$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fab5c774-f090-4c78-81e0-93a8a335b4aa.roa File: fab5c774-f090-4c78-81e0-93a8a335b4aa.roa (raw, json) Hash identifier: DKVSse1bEidiV7iHMZ9py5JP4dvPp2dmMFySOOUnQVo= Subject key identifier: CA:DF:F7:CA:E0:AB:AF:54:16:6A:A6:58:61:4B:ED:BF:52:AB:93:47 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 437BECB56C8C29196398CA50902990F4857BCE4B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fab5c774-f090-4c78-81e0-93a8a335b4aa.roa Signing time: Sun 19 Oct 2025 07:40:09 +0000 ROA not before: Sun 19 Oct 2025 07:40:09 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.85.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:7b:ec:b5:6c:8c:29:19:63:98:ca:50:90:29:90:f4:85:7b:ce:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 07:40:09 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=a8e6b0a0b24b4d0a8fa77730d83790c0617994d5997bc8ad6b07fc3b367b9d51, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:95:d0:e3:e4:67:c0:8c:f3:89:dc:74:db:d9: d7:0c:9e:cc:4e:77:86:b9:50:b5:e4:02:56:e2:35: 78:fb:57:41:f9:45:e5:c9:fb:4f:85:42:14:9c:08: 8b:e2:9b:7b:fc:bd:78:0e:81:57:42:d6:00:3b:7f: 78:f8:dd:5f:99:d5:d3:3f:6d:2d:86:f9:cd:e3:dc: d4:54:37:96:6d:7b:1d:39:03:f8:26:05:08:e6:a9: e0:b0:42:a7:d2:10:9b:70:07:ed:53:3d:23:5e:43: 6d:52:67:26:57:aa:0b:a1:42:60:22:ea:67:c5:52: 91:20:5e:a3:a1:d7:c0:27:8b:2c:77:c5:14:bd:1b: 31:94:12:cd:71:15:ba:d3:b9:67:90:19:e9:ac:62: a1:06:f4:df:44:a6:7f:b0:70:3b:fb:bd:ad:4b:e6: 64:cf:98:0b:e5:85:fd:81:1c:fc:29:eb:c1:a8:82: 51:8c:81:a3:1e:67:fc:60:f9:75:3c:64:48:9e:db: 3c:61:9e:45:d7:4c:2e:95:57:79:40:4d:39:7a:a0: e5:e6:e7:57:6a:10:20:34:66:ec:81:f5:54:79:b4: e7:bf:fc:d5:7d:ce:ab:68:ad:f1:a8:5b:24:c9:e3: 63:86:27:c0:ef:05:75:fc:f8:6a:19:ad:59:aa:e3: 2e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:DF:F7:CA:E0:AB:AF:54:16:6A:A6:58:61:4B:ED:BF:52:AB:93:47 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fab5c774-f090-4c78-81e0-93a8a335b4aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.85.161.0/24 Signature Algorithm: sha256WithRSAEncryption 24:ee:c6:26:38:85:28:14:7c:56:4f:62:ea:25:49:4d:fd:01: f7:75:9f:8f:9e:9a:5e:78:f8:64:ff:32:65:dc:d7:be:1d:21: ee:2b:2b:2e:20:e1:48:ee:98:b0:f0:3f:a0:24:2b:95:09:45: 23:52:ef:28:c6:f0:de:e6:31:98:6d:78:39:4b:c4:54:b2:c5: 3e:a3:43:7a:36:d1:fa:c4:10:e2:ed:7e:50:f9:ec:19:95:90: 1a:d4:11:a1:a4:7a:87:b1:f4:c3:69:b6:11:fc:ed:4e:ab:5d: ce:1c:1f:d9:d8:82:bb:e2:3b:9a:aa:84:42:d5:1a:bc:6f:ef: c8:40:3b:b9:5c:71:72:cb:16:b6:39:fe:81:15:47:60:c6:3c: db:9c:4f:90:e4:e0:51:d8:6c:37:ee:6b:86:a8:b1:4c:3c:d1: 63:bc:20:55:79:33:09:1a:02:f2:e5:1b:0b:42:93:84:5b:91: fd:21:98:35:71:1a:de:25:eb:c0:e3:fb:0d:c2:64:13:7e:5d: fd:13:cd:87:63:06:c2:6c:50:d1:2e:2d:ec:30:62:cd:fa:40: f4:6e:fd:a5:77:da:2b:93:5b:2c:c4:00:2d:b3:dd:95:85:ab: be:32:1b:ec:8b:16:4a:62:61:50:02:ec:2b:77:21:46:25:4e: 2f:7e:0e:1a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQ3vstWyMKRljmMpQkCmQ9IV7zkswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MDc0MDA5WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BhOGU2YjBhMGIyNGI0ZDBhOGZhNzc3MzBkODM3OTBjMDYx Nzk5NGQ1OTk3YmM4YWQ2YjA3ZmMzYjM2N2I5ZDUxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLldDj5GfAjPOJ3HTb2dcMnsxOd4a5ULXkAlbiNXj7V0H5 ReXJ+0+FQhScCIvim3v8vXgOgVdC1gA7f3j43V+Z1dM/bS2G+c3j3NRUN5Ztex05 A/gmBQjmqeCwQqfSEJtwB+1TPSNeQ21SZyZXqguhQmAi6mfFUpEgXqOh18Aniyx3 xRS9GzGUEs1xFbrTuWeQGemsYqEG9N9Epn+wcDv7va1L5mTPmAvlhf2BHPwp68Go glGMgaMeZ/xg+XU8ZEie2zxhnkXXTC6VV3lATTl6oOXm51dqECA0ZuyB9VR5tOe/ /NV9zqtorfGoWyTJ42OGJ8DvBXX8+GoZrVmq4y6pAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUyt/3yuCrr1QWaqZYYUvtv1Krk0cwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2ZhYjVjNzc0LWYwOTAtNGM3OC04MWUwLTkzYThhMzM1YjRhYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0VaEwDQYJKoZIhvcNAQELBQADggEBACTuxiY4hSgUfFZPYuolSU39Afd1 n4+eml54+GT/MmXc174dIe4rKy4g4UjumLDwP6AkK5UJRSNS7yjG8N7mMZhteDlL xFSyxT6jQ3o20frEEOLtflD57BmVkBrUEaGkeoex9MNpthH87U6rXc4cH9nYgrvi O5qqhELVGrxv78hAO7lccXLLFrY5/oEVR2DGPNucT5Dk4FHYbDfua4aosUw80WO8 IFV5MwkaAvLlGwtCk4Rbkf0hmDVxGt4l68Dj+w3CZBN+Xf0TzYdjBsJsUNEuLeww Ys36QPRu/aV32iuTWyzEAC2z3ZWFq74yG+yLFkpiYVAC7Ct3IUYlTi9+Dho= -----END CERTIFICATE-----Generated at Mon Oct 20 03:08:22 2025 by rpki-client