$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e0153d78-4446-482c-a63a-a7d37caa1060.roa File: e0153d78-4446-482c-a63a-a7d37caa1060.roa (raw, json) Hash identifier: JvEvq6vGf2eSA3LXc1SgT9HrwSk922Jitula7M67pxU= Subject key identifier: 5A:BB:7F:76:12:3D:B5:D1:53:0A:9B:1E:CF:43:1A:E5:C2:9A:E8:B6 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3334D62DC82CD5E175A1637FFF2E4FD36819903C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e0153d78-4446-482c-a63a-a7d37caa1060.roa Signing time: Tue 04 Nov 2025 06:21:52 +0000 ROA not before: Tue 04 Nov 2025 06:21:52 +0000 ROA not after: Tue 09 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.46.12.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:34:d6:2d:c8:2c:d5:e1:75:a1:63:7f:ff:2e:4f:d3:68:19:90:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Nov 4 06:21:52 2025 GMT Not After : Dec 9 23:59:59 2025 GMT Subject: serialNumber=f09e481ea4d835f9998465a7f61c30e7c0d8cd3edd136bfa35b842d7a8cc4ec7, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ef:ca:0d:57:2f:05:87:5d:e8:41:79:b2:3e: 38:22:64:02:c0:e9:d0:bf:b4:45:04:97:c0:18:1b: 36:c5:1a:86:7c:8a:4f:e6:db:92:92:31:0a:1d:f4: ac:d9:74:30:a1:e4:df:c4:96:72:d0:71:3a:f2:be: 95:d9:3a:d1:87:ba:c6:bc:c5:35:90:49:9d:69:fd: 3b:1e:f1:a0:c3:46:56:d6:5d:5f:51:e0:4f:40:45: 7e:32:e2:01:f6:b0:d0:ee:eb:7c:54:7d:8f:5b:c9: 25:a4:19:62:47:2c:bd:73:e3:6b:cd:8e:6f:6e:aa: 35:aa:65:ca:4a:6a:47:91:b9:58:7a:09:63:5a:dc: bb:f9:d8:e5:39:2a:d1:3b:85:fc:82:14:5a:37:05: 2f:5e:e8:d0:77:ed:62:bc:40:e1:7e:f1:95:d2:24: 7e:fc:39:50:2d:41:7b:40:5b:3a:7d:b6:da:d4:b2: 4f:f1:02:11:c9:f5:d5:92:4a:5b:fc:5e:92:37:c2: 1f:b5:c4:af:87:a0:63:04:26:6c:be:04:7a:21:d9: 64:8a:f8:ae:13:c3:21:bc:c9:c0:3c:54:e4:44:e7: e2:de:a3:85:e5:cf:4b:dc:9d:8f:67:04:c6:41:30: 49:92:be:6d:2d:1d:00:02:df:30:0b:89:22:8a:88: d9:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:BB:7F:76:12:3D:B5:D1:53:0A:9B:1E:CF:43:1A:E5:C2:9A:E8:B6 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e0153d78-4446-482c-a63a-a7d37caa1060.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.46.12.0/23 Signature Algorithm: sha256WithRSAEncryption 69:52:2c:b8:c7:30:98:5f:83:80:0b:87:83:dd:cc:7d:75:63: 17:da:a1:e1:8f:b2:24:ab:77:99:6a:cd:e2:28:48:12:f4:35: d4:4f:2b:a7:d2:d7:13:7c:a1:c1:15:0b:9b:09:b5:6b:21:d6: 0f:0d:cb:f8:42:66:ff:21:1a:51:35:1e:aa:92:fb:04:84:29: 83:dc:a5:48:fa:a5:7f:3a:60:9e:24:41:54:0b:da:1a:10:e9: f0:a0:7e:4c:2b:12:12:10:4d:c7:f4:50:82:27:27:90:38:a7: 07:74:6b:3e:d3:9a:48:5a:dd:91:35:b2:6b:77:df:dc:38:85: 1f:6c:a5:19:2e:15:c8:ed:1f:60:3a:b7:92:2b:d1:05:2f:d8: 7c:df:7d:81:7f:a0:07:d0:db:9c:19:2e:02:cb:8a:8e:4f:3b: 34:97:ce:6f:3c:66:ec:c7:82:63:80:59:4e:e3:62:b5:db:aa: 51:f6:46:89:00:70:10:f6:be:52:de:95:a4:99:1a:96:57:89: de:ef:e3:a9:b4:f5:ba:a9:da:2b:4f:fd:94:72:8c:6a:ac:7d: 9b:c3:8c:9f:80:7e:ec:06:3f:7d:03:49:aa:18:f0:9e:c7:2d: 98:0a:c8:1b:c7:df:20:b0:62:02:9a:56:39:44:7d:4a:2c:3a: e1:04:d2:1e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMzTWLcgs1eF1oWN//y5P02gZkDwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMTA0MDYyMTUyWhcNMjUxMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BmMDllNDgxZWE0ZDgzNWY5OTk4NDY1YTdmNjFjMzBlN2Mw ZDhjZDNlZGQxMzZiZmEzNWI4NDJkN2E4Y2M0ZWM3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC178oNVy8Fh13oQXmyPjgiZALA6dC/tEUEl8AYGzbFGoZ8 ik/m25KSMQod9KzZdDCh5N/ElnLQcTryvpXZOtGHusa8xTWQSZ1p/Tse8aDDRlbW XV9R4E9ARX4y4gH2sNDu63xUfY9bySWkGWJHLL1z42vNjm9uqjWqZcpKakeRuVh6 CWNa3Lv52OU5KtE7hfyCFFo3BS9e6NB37WK8QOF+8ZXSJH78OVAtQXtAWzp9ttrU sk/xAhHJ9dWSSlv8XpI3wh+1xK+HoGMEJmy+BHoh2WSK+K4TwyG8ycA8VORE5+Le o4Xlz0vcnY9nBMZBMEmSvm0tHQAC3zALiSKKiNnVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUWrt/dhI9tdFTCpsez0Ma5cKa6LYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2UwMTUzZDc4LTQ0NDYtNDgyYy1hNjNhLWE3ZDM3Y2FhMTA2MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE0LgwwDQYJKoZIhvcNAQELBQADggEBAGlSLLjHMJhfg4ALh4PdzH11Yxfa oeGPsiSrd5lqzeIoSBL0NdRPK6fS1xN8ocEVC5sJtWsh1g8Ny/hCZv8hGlE1HqqS +wSEKYPcpUj6pX86YJ4kQVQL2hoQ6fCgfkwrEhIQTcf0UIInJ5A4pwd0az7Tmkha 3ZE1smt339w4hR9spRkuFcjtH2A6t5Ir0QUv2HzffYF/oAfQ25wZLgLLio5POzSX zm88ZuzHgmOAWU7jYrXbqlH2RokAcBD2vlLelaSZGpZXid7v46m09bqp2itP/ZRy jGqsfZvDjJ+AfuwGP30DSaoY8J7HLZgKyBvH3yCwYgKaVjlEfUosOuEE0h4= -----END CERTIFICATE-----Generated at Wed Nov 5 08:42:53 2025 by rpki-client