$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1ace822b-49e7-4874-ab2b-5f742e12d110.roa File: 1ace822b-49e7-4874-ab2b-5f742e12d110.roa (raw, json) Hash identifier: otEY1zSrMxU9LnPyOWai5RAOueyJALbKW7HqP4jCHPg= Subject key identifier: 07:7D:4B:B7:BC:DC:8E:79:E9:99:D6:F1:C9:9B:A8:54:C7:13:9C:61 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 20B5A29182E33340C3E3F71AEDCC6693C70CE872 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1ace822b-49e7-4874-ab2b-5f742e12d110.roa Signing time: Sun 19 Oct 2025 05:42:32 +0000 ROA not before: Sun 19 Oct 2025 05:42:32 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.84.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:b5:a2:91:82:e3:33:40:c3:e3:f7:1a:ed:cc:66:93:c7:0c:e8:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 05:42:32 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=a106d60bff687df92a1502ff86154affb95520a38dcbbe68dc0074df08d42c10, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:70:88:7e:6a:81:ef:98:0c:b4:55:7a:96:29: ff:ac:e4:61:7e:a0:78:48:c4:14:82:14:ea:5d:c2: 06:b5:08:45:e4:6a:dc:22:d8:48:4f:fb:6f:80:8d: fa:eb:49:6a:0f:82:b0:18:4e:49:64:62:fa:bb:9f: e8:f7:61:e0:72:ff:0e:f5:61:2c:f6:65:a6:01:08: b7:13:bb:25:5f:ad:27:6f:fc:b7:45:85:46:65:0d: 8f:02:b7:06:17:63:fa:d8:e9:6c:20:48:0e:04:94: 42:26:c7:f4:ec:28:0c:39:55:da:33:94:22:40:91: 36:fb:f5:f0:6b:c7:87:2d:f5:fe:1d:22:af:56:ef: 4f:30:eb:b0:10:e5:89:b6:6f:20:c0:ad:75:03:60: 17:b0:26:99:ae:4e:7e:1a:3a:58:03:67:ac:d3:17: c9:77:16:ef:8f:c6:fc:87:9a:32:b6:5f:aa:d7:f5: 1e:a2:18:c0:ce:ce:a7:07:0b:58:48:e3:10:a1:2a: 24:8d:da:87:82:9b:35:43:aa:fe:ef:bc:b6:c7:2f: 35:24:45:d8:a1:a3:26:57:57:9d:bf:af:14:dc:50: ae:21:d1:03:55:6f:d0:7f:72:1d:44:3e:25:bb:5e: eb:3c:90:83:47:f5:8b:3f:49:d0:a4:fb:0a:df:82: ba:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:7D:4B:B7:BC:DC:8E:79:E9:99:D6:F1:C9:9B:A8:54:C7:13:9C:61 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1ace822b-49e7-4874-ab2b-5f742e12d110.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.84.212.0/22 Signature Algorithm: sha256WithRSAEncryption 6a:0e:b6:22:ef:b5:70:49:7a:01:8b:24:25:10:0e:b3:c1:5b: fd:27:72:8a:fc:24:ea:c5:8e:f7:79:c1:f0:1e:63:72:72:c3: e2:f2:5e:50:f7:4c:33:00:66:de:78:57:fc:4d:68:e0:ef:5f: 09:e4:1b:33:52:7e:cc:7e:a0:bf:10:5f:53:88:24:bc:06:39: 84:8f:66:5e:05:8e:83:e5:f7:9d:97:a7:7d:03:8a:f6:51:38: 31:2d:16:b5:9b:42:d2:f5:d9:7b:1e:dc:f4:70:9a:8f:34:50: 18:81:dd:dd:2f:6b:89:29:d5:33:d0:76:55:f1:18:8e:7d:1d: 69:62:40:40:4f:14:5a:ec:29:1c:66:76:c5:8d:9d:02:5f:9a: ee:2a:96:a5:69:da:e9:33:0f:1e:97:48:74:c7:a0:b9:2d:e4: 92:cc:ce:64:7a:2d:dc:b4:f8:f1:02:be:36:51:be:56:67:45: 33:35:cc:da:1c:8c:2e:93:10:11:ff:ac:77:cf:33:a3:c3:d0: 52:ac:7e:e2:5c:f4:df:07:e9:76:cf:4d:e0:64:93:3a:1f:f2: a9:59:f5:a7:9d:e0:cb:96:51:54:84:4d:e6:04:4d:a9:9f:61: 01:f0:09:6f:a7:a3:68:0a:64:0d:27:2e:3c:43:83:00:fd:d7: a0:62:32:f0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUILWikYLjM0DD4/ca7cxmk8cM6HIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MDU0MjMyWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BhMTA2ZDYwYmZmNjg3ZGY5MmExNTAyZmY4NjE1NGFmZmI5 NTUyMGEzOGRjYmJlNjhkYzAwNzRkZjA4ZDQyYzEwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2cIh+aoHvmAy0VXqWKf+s5GF+oHhIxBSCFOpdwga1CEXk atwi2EhP+2+AjfrrSWoPgrAYTklkYvq7n+j3YeBy/w71YSz2ZaYBCLcTuyVfrSdv /LdFhUZlDY8CtwYXY/rY6WwgSA4ElEImx/TsKAw5VdozlCJAkTb79fBrx4ct9f4d Iq9W708w67AQ5Ym2byDArXUDYBewJpmuTn4aOlgDZ6zTF8l3Fu+PxvyHmjK2X6rX 9R6iGMDOzqcHC1hI4xChKiSN2oeCmzVDqv7vvLbHLzUkRdihoyZXV52/rxTcUK4h 0QNVb9B/ch1EPiW7Xus8kINH9Ys/SdCk+wrfgrpRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUB31Lt7zcjnnpmdbxyZuoVMcTnGEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzFhY2U4MjJiLTQ5ZTctNDg3NC1hYjJiLTVmNzQyZTEyZDExMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI0VNQwDQYJKoZIhvcNAQELBQADggEBAGoOtiLvtXBJegGLJCUQDrPBW/0n cor8JOrFjvd5wfAeY3Jyw+LyXlD3TDMAZt54V/xNaODvXwnkGzNSfsx+oL8QX1OI JLwGOYSPZl4FjoPl952Xp30DivZRODEtFrWbQtL12Xse3PRwmo80UBiB3d0va4kp 1TPQdlXxGI59HWliQEBPFFrsKRxmdsWNnQJfmu4qlqVp2ukzDx6XSHTHoLkt5JLM zmR6Ldy0+PECvjZRvlZnRTM1zNocjC6TEBH/rHfPM6PD0FKsfuJc9N8H6XbPTeBk kzof8qlZ9aed4MuWUVSETeYETamfYQHwCW+no2gKZA0nLjxDgwD916BiMvA= -----END CERTIFICATE-----Generated at Mon Oct 20 02:59:57 2025 by rpki-client