$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ef72735b-9270-403a-a8e8-9cc2ff7fb180.roa File: ef72735b-9270-403a-a8e8-9cc2ff7fb180.roa (raw, json) Hash identifier: ExCe3JZkbaMbta4Un08Jiw5+VTCGbvUk4HUzkFeak4o= Subject key identifier: 99:9C:12:B7:2C:69:82:E1:8C:AA:3D:18:84:21:24:63:C2:A4:9F:EE Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 71BE164C9ED7DD30C5A6C7B493CCD5E710C5580B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ef72735b-9270-403a-a8e8-9cc2ff7fb180.roa Signing time: Sat 18 Oct 2025 16:10:15 +0000 ROA not before: Sat 18 Oct 2025 16:10:15 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.84.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:be:16:4c:9e:d7:dd:30:c5:a6:c7:b4:93:cc:d5:e7:10:c5:58:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 16:10:15 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=feca3b78940a8327015bc4d2c0d4ccfc957ef02ae6b5a94b1bfd0b0941a0f01d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:fc:ca:53:f1:ef:e8:e7:aa:f7:92:d2:3b:15: 2b:25:e1:61:a7:73:f6:82:4c:40:25:e2:76:d6:57: c6:01:cd:d9:54:2f:14:0b:68:4a:9b:2c:8b:ee:8e: 3e:fb:cc:8b:b4:86:96:0f:c6:a1:9c:92:73:c6:1c: aa:33:a7:36:6a:a3:58:86:c3:da:b6:78:c0:ef:62: 74:7b:80:36:be:ac:06:aa:b5:a1:64:7f:40:dc:51: 7f:43:e7:ff:bc:be:6c:cc:d6:39:6f:6a:99:05:7e: 14:a5:1b:2c:7d:91:57:99:5b:d4:4a:80:cd:f2:9f: 3f:4b:1d:20:06:7f:a3:98:63:6c:b1:c3:31:5e:0f: 09:5a:3c:dc:76:21:0f:ff:7a:06:d1:f0:8e:2c:13: 37:2e:12:e7:db:11:45:db:07:0e:69:00:ce:2d:43: bf:d8:1a:a9:49:ea:1f:0b:17:80:04:83:92:4d:b0: ff:ce:1b:ac:7c:5c:ce:92:75:81:d3:06:03:35:6c: 6b:0a:ef:e0:3e:f7:d3:28:aa:70:29:ee:a6:29:f8: 1d:0e:d3:35:fb:89:63:2f:d7:49:b5:e5:89:84:86: a3:05:53:fd:09:48:62:6e:fd:f4:be:5a:a1:28:37: 64:55:3f:2c:81:10:2e:90:d4:66:0a:64:ff:68:95: 94:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:9C:12:B7:2C:69:82:E1:8C:AA:3D:18:84:21:24:63:C2:A4:9F:EE X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ef72735b-9270-403a-a8e8-9cc2ff7fb180.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.84.101.0/24 Signature Algorithm: sha256WithRSAEncryption 40:d1:d2:bd:da:e2:ef:0a:b4:0f:b6:f0:a8:be:e3:0d:4a:a5: a1:97:5c:b9:ca:05:e3:94:08:63:cf:c4:3e:be:6f:a1:7b:aa: 32:d1:de:6a:38:11:2e:00:bd:3a:30:e9:59:07:4d:e4:27:7d: 16:53:1a:26:50:44:7a:4e:62:ec:da:91:00:b6:09:8b:6c:bc: 50:39:bf:d1:0d:dc:7d:0b:6a:a2:d7:5b:74:b5:98:aa:1d:9a: a0:b1:23:61:7e:e4:32:6b:ec:08:65:11:a3:81:e0:fc:68:95: 72:1c:08:69:df:82:03:16:e7:0b:91:4f:d4:91:d3:10:6f:2c: 05:d4:1b:b5:14:3a:be:a5:0c:fc:15:23:da:e7:4e:4f:b7:c7: 80:3b:6d:4c:b6:a1:52:e0:59:4c:ff:ac:42:dc:7b:61:20:d4: 2c:46:25:fd:33:c3:b8:2f:3f:92:b7:1a:88:7e:2e:13:c0:6f: 42:1d:ec:69:89:f3:af:99:7f:5a:d5:25:7d:75:f4:ce:5e:aa: 14:4e:1c:fe:f8:74:be:54:1f:6e:85:02:32:e0:3a:f0:48:bf: b2:c3:5c:97:d4:e5:57:a3:3c:7d:c3:39:33:eb:f6:b9:6b:a4: c2:85:94:66:58:d7:77:9c:b1:33:40:70:26:c2:7e:7d:46:2f: 76:bd:d3:7e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcb4WTJ7X3TDFpse0k8zV5xDFWAswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTYxMDE1WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BmZWNhM2I3ODk0MGE4MzI3MDE1YmM0ZDJjMGQ0Y2NmYzk1 N2VmMDJhZTZiNWE5NGIxYmZkMGIwOTQxYTBmMDFkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDM/MpT8e/o56r3ktI7FSsl4WGnc/aCTEAl4nbWV8YBzdlU LxQLaEqbLIvujj77zIu0hpYPxqGcknPGHKozpzZqo1iGw9q2eMDvYnR7gDa+rAaq taFkf0DcUX9D5/+8vmzM1jlvapkFfhSlGyx9kVeZW9RKgM3ynz9LHSAGf6OYY2yx wzFeDwlaPNx2IQ//egbR8I4sEzcuEufbEUXbBw5pAM4tQ7/YGqlJ6h8LF4AEg5JN sP/OG6x8XM6SdYHTBgM1bGsK7+A+99MoqnAp7qYp+B0O0zX7iWMv10m15YmEhqMF U/0JSGJu/fS+WqEoN2RVPyyBEC6Q1GYKZP9olZSVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUmZwStyxpguGMqj0YhCEkY8Kkn+4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2VmNzI3MzViLTkyNzAtNDAzYS1hOGU4LTljYzJmZjdmYjE4MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0VGUwDQYJKoZIhvcNAQELBQADggEBAEDR0r3a4u8KtA+28Ki+4w1KpaGX XLnKBeOUCGPPxD6+b6F7qjLR3mo4ES4AvTow6VkHTeQnfRZTGiZQRHpOYuzakQC2 CYtsvFA5v9EN3H0LaqLXW3S1mKodmqCxI2F+5DJr7AhlEaOB4PxolXIcCGnfggMW 5wuRT9SR0xBvLAXUG7UUOr6lDPwVI9rnTk+3x4A7bUy2oVLgWUz/rELce2Eg1CxG Jf0zw7gvP5K3Goh+LhPAb0Id7GmJ86+Zf1rVJX119M5eqhROHP74dL5UH26FAjLg OvBIv7LDXJfU5VejPH3DOTPr9rlrpMKFlGZY13ecsTNAcCbCfn1GL3a9034= -----END CERTIFICATE-----Generated at Mon Oct 20 06:03:54 2025 by rpki-client