$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9da2aad4-52e7-4632-b20f-2957907aa859.roa File: 9da2aad4-52e7-4632-b20f-2957907aa859.roa (raw, json) Hash identifier: joJ9J6taSHyjYVdcmCzsPCBJMcjPYCs9jVXAZZNMBao= Subject key identifier: 72:9B:96:C4:BD:F4:9A:AC:CB:F9:A9:77:2B:41:1E:49:29:9F:3D:42 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 124C16D1BDBBF57AA01950F759C63C7B899DBA33 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9da2aad4-52e7-4632-b20f-2957907aa859.roa Signing time: Tue 04 Nov 2025 00:31:03 +0000 ROA not before: Tue 04 Nov 2025 00:31:03 +0000 ROA not after: Tue 09 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.214.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:4c:16:d1:bd:bb:f5:7a:a0:19:50:f7:59:c6:3c:7b:89:9d:ba:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Nov 4 00:31:03 2025 GMT Not After : Dec 9 23:59:59 2025 GMT Subject: serialNumber=5e1a679bf725edbb79d68287d3047c43445ac3e4b5ebb9c71d543c69bf5908e1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:72:72:58:0c:c1:d2:17:15:6b:56:b0:bf:df: 6c:51:5d:35:0e:d1:f6:21:4f:37:8b:ce:1e:83:8e: 50:97:91:20:8f:17:c8:9d:a8:a7:61:b9:14:ce:2e: d3:56:7e:5f:aa:fb:20:73:8f:f8:cc:6b:3f:2c:02: 2f:b3:1d:4d:64:af:21:a2:99:8d:72:ec:f6:71:67: eb:da:ad:fc:a3:78:e7:4e:74:73:0d:a9:f0:28:37: cd:dd:98:8c:65:e1:b2:6d:0d:55:b6:4d:b0:a6:1d: 56:24:ed:91:67:ac:d0:be:e6:41:a3:4b:30:c9:be: 54:ee:ec:74:40:a8:90:f4:f9:f0:ca:b8:fd:87:aa: b7:2a:aa:37:9b:bd:7e:25:77:cb:0d:fc:45:ea:bc: 65:88:97:7f:5f:45:70:b1:67:6d:1c:29:f2:e3:02: 72:76:e1:fe:e6:5f:83:ce:e7:97:2b:f8:c6:e0:40: bc:5c:e6:0a:18:6a:aa:38:42:46:41:32:6a:55:44: 36:bf:d3:8e:63:1a:d0:f1:08:07:2e:4d:62:e5:0b: b1:99:fe:36:a4:7b:85:85:d8:43:a2:96:e7:0a:63: 95:16:fd:c4:dd:91:48:ef:76:53:74:17:7e:b7:8c: 09:a5:6d:a8:1b:41:05:e3:5b:9a:f7:13:4d:0f:d3: 1e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:9B:96:C4:BD:F4:9A:AC:CB:F9:A9:77:2B:41:1E:49:29:9F:3D:42 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9da2aad4-52e7-4632-b20f-2957907aa859.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.214.52.0/22 Signature Algorithm: sha256WithRSAEncryption 81:b4:63:10:3b:12:ba:80:70:e6:a3:a5:0d:88:99:24:0b:84: 62:1d:6e:92:ca:23:23:68:45:45:1e:8d:59:1d:93:ce:4f:91: e6:5f:d1:00:1f:5a:30:21:a7:19:6f:62:8c:10:9c:bc:62:f2: 1d:7b:db:88:70:71:f8:68:ed:06:0d:8b:83:40:12:4d:ae:ec: 92:15:e0:12:99:a9:13:ce:51:47:5e:da:aa:b8:00:59:ad:43: 44:5c:57:7b:dd:bc:38:52:8a:db:df:e2:f6:52:38:9e:e3:c0: 52:9f:f9:e7:91:be:36:c6:e7:82:d2:d3:cb:b3:a0:6d:b8:52: 35:ba:7f:fa:df:75:7b:63:5c:ee:46:ed:12:64:86:99:39:26: 58:df:0c:74:54:be:9d:db:8d:b2:0e:74:c6:1e:fa:1f:6f:09: 01:be:b7:f9:11:0e:47:19:6a:95:84:e6:94:69:53:64:08:04: 58:87:50:e1:d8:d9:c5:c0:39:52:de:2f:73:20:df:9f:1e:46: f3:c1:c3:87:6d:7e:25:72:b2:84:85:b8:94:19:27:c8:ff:28: a1:87:22:67:c2:84:01:f1:49:b5:75:10:6d:9b:ef:b1:55:be: b0:2e:84:17:0d:1a:55:b2:41:cb:6d:04:89:32:56:e9:72:0e: 2e:a4:74:57 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEkwW0b279XqgGVD3WcY8e4mdujMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMTA0MDAzMTAzWhcNMjUxMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZTFhNjc5YmY3MjVlZGJiNzlkNjgyODdkMzA0N2M0MzQ0 NWFjM2U0YjVlYmI5YzcxZDU0M2M2OWJmNTkwOGUxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQcnJYDMHSFxVrVrC/32xRXTUO0fYhTzeLzh6DjlCXkSCP F8idqKdhuRTOLtNWfl+q+yBzj/jMaz8sAi+zHU1kryGimY1y7PZxZ+varfyjeOdO dHMNqfAoN83dmIxl4bJtDVW2TbCmHVYk7ZFnrNC+5kGjSzDJvlTu7HRAqJD0+fDK uP2HqrcqqjebvX4ld8sN/EXqvGWIl39fRXCxZ20cKfLjAnJ24f7mX4PO55cr+Mbg QLxc5goYaqo4QkZBMmpVRDa/045jGtDxCAcuTWLlC7GZ/jake4WF2EOilucKY5UW /cTdkUjvdlN0F363jAmlbagbQQXjW5r3E00P0x4dAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUcpuWxL30mqzL+al3K0EeSSmfPUIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzlkYTJhYWQ0LTUyZTctNDYzMi1iMjBmLTI5NTc5MDdhYTg1OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI21jQwDQYJKoZIhvcNAQELBQADggEBAIG0YxA7ErqAcOajpQ2ImSQLhGId bpLKIyNoRUUejVkdk85PkeZf0QAfWjAhpxlvYowQnLxi8h1724hwcfho7QYNi4NA Ek2u7JIV4BKZqRPOUUde2qq4AFmtQ0RcV3vdvDhSitvf4vZSOJ7jwFKf+eeRvjbG 54LS08uzoG24UjW6f/rfdXtjXO5G7RJkhpk5JljfDHRUvp3bjbIOdMYe+h9vCQG+ t/kRDkcZapWE5pRpU2QIBFiHUOHY2cXAOVLeL3Mg358eRvPBw4dtfiVysoSFuJQZ J8j/KKGHImfChAHxSbV1EG2b77FVvrAuhBcNGlWyQcttBIkyVulyDi6kdFc= -----END CERTIFICATE-----Generated at Wed Nov 5 03:34:04 2025 by rpki-client