$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d590bb3d-6b1e-4827-aad3-36963ca1e8ca.roa File: d590bb3d-6b1e-4827-aad3-36963ca1e8ca.roa (raw, json) Hash identifier: jBpIqkRLpZz0wR0k4m+23u85kHLjN9JfpmzhT1Desmk= Subject key identifier: FA:21:FD:29:68:65:ED:C1:7E:D3:FB:C4:B2:8C:98:A2:F2:83:1D:CB Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1816927E9A70326EC34CD2BAB853CFDF9BDAA1F4 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d590bb3d-6b1e-4827-aad3-36963ca1e8ca.roa Signing time: Sat 18 Oct 2025 06:11:19 +0000 ROA not before: Sat 18 Oct 2025 06:11:19 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.84.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:16:92:7e:9a:70:32:6e:c3:4c:d2:ba:b8:53:cf:df:9b:da:a1:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 06:11:19 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=68c383191c3c027c659a5c3ff038a46df3688c8854d2d4c5b34844bc4bec7852, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b1:ec:68:59:8c:b4:22:e1:cd:c7:9e:90:98: bc:40:68:22:55:b0:ca:1a:d6:a9:06:53:7d:12:c6: 7c:1a:52:74:64:e1:19:ab:66:54:61:f6:c0:ea:9a: 25:78:0a:51:55:a4:f7:18:0c:c2:9b:00:23:af:11: f3:2e:a6:1e:5b:1e:58:e7:12:1e:35:6d:27:b2:4d: 2d:37:4c:5b:60:66:dc:43:bc:ea:c9:e3:68:80:e6: 98:74:d4:f2:e5:76:51:03:92:7c:54:fe:73:85:d8: f0:99:52:62:b2:6e:10:70:ac:3b:35:5c:6c:cd:96: 83:12:25:f1:58:5e:ec:76:d2:ad:cf:4d:70:3e:7f: e2:bc:30:48:47:90:97:f1:74:e0:00:58:f5:a4:d8: c7:d1:51:a3:01:38:80:b9:78:4a:f5:5d:fe:e9:9a: c9:86:0f:90:18:68:13:c5:f2:d7:9e:3d:59:b9:27: 63:19:5c:23:4c:22:7c:5f:ec:00:55:24:9f:83:d7: 4a:ae:42:a9:d2:16:19:4c:5a:45:41:72:83:e9:11: c0:31:d0:79:a7:31:8d:9a:37:a8:73:34:b7:14:10: aa:19:b7:2b:40:3b:a8:ec:7d:ad:c8:7a:30:b5:9d: 10:38:a4:98:e9:69:2b:db:b7:9b:e6:03:35:86:14: d4:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:21:FD:29:68:65:ED:C1:7E:D3:FB:C4:B2:8C:98:A2:F2:83:1D:CB X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d590bb3d-6b1e-4827-aad3-36963ca1e8ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.84.109.0/24 Signature Algorithm: sha256WithRSAEncryption 66:fd:17:e8:35:7f:c7:a3:f0:94:3b:26:d8:7e:2d:3b:f8:d6: 6e:82:96:34:28:2c:04:b2:95:da:0b:66:bd:30:d8:d4:2f:05: ae:8d:e7:17:f5:f4:09:1f:f2:b0:e1:ca:1b:31:29:37:55:6a: 43:fa:6d:4a:9d:d7:b6:47:e5:8b:90:66:da:36:e7:68:3e:e3: 83:0e:66:e4:c7:a4:d3:ed:fd:d0:5d:98:58:63:e2:56:68:ff: 87:19:7b:10:25:5c:6d:64:41:bf:8d:34:68:c6:0d:e4:0a:9c: 25:cb:43:42:bc:f5:fa:f2:cc:50:cc:49:6b:24:d6:c1:72:c1: 6a:78:d9:45:d1:24:2e:23:5f:42:97:ea:d7:3b:a6:d2:28:75: 31:3a:8d:9d:0e:fa:5b:94:11:7a:1e:00:0b:08:be:c2:ae:a1: 91:2b:76:9c:e7:57:f3:fe:f0:65:33:42:23:2c:b4:f2:3f:81: 4e:38:d0:9a:94:0e:47:52:a2:4b:02:f7:7a:32:b7:4f:7a:d9: 27:be:02:b2:31:72:b3:42:e9:45:16:59:92:df:5b:e5:d0:4a: 8e:f0:3d:1c:b6:2d:d1:81:bd:d1:78:c3:25:a4:d3:53:bd:8e: 39:0a:a8:be:61:e3:bf:25:eb:39:9b:bc:5c:b0:a6:ed:a9:e2: 54:b1:48:91 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGBaSfppwMm7DTNK6uFPP35vaofQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MDYxMTE5WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A2OGMzODMxOTFjM2MwMjdjNjU5YTVjM2ZmMDM4YTQ2ZGYz Njg4Yzg4NTRkMmQ0YzViMzQ4NDRiYzRiZWM3ODUyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDPsexoWYy0IuHNx56QmLxAaCJVsMoa1qkGU30SxnwaUnRk 4RmrZlRh9sDqmiV4ClFVpPcYDMKbACOvEfMuph5bHljnEh41bSeyTS03TFtgZtxD vOrJ42iA5ph01PLldlEDknxU/nOF2PCZUmKybhBwrDs1XGzNloMSJfFYXux20q3P TXA+f+K8MEhHkJfxdOAAWPWk2MfRUaMBOIC5eEr1Xf7pmsmGD5AYaBPF8teePVm5 J2MZXCNMInxf7ABVJJ+D10quQqnSFhlMWkVBcoPpEcAx0HmnMY2aN6hzNLcUEKoZ tytAO6jsfa3IejC1nRA4pJjpaSvbt5vmAzWGFNSPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU+iH9KWhl7cF+0/vEsoyYovKDHcswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2Q1OTBiYjNkLTZiMWUtNDgyNy1hYWQzLTM2OTYzY2ExZThjYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0VG0wDQYJKoZIhvcNAQELBQADggEBAGb9F+g1f8ej8JQ7Jth+LTv41m6C ljQoLASyldoLZr0w2NQvBa6N5xf19Akf8rDhyhsxKTdVakP6bUqd17ZH5YuQZto2 52g+44MOZuTHpNPt/dBdmFhj4lZo/4cZexAlXG1kQb+NNGjGDeQKnCXLQ0K89fry zFDMSWsk1sFywWp42UXRJC4jX0KX6tc7ptIodTE6jZ0O+luUEXoeAAsIvsKuoZEr dpznV/P+8GUzQiMstPI/gU440JqUDkdSoksC93oyt0962Se+ArIxcrNC6UUWWZLf W+XQSo7wPRy2LdGBvdF4wyWk01O9jjkKqL5h478l6zmbvFywpu2p4lSxSJE= -----END CERTIFICATE-----Generated at Mon Oct 20 06:03:44 2025 by rpki-client