$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/da285dee-a120-4ac8-862d-5200bba0ec6f.roa File: da285dee-a120-4ac8-862d-5200bba0ec6f.roa (raw, json) Hash identifier: o4G5pW3n18EiUAuBVHE52GTxV1xwxz7egkBGhvxphxY= Subject key identifier: C8:C7:AA:99:9B:3E:CB:27:C2:25:73:6E:3D:22:F2:0C:9D:F1:8F:1F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6D7EBF6AF5455FFEF597D5AC906BA2849716E446 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/da285dee-a120-4ac8-862d-5200bba0ec6f.roa Signing time: Sun 19 Oct 2025 08:00:13 +0000 ROA not before: Sun 19 Oct 2025 08:00:13 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.85.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:7e:bf:6a:f5:45:5f:fe:f5:97:d5:ac:90:6b:a2:84:97:16:e4:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 08:00:13 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=027d951bd868d302aaf1b74ddc2b925f6d01359f4a26cbf2bb9e4326f52621b9, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b6:b3:95:02:cf:36:68:7e:f8:b2:21:58:6d: 72:df:0d:f7:40:a5:d1:f6:a5:88:8a:4c:d2:f7:03: 2f:f3:8f:71:bf:54:9b:45:e3:c2:bb:63:e5:2c:96: d9:da:c9:1d:99:35:2f:12:08:e0:ba:a3:88:06:c8: 0b:ca:49:39:46:32:3d:86:56:6e:30:cc:f4:be:60: aa:39:c7:58:cf:27:46:4d:87:8a:74:ac:08:e5:3e: 7f:f5:7b:57:13:7f:4e:68:c2:33:91:90:ab:ad:75: b8:0c:d0:70:f4:17:a4:64:9e:0c:db:f7:ba:af:6a: 6d:5c:ca:f4:58:3f:a2:06:32:c0:75:8f:1c:ac:37: 56:76:d4:27:3e:d6:fe:8f:4c:c2:12:0a:b5:4f:a8: 10:9c:60:6c:b1:aa:17:b2:18:a8:87:79:17:c7:ad: 3c:e4:d6:50:f6:9f:2d:7e:c1:d0:0b:7a:37:dd:fa: 8d:1b:92:a6:15:72:04:26:50:9d:72:47:03:8e:60: 59:5c:5d:57:82:fd:fe:f6:d9:c2:53:c0:d9:59:00: 5f:c6:f4:28:fb:37:78:82:76:c4:e5:70:24:43:de: 73:2d:bd:3e:de:6a:64:8b:f4:de:ab:ae:9c:72:ce: de:36:3b:e9:bc:46:6b:d6:35:b2:bb:ba:27:e8:8d: c7:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:C7:AA:99:9B:3E:CB:27:C2:25:73:6E:3D:22:F2:0C:9D:F1:8F:1F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/da285dee-a120-4ac8-862d-5200bba0ec6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.85.207.0/24 Signature Algorithm: sha256WithRSAEncryption 16:f9:1c:92:8a:75:0d:5c:8d:bc:d3:ac:96:99:51:ba:46:a0: 9f:c6:97:fd:a3:3b:3a:57:06:95:b4:cd:ec:13:2e:e2:a5:ab: 1d:e5:d9:00:1b:88:0b:8e:2c:97:96:01:63:55:fa:0c:32:dc: 27:f4:90:7a:45:67:fe:13:ab:af:15:31:c6:ad:d9:f6:6b:2a: a0:d2:ee:42:f7:ca:f9:a7:0d:71:bf:54:c8:10:97:d5:33:89: 0d:6f:c6:21:3a:6c:d6:f4:60:ef:47:c4:e8:67:04:ba:cc:62: c0:84:a4:a7:9b:e8:fe:31:48:be:0c:92:49:97:f8:7a:82:26: b3:3b:df:a5:67:1d:d9:39:02:38:d1:06:82:d7:a9:c4:ac:66: a9:3b:2b:8d:e8:c7:87:63:b6:cb:5a:2f:8f:6f:f1:b7:d0:1b: 19:d2:6f:7f:68:4e:f9:27:b1:80:57:28:31:73:2f:45:f9:be: ce:1b:00:bf:0a:90:a3:75:a6:9d:f9:39:2e:37:31:ef:f6:8d: fc:89:26:96:b7:6a:04:e3:a4:8b:97:1a:11:78:14:e1:7a:22: a4:4b:da:60:94:1a:af:c5:48:04:4d:a9:b1:90:67:28:29:0d: 7f:81:74:7c:2e:1f:e6:3b:8c:1c:4e:f8:76:7b:18:73:ae:8a: 47:42:1a:cc -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbX6/avVFX/71l9WskGuihJcW5EYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MDgwMDEzWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AwMjdkOTUxYmQ4NjhkMzAyYWFmMWI3NGRkYzJiOTI1ZjZk MDEzNTlmNGEyNmNiZjJiYjllNDMyNmY1MjYyMWI5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3trOVAs82aH74siFYbXLfDfdApdH2pYiKTNL3Ay/zj3G/ VJtF48K7Y+UsltnayR2ZNS8SCOC6o4gGyAvKSTlGMj2GVm4wzPS+YKo5x1jPJ0ZN h4p0rAjlPn/1e1cTf05owjORkKutdbgM0HD0F6Rkngzb97qvam1cyvRYP6IGMsB1 jxysN1Z21Cc+1v6PTMISCrVPqBCcYGyxqheyGKiHeRfHrTzk1lD2ny1+wdALejfd +o0bkqYVcgQmUJ1yRwOOYFlcXVeC/f722cJTwNlZAF/G9Cj7N3iCdsTlcCRD3nMt vT7eamSL9N6rrpxyzt42O+m8RmvWNbK7uifojcfzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUyMeqmZs+yyfCJXNuPSLyDJ3xjx8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2RhMjg1ZGVlLWExMjAtNGFjOC04NjJkLTUyMDBiYmEwZWM2Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0Vc8wDQYJKoZIhvcNAQELBQADggEBABb5HJKKdQ1cjbzTrJaZUbpGoJ/G l/2jOzpXBpW0zewTLuKlqx3l2QAbiAuOLJeWAWNV+gwy3Cf0kHpFZ/4Tq68VMcat 2fZrKqDS7kL3yvmnDXG/VMgQl9UziQ1vxiE6bNb0YO9HxOhnBLrMYsCEpKeb6P4x SL4MkkmX+HqCJrM736VnHdk5AjjRBoLXqcSsZqk7K43ox4djtstaL49v8bfQGxnS b39oTvknsYBXKDFzL0X5vs4bAL8KkKN1pp35OS43Me/2jfyJJpa3agTjpIuXGhF4 FOF6IqRL2mCUGq/FSARNqbGQZygpDX+BdHwuH+Y7jBxO+HZ7GHOuikdCGsw= -----END CERTIFICATE-----Generated at Mon Oct 20 02:57:47 2025 by rpki-client