$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1a97b04f-26d7-407e-a0b1-aaaea8bbed2c.roa File: 1a97b04f-26d7-407e-a0b1-aaaea8bbed2c.roa (raw, json) Hash identifier: 2PC1ZNhxjtWRrnjOrCVfruv+oUjlxe1sqSe3cK3ygrE= Subject key identifier: E7:4D:58:30:39:23:5E:6B:C8:F8:F5:41:19:F7:89:C7:D5:89:2B:05 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1560D32069F709D6353603BCC455EF8911639BD5 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1a97b04f-26d7-407e-a0b1-aaaea8bbed2c.roa Signing time: Sat 11 Oct 2025 01:04:14 +0000 ROA not before: Sat 11 Oct 2025 01:04:14 +0000 ROA not after: Sat 15 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 52.94.252.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:60:d3:20:69:f7:09:d6:35:36:03:bc:c4:55:ef:89:11:63:9b:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 11 01:04:14 2025 GMT Not After : Nov 15 23:59:59 2025 GMT Subject: serialNumber=ce2dd512c35f268a9b75af4fcc8d2880e6d2df282f80e4a6d93a4631145eaf9b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:80:73:39:09:79:4e:09:06:b9:0f:c9:86:0c: e0:bb:bc:bc:cf:92:90:c9:fd:72:94:a1:a2:53:59: b9:08:78:c4:a0:e7:b7:b1:c9:60:01:3e:9a:0d:b0: 9b:c9:33:32:00:40:54:e5:20:88:86:b4:e9:42:72: a5:f8:5b:62:5b:c3:d4:f6:bd:f1:46:e2:5d:cb:d5: 90:a2:18:63:13:f6:a6:e7:4a:6f:98:0c:aa:4b:59: e7:87:38:49:29:b6:a2:19:a2:13:d9:89:81:20:d1: 92:6e:67:ca:4f:4d:0b:d2:34:80:1e:a7:b7:0e:c6: 06:45:06:70:a0:f0:dd:05:6f:52:96:0a:8a:92:e9: 5c:8e:f3:d3:1f:27:f0:14:c9:e7:23:96:f6:89:94: 94:df:31:00:8d:ae:b1:10:0f:09:f6:eb:29:4f:49: 60:f9:d6:81:a5:ce:c5:fb:be:17:c7:20:81:0f:28: 4d:4b:82:84:b1:6f:c4:fa:26:ba:03:0a:d1:86:c4: 19:0a:41:4a:ec:dc:61:ba:5b:97:11:7a:2f:f1:08: de:bd:40:e5:ba:f5:f3:62:01:24:c9:3a:98:08:88: 89:db:78:e7:63:60:dc:83:43:e7:26:54:a3:fd:b2: a3:32:99:5c:5c:24:bd:b3:47:0d:16:04:8f:cc:b1: 77:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:4D:58:30:39:23:5E:6B:C8:F8:F5:41:19:F7:89:C7:D5:89:2B:05 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1a97b04f-26d7-407e-a0b1-aaaea8bbed2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.94.252.0/23 Signature Algorithm: sha256WithRSAEncryption 23:29:be:9b:9c:50:b6:5a:e0:ea:1f:42:e3:e6:b7:57:00:16: a4:2c:58:da:1c:9b:52:62:0b:46:7b:4d:f3:53:b1:82:82:81: 88:e3:4e:c2:98:4a:65:df:69:ed:9e:43:e9:49:d4:dd:10:dc: f2:90:c3:6c:3e:26:e5:83:36:ae:95:b5:0b:34:0a:01:6c:8d: 7a:f8:a2:5b:dd:5b:7c:0b:2d:89:86:7b:5c:a1:97:b8:e9:c2: 5e:f3:32:97:9b:39:29:90:8a:85:28:b0:6d:25:10:0f:53:55: 49:7b:f4:4d:a5:f3:d7:c5:7e:ba:fa:ed:9e:09:01:05:29:05: 33:6e:f8:3f:85:4a:de:18:5a:b3:f1:b9:4a:0a:f2:12:73:4f: aa:aa:a6:34:e8:28:e3:67:b9:c0:7e:7c:bb:30:23:7f:7d:2a: a1:41:55:55:e5:67:71:c3:14:5c:57:96:41:95:47:0c:be:c6: 3f:41:96:a9:99:d8:b1:59:95:e9:68:61:d1:22:5d:3b:6f:41: 2c:f2:17:38:e8:a5:e3:2f:b0:25:ca:b5:ac:a6:60:df:aa:66: 99:e5:02:32:4d:4b:12:12:b9:9a:92:86:ce:0d:3a:21:d5:b4: 50:68:ac:05:10:fd:f2:91:7c:ef:84:57:43:69:1e:85:03:8a: e3:93:c6:17 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFWDTIGn3CdY1NgO8xFXviRFjm9UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDExMDEwNDE0WhcNMjUxMTE1MjM1OTU5 WjB6MUkwRwYDVQQFE0BjZTJkZDUxMmMzNWYyNjhhOWI3NWFmNGZjYzhkMjg4MGU2 ZDJkZjI4MmY4MGU0YTZkOTNhNDYzMTE0NWVhZjliMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDYgHM5CXlOCQa5D8mGDOC7vLzPkpDJ/XKUoaJTWbkIeMSg 57exyWABPpoNsJvJMzIAQFTlIIiGtOlCcqX4W2Jbw9T2vfFG4l3L1ZCiGGMT9qbn Sm+YDKpLWeeHOEkptqIZohPZiYEg0ZJuZ8pPTQvSNIAep7cOxgZFBnCg8N0Fb1KW CoqS6VyO89MfJ/AUyecjlvaJlJTfMQCNrrEQDwn26ylPSWD51oGlzsX7vhfHIIEP KE1LgoSxb8T6JroDCtGGxBkKQUrs3GG6W5cRei/xCN69QOW69fNiASTJOpgIiInb eOdjYNyDQ+cmVKP9sqMymVxcJL2zRw0WBI/MsXc1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU501YMDkjXmvI+PVBGfeJx9WJKwUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzFhOTdiMDRmLTI2ZDctNDA3ZS1hMGIxLWFhYWVhOGJiZWQyYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE0XvwwDQYJKoZIhvcNAQELBQADggEBACMpvpucULZa4OofQuPmt1cAFqQs WNocm1JiC0Z7TfNTsYKCgYjjTsKYSmXfae2eQ+lJ1N0Q3PKQw2w+JuWDNq6VtQs0 CgFsjXr4olvdW3wLLYmGe1yhl7jpwl7zMpebOSmQioUosG0lEA9TVUl79E2l89fF frr67Z4JAQUpBTNu+D+FSt4YWrPxuUoK8hJzT6qqpjToKONnucB+fLswI399KqFB VVXlZ3HDFFxXlkGVRwy+xj9BlqmZ2LFZleloYdEiXTtvQSzyFzjopeMvsCXKtaym YN+qZpnlAjJNSxISuZqShs4NOiHVtFBorAUQ/fKRfO+EV0NpHoUDiuOTxhc= -----END CERTIFICATE-----Generated at Mon Oct 20 09:11:23 2025 by rpki-client