$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/519dae5a-b1ac-43fc-a70e-64b1dec1a109.roa File: 519dae5a-b1ac-43fc-a70e-64b1dec1a109.roa (raw, json) Hash identifier: MMmn2hY/IpddUrq5h33/H4K20VandGJFz9ag170qqbE= Subject key identifier: 8D:7F:21:B0:1D:D2:72:44:BA:8C:8B:FC:EC:06:F6:50:3F:7A:34:C8 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4D430BC0E06E32C8262F858757503A6BAC7F6484 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/519dae5a-b1ac-43fc-a70e-64b1dec1a109.roa Signing time: Fri 31 Oct 2025 01:10:15 +0000 ROA not before: Fri 31 Oct 2025 01:10:15 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.93.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:43:0b:c0:e0:6e:32:c8:26:2f:85:87:57:50:3a:6b:ac:7f:64:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 31 01:10:15 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=63eaabb88a1211a777f98043c4cf0c2aa32136bb75c53263c2a970856e6e58a2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:99:cf:db:e1:03:78:72:49:ee:d5:4a:7b:0a: b2:7e:56:94:b1:97:f6:c4:61:d7:5b:3b:a0:c0:72: 2c:51:99:77:c7:82:a5:8e:40:4e:36:09:14:1b:52: 67:67:4e:04:bd:9c:91:a9:50:cc:77:b0:c4:4d:40: 84:77:da:04:f4:99:37:de:0a:fc:c5:58:48:62:de: 1c:e4:af:8c:64:0f:e7:5b:39:2d:2e:c4:1c:5f:aa: dd:c0:04:ed:ef:fc:16:1a:23:1c:ea:2c:8a:12:57: 4f:eb:d0:da:7c:81:d2:b3:53:74:2c:2b:b9:a1:83: d7:40:08:36:94:f6:2c:26:a6:2b:8d:74:08:17:0f: e2:c2:ce:6b:6d:3e:ea:95:bb:1c:36:2d:7c:7e:61: 9a:e6:56:f7:96:d9:e0:a2:de:32:6d:8d:04:b0:b7: 67:44:c3:99:a4:11:ec:3a:7c:60:85:b9:50:7b:7c: bd:5c:ce:62:be:e5:75:3e:f7:b4:7f:f0:fa:63:21: 53:2b:b4:25:2e:38:61:37:d3:65:42:bb:e3:97:ca: b1:90:22:94:21:59:59:94:a9:8b:ce:d6:74:30:28: 33:e2:76:eb:3b:e2:3a:68:12:27:81:2f:20:1f:c8: ab:5d:ee:f1:07:a2:2f:1b:90:e6:b1:e4:1e:12:ac: f2:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:7F:21:B0:1D:D2:72:44:BA:8C:8B:FC:EC:06:F6:50:3F:7A:34:C8 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/519dae5a-b1ac-43fc-a70e-64b1dec1a109.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.93.37.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:7a:7a:92:2b:9a:84:85:8a:de:c8:1f:29:08:f5:89:c1:e9: 20:7d:41:0f:5b:dd:9d:8f:6b:ee:8f:af:33:91:92:18:4e:b6: 9f:13:47:e2:ae:4e:35:00:02:45:18:d7:a1:16:77:f4:42:95: 75:f0:d6:e3:fc:32:29:87:a3:e7:3e:68:4f:de:e0:52:8c:32: 7f:e0:93:75:57:4c:6f:23:3d:b3:3e:59:11:47:e0:3d:dc:9d: cd:cd:a8:0a:e4:9b:3a:4e:8d:cd:5e:5c:97:f0:a8:cc:5c:f6: 7f:f9:d1:ee:70:40:33:f1:65:1c:cf:a3:20:ce:1d:89:bd:1e: f5:13:f3:8e:4c:75:7f:fc:02:8d:3d:f1:6b:c5:11:d9:9e:f7: 4d:1b:6a:73:d8:d6:af:af:ec:5b:c0:c1:2b:d7:b6:ef:75:a0: 48:36:9a:85:d7:bd:55:1a:61:94:9e:bf:43:80:d2:c8:d5:97: 2b:a2:9d:19:90:bf:aa:40:5f:09:86:4f:2e:4b:f9:b8:10:b6: f1:4a:44:0f:cb:80:9c:99:8b:41:5e:51:d9:e2:1b:aa:78:1f: e4:f0:39:74:25:b9:77:1d:90:c0:c0:06:e0:af:99:f6:ac:06: de:bb:0e:a9:3b:ae:51:1d:64:6d:ca:48:5c:65:ea:80:68:bb: 2d:06:37:56 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTUMLwOBuMsgmL4WHV1A6a6x/ZIQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDMxMDExMDE1WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A2M2VhYWJiODhhMTIxMWE3NzdmOTgwNDNjNGNmMGMyYWEz MjEzNmJiNzVjNTMyNjNjMmE5NzA4NTZlNmU1OGEyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzmc/b4QN4cknu1Up7CrJ+VpSxl/bEYddbO6DAcixRmXfH gqWOQE42CRQbUmdnTgS9nJGpUMx3sMRNQIR32gT0mTfeCvzFWEhi3hzkr4xkD+db OS0uxBxfqt3ABO3v/BYaIxzqLIoSV0/r0Np8gdKzU3QsK7mhg9dACDaU9iwmpiuN dAgXD+LCzmttPuqVuxw2LXx+YZrmVveW2eCi3jJtjQSwt2dEw5mkEew6fGCFuVB7 fL1czmK+5XU+97R/8PpjIVMrtCUuOGE302VCu+OXyrGQIpQhWVmUqYvO1nQwKDPi dus74jpoEieBLyAfyKtd7vEHoi8bkOax5B4SrPJHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUjX8hsB3SckS6jIv87Ab2UD96NMgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzUxOWRhZTVhLWIxYWMtNDNmYy1hNzBlLTY0YjFkZWMxYTEwOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0XSUwDQYJKoZIhvcNAQELBQADggEBAIt6epIrmoSFit7IHykI9YnB6SB9 QQ9b3Z2Pa+6PrzORkhhOtp8TR+KuTjUAAkUY16EWd/RClXXw1uP8MimHo+c+aE/e 4FKMMn/gk3VXTG8jPbM+WRFH4D3cnc3NqArkmzpOjc1eXJfwqMxc9n/50e5wQDPx ZRzPoyDOHYm9HvUT845MdX/8Ao098WvFEdme900banPY1q+v7FvAwSvXtu91oEg2 moXXvVUaYZSev0OA0sjVlyuinRmQv6pAXwmGTy5L+bgQtvFKRA/LgJyZi0FeUdni G6p4H+TwOXQluXcdkMDABuCvmfasBt67Dqk7rlEdZG3KSFxl6oBouy0GN1Y= -----END CERTIFICATE-----Generated at Wed Nov 5 03:26:25 2025 by rpki-client