$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e669a10b-fffa-492c-af3d-8b1d2032f2e5.roa File: e669a10b-fffa-492c-af3d-8b1d2032f2e5.roa (raw, json) Hash identifier: 6jxWriq61nHcsyIwkzMnnWcl8x7iNTqIqkSD9c+Zi9g= Subject key identifier: 8C:67:99:87:5D:CD:6D:84:05:E2:8A:D4:2E:D3:57:43:CD:4F:88:22 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 68C84A95A987847B9D1F36EBB93EE0840B064527 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e669a10b-fffa-492c-af3d-8b1d2032f2e5.roa Signing time: Sat 18 Oct 2025 16:40:16 +0000 ROA not before: Sat 18 Oct 2025 16:40:16 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.84.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:c8:4a:95:a9:87:84:7b:9d:1f:36:eb:b9:3e:e0:84:0b:06:45:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 16:40:16 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=f465a618502b0e9d27daf575a139fb18118aa80a74d7b28dcdbbb470f23dfadc, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b3:02:b1:73:fe:e8:6b:ee:f1:d0:b6:4b:dc: 87:40:5b:38:f7:e2:41:86:e0:17:ff:ef:d2:5b:cb: 7e:14:a6:05:cf:b3:40:31:19:4d:88:01:3e:62:1b: e6:db:55:b2:b0:11:87:38:79:f0:dc:4e:90:5c:e6: 75:11:62:08:22:eb:9e:42:9e:00:9b:b5:64:33:7e: 8c:63:03:f8:12:62:dd:93:93:1e:39:4c:91:0d:5e: 4d:55:25:23:6f:e8:e2:ba:55:d0:4d:19:83:98:8a: 5c:1d:ef:b9:d4:b2:c8:03:70:93:34:7d:90:35:db: 72:06:cd:ab:07:10:57:53:3f:82:d0:9c:f8:6b:3e: 06:c2:ac:fd:20:08:3e:06:7a:76:ec:40:45:09:9e: ff:97:3f:2a:ea:65:88:87:d5:b8:51:32:29:c0:d0: b7:70:2d:af:4e:1a:5f:e8:40:3a:d6:2f:6c:b3:d2: 2c:e1:44:bb:3b:a2:10:4a:48:39:16:2d:fe:23:0a: ec:2e:bd:fe:52:f5:88:89:3e:a6:df:01:b7:73:8a: e8:4c:80:44:ee:24:64:eb:83:1c:46:58:c1:37:ef: 6a:dd:45:89:46:63:b3:b3:3b:b4:0e:fa:b7:b6:cf: 30:0e:15:77:2d:bd:f4:a4:be:24:83:2c:60:08:a0: b5:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:67:99:87:5D:CD:6D:84:05:E2:8A:D4:2E:D3:57:43:CD:4F:88:22 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e669a10b-fffa-492c-af3d-8b1d2032f2e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.84.201.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:f6:6c:47:37:3f:fc:22:6d:a6:0d:94:da:a0:95:71:91:f5: ed:17:f8:23:7e:ba:7a:00:05:8e:f0:78:0c:1a:e2:38:05:34: 14:aa:68:02:a5:27:84:1f:07:ab:04:7a:d1:cd:cc:d6:ac:fc: 61:0c:f9:8f:86:5b:de:e5:90:86:fe:fe:91:3e:7c:86:f0:f9: 7d:c6:d7:30:5d:45:88:94:d5:0c:3a:2c:23:98:91:4b:ea:28: 5c:b7:28:e5:8e:44:65:4d:b5:c5:01:e2:f1:b6:e5:35:a7:67: 75:52:c3:cb:cd:cf:99:1f:53:a2:61:d2:8d:8c:d6:1e:22:81: 53:c1:58:12:47:b2:a2:95:48:7c:90:c6:c8:2a:ec:31:b8:0d: 00:73:07:7e:7f:aa:22:0d:79:a9:44:18:e1:57:43:31:d1:08: e5:f4:38:1a:f4:81:62:f8:4a:c7:3c:76:41:b7:e2:f5:a8:9f: fd:9b:45:45:9d:d0:5d:3c:09:2e:8a:f3:08:39:b0:d2:99:44: b9:8a:44:9d:70:b6:af:5b:ed:8b:af:0e:2f:23:9a:85:f9:8e: ab:82:7b:78:42:ce:0f:27:57:f6:5b:d5:a8:cf:9a:b1:98:d6: ba:10:c7:ce:f5:c7:95:2d:d2:95:f6:35:fa:22:f1:d1:be:95: 6a:8d:a5:cd -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUaMhKlamHhHudHzbruT7ghAsGRScwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTY0MDE2WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BmNDY1YTYxODUwMmIwZTlkMjdkYWY1NzVhMTM5ZmIxODEx OGFhODBhNzRkN2IyOGRjZGJiYjQ3MGYyM2RmYWRjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCuswKxc/7oa+7x0LZL3IdAWzj34kGG4Bf/79Jby34UpgXP s0AxGU2IAT5iG+bbVbKwEYc4efDcTpBc5nURYggi655CngCbtWQzfoxjA/gSYt2T kx45TJENXk1VJSNv6OK6VdBNGYOYilwd77nUssgDcJM0fZA123IGzasHEFdTP4LQ nPhrPgbCrP0gCD4GenbsQEUJnv+XPyrqZYiH1bhRMinA0LdwLa9OGl/oQDrWL2yz 0izhRLs7ohBKSDkWLf4jCuwuvf5S9YiJPqbfAbdziuhMgETuJGTrgxxGWME372rd RYlGY7OzO7QO+re2zzAOFXctvfSkviSDLGAIoLU5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUjGeZh13NbYQF4orULtNXQ81PiCIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2U2NjlhMTBiLWZmZmEtNDkyYy1hZjNkLThiMWQyMDMyZjJlNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0VMkwDQYJKoZIhvcNAQELBQADggEBADr2bEc3P/wibaYNlNqglXGR9e0X +CN+unoABY7weAwa4jgFNBSqaAKlJ4QfB6sEetHNzNas/GEM+Y+GW97lkIb+/pE+ fIbw+X3G1zBdRYiU1Qw6LCOYkUvqKFy3KOWORGVNtcUB4vG25TWnZ3VSw8vNz5kf U6Jh0o2M1h4igVPBWBJHsqKVSHyQxsgq7DG4DQBzB35/qiINealEGOFXQzHRCOX0 OBr0gWL4Ssc8dkG34vWon/2bRUWd0F08CS6K8wg5sNKZRLmKRJ1wtq9b7YuvDi8j moX5jquCe3hCzg8nV/Zb1ajPmrGY1roQx871x5Ut0pX2Nfoi8dG+lWqNpc0= -----END CERTIFICATE-----Generated at Mon Oct 20 17:29:10 2025 by rpki-client