$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f5687687-cd1d-4e02-bc40-9306044a2282.roa File: f5687687-cd1d-4e02-bc40-9306044a2282.roa (raw, json) Hash identifier: BHt5Pble7sKzohME86t+yMVh6/RKrWUhu91Kz6O5ldY= Subject key identifier: A4:40:51:E1:5C:47:2B:75:66:84:E2:68:A7:F9:21:14:95:E9:2B:4B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7513F8B8847FD18B848DE366BA099D9908401559 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f5687687-cd1d-4e02-bc40-9306044a2282.roa Signing time: Sun 19 Oct 2025 05:12:42 +0000 ROA not before: Sun 19 Oct 2025 05:12:42 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.85.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:13:f8:b8:84:7f:d1:8b:84:8d:e3:66:ba:09:9d:99:08:40:15:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 05:12:42 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=91a8b2e140062b4d96ac10b77e594316a28c155105e5940f17ddad29f0d7f7ff, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:94:0f:93:ef:48:8a:55:d4:6f:65:11:cc:e1: 40:12:8e:fe:13:08:b5:8a:45:87:e3:48:52:5f:82: 92:06:71:cc:fc:fb:2b:ce:14:2c:5c:17:e1:3d:f8: 48:00:82:e3:d0:2e:37:54:4e:65:7a:7d:e5:84:bd: ea:ba:69:d9:2c:88:f8:e3:87:f8:21:29:d4:f6:71: 02:e2:5f:80:42:6f:99:e0:5e:e2:82:45:15:30:85: 0f:d3:8b:87:8a:d5:eb:0e:01:38:fc:57:ed:4e:70: be:cc:5d:a0:3f:28:9e:df:7d:d2:f1:c6:0d:f8:18: 52:39:b9:5d:eb:ae:3c:c3:ed:32:de:53:aa:9d:ec: 5a:7a:de:d9:5c:83:6e:18:78:c5:03:8b:c5:f4:04: 61:a6:e2:26:5a:e0:3a:45:8b:89:9e:79:14:7b:ea: 71:f7:f7:ee:f3:b4:5d:8e:ed:93:b5:9b:50:69:11: 16:c2:64:b0:a5:74:21:1c:68:3e:44:c2:17:c2:c7: a6:60:c2:0c:ea:38:6b:76:e2:fc:93:aa:e0:b9:2d: 38:9c:ff:66:53:dc:bb:fd:d0:66:1d:54:df:ab:4d: 04:bb:4f:e5:db:b3:a8:8a:7e:14:b2:44:44:9f:e2: da:4a:17:87:1d:28:17:e5:3e:50:ff:f9:c1:5c:9d: aa:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:40:51:E1:5C:47:2B:75:66:84:E2:68:A7:F9:21:14:95:E9:2B:4B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f5687687-cd1d-4e02-bc40-9306044a2282.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.85.56.0/21 Signature Algorithm: sha256WithRSAEncryption 8a:eb:53:a2:85:cf:15:98:2f:17:42:e7:f7:c7:c2:87:9a:b8: ac:6b:f9:99:10:96:75:a2:ed:c4:6a:a2:cf:68:f5:bd:75:3c: 65:bc:3b:40:56:9b:1b:0d:2b:1e:f1:2f:dd:07:f1:bd:8c:64: d3:57:47:b3:70:ac:f8:c7:13:57:63:f1:62:a4:2e:8a:77:79: 63:2e:a3:00:67:ce:6f:40:15:da:30:c9:7b:5f:b8:a8:79:4f: bc:88:03:21:76:94:cd:50:9e:50:23:2d:c1:ee:30:8f:c8:65: 7f:30:fc:8c:6c:e2:96:65:44:2f:46:0a:78:70:80:ef:80:91: 76:d9:97:dc:ba:79:ff:e8:99:02:32:32:5f:a0:c8:98:dd:13: 25:d3:05:93:a4:95:76:5d:b0:67:bb:53:e3:3e:f2:34:76:4a: 37:e6:63:34:c9:d3:6b:4f:79:8f:f4:a5:5d:80:3b:0b:f9:59: e8:0d:4b:de:5c:e7:c9:9b:cc:42:9a:8b:6a:b8:ff:cf:50:a6: 97:6b:c0:eb:2f:d1:95:5f:ff:37:f1:93:4a:60:99:ab:f8:43: 91:16:f5:59:c4:fb:95:eb:ea:54:a1:1f:47:58:36:81:60:29: a7:86:8b:42:ae:08:0f:fc:a8:10:ba:a2:96:6d:b3:6f:bc:75: 6d:b0:e1:10 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdRP4uIR/0YuEjeNmugmdmQhAFVkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MDUxMjQyWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A5MWE4YjJlMTQwMDYyYjRkOTZhYzEwYjc3ZTU5NDMxNmEy OGMxNTUxMDVlNTk0MGYxN2RkYWQyOWYwZDdmN2ZmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCmlA+T70iKVdRvZRHM4UASjv4TCLWKRYfjSFJfgpIGccz8 +yvOFCxcF+E9+EgAguPQLjdUTmV6feWEveq6adksiPjjh/ghKdT2cQLiX4BCb5ng XuKCRRUwhQ/Ti4eK1esOATj8V+1OcL7MXaA/KJ7ffdLxxg34GFI5uV3rrjzD7TLe U6qd7Fp63tlcg24YeMUDi8X0BGGm4iZa4DpFi4meeRR76nH39+7ztF2O7ZO1m1Bp ERbCZLCldCEcaD5EwhfCx6ZgwgzqOGt24vyTquC5LTic/2ZT3Lv90GYdVN+rTQS7 T+Xbs6iKfhSyRESf4tpKF4cdKBflPlD/+cFcnar1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUpEBR4VxHK3VmhOJop/khFJXpK0swHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2Y1Njg3Njg3LWNkMWQtNGUwMi1iYzQwLTkzMDYwNDRhMjI4Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAM0VTgwDQYJKoZIhvcNAQELBQADggEBAIrrU6KFzxWYLxdC5/fHwoeauKxr +ZkQlnWi7cRqos9o9b11PGW8O0BWmxsNKx7xL90H8b2MZNNXR7NwrPjHE1dj8WKk Lop3eWMuowBnzm9AFdowyXtfuKh5T7yIAyF2lM1QnlAjLcHuMI/IZX8w/Ixs4pZl RC9GCnhwgO+AkXbZl9y6ef/omQIyMl+gyJjdEyXTBZOklXZdsGe7U+M+8jR2Sjfm YzTJ02tPeY/0pV2AOwv5WegNS95c58mbzEKai2q4/89QppdrwOsv0ZVf/zfxk0pg mav4Q5EW9VnE+5Xr6lShH0dYNoFgKaeGi0KuCA/8qBC6opZts2+8dW2w4RA= -----END CERTIFICATE-----Generated at Mon Oct 20 21:12:38 2025 by rpki-client