$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dfe1ea15-6278-4d74-b20d-891eee851558.roa File: dfe1ea15-6278-4d74-b20d-891eee851558.roa (raw, json) Hash identifier: 6wFGVuXEpCuQ4s3aU/w63PF5iH8rH8S8v5kNyrPCfYY= Subject key identifier: 43:8E:B8:56:C1:AB:86:4F:18:62:DC:77:C8:9E:21:18:C8:14:DE:25 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1A27F4F3407333F4F4CA5E123E83151259CD3657 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dfe1ea15-6278-4d74-b20d-891eee851558.roa Signing time: Sat 18 Oct 2025 21:12:33 +0000 ROA not before: Sat 18 Oct 2025 21:12:33 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.84.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:27:f4:f3:40:73:33:f4:f4:ca:5e:12:3e:83:15:12:59:cd:36:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 21:12:33 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=a562bda08024dbb16d24678877f6b9fa1602abb5f05e47435341257d589c3dee, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1e:79:82:e6:d2:c2:7e:6e:0c:3d:1c:df:01: 96:92:db:f2:1e:c8:25:49:39:0d:42:a1:8d:04:13: d1:c4:d1:8a:fd:49:80:b4:b3:fb:cc:b6:49:9a:be: b6:a7:c7:ab:4b:65:31:ef:b5:c0:ce:77:b2:85:f2: 67:82:1f:cf:48:24:9c:0c:58:db:fd:ee:69:d4:8b: 8d:24:84:76:35:99:3c:98:06:43:96:e0:3c:56:7d: 58:2b:92:c6:be:5c:67:e6:2d:9b:15:ec:41:dd:b8: 5e:ea:1f:3f:e7:5a:51:be:07:bf:bb:dd:db:16:c1: cf:75:ee:8a:0c:d3:d0:c1:40:be:9a:f5:16:5b:01: e4:e3:82:77:b1:6d:3a:f2:47:c1:84:a0:81:60:9a: 06:86:08:6b:5b:35:fc:d4:5d:a5:58:4b:73:2e:6e: 56:3d:cc:0a:45:9f:c2:c1:40:c1:21:9a:bc:9f:4f: b4:f1:c0:20:ba:96:b4:97:9f:c5:8a:f8:fa:b6:3b: 4d:74:cc:70:f1:cd:88:58:8f:6b:07:bf:3a:5c:0d: 25:de:1b:2e:53:e9:41:4b:63:6c:30:af:b3:e3:0c: 8a:61:8e:0e:23:f6:f6:d5:4e:ec:35:7c:84:7b:84: eb:9d:13:db:11:4f:de:2d:22:31:76:c7:4b:20:30: d2:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:8E:B8:56:C1:AB:86:4F:18:62:DC:77:C8:9E:21:18:C8:14:DE:25 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dfe1ea15-6278-4d74-b20d-891eee851558.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.84.91.0/24 Signature Algorithm: sha256WithRSAEncryption 18:db:98:c4:eb:58:ac:e6:f6:8c:6e:ba:ca:a3:18:ad:e1:54: 92:23:95:51:4b:3d:c2:20:a8:07:c0:f2:d4:13:04:e2:4d:27: 0a:fa:85:c3:13:98:82:ec:4f:3b:0b:4e:06:da:ce:48:bf:5c: 51:76:76:1a:4b:b0:90:5e:cc:70:6a:fe:e6:32:45:06:b9:a7: a8:e5:39:4f:2b:69:c7:6c:f9:03:71:a9:05:1d:23:a7:9d:35: 55:27:61:4e:84:85:88:45:9a:25:12:19:02:b8:63:92:0a:82: ac:02:96:e0:5f:63:2b:da:b0:8c:0c:a0:33:39:49:75:84:2d: 33:43:35:43:04:85:ac:17:ed:d1:b5:48:5c:f9:b1:04:66:13: 50:6a:0d:8d:69:fe:6a:90:14:94:be:cc:2f:23:0a:78:3c:82: d6:d1:79:5e:ac:70:c4:8e:88:7f:bc:df:ae:26:43:63:42:05: 7e:7f:23:13:6f:5c:72:7d:69:58:bc:34:97:52:10:68:2b:6c: b7:07:2a:8b:3d:a3:3e:0e:9c:c5:f8:95:3c:74:d2:10:46:f6: e2:3e:57:4e:52:b9:16:91:5c:b2:70:56:a7:5a:a3:62:9e:b3: 71:51:0e:ef:b1:b9:d5:79:aa:d3:df:2f:99:17:14:80:6d:b9: e1:a1:bf:cc -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGif080BzM/T0yl4SPoMVElnNNlcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MjExMjMzWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BhNTYyYmRhMDgwMjRkYmIxNmQyNDY3ODg3N2Y2YjlmYTE2 MDJhYmI1ZjA1ZTQ3NDM1MzQxMjU3ZDU4OWMzZGVlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGHnmC5tLCfm4MPRzfAZaS2/IeyCVJOQ1CoY0EE9HE0Yr9 SYC0s/vMtkmavranx6tLZTHvtcDOd7KF8meCH89IJJwMWNv97mnUi40khHY1mTyY BkOW4DxWfVgrksa+XGfmLZsV7EHduF7qHz/nWlG+B7+73dsWwc917ooM09DBQL6a 9RZbAeTjgnexbTryR8GEoIFgmgaGCGtbNfzUXaVYS3MublY9zApFn8LBQMEhmryf T7TxwCC6lrSXn8WK+Pq2O010zHDxzYhYj2sHvzpcDSXeGy5T6UFLY2wwr7PjDIph jg4j9vbVTuw1fIR7hOudE9sRT94tIjF2x0sgMNIlAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUQ464VsGrhk8YYtx3yJ4hGMgU3iUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2RmZTFlYTE1LTYyNzgtNGQ3NC1iMjBkLTg5MWVlZTg1MTU1OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0VFswDQYJKoZIhvcNAQELBQADggEBABjbmMTrWKzm9oxuusqjGK3hVJIj lVFLPcIgqAfA8tQTBOJNJwr6hcMTmILsTzsLTgbazki/XFF2dhpLsJBezHBq/uYy RQa5p6jlOU8racds+QNxqQUdI6edNVUnYU6EhYhFmiUSGQK4Y5IKgqwCluBfYyva sIwMoDM5SXWELTNDNUMEhawX7dG1SFz5sQRmE1BqDY1p/mqQFJS+zC8jCng8gtbR eV6scMSOiH+8364mQ2NCBX5/IxNvXHJ9aVi8NJdSEGgrbLcHKos9oz4OnMX4lTx0 0hBG9uI+V05SuRaRXLJwVqdao2Kes3FRDu+xudV5qtPfL5kXFIBtueGhv8w= -----END CERTIFICATE-----Generated at Mon Oct 20 03:15:38 2025 by rpki-client