$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e1cc563b-3ad8-4c2f-9f0e-dae5ff843492.roa File: e1cc563b-3ad8-4c2f-9f0e-dae5ff843492.roa (raw, json) Hash identifier: Q4Kz1qOSFPtpTJj8t0O+EnhKugKFuxFUCu2xFMM8PeE= Subject key identifier: 7B:2E:B0:54:21:86:93:A3:65:7A:DE:5D:27:24:36:7E:9D:ED:BA:52 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4145A118D10510F87B10AC48E6E07E167EE1F4DB Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e1cc563b-3ad8-4c2f-9f0e-dae5ff843492.roa Signing time: Tue 21 Oct 2025 06:42:46 +0000 ROA not before: Tue 21 Oct 2025 06:42:46 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.95.48.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:45:a1:18:d1:05:10:f8:7b:10:ac:48:e6:e0:7e:16:7e:e1:f4:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 21 06:42:46 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=dd5100ad5d43f63d96467d1bd9c1e1ee74a685a3a0305612697a244d118e68f4, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:76:2a:4f:07:e8:a8:06:0f:9c:eb:7a:39:58: e8:6c:e4:2c:c8:0f:4e:98:90:23:f1:18:68:df:f7: 10:46:1e:97:70:e7:bb:19:74:07:c5:75:fb:6a:cb: 2a:e8:5e:43:ae:fd:11:75:6a:10:32:90:b4:90:de: 6c:fa:49:4c:7b:d1:f1:2f:3c:c8:25:9c:3c:0b:3a: 95:f0:fc:00:19:32:60:21:92:cc:20:ce:f2:7f:ca: 3e:9d:f9:2a:c2:e2:d0:65:34:56:d3:6d:02:2c:ae: 80:07:2a:0d:14:05:9d:5c:4a:28:6d:b4:83:3e:90: 83:b1:e6:f2:54:f0:8f:f1:fd:b3:6a:8b:34:20:2b: f5:05:50:cd:b9:6f:90:95:f0:da:ac:02:00:d2:dd: f0:8a:fc:3d:6a:16:00:c5:4f:fb:b1:c7:c0:3d:5d: cc:de:0f:1b:20:30:5c:e4:a6:c0:39:55:61:cc:5d: c7:c9:62:f5:86:0a:6d:5c:e7:fb:65:34:d4:b9:24: f3:5a:c4:9d:ae:b1:a9:00:dc:46:42:bd:84:61:24: 5e:6e:11:ca:3f:58:4a:35:79:e2:1a:39:94:f5:b4: 48:5e:a9:72:11:b5:57:1e:49:80:e8:bd:87:74:64: 47:ab:f9:9a:84:8c:73:82:ca:3e:e7:87:46:95:d7: 48:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:2E:B0:54:21:86:93:A3:65:7A:DE:5D:27:24:36:7E:9D:ED:BA:52 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e1cc563b-3ad8-4c2f-9f0e-dae5ff843492.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.95.48.0/22 Signature Algorithm: sha256WithRSAEncryption 62:e5:55:49:be:ee:fc:3c:c5:6f:2a:25:a3:03:11:a6:24:09: 32:b8:47:fd:2b:15:a3:f3:9e:e9:59:d7:8b:e9:b1:a7:f2:49: 17:a3:c7:5a:08:fc:fd:a4:2c:2b:b2:9c:60:49:86:b8:76:1a: 56:11:33:17:c8:62:4c:5c:ed:08:95:89:1f:7c:6f:cf:33:5f: 25:3b:43:27:5d:a7:4b:a7:15:d3:e9:94:24:77:81:e8:db:16: 00:ff:6b:e2:82:82:d9:0e:52:b0:2b:a9:28:25:b8:d4:76:92: d1:70:ea:be:52:89:81:fc:1d:fa:94:a4:1f:14:d8:ba:ea:dd: 86:74:08:ca:1a:0e:fb:6d:93:31:20:66:7a:4c:5e:3a:17:91: 07:83:0a:83:94:4f:84:05:72:7e:f6:35:f2:1d:28:8a:ca:0f: 5d:16:58:ab:0f:3e:04:dc:27:c4:b4:ca:c3:5d:18:6d:86:19: 0a:93:2f:01:59:77:15:73:32:21:65:25:77:9a:3d:fd:3b:28: dc:e3:ba:bc:3d:f7:d8:5a:e4:65:e0:85:26:2a:ce:95:44:2f: 76:02:7d:ef:61:b4:5b:1b:9e:13:11:62:19:4b:27:c7:87:94: 2d:a3:97:d5:94:33:2d:a9:7c:22:b9:68:4d:f2:94:0b:73:34: 0d:d3:f5:e7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQUWhGNEFEPh7EKxI5uB+Fn7h9NswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDIxMDY0MjQ2WhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BkZDUxMDBhZDVkNDNmNjNkOTY0NjdkMWJkOWMxZTFlZTc0 YTY4NWEzYTAzMDU2MTI2OTdhMjQ0ZDExOGU2OGY0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLdipPB+ioBg+c63o5WOhs5CzID06YkCPxGGjf9xBGHpdw 57sZdAfFdftqyyroXkOu/RF1ahAykLSQ3mz6SUx70fEvPMglnDwLOpXw/AAZMmAh kswgzvJ/yj6d+SrC4tBlNFbTbQIsroAHKg0UBZ1cSihttIM+kIOx5vJU8I/x/bNq izQgK/UFUM25b5CV8NqsAgDS3fCK/D1qFgDFT/uxx8A9XczeDxsgMFzkpsA5VWHM XcfJYvWGCm1c5/tlNNS5JPNaxJ2usakA3EZCvYRhJF5uEco/WEo1eeIaOZT1tEhe qXIRtVceSYDovYd0ZEer+ZqEjHOCyj7nh0aV10jpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUey6wVCGGk6Nlet5dJyQ2fp3tulIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2UxY2M1NjNiLTNhZDgtNGMyZi05ZjBlLWRhZTVmZjg0MzQ5Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI0XzAwDQYJKoZIhvcNAQELBQADggEBAGLlVUm+7vw8xW8qJaMDEaYkCTK4 R/0rFaPznulZ14vpsafySRejx1oI/P2kLCuynGBJhrh2GlYRMxfIYkxc7QiViR98 b88zXyU7Qyddp0unFdPplCR3gejbFgD/a+KCgtkOUrArqSgluNR2ktFw6r5SiYH8 HfqUpB8U2Lrq3YZ0CMoaDvttkzEgZnpMXjoXkQeDCoOUT4QFcn72NfIdKIrKD10W WKsPPgTcJ8S0ysNdGG2GGQqTLwFZdxVzMiFlJXeaPf07KNzjurw999ha5GXghSYq zpVEL3YCfe9htFsbnhMRYhlLJ8eHlC2jl9WUMy2pfCK5aE3ylAtzNA3T9ec= -----END CERTIFICATE-----Generated at Wed Nov 5 01:47:14 2025 by rpki-client