$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6918e416-68a1-43f2-82b9-eb305ef6ace5.roa File: 6918e416-68a1-43f2-82b9-eb305ef6ace5.roa (raw, json) Hash identifier: sYp35GrO8gMmmg2X1ruqViJ5BBI8kKN6dmEi0HHDevk= Subject key identifier: B6:32:E2:4B:D3:CC:F3:EB:5A:38:D9:AB:E0:E7:62:29:3E:60:77:88 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0583F72E89DD477E1B276FF9D0568AAA35975E58 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6918e416-68a1-43f2-82b9-eb305ef6ace5.roa Signing time: Tue 21 Oct 2025 05:50:12 +0000 ROA not before: Tue 21 Oct 2025 05:50:12 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 8987 IP address blocks: 52.95.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:83:f7:2e:89:dd:47:7e:1b:27:6f:f9:d0:56:8a:aa:35:97:5e:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 21 05:50:12 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=5b3867a27611dea1dac98b3c88874088aacf97f58c2810dbf4cb599abb05c6d0, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:20:99:ef:81:43:06:cd:8e:9e:7e:a8:6d:0c: a2:53:a1:c4:37:65:36:bf:64:1e:dd:5f:0e:8f:72: 31:a6:36:d7:af:53:e7:17:17:2b:1e:75:c0:76:46: 6f:c6:f2:2c:02:3a:54:1f:0a:57:a4:ab:29:05:38: b1:a7:58:cd:44:f5:a4:1d:0e:3d:02:b5:83:c7:36: 19:95:09:1b:00:ce:0c:c0:21:0c:ed:0b:28:54:98: cf:43:6b:be:67:24:7d:e5:de:b0:21:29:45:71:06: 34:38:44:fd:1b:fd:fe:ef:77:32:92:c9:77:b2:8f: 5a:d8:05:e8:f9:a2:88:c4:6a:88:cb:41:5e:d4:f6: 89:48:ce:dc:51:02:9a:25:42:f3:56:3e:67:ff:91: 8a:7c:c7:1d:3e:08:0f:5c:26:05:61:06:2a:d6:c7: 78:89:d0:41:d3:93:3f:31:a0:45:18:d6:68:87:90: fc:1f:66:79:d4:6d:34:9a:f7:3e:c4:85:51:62:84: bc:9a:a5:54:17:98:bf:a8:8f:f0:28:f3:19:df:ad: 86:b4:0a:f7:f8:25:7a:d2:75:b9:e8:d4:00:0f:7d: 25:e1:18:33:0d:f4:ea:a3:ba:db:7e:d5:67:73:55: a3:8f:95:ef:55:86:c9:a7:c2:e7:c2:c4:20:45:1d: 65:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:32:E2:4B:D3:CC:F3:EB:5A:38:D9:AB:E0:E7:62:29:3E:60:77:88 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6918e416-68a1-43f2-82b9-eb305ef6ace5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.95.100.0/22 Signature Algorithm: sha256WithRSAEncryption 3d:79:e0:b6:34:97:ed:2d:fb:68:07:83:df:15:de:62:7b:c3: 28:05:0e:bc:3c:03:67:10:e1:d4:b8:f8:49:5b:40:b3:93:33: 59:0d:da:32:c7:38:50:b5:6a:89:fa:5f:3c:a7:39:1e:70:cc: 8a:44:74:e2:50:28:82:f8:c7:8a:ca:44:9f:5a:50:71:33:ea: 2a:45:35:0e:7e:6b:b7:ff:0b:41:b8:9d:06:e6:9b:49:a1:7b: 54:c5:cc:b0:ab:80:fd:79:cc:12:3e:96:b7:ca:60:f9:90:72: 77:4e:ac:d4:2e:7b:e5:f4:8a:dc:30:fa:9c:ac:a2:c7:53:49: e9:1f:cc:22:b4:76:a4:97:cc:da:3c:d8:65:bd:15:2e:8a:43: f5:70:af:16:63:4f:f0:11:86:38:49:11:63:6d:dd:01:bc:c0: a6:df:53:2b:f9:9d:62:ac:ae:7e:a8:ff:d2:e2:0b:a1:d6:54: 29:91:5e:a6:99:9d:d6:60:f5:62:7c:66:3e:7b:33:fe:6f:b8: 94:ef:e8:35:ef:8c:fd:1c:fa:7f:cd:9a:96:b4:d5:fb:9d:72: 96:61:b8:c5:3f:d9:cb:04:ba:fe:bb:b3:fe:c1:08:3c:68:50: 22:ad:14:e8:8c:b1:06:6d:b3:d5:37:12:38:b5:1e:60:cc:4c: 21:80:67:34 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBYP3LondR34bJ2/50FaKqjWXXlgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDIxMDU1MDEyWhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A1YjM4NjdhMjc2MTFkZWExZGFjOThiM2M4ODg3NDA4OGFh Y2Y5N2Y1OGMyODEwZGJmNGNiNTk5YWJiMDVjNmQwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCIJnvgUMGzY6efqhtDKJTocQ3ZTa/ZB7dXw6PcjGmNtev U+cXFysedcB2Rm/G8iwCOlQfClekqykFOLGnWM1E9aQdDj0CtYPHNhmVCRsAzgzA IQztCyhUmM9Da75nJH3l3rAhKUVxBjQ4RP0b/f7vdzKSyXeyj1rYBej5oojEaojL QV7U9olIztxRApolQvNWPmf/kYp8xx0+CA9cJgVhBirWx3iJ0EHTkz8xoEUY1miH kPwfZnnUbTSa9z7EhVFihLyapVQXmL+oj/Ao8xnfrYa0Cvf4JXrSdbno1AAPfSXh GDMN9Oqjutt+1WdzVaOPle9VhsmnwufCxCBFHWXnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUtjLiS9PM8+taONmr4OdiKT5gd4gwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzY5MThlNDE2LTY4YTEtNDNmMi04MmI5LWViMzA1ZWY2YWNlNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI0X2QwDQYJKoZIhvcNAQELBQADggEBAD154LY0l+0t+2gHg98V3mJ7wygF Drw8A2cQ4dS4+ElbQLOTM1kN2jLHOFC1aon6XzynOR5wzIpEdOJQKIL4x4rKRJ9a UHEz6ipFNQ5+a7f/C0G4nQbmm0mhe1TFzLCrgP15zBI+lrfKYPmQcndOrNQue+X0 itww+pysosdTSekfzCK0dqSXzNo82GW9FS6KQ/VwrxZjT/ARhjhJEWNt3QG8wKbf Uyv5nWKsrn6o/9LiC6HWVCmRXqaZndZg9WJ8Zj57M/5vuJTv6DXvjP0c+n/Nmpa0 1fudcpZhuMU/2csEuv67s/7BCDxoUCKtFOiMsQZts9U3Eji1HmDMTCGAZzQ= -----END CERTIFICATE-----Generated at Wed Nov 5 10:16:33 2025 by rpki-client