$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/78cf9e65-7ef3-4341-9337-435d1b69cf74.roa File: 78cf9e65-7ef3-4341-9337-435d1b69cf74.roa (raw, json) Hash identifier: X5RZ4VTofUjydp/wFAJJF5cy5Pt2JPAaXumSeO4cJ1E= Subject key identifier: C5:07:EC:76:D3:EC:CA:63:16:60:01:10:47:29:CA:C1:35:BC:CA:5B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3DA97E32CA37F68E5BDAC39043181153070EE7E2 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/78cf9e65-7ef3-4341-9337-435d1b69cf74.roa Signing time: Sat 18 Oct 2025 16:21:25 +0000 ROA not before: Sat 18 Oct 2025 16:21:25 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.84.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:a9:7e:32:ca:37:f6:8e:5b:da:c3:90:43:18:11:53:07:0e:e7:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 16:21:25 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=9ad29d839b89d414af139ba69689b0521f12739764f8a5f85b5fabe51a0ff993, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:31:34:71:d1:09:c1:60:e1:1d:0e:3c:d8:95: 7c:b8:37:c6:e0:e0:96:2e:d6:ab:a0:8f:56:76:9c: e7:a0:1c:e9:59:31:83:50:d1:48:26:9f:7e:31:ff: 40:71:cd:3a:7a:93:13:4c:ef:e6:b2:b8:5f:e5:18: 4c:5c:0c:03:ca:15:e4:cd:c2:a0:63:f1:e8:59:d8: 25:26:32:b3:9a:af:40:32:5f:5d:9d:ff:9a:a7:0a: d2:6b:94:87:ed:91:0a:0e:33:d7:76:96:de:60:15: 6b:7f:20:9c:c9:a3:0b:b1:19:59:9b:72:79:5d:e2: c7:8d:87:8f:9b:a0:d0:3d:f5:da:d7:bd:f6:d8:ce: 13:2e:6f:6f:04:37:b8:9e:9e:3e:8c:d2:8e:8f:79: ad:be:5a:ff:1d:dc:31:98:48:c6:22:a3:16:09:bc: dc:6e:a1:6c:0c:cc:93:ee:92:34:18:2e:01:59:54: 04:b6:2b:2a:d0:d8:97:a1:38:c2:0b:ea:6c:b7:c2: d4:22:84:18:23:3f:fe:79:63:a5:76:8b:e5:55:58: 80:1b:6a:34:78:70:e1:54:9b:bb:e8:55:fa:d6:f7: e3:7e:72:1f:d7:4b:f1:65:65:ba:f1:c0:c9:27:53: c2:6c:a2:d4:51:e6:b3:53:99:3d:5d:0e:d2:93:2d: 9a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:07:EC:76:D3:EC:CA:63:16:60:01:10:47:29:CA:C1:35:BC:CA:5B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/78cf9e65-7ef3-4341-9337-435d1b69cf74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.84.110.0/24 Signature Algorithm: sha256WithRSAEncryption 09:fb:f3:81:6a:3c:81:de:4b:07:71:f4:d8:27:8e:a6:1d:92: d4:1d:10:5b:5a:ba:80:61:e0:97:26:42:df:51:0a:bc:b8:26: 6e:e8:5d:44:19:b7:31:fe:2a:eb:94:60:e2:5f:9f:4b:e3:2f: 42:45:f9:b9:62:29:cb:19:73:72:f4:e0:84:e0:7c:96:68:79: ea:14:d4:59:39:d9:34:5c:11:e6:c8:14:20:51:48:00:d5:79: 4e:fb:ee:5f:b5:ce:cc:53:2c:54:a9:f2:0a:17:9f:02:6d:5d: c7:85:0c:1a:05:19:3d:40:88:5d:0e:ab:5d:78:fc:dc:7b:c4: 76:41:26:69:66:9a:d8:44:14:a8:31:cc:d6:b5:4f:67:c5:f1: d0:cf:16:e7:45:00:02:a4:43:51:17:4f:f4:42:a5:3b:fc:48: 67:e7:28:47:6c:d5:61:65:81:d7:ea:d4:cd:08:3d:69:ec:ff: 55:da:b5:3d:f1:13:3c:dd:34:15:93:28:15:eb:4c:c8:64:4b: f6:2f:f6:01:5d:b3:26:0b:8b:06:8d:4c:55:15:7b:d9:f6:bb: 5d:67:99:41:96:d7:d6:6b:22:99:eb:d5:dc:fe:2a:8c:27:28: 3d:04:bc:a6:03:a6:1c:ca:70:89:41:7d:18:e4:a8:99:41:a0: e2:4b:50:5d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPal+Mso39o5b2sOQQxgRUwcO5+IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTYyMTI1WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A5YWQyOWQ4MzliODlkNDE0YWYxMzliYTY5Njg5YjA1MjFm MTI3Mzk3NjRmOGE1Zjg1YjVmYWJlNTFhMGZmOTkzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDOMTRx0QnBYOEdDjzYlXy4N8bg4JYu1qugj1Z2nOegHOlZ MYNQ0Ugmn34x/0BxzTp6kxNM7+ayuF/lGExcDAPKFeTNwqBj8ehZ2CUmMrOar0Ay X12d/5qnCtJrlIftkQoOM9d2lt5gFWt/IJzJowuxGVmbcnld4seNh4+boNA99drX vfbYzhMub28EN7ienj6M0o6Pea2+Wv8d3DGYSMYioxYJvNxuoWwMzJPukjQYLgFZ VAS2KyrQ2JehOMIL6my3wtQihBgjP/55Y6V2i+VVWIAbajR4cOFUm7voVfrW9+N+ ch/XS/FlZbrxwMknU8JsotRR5rNTmT1dDtKTLZr9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUxQfsdtPsymMWYAEQRynKwTW8ylswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzc4Y2Y5ZTY1LTdlZjMtNDM0MS05MzM3LTQzNWQxYjY5Y2Y3NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0VG4wDQYJKoZIhvcNAQELBQADggEBAAn784FqPIHeSwdx9NgnjqYdktQd EFtauoBh4JcmQt9RCry4Jm7oXUQZtzH+KuuUYOJfn0vjL0JF+bliKcsZc3L04ITg fJZoeeoU1Fk52TRcEebIFCBRSADVeU777l+1zsxTLFSp8goXnwJtXceFDBoFGT1A iF0Oq114/Nx7xHZBJmlmmthEFKgxzNa1T2fF8dDPFudFAAKkQ1EXT/RCpTv8SGfn KEds1WFlgdfq1M0IPWns/1XatT3xEzzdNBWTKBXrTMhkS/Yv9gFdsyYLiwaNTFUV e9n2u11nmUGW19ZrIpnr1dz+KownKD0EvKYDphzKcIlBfRjkqJlBoOJLUF0= -----END CERTIFICATE-----Generated at Mon Oct 20 08:42:00 2025 by rpki-client