$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/07b2f5fb-72a9-4017-9431-982771128c5f.roa File: 07b2f5fb-72a9-4017-9431-982771128c5f.roa (raw, json) Hash identifier: 6zBzILgS4pZ0J3EuLAiYrdySYBw1z1XXcDH5MpzX4kY= Subject key identifier: E8:6D:C2:1A:2E:C3:5A:C4:60:22:22:67:11:7F:33:F4:BD:15:12:9D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 33B448C0CA28F76EA05EC7E344A817BA2DB91CD0 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/07b2f5fb-72a9-4017-9431-982771128c5f.roa Signing time: Fri 24 Oct 2025 08:56:21 +0000 ROA not before: Fri 24 Oct 2025 08:56:21 +0000 ROA not after: Fri 28 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.85.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:b4:48:c0:ca:28:f7:6e:a0:5e:c7:e3:44:a8:17:ba:2d:b9:1c:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 24 08:56:21 2025 GMT Not After : Nov 28 23:59:59 2025 GMT Subject: serialNumber=299028f5d83cf786865a1d63e6b33ca3540315a0179b1a1e15dd7e4d750c4cb3, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a8:12:0e:70:a3:fd:61:6b:ef:0f:c7:3a:50: 8b:c2:1d:4f:77:8f:3f:4e:98:d0:6d:eb:e7:8c:16: 12:aa:7c:ba:13:29:c1:f9:b2:82:47:81:f1:54:53: 8c:ed:9c:a8:70:5d:11:fb:2a:9b:bb:4e:a8:d1:b5: 11:76:dc:30:29:f3:df:ee:4b:7e:65:74:08:9f:98: 7c:f8:64:76:40:89:b9:eb:19:0b:87:03:c8:a6:d3: 25:d7:0c:22:12:57:d0:d7:5f:b1:d5:ca:ba:2b:f5: c4:c6:72:f0:c2:af:75:ca:ec:3f:9f:42:9f:81:64: f1:96:0b:87:6f:57:8b:a3:56:d1:2a:73:c3:37:f8: f0:74:66:53:0c:ae:f8:c9:53:e6:e5:2f:8d:20:c9: 6c:22:6b:bc:ab:29:0c:74:45:cb:0c:3d:3e:42:d9: 2a:13:44:41:38:22:eb:49:fc:7a:58:41:5c:89:a7: d9:62:22:4d:a8:48:62:66:38:a3:3c:b5:57:5b:6f: b2:c0:d2:64:ba:41:fd:b1:1e:e8:81:d4:b5:c9:51: 53:31:45:b2:8d:33:c7:d7:e8:33:e7:c6:47:a1:2d: aa:74:b1:75:de:09:c0:07:c1:e8:15:e7:70:04:28: 4e:f4:40:51:cd:36:02:bc:98:8a:2c:8b:a6:e5:bc: 58:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:6D:C2:1A:2E:C3:5A:C4:60:22:22:67:11:7F:33:F4:BD:15:12:9D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/07b2f5fb-72a9-4017-9431-982771128c5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.85.0.0/17 Signature Algorithm: sha256WithRSAEncryption 3b:82:00:20:81:cd:25:97:16:6d:4b:9a:47:3d:00:ed:20:9e: c2:ca:9a:20:40:de:64:60:a9:9e:36:d5:86:79:b0:1d:ee:38: 76:7b:8c:40:cd:a2:44:83:82:9c:00:10:b6:cc:26:85:16:62: e2:c2:7a:41:bf:02:bb:01:25:c3:a4:1d:77:1c:f2:ef:b3:81: ab:c0:5b:9d:fe:05:9c:0a:f3:f0:72:5f:01:03:43:41:5d:30: d2:3f:77:b0:52:b5:a4:ed:84:09:54:09:ea:af:9e:67:cc:01: 95:15:d9:76:05:63:50:90:a2:3e:18:4a:f6:e7:61:38:17:f5: 98:08:f3:d0:c7:a4:1d:cf:f8:c7:6b:2c:9b:d7:cf:7c:7c:88: b1:a4:0b:de:e7:3c:2c:e8:52:06:48:54:47:ad:cd:c7:09:19: 43:df:ec:f3:e2:4d:40:2b:1b:a1:7a:99:1b:89:97:cd:6d:ca: e4:8a:c7:f5:f8:8d:fe:2a:65:11:44:e8:52:a3:1f:b0:c6:a0: 1a:11:ce:00:e9:ed:8e:4c:45:1b:83:89:5f:dd:cd:38:8b:7f: 56:c7:0e:26:6a:dc:0e:9e:13:0d:4e:15:46:b3:8c:ca:78:dc: 86:f5:76:62:99:d7:f3:7e:a8:49:9a:d8:9c:07:45:98:48:bc: e4:6b:67:da -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUM7RIwMoo926gXsfjRKgXui25HNAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDI0MDg1NjIxWhcNMjUxMTI4MjM1OTU5 WjB6MUkwRwYDVQQFE0AyOTkwMjhmNWQ4M2NmNzg2ODY1YTFkNjNlNmIzM2NhMzU0 MDMxNWEwMTc5YjFhMWUxNWRkN2U0ZDc1MGM0Y2IzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLqBIOcKP9YWvvD8c6UIvCHU93jz9OmNBt6+eMFhKqfLoT KcH5soJHgfFUU4ztnKhwXRH7Kpu7TqjRtRF23DAp89/uS35ldAifmHz4ZHZAibnr GQuHA8im0yXXDCISV9DXX7HVyror9cTGcvDCr3XK7D+fQp+BZPGWC4dvV4ujVtEq c8M3+PB0ZlMMrvjJU+blL40gyWwia7yrKQx0RcsMPT5C2SoTREE4IutJ/HpYQVyJ p9liIk2oSGJmOKM8tVdbb7LA0mS6Qf2xHuiB1LXJUVMxRbKNM8fX6DPnxkehLap0 sXXeCcAHwegV53AEKE70QFHNNgK8mIosi6blvFjhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU6G3CGi7DWsRgIiJnEX8z9L0VEp0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzA3YjJmNWZiLTcyYTktNDAxNy05NDMxLTk4Mjc3MTEyOGM1Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAc0VQAwDQYJKoZIhvcNAQELBQADggEBADuCACCBzSWXFm1Lmkc9AO0gnsLK miBA3mRgqZ421YZ5sB3uOHZ7jEDNokSDgpwAELbMJoUWYuLCekG/ArsBJcOkHXcc 8u+zgavAW53+BZwK8/ByXwEDQ0FdMNI/d7BStaTthAlUCeqvnmfMAZUV2XYFY1CQ oj4YSvbnYTgX9ZgI89DHpB3P+MdrLJvXz3x8iLGkC97nPCzoUgZIVEetzccJGUPf 7PPiTUArG6F6mRuJl81tyuSKx/X4jf4qZRFE6FKjH7DGoBoRzgDp7Y5MRRuDiV/d zTiLf1bHDiZq3A6eEw1OFUazjMp43Ib1dmKZ1/N+qEma2JwHRZhIvORrZ9o= -----END CERTIFICATE-----Generated at Wed Nov 5 08:42:42 2025 by rpki-client