$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c6db5f22-beb6-4c3e-bb5b-31d7ccd631fa.roa File: c6db5f22-beb6-4c3e-bb5b-31d7ccd631fa.roa (raw, json) Hash identifier: nzhbDLbAkgpVOIJixB2kjEpXMD8QDg2EKssE41CycN0= Subject key identifier: ED:A4:8A:97:14:91:3B:B6:8A:46:59:A3:E2:44:E6:B7:97:55:FA:41 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 60B65A9997F7E7C3FB0AF1FEDAF9E0AF6D4303BE Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c6db5f22-beb6-4c3e-bb5b-31d7ccd631fa.roa Signing time: Sat 18 Oct 2025 19:51:17 +0000 ROA not before: Sat 18 Oct 2025 19:51:17 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.84.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:b6:5a:99:97:f7:e7:c3:fb:0a:f1:fe:da:f9:e0:af:6d:43:03:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 19:51:17 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=c01baf9104bb7a289e095fddf3a2e7f9a4dbfcac491dd16fbe505931d0330b52, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b1:36:cc:0f:5d:48:2c:a7:5c:c0:71:be:09: ac:2f:68:43:e9:3d:cb:73:1d:a4:06:41:ee:d5:67: bf:94:5f:5a:36:61:74:ec:5d:1b:e4:14:a9:09:b0: fd:84:e2:fa:c3:65:9c:70:98:71:4b:cc:8f:73:b1: e9:ce:02:7d:7e:16:f8:15:a5:ec:8e:b3:d2:fc:cb: 7b:76:1d:ef:05:cc:a3:77:93:1f:81:4d:2a:87:42: a9:e8:89:c6:11:32:2e:35:0f:c7:a2:99:c6:54:19: 69:c8:8b:6a:13:56:d3:a8:b5:5c:54:88:ff:84:0d: d4:33:82:76:31:72:09:81:da:f3:38:61:c3:ae:bc: 49:bf:c6:88:43:de:5f:58:9b:67:0c:bb:33:44:67: cd:cc:2d:09:ca:9d:ef:20:9c:f0:32:cf:fe:3e:c0: 19:69:93:4a:63:8e:4a:dc:4c:f9:d1:ff:9d:9c:c8: 4a:34:ae:cd:e8:51:2e:a4:a7:e4:40:f6:b0:13:be: 0d:50:11:a7:3c:82:75:18:c3:57:c1:8e:1c:2c:61: 87:2a:cc:b9:30:b3:2c:8f:92:c0:18:e4:98:5d:1c: 2a:21:ba:46:d0:e9:cf:fb:5a:a9:a0:f9:eb:1b:10: 8d:fd:92:dd:24:1c:cd:6c:8a:16:49:43:3b:60:a7: 2d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:A4:8A:97:14:91:3B:B6:8A:46:59:A3:E2:44:E6:B7:97:55:FA:41 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c6db5f22-beb6-4c3e-bb5b-31d7ccd631fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.84.70.0/24 Signature Algorithm: sha256WithRSAEncryption 00:0a:3e:ff:55:8f:87:f9:3d:29:23:4c:98:11:0a:69:f5:46: 3d:32:8f:26:aa:e0:f9:08:fa:8d:cd:27:5f:8b:63:dc:f7:92: 32:ae:25:3d:42:aa:4d:d5:dc:dc:58:36:ab:b4:a9:f8:83:fe: b3:ca:62:c1:62:33:36:19:c8:9e:a4:42:8e:79:b2:28:7c:95: 61:4d:fb:ea:7c:73:fd:47:74:21:ea:7b:01:26:bd:af:a9:63: 56:6a:cf:eb:80:a9:89:f8:60:c3:2b:cd:39:56:60:64:57:33: 9a:80:55:a4:41:b5:f6:07:d4:8a:be:4e:43:e6:ec:c2:75:87: 67:e3:29:f8:0c:16:e1:be:50:97:5c:f7:65:b3:99:1d:44:06: 1a:e1:6a:62:e1:1e:6f:1c:96:d0:dc:9e:28:d9:1c:13:01:bc: d6:ed:15:03:09:5f:2e:ba:58:e4:9a:a1:f6:a8:41:43:d0:be: a7:1f:f3:a7:a5:9c:be:22:72:1c:c3:9e:ca:25:34:9a:a3:d4: e9:75:ce:42:20:ce:21:1f:75:87:e3:b2:e3:b0:70:f0:e9:1f: e9:72:54:e4:b3:93:55:2b:a3:7b:51:95:e4:34:37:4b:b8:1c: 06:a2:63:fa:49:ae:d2:23:75:ef:43:5a:2b:50:f0:b8:76:c8: 1c:83:26:4a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYLZamZf358P7CvH+2vngr21DA74wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTk1MTE3WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BjMDFiYWY5MTA0YmI3YTI4OWUwOTVmZGRmM2EyZTdmOWE0 ZGJmY2FjNDkxZGQxNmZiZTUwNTkzMWQwMzMwYjUyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCPsTbMD11ILKdcwHG+CawvaEPpPctzHaQGQe7VZ7+UX1o2 YXTsXRvkFKkJsP2E4vrDZZxwmHFLzI9zsenOAn1+FvgVpeyOs9L8y3t2He8FzKN3 kx+BTSqHQqnoicYRMi41D8eimcZUGWnIi2oTVtOotVxUiP+EDdQzgnYxcgmB2vM4 YcOuvEm/xohD3l9Ym2cMuzNEZ83MLQnKne8gnPAyz/4+wBlpk0pjjkrcTPnR/52c yEo0rs3oUS6kp+RA9rATvg1QEac8gnUYw1fBjhwsYYcqzLkwsyyPksAY5JhdHCoh ukbQ6c/7Wqmg+esbEI39kt0kHM1sihZJQztgpy2rAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU7aSKlxSRO7aKRlmj4kTmt5dV+kEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2M2ZGI1ZjIyLWJlYjYtNGMzZS1iYjViLTMxZDdjY2Q2MzFmYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0VEYwDQYJKoZIhvcNAQELBQADggEBAAAKPv9Vj4f5PSkjTJgRCmn1Rj0y jyaq4PkI+o3NJ1+LY9z3kjKuJT1Cqk3V3NxYNqu0qfiD/rPKYsFiMzYZyJ6kQo55 sih8lWFN++p8c/1HdCHqewEmva+pY1Zqz+uAqYn4YMMrzTlWYGRXM5qAVaRBtfYH 1Iq+TkPm7MJ1h2fjKfgMFuG+UJdc92WzmR1EBhrhamLhHm8cltDcnijZHBMBvNbt FQMJXy66WOSaofaoQUPQvqcf86elnL4ichzDnsolNJqj1Ol1zkIgziEfdYfjsuOw cPDpH+lyVOSzk1Uro3tRleQ0N0u4HAaiY/pJrtIjde9DWitQ8Lh2yByDJko= -----END CERTIFICATE-----Generated at Mon Oct 20 21:12:09 2025 by rpki-client