$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9ee30d18-446e-4398-8cc7-4d77fe71f443.roa File: 9ee30d18-446e-4398-8cc7-4d77fe71f443.roa (raw, json) Hash identifier: IyjNAk6/xv5qRH2YniQVK2ag0LTP5WN2ZJnju6ZveN8= Subject key identifier: 7B:D1:22:9E:26:FE:9F:7F:72:12:01:35:88:65:D0:AF:87:7F:CA:A9 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1EEE56D1FDE1931C97F1A1C48729B31A6EA935DE Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9ee30d18-446e-4398-8cc7-4d77fe71f443.roa Signing time: Tue 04 Nov 2025 01:21:12 +0000 ROA not before: Tue 04 Nov 2025 01:21:12 +0000 ROA not after: Tue 09 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.66.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:ee:56:d1:fd:e1:93:1c:97:f1:a1:c4:87:29:b3:1a:6e:a9:35:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Nov 4 01:21:12 2025 GMT Not After : Dec 9 23:59:59 2025 GMT Subject: serialNumber=60ee3c2f3f8579e847e3086b8daf0f8d50554b38fcddaa77b8ca0a8de627dd36, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:dd:86:3e:b5:8b:02:52:b8:55:9e:72:40:a0: 0f:76:40:37:58:19:c2:6e:0f:5b:92:25:8f:b3:b3: 2b:34:82:9e:0d:86:f4:35:9d:b5:60:00:4e:ae:28: e6:dd:cc:04:99:59:ac:3f:ee:0b:84:37:ec:4a:b5: ce:7d:4d:5e:fc:df:56:19:94:6f:b8:85:01:ee:93: 80:bd:e4:50:2f:5e:0e:fe:bd:6d:99:6f:2a:c0:8b: c8:e5:f1:77:7b:5c:a2:77:2e:ce:ae:a1:a4:96:a3: 14:c5:15:fa:5d:d3:c9:bd:5b:e4:3a:60:da:73:73: ac:84:63:34:58:8c:2f:d4:26:c8:54:f4:00:0f:be: a1:46:d1:5e:84:cd:b3:33:5f:c8:3c:78:24:77:e8: e9:ae:a0:94:8b:e3:e5:43:21:7b:97:6b:a5:05:2b: d2:de:10:ee:5f:ae:25:d9:c8:dc:53:7d:5f:fc:41: 98:9c:fe:b7:d5:c7:e6:01:89:f9:47:b9:0d:7c:54: 65:b7:7a:cd:63:aa:d3:41:83:95:d2:76:54:41:b0: 54:90:20:a0:3f:21:e6:34:89:7d:fc:52:ba:f3:df: 38:74:bd:cd:a6:b7:52:c6:58:3b:50:e5:1c:e4:72: a9:14:1e:36:91:ae:db:d1:13:9b:ec:0b:0c:dc:43: ac:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:D1:22:9E:26:FE:9F:7F:72:12:01:35:88:65:D0:AF:87:7F:CA:A9 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9ee30d18-446e-4398-8cc7-4d77fe71f443.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.66.0.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:b8:76:0c:0c:69:44:2e:3e:17:d9:a4:55:e8:d5:c9:46:39: 82:6f:c2:98:47:7f:62:7a:4d:0e:2e:0b:57:9f:02:06:09:5a: d1:81:f0:c0:c4:3f:2d:ae:d4:e9:4c:0c:ef:21:cc:c0:e1:10: a1:6f:74:68:4a:02:b9:69:b7:43:22:c6:39:8e:e8:28:f6:29: e1:4e:23:ae:22:de:02:41:b3:1c:10:75:2c:85:47:e7:f8:c4: c0:d4:32:c2:f8:ab:fc:f3:72:c4:13:17:d3:a0:76:bd:4f:b0: 4f:19:22:ce:f5:7e:1b:96:0a:c6:20:79:4f:09:87:27:f6:6c: 53:56:b7:8b:1a:52:27:9a:b1:6d:83:df:21:4d:d8:a8:63:77: 31:85:9b:7e:33:40:1f:9a:75:4e:f2:ff:36:6c:5e:53:56:ea: eb:50:f6:8e:c1:38:34:93:4d:d0:9e:6f:59:6a:49:79:48:f4: e2:80:1d:4a:8d:d4:54:b7:4c:49:98:a0:f2:75:7f:8e:09:f7: e5:29:db:51:1d:47:76:cb:f7:68:04:5d:96:ff:45:23:bb:2d: f2:9c:e0:fd:34:69:d4:4b:12:64:c8:20:1d:a9:b7:ae:25:eb: 95:0f:f2:8b:18:fb:27:82:ae:ef:28:7f:d0:65:2b:99:5c:b5: 81:23:99:9d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHu5W0f3hkxyX8aHEhymzGm6pNd4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMTA0MDEyMTEyWhcNMjUxMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A2MGVlM2MyZjNmODU3OWU4NDdlMzA4NmI4ZGFmMGY4ZDUw NTU0YjM4ZmNkZGFhNzdiOGNhMGE4ZGU2MjdkZDM2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDa3YY+tYsCUrhVnnJAoA92QDdYGcJuD1uSJY+zsys0gp4N hvQ1nbVgAE6uKObdzASZWaw/7guEN+xKtc59TV7831YZlG+4hQHuk4C95FAvXg7+ vW2ZbyrAi8jl8Xd7XKJ3Ls6uoaSWoxTFFfpd08m9W+Q6YNpzc6yEYzRYjC/UJshU 9AAPvqFG0V6EzbMzX8g8eCR36OmuoJSL4+VDIXuXa6UFK9LeEO5friXZyNxTfV/8 QZic/rfVx+YBiflHuQ18VGW3es1jqtNBg5XSdlRBsFSQIKA/IeY0iX38Urrz3zh0 vc2mt1LGWDtQ5RzkcqkUHjaRrtvRE5vsCwzcQ6ylAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUe9Einib+n39yEgE1iGXQr4d/yqkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzllZTMwZDE4LTQ0NmUtNDM5OC04Y2M3LTRkNzdmZTcxZjQ0My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0QgAwDQYJKoZIhvcNAQELBQADggEBAJy4dgwMaUQuPhfZpFXo1clGOYJv wphHf2J6TQ4uC1efAgYJWtGB8MDEPy2u1OlMDO8hzMDhEKFvdGhKArlpt0MixjmO 6Cj2KeFOI64i3gJBsxwQdSyFR+f4xMDUMsL4q/zzcsQTF9Ogdr1PsE8ZIs71fhuW CsYgeU8Jhyf2bFNWt4saUieasW2D3yFN2KhjdzGFm34zQB+adU7y/zZsXlNW6utQ 9o7BODSTTdCeb1lqSXlI9OKAHUqN1FS3TEmYoPJ1f44J9+Up21EdR3bL92gEXZb/ RSO7LfKc4P00adRLEmTIIB2pt64l65UP8osY+yeCru8of9BlK5lctYEjmZ0= -----END CERTIFICATE-----Generated at Wed Nov 5 01:54:37 2025 by rpki-client