$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f1b881a6-0f6e-484c-a4c3-42b88f0b5074.roa File: f1b881a6-0f6e-484c-a4c3-42b88f0b5074.roa (raw, json) Hash identifier: Y7gUgXfhWnTiP04j8PtOXw4/g1UIpCXGKu7tH5TMVzY= Subject key identifier: BC:F3:46:40:37:41:F9:D3:0C:43:67:5A:1C:5B:F3:2E:45:8C:E6:2B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0D44794A059AFA28FCBE0C84609E1C988E5BECA3 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f1b881a6-0f6e-484c-a4c3-42b88f0b5074.roa Signing time: Thu 16 Oct 2025 16:53:01 +0000 ROA not before: Thu 16 Oct 2025 16:53:01 +0000 ROA not after: Thu 20 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.124.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:44:79:4a:05:9a:fa:28:fc:be:0c:84:60:9e:1c:98:8e:5b:ec:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 16 16:53:01 2025 GMT Not After : Nov 20 23:59:59 2025 GMT Subject: serialNumber=46c86139259e407135b3fa73bae493cc54016d1ba79e54e8b2ff53c02574c80f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:05:9b:f7:f1:92:33:11:56:64:b1:81:01:6a: b5:d4:ff:7c:9a:f3:46:49:fe:78:75:20:e1:10:d8: e1:a1:f1:6f:ee:83:0a:12:e9:79:27:42:ab:1d:87: 8e:6c:e7:17:83:ed:03:06:20:10:45:1d:60:c5:b2: 59:16:b0:a4:9f:f8:84:c4:74:e6:b9:fb:82:8f:ae: 8f:ab:f7:45:48:99:b3:7b:c7:66:a1:7b:48:fa:a8: 58:fc:1d:fc:a4:ac:8e:52:e8:9a:5a:63:7f:ad:35: 2c:45:1f:4b:92:cf:dc:cc:39:a7:89:b0:ba:20:19: 98:71:31:98:8c:34:53:b0:7e:57:f8:80:12:bc:db: 5c:cc:f0:e5:c3:6c:0e:11:51:3f:0d:00:2d:de:f6: 94:2e:6f:58:6e:a5:5f:a9:48:39:ed:17:9f:c3:2c: f5:d7:29:7b:89:e9:b7:21:06:1e:46:e2:a1:12:3b: 03:4a:28:7b:6c:62:26:73:69:d2:29:8c:88:fc:97: 6f:cb:f6:76:10:4d:ee:2d:e9:0e:12:2a:10:9e:43: c4:39:29:f5:93:bf:bb:ca:01:d6:a2:71:ca:51:65: ac:80:f2:5a:44:be:19:0b:95:f0:1a:4a:f7:d7:86: 0d:c0:df:3a:e3:41:0f:e8:ea:90:c3:b5:c9:12:e6: 44:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:F3:46:40:37:41:F9:D3:0C:43:67:5A:1C:5B:F3:2E:45:8C:E6:2B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f1b881a6-0f6e-484c-a4c3-42b88f0b5074.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.124.203.0/24 Signature Algorithm: sha256WithRSAEncryption ac:9a:56:0a:8c:b6:15:6b:55:33:b5:7e:f5:5d:45:2f:08:6a: 6c:a3:7a:83:5e:d5:1e:d1:54:ff:20:32:69:49:88:f5:a1:0d: 07:a3:1a:06:d9:fd:12:9f:fa:31:bc:59:24:12:55:a1:6e:11: 74:92:ef:21:ee:cc:1d:05:f8:1d:bf:14:05:17:4c:f4:83:73: b0:6e:81:a9:ee:f7:bc:7f:60:97:d3:5e:3b:1e:bf:87:d2:96: 5f:d1:c4:0c:9f:4d:36:6e:2f:82:3e:a5:06:75:12:ef:37:49: 50:34:41:06:d8:4a:1e:76:4c:29:3e:59:24:fa:92:24:28:72: 12:0c:2a:60:e2:a4:a0:a3:bb:69:f7:d5:88:84:8c:18:56:d7: 21:c6:61:fe:af:f8:e6:eb:f9:76:8c:93:e0:f2:c1:af:be:0b: 73:23:cb:59:0b:8d:d2:47:d3:e8:f0:30:cd:82:f3:ba:3c:91: 45:85:fa:60:06:46:69:59:9d:59:50:e8:98:00:cb:42:0e:ff: 3d:e3:b9:10:36:53:b0:58:96:6a:fc:b6:47:d8:f3:fd:d8:46: 9c:cc:31:a3:87:18:b3:b0:ac:45:19:43:4b:58:88:8d:67:f2: 7d:f7:cf:7e:ff:f0:f8:19:8d:6e:10:e4:1d:b9:a2:39:a9:25: 25:54:fd:c5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDUR5SgWa+ij8vgyEYJ4cmI5b7KMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE2MTY1MzAxWhcNMjUxMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A0NmM4NjEzOTI1OWU0MDcxMzViM2ZhNzNiYWU0OTNjYzU0 MDE2ZDFiYTc5ZTU0ZThiMmZmNTNjMDI1NzRjODBmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQBZv38ZIzEVZksYEBarXU/3ya80ZJ/nh1IOEQ2OGh8W/u gwoS6XknQqsdh45s5xeD7QMGIBBFHWDFslkWsKSf+ITEdOa5+4KPro+r90VImbN7 x2ahe0j6qFj8HfykrI5S6JpaY3+tNSxFH0uSz9zMOaeJsLogGZhxMZiMNFOwflf4 gBK821zM8OXDbA4RUT8NAC3e9pQub1hupV+pSDntF5/DLPXXKXuJ6bchBh5G4qES OwNKKHtsYiZzadIpjIj8l2/L9nYQTe4t6Q4SKhCeQ8Q5KfWTv7vKAdaiccpRZayA 8lpEvhkLlfAaSvfXhg3A3zrjQQ/o6pDDtckS5kRtAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUvPNGQDdB+dMMQ2daHFvzLkWM5iswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2YxYjg4MWE2LTBmNmUtNDg0Yy1hNGMzLTQyYjg4ZjBiNTA3NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0fMswDQYJKoZIhvcNAQELBQADggEBAKyaVgqMthVrVTO1fvVdRS8Iamyj eoNe1R7RVP8gMmlJiPWhDQejGgbZ/RKf+jG8WSQSVaFuEXSS7yHuzB0F+B2/FAUX TPSDc7Buganu97x/YJfTXjsev4fSll/RxAyfTTZuL4I+pQZ1Eu83SVA0QQbYSh52 TCk+WST6kiQochIMKmDipKCju2n31YiEjBhW1yHGYf6v+Obr+XaMk+Dywa++C3Mj y1kLjdJH0+jwMM2C87o8kUWF+mAGRmlZnVlQ6JgAy0IO/z3juRA2U7BYlmr8tkfY 8/3YRpzMMaOHGLOwrEUZQ0tYiI1n8n33z37/8PgZjW4Q5B25ojmpJSVU/cU= -----END CERTIFICATE-----Generated at Mon Oct 20 15:44:22 2025 by rpki-client