$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/81c8a140-becc-4892-97dc-ba3835674be8.roa File: 81c8a140-becc-4892-97dc-ba3835674be8.roa (raw, json) Hash identifier: jXmrZW4XrY2IQOSqRmvaUFegZGd45vrfJhcOrr7vdFQ= Subject key identifier: E5:A2:08:6C:D3:EC:71:EB:19:E4:30:B0:2E:CA:87:7C:6F:60:6A:30 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 53AC69723E442DAAD263635A753E3DC71EEF7DA4 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/81c8a140-becc-4892-97dc-ba3835674be8.roa Signing time: Tue 04 Nov 2025 01:50:09 +0000 ROA not before: Tue 04 Nov 2025 01:50:09 +0000 ROA not after: Tue 09 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.195.198.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:ac:69:72:3e:44:2d:aa:d2:63:63:5a:75:3e:3d:c7:1e:ef:7d:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Nov 4 01:50:09 2025 GMT Not After : Dec 9 23:59:59 2025 GMT Subject: serialNumber=80b552e17ab2d5905990310fdfbb3574dc2436eb276d169df4ceeb484a99a0b9, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3f:ff:73:4e:e3:42:12:b1:16:a6:c5:06:6a: cc:fb:33:36:88:9f:0d:1f:8a:94:a3:69:77:8a:7b: e5:0a:1e:c7:9a:71:54:79:0c:54:48:a5:d6:b3:34: db:53:e4:c7:d7:84:33:b5:71:f1:9b:0a:d3:98:15: 6b:ad:50:ab:85:c3:c0:27:21:ea:15:b5:1e:8b:ae: 91:5a:a4:08:11:e2:81:93:5b:df:2c:2e:01:66:1c: 63:8f:6e:50:b6:92:ba:ad:ca:1a:53:29:5d:ff:ac: 25:6e:73:89:e2:f8:73:72:81:05:43:f8:d0:80:2a: bc:ec:33:f1:90:d1:29:f4:62:d8:89:c9:bc:37:0d: ed:99:75:86:82:57:41:24:c7:9f:df:fd:74:25:76: 9e:68:4e:40:6c:4d:14:6c:db:54:01:ba:78:99:16: 3e:47:a7:de:14:9f:f8:53:76:7a:38:cc:86:98:c8: 48:76:b2:a3:2f:55:e5:c1:f2:7c:05:36:68:f9:b0: c2:31:c1:9f:26:53:e6:3b:7a:25:c1:3e:7c:0d:47: 4b:5d:d1:33:3b:df:5c:c5:56:e7:ec:8e:d0:5e:0e: ac:a4:eb:5f:78:38:37:01:0d:51:f6:23:d3:b5:4f: e1:81:a7:2d:89:9f:5c:93:95:53:ac:f6:40:f2:71: d6:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:A2:08:6C:D3:EC:71:EB:19:E4:30:B0:2E:CA:87:7C:6F:60:6A:30 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/81c8a140-becc-4892-97dc-ba3835674be8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.195.198.0/23 Signature Algorithm: sha256WithRSAEncryption 97:bf:1e:c8:86:6d:03:d8:ae:ea:a8:47:10:fb:60:38:e9:f5: 7b:1b:23:4f:19:9a:5e:4d:26:ca:38:4d:8e:10:0b:09:93:4a: 55:e1:92:c9:b5:65:98:a4:a7:57:d5:d7:cb:44:a6:2b:9e:a6: 88:80:bf:e4:33:b3:30:ef:16:02:e6:4b:31:42:f6:ac:44:f5: 7d:1a:12:4a:fb:8c:19:c6:6b:57:56:96:30:79:68:2e:b8:62: 84:ff:8e:e9:53:7c:a0:cc:35:32:b0:f4:04:25:d6:96:fc:29: 66:c7:cb:88:b7:31:0e:b0:f7:de:56:3a:a9:6f:8d:91:2e:d6: b3:e7:14:ef:1e:ba:ad:8e:34:71:06:97:76:2e:e2:87:c0:b2: b7:e2:64:32:0c:a5:00:4f:d8:63:b8:25:a5:91:b8:41:5c:8c: 48:da:92:2e:71:b1:3d:b5:40:52:56:9b:4a:c5:bc:4e:d9:66: a4:ad:a9:43:49:ee:97:0f:48:00:54:c8:4b:e9:47:e6:79:84: 60:d5:e6:d3:28:05:a7:21:b2:20:82:b4:53:24:5d:03:7e:ba: 58:a7:cc:e6:52:b0:7d:c6:9c:ce:75:7f:e1:ec:16:41:5f:e6: 7b:66:e9:b9:6e:68:02:7d:b0:e3:fd:59:ff:d3:b2:67:de:d6: 79:67:d3:33 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUU6xpcj5ELarSY2NadT49xx7vfaQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMTA0MDE1MDA5WhcNMjUxMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A4MGI1NTJlMTdhYjJkNTkwNTk5MDMxMGZkZmJiMzU3NGRj MjQzNmViMjc2ZDE2OWRmNGNlZWI0ODRhOTlhMGI5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtP/9zTuNCErEWpsUGasz7MzaInw0fipSjaXeKe+UKHsea cVR5DFRIpdazNNtT5MfXhDO1cfGbCtOYFWutUKuFw8AnIeoVtR6LrpFapAgR4oGT W98sLgFmHGOPblC2krqtyhpTKV3/rCVuc4ni+HNygQVD+NCAKrzsM/GQ0Sn0YtiJ ybw3De2ZdYaCV0Ekx5/f/XQldp5oTkBsTRRs21QBuniZFj5Hp94Un/hTdno4zIaY yEh2sqMvVeXB8nwFNmj5sMIxwZ8mU+Y7eiXBPnwNR0td0TM731zFVufsjtBeDqyk 6194ODcBDVH2I9O1T+GBpy2Jn1yTlVOs9kDycdYZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU5aIIbNPscesZ5DCwLsqHfG9gajAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzgxYzhhMTQwLWJlY2MtNDg5Mi05N2RjLWJhMzgzNTY3NGJlOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE0w8YwDQYJKoZIhvcNAQELBQADggEBAJe/HsiGbQPYruqoRxD7YDjp9Xsb I08Zml5NJso4TY4QCwmTSlXhksm1ZZikp1fV18tEpiuepoiAv+QzszDvFgLmSzFC 9qxE9X0aEkr7jBnGa1dWljB5aC64YoT/julTfKDMNTKw9AQl1pb8KWbHy4i3MQ6w 995WOqlvjZEu1rPnFO8euq2ONHEGl3Yu4ofAsrfiZDIMpQBP2GO4JaWRuEFcjEja ki5xsT21QFJWm0rFvE7ZZqStqUNJ7pcPSABUyEvpR+Z5hGDV5tMoBachsiCCtFMk XQN+ulinzOZSsH3GnM51f+HsFkFf5ntm6bluaAJ9sOP9Wf/Tsmfe1nln0zM= -----END CERTIFICATE-----Generated at Wed Nov 5 03:32:10 2025 by rpki-client