$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4dcc06ad-3642-48be-bdaf-15690b1fc76d.roa File: 4dcc06ad-3642-48be-bdaf-15690b1fc76d.roa (raw, json) Hash identifier: BbAPbXK9WLY8C+2EbZNXi9NOVtcPEK4D1aiZ0a00bJw= Subject key identifier: DE:42:D3:34:58:21:2B:58:8A:94:93:14:EB:1B:22:E6:CE:AF:70:62 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 55166DFF743F3F5D88AF0EFC20433F5552DFCAB2 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4dcc06ad-3642-48be-bdaf-15690b1fc76d.roa Signing time: Thu 30 Oct 2025 00:08:37 +0000 ROA not before: Thu 30 Oct 2025 00:08:37 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.46.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:16:6d:ff:74:3f:3f:5d:88:af:0e:fc:20:43:3f:55:52:df:ca:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 30 00:08:37 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=705f0fbbc5b88d86e71c82e1ca9211754d15a7a9efefebabbd84e155bd37683a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:b1:de:39:c4:e6:fc:54:5f:f4:52:89:56:72: db:4d:b5:52:7f:13:f2:b0:51:fe:f8:a3:17:83:dc: 93:96:13:13:d1:ea:70:41:27:aa:5d:00:8f:6e:97: ca:41:9a:7e:21:e1:bd:5e:58:a2:a6:8c:f4:86:f9: d9:75:d7:ec:99:c6:38:a6:31:44:64:ae:99:65:91: 6b:41:61:35:36:02:c3:91:78:d4:e8:68:51:61:93: 84:7f:e8:96:b6:4e:94:0d:37:9b:27:df:28:00:80: 6b:4a:9e:82:36:9e:74:eb:1f:4c:42:db:64:73:79: 32:05:97:95:08:d1:95:84:82:d9:92:73:f5:71:6e: 48:73:46:06:bb:e3:f0:94:cd:e0:fd:db:e0:5b:ad: 13:4a:15:cf:77:9f:f2:bb:21:1d:46:49:2c:94:c8: 1c:87:e0:1b:9a:da:db:8e:86:0a:af:76:4e:14:83: d3:9c:aa:ec:05:f7:4c:fc:5c:9a:a0:bf:2e:70:52: 2d:63:f3:af:5f:fa:be:88:f5:a3:6f:5b:af:c3:af: bd:f3:56:7d:8a:4c:5f:7e:e3:14:43:21:be:99:ae: d7:47:27:c1:51:4f:4d:ad:c5:57:c8:22:a0:94:de: 9d:69:69:58:66:26:77:67:ae:19:3b:7f:25:32:7f: 08:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:42:D3:34:58:21:2B:58:8A:94:93:14:EB:1B:22:E6:CE:AF:70:62 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4dcc06ad-3642-48be-bdaf-15690b1fc76d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.46.32.0/21 Signature Algorithm: sha256WithRSAEncryption 64:a3:60:ca:e7:1c:d5:91:f4:63:24:c7:39:e5:b8:a3:bc:bf: ec:a9:a1:cf:1f:12:bf:cf:03:59:20:25:2a:f5:fd:62:13:39: fa:1a:9e:07:5d:8b:38:9e:32:05:40:92:23:9c:bc:2b:79:94: 6d:09:42:1f:ac:08:61:94:a0:b3:a0:2c:fa:fb:7d:0d:5b:63: 00:8e:fd:09:de:52:19:d2:7f:21:2a:fb:34:dc:78:97:71:e4: 32:4c:f9:ab:aa:2a:77:78:71:50:56:73:76:80:8f:4f:76:b1: c4:55:86:d6:d7:1a:16:04:23:b6:27:c1:28:01:16:dd:45:cb: cc:19:74:9c:d7:44:30:bc:07:22:04:dc:36:e9:93:68:12:75: 68:ba:e5:a9:07:af:ee:77:44:0a:b1:21:45:c5:f7:da:bb:ac: 40:bf:d3:28:94:67:7b:46:a5:6a:62:ca:91:64:3e:cf:13:da: 20:c6:65:0c:a2:b8:79:27:e4:18:4a:e7:95:1e:d4:2e:ff:64: 4b:e2:d4:0a:d6:1f:17:7e:b1:5e:7e:64:85:bb:78:62:ef:b1: ce:0b:3d:3f:11:7a:6c:61:06:03:00:43:04:2f:61:72:88:03: ee:db:73:f8:ad:ae:2c:06:43:af:ab:ad:ff:38:98:fb:db:e8: a8:ed:2a:29 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVRZt/3Q/P12Irw78IEM/VVLfyrIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDMwMDAwODM3WhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A3MDVmMGZiYmM1Yjg4ZDg2ZTcxYzgyZTFjYTkyMTE3NTRk MTVhN2E5ZWZlZmViYWJiZDg0ZTE1NWJkMzc2ODNhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDssd45xOb8VF/0UolWcttNtVJ/E/KwUf74oxeD3JOWExPR 6nBBJ6pdAI9ul8pBmn4h4b1eWKKmjPSG+dl11+yZxjimMURkrpllkWtBYTU2AsOR eNToaFFhk4R/6Ja2TpQNN5sn3ygAgGtKnoI2nnTrH0xC22RzeTIFl5UI0ZWEgtmS c/VxbkhzRga74/CUzeD92+BbrRNKFc93n/K7IR1GSSyUyByH4Bua2tuOhgqvdk4U g9OcquwF90z8XJqgvy5wUi1j869f+r6I9aNvW6/Dr73zVn2KTF9+4xRDIb6ZrtdH J8FRT02txVfIIqCU3p1paVhmJndnrhk7fyUyfwjpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU3kLTNFghK1iKlJMU6xsi5s6vcGIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzRkY2MwNmFkLTM2NDItNDhiZS1iZGFmLTE1NjkwYjFmYzc2ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAM0LiAwDQYJKoZIhvcNAQELBQADggEBAGSjYMrnHNWR9GMkxznluKO8v+yp oc8fEr/PA1kgJSr1/WITOfoangddizieMgVAkiOcvCt5lG0JQh+sCGGUoLOgLPr7 fQ1bYwCO/QneUhnSfyEq+zTceJdx5DJM+auqKnd4cVBWc3aAj092scRVhtbXGhYE I7YnwSgBFt1Fy8wZdJzXRDC8ByIE3Dbpk2gSdWi65akHr+53RAqxIUXF99q7rEC/ 0yiUZ3tGpWpiypFkPs8T2iDGZQyiuHkn5BhK55Ue1C7/ZEvi1ArWHxd+sV5+ZIW7 eGLvsc4LPT8RemxhBgMAQwQvYXKIA+7bc/itriwGQ6+rrf84mPvb6KjtKik= -----END CERTIFICATE-----Generated at Wed Nov 5 01:46:10 2025 by rpki-client