$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/61cda44e-d51b-420d-abde-6feff4a3fcc0.roa File: 61cda44e-d51b-420d-abde-6feff4a3fcc0.roa (raw, json) Hash identifier: R9zMo33NWTe8aF7IMzCY+y9QE/SPv3wT5cGkKHEVXuo= Subject key identifier: 72:D2:56:F3:8D:F7:66:44:CD:83:5B:6B:6E:07:B7:DB:2E:9A:01:94 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 35649CE2FB5D94F16B95FE2E3AE4C6B4C8CA0FD5 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/61cda44e-d51b-420d-abde-6feff4a3fcc0.roa Signing time: Tue 04 Nov 2025 01:20:11 +0000 ROA not before: Tue 04 Nov 2025 01:20:11 +0000 ROA not after: Tue 09 Dec 2025 23:59:59 +0000 asID: 7224 IP address blocks: 52.119.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:64:9c:e2:fb:5d:94:f1:6b:95:fe:2e:3a:e4:c6:b4:c8:ca:0f:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Nov 4 01:20:11 2025 GMT Not After : Dec 9 23:59:59 2025 GMT Subject: serialNumber=cc9e8ccbeeff187836e7216382862b2d82d19a141e462210a168f24e680de7a7, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:9a:d0:f3:ff:86:b6:6c:10:83:06:a5:aa:e7: e8:2c:8c:e7:57:63:a2:d6:c5:a3:ed:d0:78:83:69: 43:2d:37:99:2e:1b:5f:ac:0b:d7:2c:f3:f3:fa:d8: 37:24:8f:e7:f4:51:1a:5b:51:89:6b:18:44:29:63: 92:21:2e:21:44:7d:07:f1:f7:89:e0:5a:8f:40:97: 10:eb:6a:be:5b:09:42:64:9e:ac:cd:30:cb:ec:fc: 9c:6d:06:f1:22:2f:b3:f1:87:73:51:67:23:20:c2: 22:0c:19:ba:29:e0:aa:f2:92:ed:d2:cf:12:7e:19: 16:3e:a5:5f:47:ae:cd:81:eb:07:11:08:96:12:d1: 80:fc:9a:13:94:ad:04:fd:c1:82:de:43:37:14:f5: b1:1c:96:96:c1:2b:92:fd:46:90:c4:37:bf:3f:39: 3d:d1:9b:98:b7:30:e3:a8:36:db:17:61:50:bd:06: a9:5a:62:28:81:3e:d2:7a:b5:e8:7f:eb:de:8b:0b: a1:7c:07:c4:99:68:30:7b:df:b8:43:75:5a:2b:e7: 76:ec:cb:cf:26:98:d8:82:41:71:4f:f0:57:a6:5a: 07:96:09:77:ad:5c:52:5d:ff:68:da:fd:06:27:9f: f7:65:68:62:eb:cb:78:2c:58:ff:33:05:c2:c6:da: 95:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:D2:56:F3:8D:F7:66:44:CD:83:5B:6B:6E:07:B7:DB:2E:9A:01:94 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/61cda44e-d51b-420d-abde-6feff4a3fcc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.119.204.0/24 Signature Algorithm: sha256WithRSAEncryption 49:69:15:46:47:bd:24:41:4d:01:6b:06:a8:3d:b0:f0:3a:42: a3:ef:e4:b3:d8:02:c8:ad:c5:01:69:fe:b1:b8:4f:d4:51:58: 9a:ee:82:40:5c:67:8a:8b:2f:6d:42:70:74:73:a3:cb:7a:a4: 37:19:8c:f0:0b:1a:cc:e0:6e:a9:82:93:dd:47:7d:b4:dd:be: f9:23:24:1f:b2:34:da:29:1c:1c:b3:f2:70:a5:33:02:7c:f3: 07:e3:86:83:3d:11:bf:4b:17:aa:ca:c6:cd:c8:21:9a:0b:fb: 36:8a:ed:05:32:6b:2f:46:8c:13:56:91:a4:57:33:e8:41:68: c1:5a:73:86:38:bc:17:21:0e:4e:bb:a7:6d:40:da:43:b0:7b: bb:1c:2d:a7:6c:e7:cb:87:1e:a3:55:bb:67:2f:13:9c:90:66: 76:00:40:ba:8a:fe:67:7e:cc:2c:e5:7e:8c:12:dc:27:eb:9b: 07:ea:6b:8c:0b:1a:a2:e6:1c:e0:6f:ff:b1:8f:66:44:93:d5: c4:d6:c2:86:26:8e:54:2d:77:95:cc:94:b3:e8:55:24:85:05: 8a:56:7e:61:da:85:a1:8e:08:d1:0b:bc:6a:22:6a:23:0e:fe: e2:e2:70:72:1d:20:6e:d5:4e:2c:50:66:e4:5e:e9:91:6f:31: 8e:4e:fc:4b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNWSc4vtdlPFrlf4uOuTGtMjKD9UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMTA0MDEyMDExWhcNMjUxMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BjYzllOGNjYmVlZmYxODc4MzZlNzIxNjM4Mjg2MmIyZDgy ZDE5YTE0MWU0NjIyMTBhMTY4ZjI0ZTY4MGRlN2E3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCemtDz/4a2bBCDBqWq5+gsjOdXY6LWxaPt0HiDaUMtN5ku G1+sC9cs8/P62Dckj+f0URpbUYlrGEQpY5IhLiFEfQfx94ngWo9AlxDrar5bCUJk nqzNMMvs/JxtBvEiL7Pxh3NRZyMgwiIMGbop4Kryku3SzxJ+GRY+pV9Hrs2B6wcR CJYS0YD8mhOUrQT9wYLeQzcU9bEclpbBK5L9RpDEN78/OT3Rm5i3MOOoNtsXYVC9 BqlaYiiBPtJ6teh/696LC6F8B8SZaDB737hDdVor53bsy88mmNiCQXFP8FemWgeW CXetXFJd/2ja/QYnn/dlaGLry3gsWP8zBcLG2pU/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUctJW8433ZkTNg1trbge32y6aAZQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzYxY2RhNDRlLWQ1MWItNDIwZC1hYmRlLTZmZWZmNGEzZmNjMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0d8wwDQYJKoZIhvcNAQELBQADggEBAElpFUZHvSRBTQFrBqg9sPA6QqPv 5LPYAsitxQFp/rG4T9RRWJrugkBcZ4qLL21CcHRzo8t6pDcZjPALGszgbqmCk91H fbTdvvkjJB+yNNopHByz8nClMwJ88wfjhoM9Eb9LF6rKxs3IIZoL+zaK7QUyay9G jBNWkaRXM+hBaMFac4Y4vBchDk67p21A2kOwe7scLads58uHHqNVu2cvE5yQZnYA QLqK/md+zCzlfowS3Cfrmwfqa4wLGqLmHOBv/7GPZkST1cTWwoYmjlQtd5XMlLPo VSSFBYpWfmHahaGOCNELvGoiaiMO/uLicHIdIG7VTixQZuRe6ZFvMY5O/Es= -----END CERTIFICATE-----Generated at Tue Nov 4 21:12:45 2025 by rpki-client