$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e9a3b80a-49e5-423c-a447-44cd52dcdba7.roa File: e9a3b80a-49e5-423c-a447-44cd52dcdba7.roa (raw, json) Hash identifier: IaNvFHBlz+VMsY2pfpVv5xnOE8SLqNm5ZYXuDlAdqTc= Subject key identifier: C3:2A:63:DD:AC:D0:89:6C:4F:88:AE:AF:C4:2B:6D:21:44:35:FB:57 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0994DEF63433BD58C431DA819C6E211BAC488519 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e9a3b80a-49e5-423c-a447-44cd52dcdba7.roa Signing time: Thu 16 Oct 2025 19:09:13 +0000 ROA not before: Thu 16 Oct 2025 19:09:13 +0000 ROA not after: Thu 20 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.222.240.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:94:de:f6:34:33:bd:58:c4:31:da:81:9c:6e:21:1b:ac:48:85:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 16 19:09:13 2025 GMT Not After : Nov 20 23:59:59 2025 GMT Subject: serialNumber=0db032911844590da2a3a5c2f92352ed4e41d135ef82316511993a62d850c59f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b0:69:5d:70:9c:9b:c4:f8:aa:12:f2:38:a1: cf:77:2b:99:02:c7:67:6e:51:6e:53:52:94:07:85: b8:06:ec:cd:cc:cd:52:7a:e2:fa:28:30:01:81:c9: 16:b6:93:5b:1b:cd:b5:ae:b7:33:59:99:18:1b:ae: 1c:09:dd:91:27:8a:54:d8:62:2a:39:93:65:3d:f0: 59:89:3e:a9:a2:5e:06:d4:70:cd:d8:2b:f4:1e:5e: f5:7a:3d:d5:22:2d:04:d1:17:b8:72:56:e5:0f:91: ef:f2:cb:3a:8a:ed:d5:2a:2e:c6:0a:11:7a:a6:85: 07:4d:76:8f:0f:08:3b:7a:65:01:2f:8f:ba:5d:f3: 16:9a:0c:b2:9a:8b:84:08:e7:6b:e7:1d:1b:8b:fa: 9a:39:9f:d7:ea:22:85:02:a1:b9:e6:88:5a:25:70: 90:e6:42:17:16:47:eb:7a:1c:e4:b8:47:b8:e1:1f: fd:39:25:e8:80:2f:69:33:c0:b4:a9:5b:32:02:49: 8c:45:d5:00:65:d7:9f:07:8f:0e:42:29:a4:1a:74: 88:90:a6:e9:e5:46:94:7f:17:77:04:d7:7a:31:3c: b2:59:3e:70:63:77:6f:f3:dc:cb:89:f8:11:09:66: b1:16:14:2a:2e:65:4b:38:d9:11:10:de:e5:2c:6d: 5f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:2A:63:DD:AC:D0:89:6C:4F:88:AE:AF:C4:2B:6D:21:44:35:FB:57 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e9a3b80a-49e5-423c-a447-44cd52dcdba7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.222.240.0/23 Signature Algorithm: sha256WithRSAEncryption 42:c4:34:76:5b:a0:2e:d9:8a:c0:a1:aa:ff:c0:a2:ff:ce:07: 24:ef:55:39:8f:7a:f3:ca:86:4c:8d:11:e9:5a:3d:5a:b2:1f: c9:75:65:13:77:0d:a0:4e:55:10:97:36:aa:87:66:f0:50:de: 29:d3:78:95:79:23:c5:72:f0:a2:87:3a:e7:78:49:38:18:13: 82:a2:c1:a3:fc:00:d3:de:f3:7e:2b:34:a0:e6:d9:fa:72:89: 37:d2:06:e2:6d:90:d5:bd:8c:34:86:5c:ba:e3:a2:f0:71:9d: 81:85:92:0e:9b:3c:3b:d6:65:f7:fa:13:f9:33:10:57:92:ae: 39:f6:e3:d2:ae:38:18:82:34:04:6f:63:24:d2:a2:30:b3:0f: 4c:65:41:db:55:9e:ae:22:54:03:06:7e:eb:ef:b5:e8:7b:b4: 22:ba:c1:5a:2c:d9:39:a1:8a:ea:50:73:d3:a4:87:e1:6b:22: 6d:84:46:f4:4f:40:9d:61:da:f5:c3:95:75:7e:7d:ec:eb:91: 8b:28:18:68:b3:5a:c7:9e:d0:da:48:dd:43:89:b1:02:c3:b8: 47:7e:f0:d8:4e:79:20:c2:97:e2:97:c7:38:51:7d:0a:fb:92: 44:44:21:4f:c9:7a:71:4a:02:d9:6e:14:26:7e:af:04:ec:d5: 0b:3d:b5:ae -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCZTe9jQzvVjEMdqBnG4hG6xIhRkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE2MTkwOTEzWhcNMjUxMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0AwZGIwMzI5MTE4NDQ1OTBkYTJhM2E1YzJmOTIzNTJlZDRl NDFkMTM1ZWY4MjMxNjUxMTk5M2E2MmQ4NTBjNTlmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQsGldcJybxPiqEvI4oc93K5kCx2duUW5TUpQHhbgG7M3M zVJ64vooMAGByRa2k1sbzbWutzNZmRgbrhwJ3ZEnilTYYio5k2U98FmJPqmiXgbU cM3YK/QeXvV6PdUiLQTRF7hyVuUPke/yyzqK7dUqLsYKEXqmhQdNdo8PCDt6ZQEv j7pd8xaaDLKai4QI52vnHRuL+po5n9fqIoUCobnmiFolcJDmQhcWR+t6HOS4R7jh H/05JeiAL2kzwLSpWzICSYxF1QBl158Hjw5CKaQadIiQpunlRpR/F3cE13oxPLJZ PnBjd2/z3MuJ+BEJZrEWFCouZUs42REQ3uUsbV/xAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUwypj3azQiWxPiK6vxCttIUQ1+1cwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2U5YTNiODBhLTQ5ZTUtNDIzYy1hNDQ3LTQ0Y2Q1MmRjZGJhNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE03vAwDQYJKoZIhvcNAQELBQADggEBAELENHZboC7ZisChqv/Aov/OByTv VTmPevPKhkyNEelaPVqyH8l1ZRN3DaBOVRCXNqqHZvBQ3inTeJV5I8Vy8KKHOud4 STgYE4KiwaP8ANPe834rNKDm2fpyiTfSBuJtkNW9jDSGXLrjovBxnYGFkg6bPDvW Zff6E/kzEFeSrjn249KuOBiCNARvYyTSojCzD0xlQdtVnq4iVAMGfuvvteh7tCK6 wVos2TmhiupQc9Okh+FrIm2ERvRPQJ1h2vXDlXV+fezrkYsoGGizWsee0NpI3UOJ sQLDuEd+8NhOeSDCl+KXxzhRfQr7kkREIU/JenFKAtluFCZ+rwTs1Qs9ta4= -----END CERTIFICATE-----Generated at Mon Oct 20 11:01:39 2025 by rpki-client