$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f984a379-6fdd-41ec-b09e-a020daab79fd.roa File: f984a379-6fdd-41ec-b09e-a020daab79fd.roa (raw, json) Hash identifier: vtG4ryDH1yJOYkdp2STC/4shpePEShQK/RCML3p/A6I= Subject key identifier: 2D:A7:F8:E3:19:B6:A7:DA:13:5B:ED:D9:83:29:81:89:A4:68:49:60 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6EC4F8629F461A6FBB3D91B71E4EC3AC49886C76 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f984a379-6fdd-41ec-b09e-a020daab79fd.roa Signing time: Sun 19 Oct 2025 07:11:15 +0000 ROA not before: Sun 19 Oct 2025 07:11:15 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.84.240.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:c4:f8:62:9f:46:1a:6f:bb:3d:91:b7:1e:4e:c3:ac:49:88:6c:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 07:11:15 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=5717255a2f849beb53d093bf3e96c52481712ef6013a6f06cc8aee845660f49a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:7b:30:49:25:4e:c8:fb:6e:78:57:b9:9d:90: 1b:a8:7e:66:cc:3a:fd:9a:cf:b8:27:ad:71:9e:2d: 6a:88:5e:fd:84:c5:8d:53:5f:a2:18:ab:37:b4:53: 27:3b:24:21:dc:ff:fa:96:48:7e:66:d7:3c:5d:76: 0e:5a:df:e9:2e:87:2c:9d:b1:0d:11:9c:09:73:62: 74:b8:4b:7a:29:76:f6:5d:ae:18:23:a1:60:59:d4: b3:61:d9:09:eb:96:30:a8:50:28:08:b1:05:c3:14: 0a:bf:a8:82:5d:37:64:47:7d:15:69:43:92:ab:25: bd:5f:21:1d:44:8d:7c:ba:e8:41:58:ac:34:a2:4b: b3:49:c7:da:b8:08:bb:ea:83:1c:df:f4:b2:c0:b7: bb:69:d7:f5:53:cd:5e:31:58:05:7b:82:82:00:9f: 53:54:ba:58:49:8f:88:96:d2:d1:ee:3c:e2:de:00: 7b:05:1a:47:f0:15:33:84:45:ac:32:7f:90:be:8d: de:0c:8c:10:fd:5a:6d:de:c0:4a:8b:73:d7:03:3a: c6:e8:9f:48:3b:04:c2:ad:a6:b6:c6:70:ed:48:d2: 05:39:6f:dd:80:ec:51:4f:1a:d2:8a:25:bb:fd:c6: 05:54:8b:9b:10:36:b2:02:f0:a3:47:36:27:28:2a: a3:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:A7:F8:E3:19:B6:A7:DA:13:5B:ED:D9:83:29:81:89:A4:68:49:60 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f984a379-6fdd-41ec-b09e-a020daab79fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.84.240.0/23 Signature Algorithm: sha256WithRSAEncryption 87:d0:fe:f6:dc:3a:e5:b8:51:69:9b:65:7c:b7:ee:00:7a:c4: a3:17:b4:51:9f:ae:63:bf:23:87:24:36:0b:a4:68:1c:cf:43: df:38:53:9f:55:31:da:3b:f3:0e:a8:46:00:b0:57:80:d4:bf: 92:26:55:40:92:4b:ca:ce:8e:d7:04:3c:7b:18:57:26:18:e7: 8a:4e:d3:e1:a8:f8:f3:71:91:10:4a:ed:6c:77:28:c6:ff:46: c8:d2:59:ec:c3:51:69:88:70:50:b4:89:69:39:02:92:04:96: 09:54:c2:89:a8:a7:6f:90:72:8b:0a:6c:eb:12:f8:e2:65:1e: fd:ae:cb:dd:88:c8:05:91:cc:5d:ac:c0:1e:b3:9c:47:b2:41: be:3c:46:50:0b:42:3d:e8:45:d3:82:0d:eb:4c:90:12:ad:1d: bc:7a:83:c0:54:4b:9f:3a:c5:cc:99:db:72:1e:fe:dd:e2:d4: b4:38:fb:c4:16:d4:63:2a:37:05:6b:a9:5a:60:64:6b:91:91: f9:18:33:6d:c0:06:1c:96:29:5e:db:b7:2e:5a:13:64:d2:5d: db:4d:e0:81:3f:50:b9:ae:a2:09:d7:e9:da:dd:76:61:91:69: 0d:03:06:ed:06:76:9b:88:e8:45:1e:66:4f:59:04:99:fe:a9: ae:b6:96:e6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbsT4Yp9GGm+7PZG3Hk7DrEmIbHYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MDcxMTE1WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A1NzE3MjU1YTJmODQ5YmViNTNkMDkzYmYzZTk2YzUyNDgx NzEyZWY2MDEzYTZmMDZjYzhhZWU4NDU2NjBmNDlhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDjezBJJU7I+254V7mdkBuofmbMOv2az7gnrXGeLWqIXv2E xY1TX6IYqze0Uyc7JCHc//qWSH5m1zxddg5a3+kuhyydsQ0RnAlzYnS4S3opdvZd rhgjoWBZ1LNh2QnrljCoUCgIsQXDFAq/qIJdN2RHfRVpQ5KrJb1fIR1EjXy66EFY rDSiS7NJx9q4CLvqgxzf9LLAt7tp1/VTzV4xWAV7goIAn1NUulhJj4iW0tHuPOLe AHsFGkfwFTOERawyf5C+jd4MjBD9Wm3ewEqLc9cDOsbon0g7BMKtprbGcO1I0gU5 b92A7FFPGtKKJbv9xgVUi5sQNrIC8KNHNicoKqONAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQULaf44xm2p9oTW+3ZgymBiaRoSWAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2Y5ODRhMzc5LTZmZGQtNDFlYy1iMDllLWEwMjBkYWFiNzlmZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE0VPAwDQYJKoZIhvcNAQELBQADggEBAIfQ/vbcOuW4UWmbZXy37gB6xKMX tFGfrmO/I4ckNgukaBzPQ984U59VMdo78w6oRgCwV4DUv5ImVUCSS8rOjtcEPHsY VyYY54pO0+Go+PNxkRBK7Wx3KMb/RsjSWezDUWmIcFC0iWk5ApIElglUwomop2+Q cosKbOsS+OJlHv2uy92IyAWRzF2swB6znEeyQb48RlALQj3oRdOCDetMkBKtHbx6 g8BUS586xcyZ23Ie/t3i1LQ4+8QW1GMqNwVrqVpgZGuRkfkYM23ABhyWKV7bty5a E2TSXdtN4IE/ULmuognX6drddmGRaQ0DBu0GdpuI6EUeZk9ZBJn+qa62luY= -----END CERTIFICATE-----Generated at Mon Oct 20 02:59:33 2025 by rpki-client