$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4c3b466a-3f3c-4ed2-a380-4f7a75262461.roa File: 4c3b466a-3f3c-4ed2-a380-4f7a75262461.roa (raw, json) Hash identifier: dg6b+WrYd4WZsycMhlFBiBWdPjPzmM0d6WkkL8CjGbw= Subject key identifier: E3:56:19:E4:1D:50:79:5C:BD:46:BB:B6:B5:C9:CF:78:9D:CD:EF:3A Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7B2956F5E7C3FE3C4B52B93B269E0D2E0EE4CA68 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4c3b466a-3f3c-4ed2-a380-4f7a75262461.roa Signing time: Sun 19 Oct 2025 06:01:15 +0000 ROA not before: Sun 19 Oct 2025 06:01:15 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.84.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:29:56:f5:e7:c3:fe:3c:4b:52:b9:3b:26:9e:0d:2e:0e:e4:ca:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 06:01:15 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=55dfe54413a3b377cadc6b2fe422c749d52d1cea31e2e123856df85be4444953, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b9:d8:f8:cc:81:5d:58:14:d7:f0:29:b2:70: e6:5f:0b:53:7d:3a:f7:4f:47:0f:37:a0:92:37:ae: ee:95:56:0c:be:4c:03:b4:60:66:95:70:97:ba:76: f6:4d:6f:91:b2:cc:04:f9:7c:00:c0:af:9e:17:fe: 79:53:98:d6:98:da:e4:f2:a7:15:13:2b:13:29:d0: 0a:d0:f5:c2:42:ac:71:05:d8:ff:9e:0d:44:3b:76: 5e:1b:57:cf:c3:61:e4:0d:dc:13:59:87:3c:c6:65: 42:92:82:a0:b8:3b:8e:6b:71:4e:2f:e1:e3:d3:ec: 38:44:c0:c1:23:cf:43:57:33:77:45:73:01:68:5d: 4f:e0:7a:58:d9:d5:99:aa:b9:1b:a7:16:da:ad:75: 7c:d2:68:cc:4e:55:0d:62:69:4f:0d:70:71:c9:bf: e9:ff:82:60:8f:31:55:08:a3:b8:95:40:e4:b8:89: 23:4a:41:c8:c2:2e:d7:50:1f:91:ca:0b:22:f4:07: 44:8c:ed:65:32:63:13:fa:35:a0:53:66:b9:43:cc: 1e:48:a9:79:d5:57:d4:8b:30:2b:64:ba:dd:ed:18: 6b:32:7b:47:f6:cf:e3:fe:73:a0:00:7d:02:9c:76: cd:23:77:23:95:35:eb:d5:59:0a:23:30:56:db:ba: 5e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:56:19:E4:1D:50:79:5C:BD:46:BB:B6:B5:C9:CF:78:9D:CD:EF:3A X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4c3b466a-3f3c-4ed2-a380-4f7a75262461.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.84.144.0/20 Signature Algorithm: sha256WithRSAEncryption af:4d:0d:2e:ef:d7:91:69:b1:e7:75:a8:49:f1:36:5f:23:72: c7:1e:11:b3:30:0b:92:45:ff:3a:cf:bf:1b:ab:8d:b3:63:39: 3a:fd:73:62:b1:b3:4a:54:78:5f:61:a2:2b:d3:0b:ee:4c:a1: 1a:f5:6b:3b:ac:b0:ac:7e:16:fc:0a:25:2a:a4:48:c9:38:89: da:ad:35:2d:10:40:27:36:6c:e1:84:01:83:23:dc:0a:22:0b: 11:5a:40:54:ad:c0:0b:d0:3c:b8:b1:57:63:c5:3a:81:73:26: 5e:42:a4:ce:42:f1:fa:69:78:78:26:26:80:4a:26:3a:d6:99: a6:9d:7b:9d:a7:13:d8:85:97:78:f5:fa:67:c1:2f:63:71:e1: 9c:f2:9c:64:f3:9f:57:bd:59:56:d8:db:7d:1e:cd:a1:36:22: 87:36:af:2d:50:ed:95:d4:af:4f:1d:2a:d4:79:b8:d4:66:03: ab:81:0d:2c:a6:57:40:42:17:cd:79:e7:29:ee:e5:05:b0:c5: 4a:2e:40:31:41:d3:a9:14:11:fa:94:8f:65:eb:86:68:a3:93: 6c:df:1b:ab:0d:9b:4b:0a:2a:06:cc:29:8c:7e:1f:bf:3e:40: 72:60:f4:52:2e:e2:db:db:9a:83:9b:40:fc:3d:16:d9:82:d9: f3:47:53:03 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUeylW9efD/jxLUrk7Jp4NLg7kymgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MDYwMTE1WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A1NWRmZTU0NDEzYTNiMzc3Y2FkYzZiMmZlNDIyYzc0OWQ1 MmQxY2VhMzFlMmUxMjM4NTZkZjg1YmU0NDQ0OTUzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCfudj4zIFdWBTX8CmycOZfC1N9OvdPRw83oJI3ru6VVgy+ TAO0YGaVcJe6dvZNb5GyzAT5fADAr54X/nlTmNaY2uTypxUTKxMp0ArQ9cJCrHEF 2P+eDUQ7dl4bV8/DYeQN3BNZhzzGZUKSgqC4O45rcU4v4ePT7DhEwMEjz0NXM3dF cwFoXU/geljZ1ZmquRunFtqtdXzSaMxOVQ1iaU8NcHHJv+n/gmCPMVUIo7iVQOS4 iSNKQcjCLtdQH5HKCyL0B0SM7WUyYxP6NaBTZrlDzB5IqXnVV9SLMCtkut3tGGsy e0f2z+P+c6AAfQKcds0jdyOVNevVWQojMFbbul6PAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU41YZ5B1QeVy9Rru2tcnPeJ3N7zowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzRjM2I0NjZhLTNmM2MtNGVkMi1hMzgwLTRmN2E3NTI2MjQ2MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQ0VJAwDQYJKoZIhvcNAQELBQADggEBAK9NDS7v15Fpsed1qEnxNl8jcsce EbMwC5JF/zrPvxurjbNjOTr9c2Kxs0pUeF9hoivTC+5MoRr1azussKx+FvwKJSqk SMk4idqtNS0QQCc2bOGEAYMj3AoiCxFaQFStwAvQPLixV2PFOoFzJl5CpM5C8fpp eHgmJoBKJjrWmaade52nE9iFl3j1+mfBL2Nx4ZzynGTzn1e9WVbY230ezaE2Ioc2 ry1Q7ZXUr08dKtR5uNRmA6uBDSymV0BCF8155ynu5QWwxUouQDFB06kUEfqUj2Xr hmijk2zfG6sNm0sKKgbMKYx+H78+QHJg9FIu4tvbmoObQPw9FtmC2fNHUwM= -----END CERTIFICATE-----Generated at Mon Oct 20 15:46:39 2025 by rpki-client