$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/571c0f3f-faa7-4497-860f-8c58f4216d4c.roa File: 571c0f3f-faa7-4497-860f-8c58f4216d4c.roa (raw, json) Hash identifier: /pl+ypPT66GtJ4FVL8nkiyjVFLzZ2JGbwS1mWI6q8mM= Subject key identifier: 38:E3:8D:C9:59:E5:F0:EA:78:85:BD:16:2B:E9:F2:AE:5D:F8:FE:71 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3704217A96459AE4A9C3367C42DB4C7D14886EDE Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/571c0f3f-faa7-4497-860f-8c58f4216d4c.roa Signing time: Sat 18 Oct 2025 10:41:28 +0000 ROA not before: Sat 18 Oct 2025 10:41:28 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.84.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:04:21:7a:96:45:9a:e4:a9:c3:36:7c:42:db:4c:7d:14:88:6e:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 10:41:28 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=6594e921651744adec9b55f4fcd1ea93ba98998738f3e30cb75a6ebb4dab97cc, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c3:d2:2a:c5:74:f6:c1:5e:ba:77:57:f1:b3: 1c:62:78:eb:e7:10:4b:ce:04:2c:72:9e:89:e5:b5: 5b:c0:32:3e:1a:ec:39:d3:51:8c:60:ee:1c:62:c8: f9:47:71:f3:f7:3e:50:61:a5:1f:a4:30:4d:39:56: 86:6e:5a:a6:b3:40:8e:bc:9a:b2:c0:db:01:e5:69: 42:43:f6:04:ba:d4:06:8f:b6:30:65:df:ea:2c:7d: 86:61:f9:99:93:8c:c4:02:de:e6:23:1e:0c:f8:bc: a0:e1:1e:e0:45:60:51:9e:d1:bf:5c:33:7d:35:d3: 8a:31:9e:c8:64:04:67:85:b1:b5:dd:2b:82:0e:d8: 7f:e4:3a:ba:0a:62:fd:0e:d0:42:85:40:3c:23:ac: c6:98:a9:7a:48:08:7e:77:fe:eb:a0:8a:f4:5c:47: 76:02:bd:11:67:3b:14:a7:38:13:86:e6:2b:98:5d: d2:15:29:ea:a8:64:46:e4:ff:fe:fd:e5:9b:2d:7a: 9f:25:8f:c4:05:fb:24:49:d3:54:75:9d:03:d9:84: e7:93:4c:9c:34:78:65:b4:7e:4a:72:30:3b:a5:da: 82:ae:3e:07:f1:31:fa:35:86:69:0c:44:14:60:8d: 71:f8:05:1e:2c:7b:58:00:64:3e:2d:b5:9f:9a:f2: 58:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:E3:8D:C9:59:E5:F0:EA:78:85:BD:16:2B:E9:F2:AE:5D:F8:FE:71 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/571c0f3f-faa7-4497-860f-8c58f4216d4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.84.239.0/24 Signature Algorithm: sha256WithRSAEncryption 41:dc:8b:1b:d9:2e:fe:54:7a:93:f9:12:eb:b6:47:3f:93:ad: ce:99:bb:cb:e7:f4:2d:94:3f:6e:23:6b:d9:ba:f8:52:b6:c7: dd:98:33:ff:a1:65:60:4e:63:73:45:dc:60:f0:0f:9b:c3:70: c7:26:68:a6:5f:b4:18:d3:df:b5:47:9d:5a:b1:5c:1c:34:83: 93:3f:f3:e7:d5:c2:4a:41:43:b6:fd:fe:2c:a8:b0:b8:3b:61: 5d:eb:8b:67:ac:11:26:c8:32:91:a6:b6:25:9c:b5:36:ec:a5: 67:36:38:1d:23:9d:a1:44:ed:9c:d4:c1:2e:8b:5c:80:97:f3: ae:12:12:a9:ef:6b:0d:5a:30:a1:39:c2:2b:ed:dc:44:05:9a: 99:dc:f7:6f:87:86:09:22:b7:a0:5f:ad:09:6e:bb:1e:77:12: dd:22:fc:0d:4c:f5:1b:63:0f:37:df:a1:22:2b:2a:a9:c8:12: de:56:fd:d0:39:31:da:83:95:40:f8:fc:c1:10:e9:fc:b2:39: ce:5e:25:22:b7:a7:09:0a:05:1b:50:25:2a:1f:2e:f5:fb:51: 74:1c:be:44:0a:24:0b:ba:42:8b:75:44:ea:9b:46:1e:f0:fe: 7f:44:8c:93:62:60:5f:1f:b4:c9:45:88:c0:09:cb:5a:e9:7a: 66:28:7c:f2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNwQhepZFmuSpwzZ8QttMfRSIbt4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTA0MTI4WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A2NTk0ZTkyMTY1MTc0NGFkZWM5YjU1ZjRmY2QxZWE5M2Jh OTg5OTg3MzhmM2UzMGNiNzVhNmViYjRkYWI5N2NjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCew9IqxXT2wV66d1fxsxxieOvnEEvOBCxynonltVvAMj4a 7DnTUYxg7hxiyPlHcfP3PlBhpR+kME05VoZuWqazQI68mrLA2wHlaUJD9gS61AaP tjBl3+osfYZh+ZmTjMQC3uYjHgz4vKDhHuBFYFGe0b9cM30104oxnshkBGeFsbXd K4IO2H/kOroKYv0O0EKFQDwjrMaYqXpICH53/uugivRcR3YCvRFnOxSnOBOG5iuY XdIVKeqoZEbk//795Zstep8lj8QF+yRJ01R1nQPZhOeTTJw0eGW0fkpyMDul2oKu PgfxMfo1hmkMRBRgjXH4BR4se1gAZD4ttZ+a8ljtAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUOOONyVnl8Op4hb0WK+nyrl34/nEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzU3MWMwZjNmLWZhYTctNDQ5Ny04NjBmLThjNThmNDIxNmQ0Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0VO8wDQYJKoZIhvcNAQELBQADggEBAEHcixvZLv5UepP5Euu2Rz+Trc6Z u8vn9C2UP24ja9m6+FK2x92YM/+hZWBOY3NF3GDwD5vDcMcmaKZftBjT37VHnVqx XBw0g5M/8+fVwkpBQ7b9/iyosLg7YV3ri2esESbIMpGmtiWctTbspWc2OB0jnaFE 7ZzUwS6LXICX864SEqnvaw1aMKE5wivt3EQFmpnc92+Hhgkit6BfrQluux53Et0i /A1M9RtjDzffoSIrKqnIEt5W/dA5MdqDlUD4/MEQ6fyyOc5eJSK3pwkKBRtQJSof LvX7UXQcvkQKJAu6Qot1ROqbRh7w/n9EjJNiYF8ftMlFiMAJy1rpemYofPI= -----END CERTIFICATE-----Generated at Mon Oct 20 11:10:36 2025 by rpki-client