$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/62a23281-baa5-4b30-aaf8-3b46a36220fe.roa File: 62a23281-baa5-4b30-aaf8-3b46a36220fe.roa (raw, json) Hash identifier: ETY0kMsETWtoM9dZrrq0DEnAYvLtrC2IcIjsl4y13YE= Subject key identifier: 1A:DA:D6:2C:21:F9:45:03:3B:9B:38:D3:68:39:25:90:7B:C4:1B:2D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2F6C6385FBA76C016EC9459451BBCD34286C9B16 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/62a23281-baa5-4b30-aaf8-3b46a36220fe.roa Signing time: Fri 17 Oct 2025 22:42:08 +0000 ROA not before: Fri 17 Oct 2025 22:42:08 +0000 ROA not after: Fri 21 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.240.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:6c:63:85:fb:a7:6c:01:6e:c9:45:94:51:bb:cd:34:28:6c:9b:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 17 22:42:08 2025 GMT Not After : Nov 21 23:59:59 2025 GMT Subject: serialNumber=a593455c16816a240c2fe2287eae8b866a748483612518c4f5b86f66441eb546, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:47:81:95:3b:05:6a:e8:ce:9d:6d:04:e8:59: 5b:cd:0b:46:01:f3:2a:c3:21:b6:27:0d:3c:e1:bb: dc:f2:f4:98:1a:a8:cf:31:3b:ad:c5:30:67:46:5b: 38:e2:8d:95:02:5a:85:21:48:92:09:e3:8c:c3:2d: 98:59:9f:7b:40:fb:b5:48:4d:d8:e7:b3:aa:f1:f6: 4e:52:76:2b:d6:07:06:1e:ce:4f:d8:6a:96:67:3e: 05:22:7c:97:75:ea:39:62:96:0d:cd:1b:17:68:a6: ea:33:bf:26:21:5d:3d:e6:d9:5f:87:9b:42:cf:64: a6:50:98:b7:bc:41:f3:ba:3c:11:85:b7:34:3c:50: 48:fe:2c:ca:66:07:cb:04:4d:8d:52:72:1e:89:23: 2d:37:f6:68:cb:23:2e:37:c6:7e:65:88:dd:4b:e6: 9a:0a:4d:1a:3c:ed:4e:63:e6:ea:c0:85:24:4a:24: 5d:00:d8:84:0f:a6:a3:33:67:c1:3a:0d:de:93:cf: 88:5e:8d:f2:10:cc:8e:24:9d:59:2e:8a:3f:70:e6: d1:e3:24:67:05:9c:4a:1e:68:17:af:ea:58:f5:11: 38:59:a8:c2:37:78:5e:ba:57:77:8d:5b:c6:a6:db: 24:2f:7c:c8:0e:9e:b4:a1:d8:90:c1:ae:57:33:19: 57:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:DA:D6:2C:21:F9:45:03:3B:9B:38:D3:68:39:25:90:7B:C4:1B:2D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/62a23281-baa5-4b30-aaf8-3b46a36220fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.240.136.0/22 Signature Algorithm: sha256WithRSAEncryption 68:ef:9e:9b:e7:e9:5e:1c:b0:40:63:8d:0f:0e:32:a9:d3:e3: 49:12:58:9e:a2:64:5b:99:ec:81:ea:66:f6:8f:a2:1a:01:a9: b6:f4:18:c5:4e:1e:cf:01:d6:41:3d:65:96:bd:5a:41:b3:71: 6b:65:25:87:1d:c8:a3:42:33:52:b4:3a:04:fa:e2:5a:68:99: 55:8a:31:9e:64:b0:8e:1d:33:16:a8:ec:a9:d2:32:65:4e:70: b4:99:a0:4a:39:8d:70:d9:f6:0a:9d:2f:73:61:72:00:a0:53: 75:33:a6:a7:78:42:06:b8:91:e6:dc:cb:49:c2:5e:3f:6a:f3: 50:32:21:6f:24:d0:25:55:53:36:36:4a:d6:f8:e1:39:8d:49: 3b:d0:d7:e9:8f:83:39:1b:fc:d7:dd:49:d6:b6:37:26:ec:77: e7:35:77:0b:ae:83:c5:41:5e:ac:27:df:f6:f3:dc:16:dc:29: cd:47:cd:eb:ec:e3:5c:e2:1c:db:db:4d:ce:a1:e5:40:2a:52: d1:1b:c0:e4:fe:c4:73:ee:10:1c:d3:48:7f:10:4c:1d:1b:da: 24:8c:73:33:58:01:8c:f6:cc:77:83:fc:1a:22:d6:e1:f6:79: ae:7f:48:18:db:37:20:07:c4:a6:e9:cc:09:0e:e0:eb:4d:d9: 43:4f:0f:0d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUL2xjhfunbAFuyUWUUbvNNChsmxYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE3MjI0MjA4WhcNMjUxMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BhNTkzNDU1YzE2ODE2YTI0MGMyZmUyMjg3ZWFlOGI4NjZh NzQ4NDgzNjEyNTE4YzRmNWI4NmY2NjQ0MWViNTQ2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKR4GVOwVq6M6dbQToWVvNC0YB8yrDIbYnDTzhu9zy9Jga qM8xO63FMGdGWzjijZUCWoUhSJIJ44zDLZhZn3tA+7VITdjns6rx9k5SdivWBwYe zk/YapZnPgUifJd16jlilg3NGxdopuozvyYhXT3m2V+Hm0LPZKZQmLe8QfO6PBGF tzQ8UEj+LMpmB8sETY1Sch6JIy039mjLIy43xn5liN1L5poKTRo87U5j5urAhSRK JF0A2IQPpqMzZ8E6Dd6Tz4hejfIQzI4knVkuij9w5tHjJGcFnEoeaBev6lj1EThZ qMI3eF66V3eNW8am2yQvfMgOnrSh2JDBrlczGVdjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUGtrWLCH5RQM7mzjTaDklkHvEGy0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzYyYTIzMjgxLWJhYTUtNGIzMC1hYWY4LTNiNDZhMzYyMjBmZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI28IgwDQYJKoZIhvcNAQELBQADggEBAGjvnpvn6V4csEBjjQ8OMqnT40kS WJ6iZFuZ7IHqZvaPohoBqbb0GMVOHs8B1kE9ZZa9WkGzcWtlJYcdyKNCM1K0OgT6 4lpomVWKMZ5ksI4dMxao7KnSMmVOcLSZoEo5jXDZ9gqdL3NhcgCgU3Uzpqd4Qga4 kebcy0nCXj9q81AyIW8k0CVVUzY2Stb44TmNSTvQ1+mPgzkb/NfdSda2Nybsd+c1 dwuug8VBXqwn3/bz3BbcKc1Hzevs41ziHNvbTc6h5UAqUtEbwOT+xHPuEBzTSH8Q TB0b2iSMczNYAYz2zHeD/Boi1uH2ea5/SBjbNyAHxKbpzAkO4OtN2UNPDw0= -----END CERTIFICATE-----Generated at Mon Oct 20 08:42:07 2025 by rpki-client