$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eaba9a30-cf2d-4dfd-be79-b67511f92aef.roa File: eaba9a30-cf2d-4dfd-be79-b67511f92aef.roa (raw, json) Hash identifier: aXpQXG4PCO5HxFtuRX/GL8pSKwoYKDjqddkVHiGtNlU= Subject key identifier: B0:4E:11:D4:25:91:0C:F0:F7:DB:32:89:8D:6D:A7:12:C8:07:05:CA Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5F4A11F64AD86C22B6FD0D4B278721DE00CCB53D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eaba9a30-cf2d-4dfd-be79-b67511f92aef.roa Signing time: Tue 21 Oct 2025 11:24:00 +0000 ROA not before: Tue 21 Oct 2025 11:24:00 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.95.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:4a:11:f6:4a:d8:6c:22:b6:fd:0d:4b:27:87:21:de:00:cc:b5:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 21 11:24:00 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=c85700523c1b9d16ec7fc1712d2d9bb4a47853cc8296231b556d6f1c991bef07, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:94:bd:f7:5a:0f:5f:8a:19:66:a7:88:74:10: 17:58:1e:67:1f:3f:06:40:26:49:0b:82:31:14:9b: 30:20:bb:5c:b3:91:09:1a:01:7d:b6:89:8b:e8:47: cc:80:b0:cb:c6:5d:5f:ce:97:5a:47:cc:be:1e:a7: af:4c:78:fd:cc:e3:c0:3f:1c:e4:1f:f4:73:81:bf: 38:15:bd:de:a5:70:aa:8a:e4:3c:87:49:5d:97:ed: b5:1f:18:b0:f8:1c:61:b2:87:fe:6c:7b:0a:65:78: 5b:2a:5a:73:2f:21:3f:c7:6f:81:2f:4a:ef:3e:03: 3d:40:ad:98:8a:7e:17:11:aa:5d:90:87:a3:3d:f2: 24:f0:5c:a8:50:01:aa:34:3e:cf:92:3a:4d:98:c7: a8:5a:61:c1:82:a5:33:d3:78:ff:d5:12:55:ea:3f: fd:ea:ed:33:de:73:77:7e:d8:98:7d:50:c0:5a:d4: 4b:ff:65:c2:ee:2e:c5:71:31:7d:ce:22:f7:9d:61: 54:7e:d1:af:41:ba:a1:ac:f6:c9:39:38:e0:06:83: 79:3d:5c:87:f8:70:c2:fa:66:c9:e3:31:7b:47:ef: fb:29:a6:13:20:2e:e4:14:32:81:22:41:63:b8:8f: aa:e0:18:48:1b:5d:c1:f1:9b:9c:6c:3a:30:a0:77: 57:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:4E:11:D4:25:91:0C:F0:F7:DB:32:89:8D:6D:A7:12:C8:07:05:CA X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eaba9a30-cf2d-4dfd-be79-b67511f92aef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.95.249.0/24 Signature Algorithm: sha256WithRSAEncryption 34:a2:b1:26:87:f4:86:e0:2c:21:f4:d0:05:1d:39:4a:3b:22: c3:ef:0f:89:ef:b2:70:9d:f5:00:24:fd:a6:55:74:4b:9f:c1: 6d:6f:99:8f:01:48:33:38:cb:8f:bf:63:bb:ac:69:3d:b6:50: a6:81:9e:f8:ff:1e:03:7e:97:87:77:09:a2:30:ce:f6:d2:7f: 94:a0:bd:d5:dc:9b:38:3d:21:bf:11:ee:a4:45:2a:70:6d:c8: 90:4a:b3:c6:36:3b:3c:23:61:92:7b:d0:90:85:a1:92:6f:10: bf:23:c6:04:65:a8:e1:bd:93:7a:52:d8:38:be:ac:30:a8:ef: ab:08:85:b7:7d:8b:7e:c5:19:74:7b:37:e7:83:43:27:68:16: 42:b1:36:75:e9:15:0d:3f:20:3f:71:a6:d9:03:37:46:57:13: 3e:26:7c:d4:14:64:f7:4b:da:d2:f4:9d:e0:26:32:01:c7:3b: 67:ee:dc:4d:ac:54:30:b1:ae:77:b2:90:23:a3:79:00:c3:e6: c4:d4:4a:9c:db:e2:5e:2c:08:b7:95:ee:6a:2b:c1:79:bb:4c: 20:77:6a:f8:e0:81:a1:8e:69:a7:19:ff:8d:1c:63:3f:c4:ae: f7:a3:db:a8:7d:46:d1:4e:c8:ac:24:48:d1:7f:98:89:b6:69: 23:a0:8c:5e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUX0oR9krYbCK2/Q1LJ4ch3gDMtT0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDIxMTEyNDAwWhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BjODU3MDA1MjNjMWI5ZDE2ZWM3ZmMxNzEyZDJkOWJiNGE0 Nzg1M2NjODI5NjIzMWI1NTZkNmYxYzk5MWJlZjA3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLlL33Wg9fihlmp4h0EBdYHmcfPwZAJkkLgjEUmzAgu1yz kQkaAX22iYvoR8yAsMvGXV/Ol1pHzL4ep69MeP3M48A/HOQf9HOBvzgVvd6lcKqK 5DyHSV2X7bUfGLD4HGGyh/5sewpleFsqWnMvIT/Hb4EvSu8+Az1ArZiKfhcRql2Q h6M98iTwXKhQAao0Ps+SOk2Yx6haYcGCpTPTeP/VElXqP/3q7TPec3d+2Jh9UMBa 1Ev/ZcLuLsVxMX3OIvedYVR+0a9BuqGs9sk5OOAGg3k9XIf4cML6ZsnjMXtH7/sp phMgLuQUMoEiQWO4j6rgGEgbXcHxm5xsOjCgd1clAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUsE4R1CWRDPD32zKJjW2nEsgHBcowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2VhYmE5YTMwLWNmMmQtNGRmZC1iZTc5LWI2NzUxMWY5MmFlZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0X/kwDQYJKoZIhvcNAQELBQADggEBADSisSaH9IbgLCH00AUdOUo7IsPv D4nvsnCd9QAk/aZVdEufwW1vmY8BSDM4y4+/Y7usaT22UKaBnvj/HgN+l4d3CaIw zvbSf5SgvdXcmzg9Ib8R7qRFKnBtyJBKs8Y2OzwjYZJ70JCFoZJvEL8jxgRlqOG9 k3pS2Di+rDCo76sIhbd9i37FGXR7N+eDQydoFkKxNnXpFQ0/ID9xptkDN0ZXEz4m fNQUZPdL2tL0neAmMgHHO2fu3E2sVDCxrneykCOjeQDD5sTUSpzb4l4sCLeV7mor wXm7TCB3avjggaGOaacZ/40cYz/Ervej26h9RtFOyKwkSNF/mIm2aSOgjF4= -----END CERTIFICATE-----Generated at Wed Nov 5 01:49:19 2025 by rpki-client