$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d45eadcf-fc9a-4144-a7c6-7f81b314918a.roa File: d45eadcf-fc9a-4144-a7c6-7f81b314918a.roa (raw, json) Hash identifier: /QUPr87b2pIR2W5Hh6WsDC0/NKH4zSyBM/ivC5T9dh8= Subject key identifier: 7D:78:72:FB:B7:21:E9:70:53:8D:B9:C4:2C:68:E7:39:BC:BC:23:17 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5C0E1C2544A568E3FD22C34561BBBFF5FADD43B6 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d45eadcf-fc9a-4144-a7c6-7f81b314918a.roa Signing time: Sun 19 Oct 2025 07:21:38 +0000 ROA not before: Sun 19 Oct 2025 07:21:38 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.85.76.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:0e:1c:25:44:a5:68:e3:fd:22:c3:45:61:bb:bf:f5:fa:dd:43:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 07:21:38 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=7fe2c70d3d9599d8569f6efe8ad2c7d3fcf6cb2c89c6c3fcf2a1854fe509540f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:10:3e:71:03:64:94:0c:cb:48:55:64:d0:1c: ce:5c:59:a1:48:b8:10:e9:06:b4:d9:c0:49:e2:90: 51:c4:8d:b0:aa:35:2d:bb:c2:a6:58:bb:15:47:40: c7:2a:84:da:34:dc:31:c4:35:fd:68:4c:22:4b:f2: 38:8e:0d:82:ea:ed:ff:2c:6a:86:14:15:6c:f3:8c: d1:e2:05:20:43:6f:34:07:86:12:a0:d9:56:17:7f: b7:8d:54:63:8f:26:38:a9:be:bc:16:8f:9a:3b:8b: 70:0d:de:23:69:e5:23:ec:02:46:17:14:34:aa:85: db:57:02:de:ee:59:ae:85:00:73:9f:67:d9:0b:38: 0c:70:ba:ed:23:d2:37:bd:be:5f:dc:ab:aa:ef:5a: fb:65:ca:28:04:38:60:f9:f8:f6:49:ba:8d:95:8f: 91:be:a2:90:d5:31:99:a1:fa:ec:8b:fc:0c:20:5f: 48:6c:89:2a:06:7c:ae:d6:a6:c3:04:78:eb:9f:0a: 50:c4:04:0d:53:c6:07:01:89:82:36:6a:b5:dd:d9: bf:22:d0:1d:a3:10:29:f3:f2:c6:3d:c4:59:b5:b1: 5c:9a:24:2f:ce:15:85:ca:d0:38:17:56:a0:9c:0f: 5b:63:ef:e0:eb:cc:8d:83:ef:11:83:ea:35:38:ae: 0d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:78:72:FB:B7:21:E9:70:53:8D:B9:C4:2C:68:E7:39:BC:BC:23:17 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d45eadcf-fc9a-4144-a7c6-7f81b314918a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.85.76.0/23 Signature Algorithm: sha256WithRSAEncryption 8c:80:84:ae:ab:8c:ad:c1:cd:92:ac:ac:28:2e:21:eb:0c:8e: 35:2e:b2:4c:5d:5b:16:ec:c1:28:60:21:ec:d3:c1:81:f5:d5: fc:d0:e4:a2:db:c2:46:30:e0:41:67:86:5c:a3:a9:b2:ae:55: 98:81:8e:f0:80:97:1a:5a:35:ff:2e:d8:99:5b:95:bc:af:03: 10:86:68:3e:38:01:e6:e1:5c:87:64:93:e2:36:ad:db:ab:f0: 47:ec:1d:38:81:5a:18:aa:55:87:20:d2:0f:31:bb:eb:fe:50: 57:c7:ec:f3:91:92:5c:b6:d6:38:aa:59:b0:72:ca:67:9f:77: 14:e6:b9:d2:44:ad:40:94:a0:97:ba:a0:95:fd:a2:e1:85:8b: 94:b5:70:03:30:df:49:f8:86:49:69:99:03:4a:b2:04:0e:8e: 59:3b:4a:c1:72:51:83:fe:51:7d:5f:4e:44:55:d8:3d:11:02: 6b:42:c4:50:d6:36:9e:ec:ca:51:22:11:0d:f8:c2:67:48:44: 8d:81:d5:cc:ad:1b:46:78:5a:cd:76:11:9c:ec:c9:7a:44:03: cf:85:c8:b9:5c:9c:4a:20:1c:65:67:76:8e:55:27:af:54:f2: 9f:bc:37:ea:0b:c3:16:ec:f6:ef:39:34:82:30:c9:a0:54:01: 96:eb:e5:c4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXA4cJUSlaOP9IsNFYbu/9frdQ7YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MDcyMTM4WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZmUyYzcwZDNkOTU5OWQ4NTY5ZjZlZmU4YWQyYzdkM2Zj ZjZjYjJjODljNmMzZmNmMmExODU0ZmU1MDk1NDBmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDkED5xA2SUDMtIVWTQHM5cWaFIuBDpBrTZwEnikFHEjbCq NS27wqZYuxVHQMcqhNo03DHENf1oTCJL8jiODYLq7f8saoYUFWzzjNHiBSBDbzQH hhKg2VYXf7eNVGOPJjipvrwWj5o7i3AN3iNp5SPsAkYXFDSqhdtXAt7uWa6FAHOf Z9kLOAxwuu0j0je9vl/cq6rvWvtlyigEOGD5+PZJuo2Vj5G+opDVMZmh+uyL/Awg X0hsiSoGfK7WpsMEeOufClDEBA1TxgcBiYI2arXd2b8i0B2jECnz8sY9xFm1sVya JC/OFYXK0DgXVqCcD1tj7+DrzI2D7xGD6jU4rg2jAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUfXhy+7ch6XBTjbnELGjnOby8IxcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2Q0NWVhZGNmLWZjOWEtNDE0NC1hN2M2LTdmODFiMzE0OTE4YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE0VUwwDQYJKoZIhvcNAQELBQADggEBAIyAhK6rjK3BzZKsrCguIesMjjUu skxdWxbswShgIezTwYH11fzQ5KLbwkYw4EFnhlyjqbKuVZiBjvCAlxpaNf8u2Jlb lbyvAxCGaD44AebhXIdkk+I2rdur8EfsHTiBWhiqVYcg0g8xu+v+UFfH7PORkly2 1jiqWbByymefdxTmudJErUCUoJe6oJX9ouGFi5S1cAMw30n4hklpmQNKsgQOjlk7 SsFyUYP+UX1fTkRV2D0RAmtCxFDWNp7sylEiEQ34wmdIRI2B1cytG0Z4Ws12EZzs yXpEA8+FyLlcnEogHGVndo5VJ69U8p+8N+oLwxbs9u85NIIwyaBUAZbr5cQ= -----END CERTIFICATE-----Generated at Mon Oct 20 02:56:13 2025 by rpki-client