$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7c9642f8-716c-4219-8e11-28b00983bfb8.roa File: 7c9642f8-716c-4219-8e11-28b00983bfb8.roa (raw, json) Hash identifier: oy3xspsKm9OMeKHuzmyj0J6LwBCPiLlylmjk+aZXM34= Subject key identifier: 79:46:C8:E2:F7:7F:D8:2A:CC:4E:A2:47:91:72:C3:43:B5:70:BA:8B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0B38528E416E68EDE5FC7223F9AADAA7A329D689 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7c9642f8-716c-4219-8e11-28b00983bfb8.roa Signing time: Sat 18 Oct 2025 09:21:32 +0000 ROA not before: Sat 18 Oct 2025 09:21:32 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.85.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:38:52:8e:41:6e:68:ed:e5:fc:72:23:f9:aa:da:a7:a3:29:d6:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 09:21:32 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=7cf74dbf03d9a384b317a3d2337ceb714b2f94a3515918d6ad2869f71ce29d82, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:bc:81:bb:f3:62:40:22:4b:04:1d:39:d5:f9: 61:23:17:c6:bd:b6:67:70:28:63:e7:18:ec:a7:66: cc:ba:21:39:cd:ba:6e:09:d4:0c:02:2c:dd:e6:ec: fb:a8:1f:a6:43:c6:fe:d3:23:77:78:67:e6:a2:0e: 7a:eb:e6:40:a5:c3:c2:ea:ee:50:f5:28:6e:03:7f: ad:10:ec:38:ac:28:2b:d8:69:13:a1:fd:70:c6:88: ce:fb:33:90:c5:c3:48:73:5c:93:bb:44:f0:e0:6c: 41:9b:8f:9a:b3:8c:1d:d2:38:b8:1c:39:d4:8f:f9: b4:22:57:a1:eb:79:35:03:90:48:84:10:18:ed:73: d0:f8:13:72:9e:b7:28:17:ed:86:c0:17:a6:6c:90: 97:a6:1c:27:86:e3:e5:be:02:c9:74:ee:bf:ee:d7: 88:10:e3:39:fd:ad:71:2f:44:3f:e6:2f:b1:ac:3d: b4:5a:2e:30:11:15:c4:47:3b:8a:20:45:5f:17:12: 13:a1:e1:02:e0:64:7a:b3:22:8a:be:58:f3:68:54: 4c:dc:ef:83:b2:1a:01:f8:80:78:d4:78:31:d5:4f: ad:ed:be:52:7a:73:7d:2d:f9:95:c2:69:8c:1b:75: 65:82:ca:bb:90:a7:fb:aa:00:91:f2:55:e0:96:17: 92:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:46:C8:E2:F7:7F:D8:2A:CC:4E:A2:47:91:72:C3:43:B5:70:BA:8B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7c9642f8-716c-4219-8e11-28b00983bfb8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.85.104.0/24 Signature Algorithm: sha256WithRSAEncryption 97:52:45:f9:0a:ad:58:b7:68:52:6d:a4:63:fe:d5:86:c5:6d: c8:b3:c3:d9:05:59:a0:27:d9:f4:44:6f:4c:78:55:e7:55:0d: 54:27:81:51:3a:1f:65:ef:16:59:a1:ca:7d:fb:da:64:2b:dc: 95:ef:07:a7:f9:22:51:82:5f:d9:89:fe:fe:3d:88:b1:73:03: 7c:c1:3d:ff:ef:ba:54:5b:eb:9b:79:c9:37:bc:1d:ab:71:dc: b8:b4:99:40:ae:8a:eb:0e:03:a9:2b:2d:17:80:4e:34:23:66: 61:ae:f7:ad:3b:87:77:36:8e:c7:5d:99:53:bd:b8:3d:56:28: a8:66:e6:61:55:2a:e5:f6:5e:12:a6:a7:78:fd:4c:bf:ab:f3: 85:b1:07:2f:27:11:5c:a4:4c:c5:36:e5:3e:56:42:f0:41:8e: 62:37:98:8c:d7:03:07:22:6a:ac:d9:04:03:06:38:28:7b:d5: 30:2d:9b:6d:54:52:82:44:ef:86:46:d4:86:92:f0:cb:87:f9: 40:46:12:ff:9a:48:d7:cd:31:e5:01:96:0a:06:53:5a:05:d7: 0d:27:d8:84:f1:54:0a:a7:3d:39:45:0c:70:66:1d:35:fc:e2: e5:4c:01:fc:49:76:33:47:82:29:00:dc:46:8d:47:d7:04:30: 28:66:bf:7e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCzhSjkFuaO3l/HIj+arap6Mp1okwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MDkyMTMyWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A3Y2Y3NGRiZjAzZDlhMzg0YjMxN2EzZDIzMzdjZWI3MTRi MmY5NGEzNTE1OTE4ZDZhZDI4NjlmNzFjZTI5ZDgyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpvIG782JAIksEHTnV+WEjF8a9tmdwKGPnGOynZsy6ITnN um4J1AwCLN3m7PuoH6ZDxv7TI3d4Z+aiDnrr5kClw8Lq7lD1KG4Df60Q7DisKCvY aROh/XDGiM77M5DFw0hzXJO7RPDgbEGbj5qzjB3SOLgcOdSP+bQiV6HreTUDkEiE EBjtc9D4E3KetygX7YbAF6ZskJemHCeG4+W+Asl07r/u14gQ4zn9rXEvRD/mL7Gs PbRaLjARFcRHO4ogRV8XEhOh4QLgZHqzIoq+WPNoVEzc74OyGgH4gHjUeDHVT63t vlJ6c30t+ZXCaYwbdWWCyruQp/uqAJHyVeCWF5IHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUeUbI4vd/2CrMTqJHkXLDQ7VwuoswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzdjOTY0MmY4LTcxNmMtNDIxOS04ZTExLTI4YjAwOTgzYmZiOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0VWgwDQYJKoZIhvcNAQELBQADggEBAJdSRfkKrVi3aFJtpGP+1YbFbciz w9kFWaAn2fREb0x4VedVDVQngVE6H2XvFlmhyn372mQr3JXvB6f5IlGCX9mJ/v49 iLFzA3zBPf/vulRb65t5yTe8Hatx3Li0mUCuiusOA6krLReATjQjZmGu9607h3c2 jsddmVO9uD1WKKhm5mFVKuX2XhKmp3j9TL+r84WxBy8nEVykTMU25T5WQvBBjmI3 mIzXAwciaqzZBAMGOCh71TAtm21UUoJE74ZG1IaS8MuH+UBGEv+aSNfNMeUBlgoG U1oF1w0n2ITxVAqnPTlFDHBmHTX84uVMAfxJdjNHgikA3EaNR9cEMChmv34= -----END CERTIFICATE-----Generated at Mon Oct 20 06:06:53 2025 by rpki-client