8:7b:be:d2:67:e6: 1a:37:d8:b6:aa:09:51:76:88:27:65:8c:16:d2:69:16:6e:79: 37:ee:a8:95:3a:57:f0:50:fd:9a:11:c9:84:a1:b3:c0:cd:49: 7b:67:6a:01:d0:42:9a:2e:4c:0d:79:82:5d:2a:1d:f9:3d:0d: 84:ae:3d:71:2b:1b:28:9f:d1:9b:3a:4b:f8:ab:75:9e:c8:78: fd:e1:ce:e1:e0:53:53:75:0d:91:e1:d9:d7:a7:ad:23:08:f2: f3:f2:96:2a:c4:4d:91:a7:b7:a9:f4:ad:15:b2:e4:b0:8d:e3: 19:62:d3:5b:86:bf:60:27:69:0d:e3:5c:d6:7f:f4:60:aa:de: 8d:4c:9d:2e:01:16:d8:2c:d6:9d:e0:9d:8e:ae:bd:f4:2e:00: a6:4a:f4:2f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGOlLpvzSX9NJ6jhlMav3Wy2u16owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE2MTY1MTQ5WhcNMjUxMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0AyYTI4M2FjNTY2NTVmMTc5MDUwMWZjYTc3NDAxZDRlOWI4 MGQ5ZGM5MWYyMzc0MTE1NDE0MTk5YmNiMzlhNzEzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3+vbF5j0oKm78MIEDKnS91bZks6PTRJbHdz7aE3jOy1cP WatPFcFll/voZAumfKPOnafdvNHa2QeQ62gDlxrTIDwB0d+H/nL5GurTnBqDjszk b4BfFcUB6eTwops/c9vGKIf8k9WpdBKpqz9liFCFfO8BPKpzEw6E66pBmkKINezH 99ck56VDu6uFDb9PNS0pjX6nF7/MrfObdxhJt71PUtxV/vpZwDg2M2mJKPsdpnG/ D57MUZ8MD4UBNB9bF+TnSuB9D0EdaQ2m846yvcodk3Y6BhtJ6aE+H8tC+kJ78H3Z hqVasyb/8MNaDr0hxIvQ+nLkka/xVczPBrU3F+XxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUcgtxJSU1sWPVx3oatnZJMA12iAAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2I4NzkyMmM5LWFkOGUtNGI1Zi1iNTRhLTAwNDdiOWUyODRhYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0fIowDQYJKoZIhvcNAQELBQADggEBAGE1flLghxiqf3PCg5wwLsuPftMK kg+hibdMOMeO+sc+FP4VVvAua0znVUAwp+g3Bm1tIs/pNx3QYD8si1DdiOi8sRXP CYx84jMvc8fIfA6sD1JZG+fGVitzjQn+9XgfFny+xeGgKsh7vtJn5ho32LaqCVF2 iCdljBbSaRZueTfuqJU6V/BQ/ZoRyYShs8DNSXtnagHQQpouTA15gl0qHfk9DYSu PXErGyif0Zs6S/irdZ7IeP3hzuHgU1N1DZHh2denrSMI8vPylirETZGnt6n0rRWy 5LCN4xli01uGv2AnaQ3jXNZ/9GCq3o1MnS4BFtgs1p3gnY6uvfQuAKZK9C8= -----END CERTIFICATE-----Generated at Mon Oct 20 12:21:24 2025 by rpki-client