$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f8520558-ac49-4c50-b320-d77d5b09a463.roa File: f8520558-ac49-4c50-b320-d77d5b09a463.roa (raw, json) Hash identifier: MighL3LV3hKrBai6brjN70cYULx9rlL8KBd51zNnYEo= Subject key identifier: BE:84:44:E0:56:81:AA:62:59:C1:11:92:01:44:27:B7:BA:E1:22:DD Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 241102ED197A6D63A600F47FCECBE44DD986B5D3 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f8520558-ac49-4c50-b320-d77d5b09a463.roa Signing time: Thu 30 Oct 2025 00:10:08 +0000 ROA not before: Thu 30 Oct 2025 00:10:08 +0000 ROA not after: Thu 04 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.46.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:11:02:ed:19:7a:6d:63:a6:00:f4:7f:ce:cb:e4:4d:d9:86:b5:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 30 00:10:08 2025 GMT Not After : Dec 4 23:59:59 2025 GMT Subject: serialNumber=9b8a7a8f8d5ff16734d9d6a47600384d8deaa94cc8ae9cc60b6e407b5fdcfe13, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b6:31:f0:fc:a8:ce:2f:67:0b:9e:73:5a:8a: 04:7b:2d:23:b4:9f:1d:7b:8c:b1:11:0f:58:df:61: 16:0a:2d:49:7c:bf:1f:b8:42:11:d9:47:6e:84:8b: f2:96:af:c9:fa:7d:58:fc:3c:a3:fa:6d:11:c3:65: d4:90:24:cf:ca:04:70:d5:2d:05:89:52:78:cf:ef: 89:da:9a:4a:5a:dd:91:18:ee:bb:ac:45:03:39:80: 67:9c:d6:17:0c:5a:c8:ee:2b:88:44:e5:41:0f:47: 59:20:ec:60:0e:f1:36:25:8b:0e:5b:bd:d9:9b:ef: dc:b5:b2:f1:49:69:c0:c3:84:a9:cc:b3:2a:3f:63: d0:b6:6a:07:4f:67:c8:7f:f0:f9:cd:33:0c:82:80: b8:c9:ce:05:57:e7:58:7b:e5:0c:cc:69:06:67:39: e6:bd:77:29:e5:13:9b:6e:e9:6c:c6:66:9c:68:60: fa:29:2b:24:55:f3:f8:c9:68:90:85:d8:27:a0:ff: af:83:ed:12:2f:e5:0d:9d:9a:45:21:68:3f:fd:f7: bf:cd:c4:e6:b5:67:74:b0:72:df:83:a5:37:46:d2: 73:48:91:6a:6b:91:2a:dd:34:13:26:ae:51:b2:09: a2:ba:ef:e0:bf:11:a8:ba:b2:b9:60:3c:55:25:a2: 1d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:84:44:E0:56:81:AA:62:59:C1:11:92:01:44:27:B7:BA:E1:22:DD X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f8520558-ac49-4c50-b320-d77d5b09a463.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.46.48.0/20 Signature Algorithm: sha256WithRSAEncryption 9b:fc:c7:60:87:e3:31:c0:f0:65:d5:f0:eb:37:8c:13:7e:5b: 1a:56:8f:e6:c3:50:44:4a:77:cc:d8:ec:43:ce:f9:3c:26:89: e6:a4:e2:3d:27:ab:00:02:c3:25:c1:57:c9:3f:f5:6f:54:d9: 64:97:76:23:07:a0:1e:42:28:04:b8:94:89:21:3b:83:38:5a: 06:62:90:dc:56:fd:f8:30:76:a2:43:9c:c5:19:2f:70:70:56: 04:28:fa:fa:96:6b:8f:d1:0e:7e:69:9b:81:bb:cf:28:a8:e5: ab:e6:7d:c1:17:07:63:f5:b0:6e:3b:aa:d8:bc:ec:d7:4e:9f: c1:e8:ce:a3:ee:b8:d7:ae:4e:85:d6:44:cd:a0:8f:a3:eb:be: a0:22:95:fd:a1:47:9f:28:87:3b:5c:a4:fd:ea:59:f4:14:68: 32:df:2a:b2:95:2c:a5:b9:64:94:38:08:1a:b9:cc:49:eb:c9: 6a:f3:0a:fd:20:3d:6a:36:0a:b2:6d:cc:df:3c:a0:49:56:2a: a0:5f:b3:d2:b2:c7:26:cb:4d:aa:42:9d:cf:16:12:df:3b:75: 40:11:fa:e6:81:af:19:c2:19:10:5c:f9:31:71:dc:16:48:dd: 4b:1c:a7:83:95:74:f0:30:45:d4:66:94:24:7a:ae:ae:82:d5: 9e:29:0e:47 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJBEC7Rl6bWOmAPR/zsvkTdmGtdMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDMwMDAxMDA4WhcNMjUxMjA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A5YjhhN2E4ZjhkNWZmMTY3MzRkOWQ2YTQ3NjAwMzg0ZDhk ZWFhOTRjYzhhZTljYzYwYjZlNDA3YjVmZGNmZTEzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5tjHw/KjOL2cLnnNaigR7LSO0nx17jLERD1jfYRYKLUl8 vx+4QhHZR26Ei/KWr8n6fVj8PKP6bRHDZdSQJM/KBHDVLQWJUnjP74namkpa3ZEY 7rusRQM5gGec1hcMWsjuK4hE5UEPR1kg7GAO8TYliw5bvdmb79y1svFJacDDhKnM syo/Y9C2agdPZ8h/8PnNMwyCgLjJzgVX51h75QzMaQZnOea9dynlE5tu6WzGZpxo YPopKyRV8/jJaJCF2Ceg/6+D7RIv5Q2dmkUhaD/997/NxOa1Z3Swct+DpTdG0nNI kWprkSrdNBMmrlGyCaK67+C/Eai6srlgPFUloh0pAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUvoRE4FaBqmJZwRGSAUQnt7rhIt0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2Y4NTIwNTU4LWFjNDktNGM1MC1iMzIwLWQ3N2Q1YjA5YTQ2My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQ0LjAwDQYJKoZIhvcNAQELBQADggEBAJv8x2CH4zHA8GXV8Os3jBN+WxpW j+bDUERKd8zY7EPO+Twmieak4j0nqwACwyXBV8k/9W9U2WSXdiMHoB5CKAS4lIkh O4M4WgZikNxW/fgwdqJDnMUZL3BwVgQo+vqWa4/RDn5pm4G7zyio5avmfcEXB2P1 sG47qti87NdOn8HozqPuuNeuToXWRM2gj6PrvqAilf2hR58ohztcpP3qWfQUaDLf KrKVLKW5ZJQ4CBq5zEnryWrzCv0gPWo2CrJtzN88oElWKqBfs9KyxybLTapCnc8W Et87dUAR+uaBrxnCGRBc+TFx3BZI3Uscp4OVdPAwRdRmlCR6rq6C1Z4pDkc= -----END CERTIFICATE-----Generated at Wed Nov 5 08:42:24 2025 by rpki-client