$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/822822f4-d715-4c1a-aac4-f40ff89dd609.roa File: 822822f4-d715-4c1a-aac4-f40ff89dd609.roa (raw, json) Hash identifier: gkezB8vxnFE7p5nDo1lsVn+OVmPh99+Koj9106HN9p8= Subject key identifier: C0:F6:26:BF:58:32:53:D3:2C:D8:81:9B:E0:AB:AD:4C:CD:54:5E:B4 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3A456A315A77B3F4FE25C27CF704E9676ED46F6C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/822822f4-d715-4c1a-aac4-f40ff89dd609.roa Signing time: Fri 17 Oct 2025 23:40:13 +0000 ROA not before: Fri 17 Oct 2025 23:40:13 +0000 ROA not after: Fri 21 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.207.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:45:6a:31:5a:77:b3:f4:fe:25:c2:7c:f7:04:e9:67:6e:d4:6f:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 17 23:40:13 2025 GMT Not After : Nov 21 23:59:59 2025 GMT Subject: serialNumber=729369d142845b079d8f94ddfee2f65c8faaae57ba7b6238c31f1962b355e32e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:15:4f:25:5e:51:15:41:bd:81:23:a3:29:ed: de:3e:ad:c2:11:f5:f5:7e:f2:44:6e:23:a1:73:fa: 1c:ad:40:ca:22:93:f9:ee:06:13:e1:20:0d:5a:ac: 4f:2a:70:e0:18:3d:87:1f:60:c8:14:17:24:7b:af: 73:b0:83:a4:3f:d4:5a:5e:75:09:eb:2a:44:03:61: 95:01:63:87:6b:01:23:8f:f0:a7:12:1e:8f:68:67: 9e:07:e5:b4:8c:ee:72:ee:f2:d5:77:23:44:49:5a: 5e:1d:2e:45:d4:df:9a:db:fd:1c:1e:37:8b:08:ae: f1:ff:d4:d4:e5:7f:0f:da:c3:35:5c:6e:a7:85:8f: c7:32:01:b9:f4:91:fd:2b:52:04:ff:2c:ac:5f:1f: 4f:14:43:38:47:f7:c1:b1:e6:ed:6f:56:88:76:3b: a9:60:b3:76:58:84:c7:4c:5d:a6:39:b3:b0:73:f5: b6:1e:6c:68:de:c9:66:4e:9c:17:6a:33:08:2d:98: 6d:b4:0c:3c:64:fc:1e:89:85:aa:de:d9:27:81:be: b6:ca:4a:2c:7d:24:7f:5f:ea:48:37:72:89:84:b3: ef:f5:bc:57:0b:db:3d:d9:98:a3:33:75:bc:c6:6e: 96:b6:cc:f0:b1:ce:45:33:5f:3c:b2:db:2b:a9:69: 8c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:F6:26:BF:58:32:53:D3:2C:D8:81:9B:E0:AB:AD:4C:CD:54:5E:B4 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/822822f4-d715-4c1a-aac4-f40ff89dd609.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.207.248.0/22 Signature Algorithm: sha256WithRSAEncryption 32:ef:db:09:98:62:83:d3:5c:9e:fc:48:f1:f2:bf:ea:2b:7f: 76:a9:67:71:19:33:13:35:02:30:73:0c:f7:9f:b3:9e:f1:65: f6:ee:c2:54:7f:89:db:15:e5:59:22:62:24:7a:b4:f1:c3:c1: d6:8c:ca:1c:a4:5b:cb:46:b1:22:71:7e:ef:a9:f1:40:0b:fc: cd:45:b5:87:d2:15:36:cf:87:13:7f:aa:61:6b:1a:93:a6:c5: 9e:56:89:7c:86:de:5c:17:e6:9d:da:7a:55:7e:ed:f9:83:e2: ec:14:3a:b0:8d:de:ef:c2:3d:a7:00:d4:7b:61:45:2a:d7:61: f4:92:a0:76:10:fe:c8:78:08:36:70:b0:8a:3c:02:61:d7:bd: f5:bc:58:fc:4e:78:c0:e7:1b:73:b6:12:a1:4c:d6:cc:ad:3f: 13:46:d4:2b:b7:fb:35:8e:d5:49:9e:2a:a9:58:9c:3d:5e:81: 1f:d6:c7:e9:7f:f0:15:a5:f6:3b:f1:03:42:95:48:af:ae:e1: a6:0d:dc:0d:00:91:50:e1:3f:7d:bd:b5:5b:f6:ae:c3:a9:0f: 63:15:bd:69:a6:72:fe:a3:61:1e:16:58:3b:12:ce:1a:a3:d6: 79:2f:98:5f:09:df:a7:c8:bf:5e:c8:e5:e4:8b:e6:b9:07:22: 7e:6e:6b:6c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOkVqMVp3s/T+JcJ89wTpZ27Ub2wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE3MjM0MDEzWhcNMjUxMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A3MjkzNjlkMTQyODQ1YjA3OWQ4Zjk0ZGRmZWUyZjY1Yzhm YWFhZTU3YmE3YjYyMzhjMzFmMTk2MmIzNTVlMzJlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvFU8lXlEVQb2BI6Mp7d4+rcIR9fV+8kRuI6Fz+hytQMoi k/nuBhPhIA1arE8qcOAYPYcfYMgUFyR7r3Owg6Q/1FpedQnrKkQDYZUBY4drASOP 8KcSHo9oZ54H5bSM7nLu8tV3I0RJWl4dLkXU35rb/RweN4sIrvH/1NTlfw/awzVc bqeFj8cyAbn0kf0rUgT/LKxfH08UQzhH98Gx5u1vVoh2O6lgs3ZYhMdMXaY5s7Bz 9bYebGjeyWZOnBdqMwgtmG20DDxk/B6Jhare2SeBvrbKSix9JH9f6kg3comEs+/1 vFcL2z3ZmKMzdbzGbpa2zPCxzkUzXzyy2yupaYytAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUwPYmv1gyU9Ms2IGb4KutTM1UXrQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzgyMjgyMmY0LWQ3MTUtNGMxYS1hYWM0LWY0MGZmODlkZDYwOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI2z/gwDQYJKoZIhvcNAQELBQADggEBADLv2wmYYoPTXJ78SPHyv+orf3ap Z3EZMxM1AjBzDPefs57xZfbuwlR/idsV5VkiYiR6tPHDwdaMyhykW8tGsSJxfu+p 8UAL/M1FtYfSFTbPhxN/qmFrGpOmxZ5WiXyG3lwX5p3aelV+7fmD4uwUOrCN3u/C PacA1HthRSrXYfSSoHYQ/sh4CDZwsIo8AmHXvfW8WPxOeMDnG3O2EqFM1sytPxNG 1Cu3+zWO1UmeKqlYnD1egR/Wx+l/8BWl9jvxA0KVSK+u4aYN3A0AkVDhP329tVv2 rsOpD2MVvWmmcv6jYR4WWDsSzhqj1nkvmF8J36fIv17I5eSL5rkHIn5ua2w= -----END CERTIFICATE-----Generated at Mon Oct 20 05:57:09 2025 by rpki-client