$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cdf86191-6770-46d1-ad86-96332b6ed7e8.roa File: cdf86191-6770-46d1-ad86-96332b6ed7e8.roa (raw, json) Hash identifier: TodFptTt3spso0sqj8N3Qr3yhyHGOLgwCVZVZL8Z1yM= Subject key identifier: 62:E1:F4:CD:5D:79:6F:E3:65:1D:F5:5D:80:83:34:09:96:EB:30:3A Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 24FCA28D3A086D37D331A09BEA3C982E607B2EC9 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cdf86191-6770-46d1-ad86-96332b6ed7e8.roa Signing time: Tue 04 Nov 2025 01:30:13 +0000 ROA not before: Tue 04 Nov 2025 01:30:13 +0000 ROA not after: Tue 09 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.19.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:fc:a2:8d:3a:08:6d:37:d3:31:a0:9b:ea:3c:98:2e:60:7b:2e:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Nov 4 01:30:13 2025 GMT Not After : Dec 9 23:59:59 2025 GMT Subject: serialNumber=3d63098cc9526a8712800651a4bd480a091323987120c7d56add736ffd582ca0, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:af:78:ac:f4:27:ea:73:ce:ca:bc:9c:18:39: e6:93:4a:67:3d:64:a7:2f:2a:e9:cf:60:67:58:cb: ae:f1:8e:2b:88:f3:6f:8a:10:40:2f:f3:36:87:cf: 3e:88:fb:33:24:83:f1:e2:6c:66:55:63:4f:fe:81: a8:60:cc:1e:85:20:08:6b:50:11:d5:98:69:de:f0: f5:00:65:8d:63:de:5e:ff:82:a6:13:04:8a:74:02: f9:fe:ae:49:0a:31:3a:02:60:10:96:89:77:16:19: d7:6d:78:6e:d4:27:29:3b:b5:c3:f7:f5:99:bf:88: 5a:88:9a:2a:15:e4:18:49:60:73:26:7c:85:34:f2: 24:18:6f:6e:0a:5e:45:24:0c:33:0d:cf:97:af:54: 50:10:1d:f2:7b:e5:47:41:a3:a2:c2:90:6a:9f:be: fa:57:93:e4:07:c6:eb:f3:ce:f0:b1:b6:e8:a2:22: ec:6f:71:33:34:e6:7e:75:ff:24:cf:62:f0:f7:55: 1b:ac:2f:ef:78:ef:a4:27:a4:2d:75:1b:fd:5d:71: 89:5c:63:79:54:f0:08:11:12:2e:84:81:e8:d4:83: 33:57:82:5a:a9:0b:7d:b1:a7:cd:59:db:15:99:bd: 3d:9a:58:bc:f4:a9:58:65:bf:12:7c:09:ee:5d:77: 36:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:E1:F4:CD:5D:79:6F:E3:65:1D:F5:5D:80:83:34:09:96:EB:30:3A X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cdf86191-6770-46d1-ad86-96332b6ed7e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.19.128.0/18 Signature Algorithm: sha256WithRSAEncryption 92:6d:84:ac:c5:b3:3d:9e:65:0a:21:2e:dd:5d:05:6b:20:c4: 3b:08:8d:d0:c0:4c:21:c2:2b:65:80:44:b3:65:24:df:95:c8: 4f:c2:d2:a4:aa:8a:d1:d9:17:58:f8:bf:04:16:1a:0b:c8:e0: b3:df:9e:03:b3:8d:2d:56:18:3b:01:f5:22:3c:93:db:d0:4f: 89:f4:f1:b6:2a:3a:48:11:0d:35:53:38:2f:0e:f9:24:2c:3f: 39:7f:42:26:64:53:49:b6:dc:38:01:9d:1a:66:55:71:bc:28: 88:1c:cd:3e:0b:4b:a8:5e:d0:d0:76:3a:41:82:34:6d:98:70: d5:e1:d1:90:78:b3:00:fa:8f:c8:98:4c:29:75:81:1e:b1:46: 85:f5:11:ef:ef:17:79:4d:a3:c4:2d:19:65:b9:7c:66:0f:b8: e7:5d:65:b7:60:3b:03:af:0e:b8:7b:20:52:85:de:a4:91:21: 34:7f:3b:da:f3:e5:f1:b5:91:ec:f9:00:36:a5:04:a1:95:cb: ab:6f:d2:80:be:1a:68:10:cb:0c:54:e6:0f:1f:58:20:64:e5: ec:2b:ff:5b:3b:19:b1:c4:12:1d:7d:42:3a:5d:4e:82:ab:76: 5d:d5:2e:d3:80:f2:54:96:28:0b:df:c5:49:dd:9a:1d:4a:ea: 0c:c1:db:9d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJPyijToIbTfTMaCb6jyYLmB7LskwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMTA0MDEzMDEzWhcNMjUxMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AzZDYzMDk4Y2M5NTI2YTg3MTI4MDA2NTFhNGJkNDgwYTA5 MTMyMzk4NzEyMGM3ZDU2YWRkNzM2ZmZkNTgyY2EwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCKr3is9Cfqc87KvJwYOeaTSmc9ZKcvKunPYGdYy67xjiuI 82+KEEAv8zaHzz6I+zMkg/HibGZVY0/+gahgzB6FIAhrUBHVmGne8PUAZY1j3l7/ gqYTBIp0Avn+rkkKMToCYBCWiXcWGddteG7UJyk7tcP39Zm/iFqImioV5BhJYHMm fIU08iQYb24KXkUkDDMNz5evVFAQHfJ75UdBo6LCkGqfvvpXk+QHxuvzzvCxtuii IuxvcTM05n51/yTPYvD3VRusL+9476QnpC11G/1dcYlcY3lU8AgREi6EgejUgzNX glqpC32xp81Z2xWZvT2aWLz0qVhlvxJ8Ce5ddzaNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUYuH0zV15b+NlHfVdgIM0CZbrMDowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2NkZjg2MTkxLTY3NzAtNDZkMS1hZDg2LTk2MzMyYjZlZDdlOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAY0E4AwDQYJKoZIhvcNAQELBQADggEBAJJthKzFsz2eZQohLt1dBWsgxDsI jdDATCHCK2WARLNlJN+VyE/C0qSqitHZF1j4vwQWGgvI4LPfngOzjS1WGDsB9SI8 k9vQT4n08bYqOkgRDTVTOC8O+SQsPzl/QiZkU0m23DgBnRpmVXG8KIgczT4LS6he 0NB2OkGCNG2YcNXh0ZB4swD6j8iYTCl1gR6xRoX1Ee/vF3lNo8QtGWW5fGYPuOdd ZbdgOwOvDrh7IFKF3qSRITR/O9rz5fG1kez5ADalBKGVy6tv0oC+GmgQywxU5g8f WCBk5ewr/1s7GbHEEh19QjpdToKrdl3VLtOA8lSWKAvfxUndmh1K6gzB250= -----END CERTIFICATE-----Generated at Wed Nov 5 01:56:51 2025 by rpki-client