$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f7ea6155-adfd-4f55-9293-f943074b4b5d.roa File: f7ea6155-adfd-4f55-9293-f943074b4b5d.roa (raw, json) Hash identifier: aUN3B4cWGP4h3k44wgwJxUmbrbO4QBD9INMSSMs78rw= Subject key identifier: E4:EA:63:1B:BF:EC:2A:87:B5:FE:48:2F:AC:A2:3A:0B:B3:BA:E5:2A Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7E6C0A6E695C8FAF9BE4C93DA05C1BB6C2B9E043 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f7ea6155-adfd-4f55-9293-f943074b4b5d.roa Signing time: Sun 19 Oct 2025 06:12:33 +0000 ROA not before: Sun 19 Oct 2025 06:12:33 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.95.36.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:6c:0a:6e:69:5c:8f:af:9b:e4:c9:3d:a0:5c:1b:b6:c2:b9:e0:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 06:12:33 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=ee604c2f91c3b2787a0063a74024453eb60507f7ad498e3c303e3ce9759282f6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ce:84:4e:9e:fa:44:35:1d:89:c8:ea:03:59: 9e:51:16:da:b2:53:d3:9e:41:01:c4:98:01:cb:40: 4e:3f:a7:c6:48:75:f1:8d:5d:7a:8f:25:25:98:07: 4d:07:aa:b8:c9:b0:81:56:0f:41:1f:38:2d:9b:0d: 6b:fd:99:2c:42:95:a4:83:83:f4:67:74:4f:77:0b: 2a:70:c2:d4:57:f5:2c:e6:a5:43:8a:54:db:34:94: 48:29:0d:a1:e0:c5:ba:c2:e2:36:04:e2:fd:63:a6: a4:36:f6:93:22:a1:a1:13:b8:fa:5d:ec:0b:2e:25: e1:ba:2d:d7:b2:19:a1:e0:e0:d0:3f:27:d0:cf:ce: 46:56:42:5b:28:54:c8:58:dd:5d:a2:a6:43:be:6a: e2:be:80:18:d6:50:78:1f:ab:eb:3a:52:13:6c:d1: e8:08:48:24:ec:d6:83:1c:cd:9d:7e:1d:d5:b2:3d: 92:98:fb:bc:f1:8f:b1:80:f2:0e:b2:30:9d:60:4e: 75:7f:02:e3:14:17:56:c4:39:7e:ab:c4:a6:86:2d: b9:b4:38:1f:dc:31:72:25:6e:77:10:01:2c:db:55: 6a:a2:ec:81:62:d9:de:64:bf:23:50:9c:36:07:b6: 61:92:ea:da:03:d2:c7:56:5f:10:50:6b:97:b8:34: ec:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:EA:63:1B:BF:EC:2A:87:B5:FE:48:2F:AC:A2:3A:0B:B3:BA:E5:2A X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f7ea6155-adfd-4f55-9293-f943074b4b5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.95.36.0/22 Signature Algorithm: sha256WithRSAEncryption 99:e9:dd:85:07:ba:e9:b7:54:67:5b:a3:9a:7e:18:d1:35:33: 0b:68:06:89:3f:f8:d0:6e:e1:82:4f:bb:11:d7:70:59:8a:a1: 4a:e7:dc:31:e0:a0:4c:38:6c:47:96:f9:e4:2a:28:16:af:23: 52:6b:5e:51:20:55:54:b0:2c:10:a7:3e:0a:9e:cd:c1:1f:7f: 17:0f:46:25:34:a9:28:54:b3:bd:e8:e5:96:44:37:c8:cb:e1: 41:7b:8c:fd:a8:cb:12:d3:ad:53:1d:a2:41:37:3b:4d:f2:4a: f1:87:1a:d2:c3:aa:b2:b7:92:1d:b8:12:66:c6:84:ae:50:6a: 2e:24:eb:9a:0b:cf:ef:2a:71:21:0f:21:22:ad:ae:40:8a:b7: ac:6a:5d:f5:f4:72:0e:2b:76:50:70:dd:58:e7:09:2f:0b:d8: d6:cf:9f:ab:9a:68:90:c1:ed:08:ca:a8:97:cb:c1:2f:d7:da: 94:cf:4a:74:b0:c4:dd:f4:b0:f9:be:02:76:97:e6:a0:06:79: 33:8b:07:8f:1a:93:f7:ac:31:ad:37:6b:64:bd:79:09:fb:d9: d7:f7:26:59:e6:5f:f5:bb:ce:ce:2a:c4:cf:8f:18:3d:13:6e: 08:c8:b0:e0:59:dd:1d:8b:f1:a6:bd:a1:a3:2d:d7:e5:79:0a: 41:f0:c1:1e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfmwKbmlcj6+b5Mk9oFwbtsK54EMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MDYxMjMzWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BlZTYwNGMyZjkxYzNiMjc4N2EwMDYzYTc0MDI0NDUzZWI2 MDUwN2Y3YWQ0OThlM2MzMDNlM2NlOTc1OTI4MmY2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvzoROnvpENR2JyOoDWZ5RFtqyU9OeQQHEmAHLQE4/p8ZI dfGNXXqPJSWYB00HqrjJsIFWD0EfOC2bDWv9mSxClaSDg/RndE93CypwwtRX9Szm pUOKVNs0lEgpDaHgxbrC4jYE4v1jpqQ29pMioaETuPpd7AsuJeG6LdeyGaHg4NA/ J9DPzkZWQlsoVMhY3V2ipkO+auK+gBjWUHgfq+s6UhNs0egISCTs1oMczZ1+HdWy PZKY+7zxj7GA8g6yMJ1gTnV/AuMUF1bEOX6rxKaGLbm0OB/cMXIlbncQASzbVWqi 7IFi2d5kvyNQnDYHtmGS6toD0sdWXxBQa5e4NOy7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU5OpjG7/sKoe1/kgvrKI6C7O65SowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2Y3ZWE2MTU1LWFkZmQtNGY1NS05MjkzLWY5NDMwNzRiNGI1ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI0XyQwDQYJKoZIhvcNAQELBQADggEBAJnp3YUHuum3VGdbo5p+GNE1Mwto Bok/+NBu4YJPuxHXcFmKoUrn3DHgoEw4bEeW+eQqKBavI1JrXlEgVVSwLBCnPgqe zcEffxcPRiU0qShUs73o5ZZEN8jL4UF7jP2oyxLTrVMdokE3O03ySvGHGtLDqrK3 kh24EmbGhK5Qai4k65oLz+8qcSEPISKtrkCKt6xqXfX0cg4rdlBw3VjnCS8L2NbP n6uaaJDB7QjKqJfLwS/X2pTPSnSwxN30sPm+AnaX5qAGeTOLB48ak/esMa03a2S9 eQn72df3JlnmX/W7zs4qxM+PGD0TbgjIsOBZ3R2L8aa9oaMt1+V5CkHwwR4= -----END CERTIFICATE-----Generated at Mon Oct 20 05:58:32 2025 by rpki-client