$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1c97b97e-8666-4a49-9d5a-65580caab4ab.roa File: 1c97b97e-8666-4a49-9d5a-65580caab4ab.roa (raw, json) Hash identifier: 4my/3IdRQEX06oJBgOHFOw31OPJm/w5TBMCwkdkDkZY= Subject key identifier: 18:86:7F:85:14:6D:BB:5B:9B:A0:E0:A7:AC:24:03:9F:45:6F:F8:85 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4509FA3098EDE2AE1C8C9A03A239546C14F3F472 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1c97b97e-8666-4a49-9d5a-65580caab4ab.roa Signing time: Thu 16 Oct 2025 16:53:02 +0000 ROA not before: Thu 16 Oct 2025 16:53:02 +0000 ROA not after: Thu 20 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.124.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:09:fa:30:98:ed:e2:ae:1c:8c:9a:03:a2:39:54:6c:14:f3:f4:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 16 16:53:02 2025 GMT Not After : Nov 20 23:59:59 2025 GMT Subject: serialNumber=e193b5aee1951d534e25e85025310ddc737ded88aee2a58157ffa18120e9f970, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d2:cf:cd:3e:e5:bd:7b:5f:c7:37:dd:ec:1b: 7f:c5:88:df:67:db:9f:e1:e9:e6:86:4c:ca:2b:e1: c5:0a:91:8e:32:a1:b1:e5:e1:ba:57:e0:63:fe:86: bc:70:a4:ff:80:7b:0d:e5:5c:60:f7:cc:09:be:1e: ba:33:f0:77:26:1e:e3:24:ee:e5:61:65:7b:b3:fd: ab:69:36:34:9b:4a:08:64:41:c1:a7:3e:98:d4:d9: 6d:f6:58:be:06:1d:3b:03:31:39:d5:ce:4f:19:42: f4:c3:94:54:63:dc:3d:24:d9:67:a3:22:c9:bb:5f: fc:d1:b5:c4:bf:38:09:26:3c:64:04:04:7d:f9:cb: c4:c9:da:21:d5:e1:eb:6f:75:39:c8:6d:84:7d:b0: 2a:a5:79:26:f3:d2:1c:88:ee:6c:f3:70:ee:9c:5e: 3f:1a:7a:28:fb:6b:c0:07:0e:d6:f1:d4:28:16:aa: 70:35:dc:52:d0:92:aa:ad:00:54:1b:60:19:eb:c0: aa:d7:ff:08:5d:1a:fd:ea:ca:44:fb:7b:9b:fe:ff: e5:7f:a3:63:86:33:f1:fe:a7:28:f7:6d:83:82:57: df:7c:63:6e:ea:f2:7c:72:cb:7c:e4:66:9c:d2:a6: 70:32:89:5e:13:a1:a9:64:42:7a:13:0d:fd:20:93: 31:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:86:7F:85:14:6D:BB:5B:9B:A0:E0:A7:AC:24:03:9F:45:6F:F8:85 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1c97b97e-8666-4a49-9d5a-65580caab4ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.124.161.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:3d:86:55:8d:51:8b:3e:9f:f3:ed:81:19:80:56:65:c6:be: 0a:3d:4d:2a:25:c7:69:ae:e3:81:a1:4c:f7:39:97:87:ec:6d: 83:5e:21:a3:70:a6:9d:dc:be:d1:60:8d:45:f0:88:3a:e3:39: 12:03:fd:80:67:47:df:92:e5:b3:7a:ce:a9:cc:16:95:1b:58: 1d:d8:0f:9b:d3:8b:77:5e:97:f5:1b:e3:33:a9:ac:24:ac:95: 9d:35:59:21:93:21:ad:95:45:44:d1:a9:20:f8:f2:b6:30:74: 7c:0d:65:fc:e8:4d:0c:6d:0f:37:a6:e3:47:29:d2:2d:a7:38: d3:22:ad:7c:7e:83:c7:68:89:6f:20:90:7e:4e:8e:05:e7:a7: d4:bd:3c:42:a9:91:72:ac:70:79:29:0d:16:08:af:35:77:45: f7:76:d7:4d:34:5d:85:4d:64:c1:48:9a:33:2d:0a:05:10:56: f3:de:84:fe:a7:f3:4b:61:e2:1f:86:a1:f1:e5:6b:df:70:5c: ac:33:67:fa:4c:e8:a3:13:d8:70:6b:64:24:46:c6:ce:f1:4d: 57:45:a5:76:4b:43:0b:50:45:1c:43:67:ad:e3:c7:d7:8c:39: 99:55:28:02:cf:64:18:76:cb:b9:02:2f:d0:af:d7:f6:50:c2: 91:c7:2e:7b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURQn6MJjt4q4cjJoDojlUbBTz9HIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE2MTY1MzAyWhcNMjUxMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BlMTkzYjVhZWUxOTUxZDUzNGUyNWU4NTAyNTMxMGRkYzcz N2RlZDg4YWVlMmE1ODE1N2ZmYTE4MTIwZTlmOTcwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCb0s/NPuW9e1/HN93sG3/FiN9n25/h6eaGTMor4cUKkY4y obHl4bpX4GP+hrxwpP+Aew3lXGD3zAm+Hroz8HcmHuMk7uVhZXuz/atpNjSbSghk QcGnPpjU2W32WL4GHTsDMTnVzk8ZQvTDlFRj3D0k2WejIsm7X/zRtcS/OAkmPGQE BH35y8TJ2iHV4etvdTnIbYR9sCqleSbz0hyI7mzzcO6cXj8aeij7a8AHDtbx1CgW qnA13FLQkqqtAFQbYBnrwKrX/whdGv3qykT7e5v+/+V/o2OGM/H+pyj3bYOCV998 Y27q8nxyy3zkZpzSpnAyiV4ToalkQnoTDf0gkzHBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUGIZ/hRRtu1uboOCnrCQDn0Vv+IUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzFjOTdiOTdlLTg2NjYtNGE0OS05ZDVhLTY1NTgwY2FhYjRhYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0fKEwDQYJKoZIhvcNAQELBQADggEBAB49hlWNUYs+n/PtgRmAVmXGvgo9 TSolx2mu44GhTPc5l4fsbYNeIaNwpp3cvtFgjUXwiDrjORID/YBnR9+S5bN6zqnM FpUbWB3YD5vTi3del/Ub4zOprCSslZ01WSGTIa2VRUTRqSD48rYwdHwNZfzoTQxt Dzem40cp0i2nONMirXx+g8doiW8gkH5OjgXnp9S9PEKpkXKscHkpDRYIrzV3Rfd2 1000XYVNZMFImjMtCgUQVvPehP6n80th4h+GofHla99wXKwzZ/pM6KMT2HBrZCRG xs7xTVdFpXZLQwtQRRxDZ63jx9eMOZlVKALPZBh2y7kCL9Cv1/ZQwpHHLns= -----END CERTIFICATE-----Generated at Mon Oct 20 08:30:35 2025 by rpki-client