$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bec620fd-0973-40ce-bf63-d2a89ef5d127.roa File: bec620fd-0973-40ce-bf63-d2a89ef5d127.roa (raw, json) Hash identifier: 97Kw/5uu7Q96WEKVNUOLHi+j7cg2Yn7iq3YPdLLr2AM= Subject key identifier: 86:91:56:21:E3:56:D3:89:88:AD:76:25:DC:4A:8F:F5:90:69:74:49 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 66629F0289034BDA1F5EC9212FEEDF7C9555D595 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bec620fd-0973-40ce-bf63-d2a89ef5d127.roa Signing time: Thu 16 Oct 2025 18:22:48 +0000 ROA not before: Thu 16 Oct 2025 18:22:48 +0000 ROA not after: Thu 20 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.222.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:62:9f:02:89:03:4b:da:1f:5e:c9:21:2f:ee:df:7c:95:55:d5:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 16 18:22:48 2025 GMT Not After : Nov 20 23:59:59 2025 GMT Subject: serialNumber=17d8f822e8e6b4fff08cbb60bda5b975869fdf4b229df1baa471c33199112542, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6b:5e:a9:ec:76:c8:e1:98:90:60:17:42:d4: 36:16:60:1f:0b:f6:c9:a5:10:53:41:2f:7f:f1:b5: 71:e5:28:56:6f:62:71:3e:92:7e:ab:5e:ad:28:79: 22:1d:fc:49:24:f5:cc:81:39:95:20:84:4c:f7:15: 03:f2:c4:d0:ca:65:64:2b:8c:92:37:c2:19:74:3c: e6:32:0d:c8:32:bb:84:a8:ab:18:b8:b2:63:f5:ab: 19:6a:af:ec:92:62:b8:28:dd:90:b7:86:29:96:34: c1:ae:d2:90:0b:9c:5b:50:42:38:17:be:af:93:a4: f2:c3:89:2c:b0:0e:8b:b6:57:5c:3b:b3:4c:0d:1a: 7a:5d:59:e7:4a:48:c7:d0:63:98:ad:5a:78:4d:5e: d9:b7:1f:b3:e8:5f:7a:e0:f9:24:d9:50:bc:f3:b1: 81:98:6a:3b:11:7c:8d:95:fa:26:fd:89:30:f3:0b: 9e:2e:04:08:20:c9:93:d4:b2:e1:32:a0:ed:d8:27: a9:d3:5a:7f:cb:2a:a2:23:2b:9d:75:82:13:c1:18: 36:80:5d:48:47:6a:02:b5:3b:fe:fe:1d:6f:09:94: 84:4c:f7:c9:b4:aa:4b:80:69:06:8a:c0:53:1c:2f: fc:75:7a:13:bd:97:27:80:df:2a:d5:4c:a5:94:b6: 49:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:91:56:21:E3:56:D3:89:88:AD:76:25:DC:4A:8F:F5:90:69:74:49 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bec620fd-0973-40ce-bf63-d2a89ef5d127.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.222.254.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:6f:97:56:58:cb:d0:b2:56:36:f9:ea:80:92:ae:43:be:3a: 53:05:fa:ea:89:fa:e6:94:74:f1:c4:e0:5a:92:c6:b8:7b:78: b5:c1:ed:fc:1e:06:ef:25:7d:3e:ad:a7:76:77:55:ca:a2:8e: 57:73:b1:51:29:bb:7b:ae:be:13:88:03:ad:90:d1:4f:6f:13: ce:32:2e:e1:34:87:7e:c6:59:64:a1:47:f0:4d:0f:b3:34:08: bb:47:76:c2:f4:37:9b:90:05:5c:d7:26:f5:a6:d7:3b:1c:b0: 9e:84:5f:32:1a:e2:b1:4c:5a:27:ec:db:cd:36:ed:4d:41:01: e9:d8:22:24:10:e0:e7:22:92:08:09:de:13:0e:f3:4c:ce:39: ba:d1:26:c1:09:36:78:e0:93:ff:40:e1:a6:85:1a:59:df:2f: ae:b9:d2:ac:d4:0c:08:63:fe:81:05:be:db:ae:66:52:2b:ca: 6f:5c:97:f6:2d:8d:d4:1b:3f:05:8e:fc:93:f1:81:2d:42:45: 77:d9:09:47:1f:91:e7:6d:4a:67:6b:f4:6c:e2:a3:2d:81:86: da:2d:40:11:b7:33:72:36:e0:04:5f:cb:82:12:a9:b0:37:8c: f4:d8:d9:c3:a3:95:c4:6d:3a:7e:23:36:66:bf:b5:09:53:54: ca:f7:a6:3f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZmKfAokDS9ofXskhL+7ffJVV1ZUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE2MTgyMjQ4WhcNMjUxMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0AxN2Q4ZjgyMmU4ZTZiNGZmZjA4Y2JiNjBiZGE1Yjk3NTg2 OWZkZjRiMjI5ZGYxYmFhNDcxYzMzMTk5MTEyNTQyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5a16p7HbI4ZiQYBdC1DYWYB8L9smlEFNBL3/xtXHlKFZv YnE+kn6rXq0oeSId/Ekk9cyBOZUghEz3FQPyxNDKZWQrjJI3whl0POYyDcgyu4So qxi4smP1qxlqr+ySYrgo3ZC3himWNMGu0pALnFtQQjgXvq+TpPLDiSywDou2V1w7 s0wNGnpdWedKSMfQY5itWnhNXtm3H7PoX3rg+STZULzzsYGYajsRfI2V+ib9iTDz C54uBAggyZPUsuEyoO3YJ6nTWn/LKqIjK511ghPBGDaAXUhHagK1O/7+HW8JlIRM 98m0qkuAaQaKwFMcL/x1ehO9lyeA3yrVTKWUtkm7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUhpFWIeNW04mIrXYl3EqP9ZBpdEkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2JlYzYyMGZkLTA5NzMtNDBjZS1iZjYzLWQyYTg5ZWY1ZDEyNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA03v4wDQYJKoZIhvcNAQELBQADggEBAJ9vl1ZYy9CyVjb56oCSrkO+OlMF +uqJ+uaUdPHE4FqSxrh7eLXB7fweBu8lfT6tp3Z3VcqijldzsVEpu3uuvhOIA62Q 0U9vE84yLuE0h37GWWShR/BND7M0CLtHdsL0N5uQBVzXJvWm1zscsJ6EXzIa4rFM Wifs28027U1BAenYIiQQ4OcikggJ3hMO80zOObrRJsEJNnjgk/9A4aaFGlnfL665 0qzUDAhj/oEFvtuuZlIrym9cl/YtjdQbPwWO/JPxgS1CRXfZCUcfkedtSmdr9Gzi oy2BhtotQBG3M3I24ARfy4ISqbA3jPTY2cOjlcRtOn4jNma/tQlTVMr3pj8= -----END CERTIFICATE-----Generated at Mon Oct 20 03:01:15 2025 by rpki-client