$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/24c1eafb-745b-4086-afde-3f1827ef7245.roa File: 24c1eafb-745b-4086-afde-3f1827ef7245.roa (raw, json) Hash identifier: Tl4edEjyDtLSGlBC8+AUKdTlN3EbxvEe2SXVOrjWvFQ= Subject key identifier: 69:D9:E3:CA:C7:1D:E0:13:99:DC:0E:9B:8A:CE:66:C3:2B:9B:C2:C2 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3355194D6D10EEB5ABAD03203247315B4AAB32DE Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/24c1eafb-745b-4086-afde-3f1827ef7245.roa Signing time: Thu 16 Oct 2025 17:05:01 +0000 ROA not before: Thu 16 Oct 2025 17:05:01 +0000 ROA not after: Thu 20 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.124.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:55:19:4d:6d:10:ee:b5:ab:ad:03:20:32:47:31:5b:4a:ab:32:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 16 17:05:01 2025 GMT Not After : Nov 20 23:59:59 2025 GMT Subject: serialNumber=bde15d76c956ece73dce19f997fb450a4450a8159425167825bbf72f81e2b903, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b5:bb:95:2b:b9:77:18:89:a1:f3:98:1f:e7: 93:52:4c:f2:26:88:66:e0:d0:9c:eb:77:c7:83:4d: 83:7a:0c:48:e7:e9:3c:77:3f:c8:a8:9d:db:7f:6b: a7:2b:49:c5:f7:bd:f2:e8:f8:f8:07:61:9a:3a:0f: 37:50:f6:a5:27:32:3c:24:b8:7c:fa:5e:7b:63:27: 16:2c:64:b0:de:a4:6b:9d:e9:e6:d7:21:5f:56:d8: f1:be:e0:d9:2d:35:f0:18:51:a7:e5:11:be:b3:57: 6b:29:76:fb:df:a0:13:1b:5a:0e:76:81:91:86:34: 91:92:7a:5f:59:1b:13:ef:44:9f:a8:87:c6:58:30: dd:6c:3b:8c:39:aa:44:0b:75:ac:31:0e:31:f6:90: 56:42:1f:90:08:58:23:21:89:8c:df:b7:e8:9c:a4: 1f:69:8a:34:f8:e6:04:e4:e9:5b:86:0e:83:c1:fe: 88:26:79:8a:2f:00:94:35:11:c1:88:0b:e6:94:67: 69:7c:4c:9f:70:4c:8e:a3:b2:a5:01:e9:8b:26:9a: ba:8e:d3:62:cc:65:a6:78:8f:e5:9e:71:00:59:bd: 8a:10:fe:b6:c4:c3:fb:71:99:c7:65:5a:49:bb:e9: f2:5c:59:cf:98:2e:7b:1e:e2:b7:8a:9f:e7:6e:7d: dd:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:D9:E3:CA:C7:1D:E0:13:99:DC:0E:9B:8A:CE:66:C3:2B:9B:C2:C2 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/24c1eafb-745b-4086-afde-3f1827ef7245.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.124.247.0/24 Signature Algorithm: sha256WithRSAEncryption 77:4f:1a:b1:6d:09:76:51:d1:8d:44:22:27:04:ae:c3:d3:fc: cc:39:fc:35:63:3b:b0:6a:17:5e:8d:29:80:5e:38:91:45:39: 0a:63:d2:57:11:9e:81:5e:26:7c:ff:27:f8:de:ea:cb:ea:1d: af:96:b1:c6:68:e8:75:cf:83:49:0a:be:98:ff:09:fd:1b:e8: cf:72:ae:4e:4b:8c:38:2f:31:8e:12:50:6d:10:72:a5:d6:f0: 10:7d:79:62:45:a2:82:b8:4c:f2:4a:87:83:4b:a2:5c:67:3d: 97:05:37:5e:0c:f0:e4:be:88:dc:30:99:17:b8:a1:2e:cd:bd: a9:ba:05:53:3f:c9:9f:94:ba:cd:c0:eb:6c:17:e0:ed:47:f6: ec:24:88:0f:e7:e1:38:66:ce:f1:4b:1c:88:e4:73:b9:47:13: 26:1e:28:e8:58:6b:89:f6:e6:8f:4c:fa:cb:5c:42:2d:c0:6d: 95:64:ec:df:0a:fe:71:64:29:65:5b:31:c4:2f:6c:73:4f:f9: c0:aa:f1:76:98:b8:15:dc:a0:2b:2c:8d:3b:b7:32:10:22:21: 53:6b:bc:50:a5:05:71:9f:b8:e1:dc:b8:e6:42:59:81:97:2e: d4:07:bc:dd:82:cf:2c:1c:ee:c6:c0:2c:30:6a:6c:03:9c:3d: c7:67:74:42 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUM1UZTW0Q7rWrrQMgMkcxW0qrMt4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE2MTcwNTAxWhcNMjUxMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BiZGUxNWQ3NmM5NTZlY2U3M2RjZTE5Zjk5N2ZiNDUwYTQ0 NTBhODE1OTQyNTE2NzgyNWJiZjcyZjgxZTJiOTAzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvtbuVK7l3GImh85gf55NSTPImiGbg0Jzrd8eDTYN6DEjn 6Tx3P8iondt/a6crScX3vfLo+PgHYZo6DzdQ9qUnMjwkuHz6XntjJxYsZLDepGud 6ebXIV9W2PG+4NktNfAYUaflEb6zV2spdvvfoBMbWg52gZGGNJGSel9ZGxPvRJ+o h8ZYMN1sO4w5qkQLdawxDjH2kFZCH5AIWCMhiYzft+icpB9pijT45gTk6VuGDoPB /ogmeYovAJQ1EcGIC+aUZ2l8TJ9wTI6jsqUB6YsmmrqO02LMZaZ4j+WecQBZvYoQ /rbEw/txmcdlWkm76fJcWc+YLnse4reKn+dufd07AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUadnjyscd4BOZ3A6bis5mwyubwsIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzI0YzFlYWZiLTc0NWItNDA4Ni1hZmRlLTNmMTgyN2VmNzI0NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0fPcwDQYJKoZIhvcNAQELBQADggEBAHdPGrFtCXZR0Y1EIicErsPT/Mw5 /DVjO7BqF16NKYBeOJFFOQpj0lcRnoFeJnz/J/je6svqHa+WscZo6HXPg0kKvpj/ Cf0b6M9yrk5LjDgvMY4SUG0QcqXW8BB9eWJFooK4TPJKh4NLolxnPZcFN14M8OS+ iNwwmRe4oS7Nvam6BVM/yZ+Uus3A62wX4O1H9uwkiA/n4ThmzvFLHIjkc7lHEyYe KOhYa4n25o9M+stcQi3AbZVk7N8K/nFkKWVbMcQvbHNP+cCq8XaYuBXcoCssjTu3 MhAiIVNrvFClBXGfuOHcuOZCWYGXLtQHvN2Czywc7sbALDBqbAOcPcdndEI= -----END CERTIFICATE-----Generated at Mon Oct 20 06:11:29 2025 by rpki-client