$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c5d53999-f632-4000-baa2-fb707a8604a9.roa File: c5d53999-f632-4000-baa2-fb707a8604a9.roa (raw, json) Hash identifier: zNaoUreEBX2MgPrcbKv2s5HTThESdRBeNvzD1cVJW4c= Subject key identifier: 8C:27:6E:74:98:3D:A3:13:D7:B6:FA:56:E3:49:45:CE:F1:2C:2B:EB Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0CFE2C8FF8DB2E1B9A1B5F3A58C89ADEA340FF8C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c5d53999-f632-4000-baa2-fb707a8604a9.roa Signing time: Sun 19 Oct 2025 05:40:13 +0000 ROA not before: Sun 19 Oct 2025 05:40:13 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.85.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:fe:2c:8f:f8:db:2e:1b:9a:1b:5f:3a:58:c8:9a:de:a3:40:ff:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 05:40:13 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=18c660d7a78f8788fd1139a1bd404486045810ca1fe582d5db2069673de1478c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:73:5d:44:44:46:69:1b:11:3c:4f:68:79:7d: 49:db:84:e2:54:2d:b5:ab:4b:8c:e2:be:e3:37:4f: 53:bb:c6:fb:8e:61:e4:5b:bf:93:5a:3a:c2:a1:6a: e4:c9:ea:fb:81:84:60:5d:64:1a:e5:99:68:1c:7e: 0e:50:16:db:d8:05:6d:ba:1f:ce:c7:90:ef:84:cd: 63:5c:7a:ab:53:6b:51:c2:af:ba:4c:11:76:35:b2: 70:17:33:d4:37:77:e1:cd:05:e1:95:d7:01:6b:81: 04:33:9d:3f:a9:8c:a8:8c:f0:44:06:79:1d:83:1e: e3:d5:b2:2d:d6:e7:e6:fb:dc:31:51:f3:1b:f8:25: e0:5d:b3:0b:98:a1:11:8b:44:3a:ae:1d:3b:c1:9e: 66:60:aa:2e:82:0d:a8:af:f0:ad:a2:e0:85:54:c1: 58:53:08:16:80:a1:d1:3f:ca:d6:e5:ac:ec:0e:08: 43:3a:b2:7f:69:bb:01:b3:d2:9e:d7:ce:08:77:7b: fd:d2:ff:14:d8:95:01:22:70:cf:dd:3b:c9:49:42: 4e:df:26:92:cb:18:25:18:5a:ab:97:ae:6e:b3:95: 05:8c:c9:32:92:1f:c5:7c:4e:7a:a2:18:0e:5c:5c: 49:92:e2:38:80:31:58:bb:5a:88:b8:da:68:78:a8: 47:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:27:6E:74:98:3D:A3:13:D7:B6:FA:56:E3:49:45:CE:F1:2C:2B:EB X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c5d53999-f632-4000-baa2-fb707a8604a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.85.233.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:f2:7b:ea:c8:4c:7d:27:3c:d9:7c:fa:8c:1a:61:22:b3:21: c4:bf:a6:52:70:59:06:9b:83:50:33:3b:1c:ad:ae:28:55:db: 66:61:34:bf:09:92:37:6a:13:68:8d:ac:56:6c:63:b1:6b:34: 62:df:f5:87:a1:45:6f:97:aa:37:bd:f0:f2:54:81:e2:8f:2b: a4:ce:fe:cd:b6:27:45:33:19:42:06:07:49:74:76:d6:53:fa: e4:d5:c2:04:2d:18:b7:86:2a:8a:41:f3:a4:67:a7:3a:6a:eb: f6:90:f0:2b:d1:cb:3f:0b:82:78:98:a0:e4:d1:8c:6f:25:74: 42:e2:e5:76:c3:3d:4b:f9:51:8d:8c:e1:c2:46:c1:50:b1:85: a8:eb:81:cb:62:a7:d8:3d:47:8a:97:1f:70:b2:b5:03:45:c8: 89:dc:a8:96:a7:6b:38:7f:5d:12:65:5c:5a:9c:0f:08:0a:34: 6f:57:f3:21:6c:c5:81:ee:b3:ee:c1:b6:ea:4c:90:2d:35:84: 14:ab:89:01:05:5c:83:15:a5:51:f5:42:b3:c8:8e:a7:a8:43: 0a:be:a2:88:c9:7b:34:ca:e5:f5:32:64:6e:82:e1:a5:e1:3e: 6a:76:74:b8:3c:17:1a:28:88:00:82:5b:a5:08:83:2d:71:29: f0:5d:4c:04 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDP4sj/jbLhuaG186WMia3qNA/4wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MDU0MDEzWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AxOGM2NjBkN2E3OGY4Nzg4ZmQxMTM5YTFiZDQwNDQ4NjA0 NTgxMGNhMWZlNTgyZDVkYjIwNjk2NzNkZTE0NzhjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD0c11EREZpGxE8T2h5fUnbhOJULbWrS4zivuM3T1O7xvuO YeRbv5NaOsKhauTJ6vuBhGBdZBrlmWgcfg5QFtvYBW26H87HkO+EzWNceqtTa1HC r7pMEXY1snAXM9Q3d+HNBeGV1wFrgQQznT+pjKiM8EQGeR2DHuPVsi3W5+b73DFR 8xv4JeBdswuYoRGLRDquHTvBnmZgqi6CDaiv8K2i4IVUwVhTCBaAodE/ytblrOwO CEM6sn9puwGz0p7Xzgh3e/3S/xTYlQEicM/dO8lJQk7fJpLLGCUYWquXrm6zlQWM yTKSH8V8TnqiGA5cXEmS4jiAMVi7Woi42mh4qEepAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUjCdudJg9oxPXtvpW40lFzvEsK+swHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2M1ZDUzOTk5LWY2MzItNDAwMC1iYWEyLWZiNzA3YTg2MDRhOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0VekwDQYJKoZIhvcNAQELBQADggEBAJvye+rITH0nPNl8+owaYSKzIcS/ plJwWQabg1AzOxytrihV22ZhNL8JkjdqE2iNrFZsY7FrNGLf9YehRW+Xqje98PJU geKPK6TO/s22J0UzGUIGB0l0dtZT+uTVwgQtGLeGKopB86Rnpzpq6/aQ8CvRyz8L gniYoOTRjG8ldELi5XbDPUv5UY2M4cJGwVCxhajrgctip9g9R4qXH3CytQNFyInc qJanazh/XRJlXFqcDwgKNG9X8yFsxYHus+7BtupMkC01hBSriQEFXIMVpVH1QrPI jqeoQwq+oojJezTK5fUyZG6C4aXhPmp2dLg8FxooiACCW6UIgy1xKfBdTAQ= -----END CERTIFICATE-----Generated at Mon Oct 20 03:15:49 2025 by rpki-client