$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/82c8a064-4003-40bc-b013-25959707bde7.roa File: 82c8a064-4003-40bc-b013-25959707bde7.roa (raw, json) Hash identifier: Z3vA5XK8F/W0wFwdIvDUZYBYUwIWQuiomb+iMDIb7Cg= Subject key identifier: B5:53:93:69:2A:32:EE:18:66:37:4A:F2:B7:3B:18:F8:6B:9C:4B:72 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7107B12BB01037C60174CED4BA599C32A22AE1E2 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/82c8a064-4003-40bc-b013-25959707bde7.roa Signing time: Sat 18 Oct 2025 18:00:13 +0000 ROA not before: Sat 18 Oct 2025 18:00:13 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.84.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:07:b1:2b:b0:10:37:c6:01:74:ce:d4:ba:59:9c:32:a2:2a:e1:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 18:00:13 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=3c8d27176d563f2b86ffe7eed94a2b87d153ec36c21538190c4fd83067e5de03, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:98:62:87:64:a0:15:6d:f3:a3:1d:f1:ba:a2: 69:da:42:91:4f:4a:9c:7b:d2:6f:bb:74:e1:ef:cd: af:53:70:57:7a:dc:aa:ea:c9:60:31:db:ee:d1:b9: 3c:f0:f5:5b:cd:bd:ca:96:1e:23:3b:11:8b:ef:24: 22:c8:59:16:e9:5c:d5:9d:ba:99:4f:4d:32:55:4b: 44:fc:e7:35:fc:b2:f3:80:0a:a9:b4:78:82:af:35: 2f:cb:4d:4f:eb:a3:d9:c3:0e:78:c0:dc:18:f4:2a: d6:33:a4:c4:42:74:bd:5d:78:f7:09:3c:74:18:7a: a1:c2:83:be:45:e9:a2:39:fd:98:87:a6:9e:74:7e: fb:12:58:c9:dd:74:c5:bf:18:e9:b4:e0:dc:8a:4f: 0c:fd:a5:03:50:64:01:0f:70:3b:cb:da:e2:17:3e: fc:b5:2f:c3:60:59:84:cd:ff:6d:3c:8b:44:f0:ff: 3b:2f:7c:42:27:14:59:14:a4:22:ed:f2:b8:7a:33: 51:b9:64:1b:87:02:be:84:8c:0d:f5:be:a2:ca:05: e0:0a:ab:10:0f:fe:be:a6:c6:45:b1:ea:c7:23:60: 26:4d:7a:01:88:cb:5e:8a:35:3a:cb:65:c6:75:25: 9a:a9:6d:87:b1:77:0a:d7:da:d5:23:8a:73:33:55: 27:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:53:93:69:2A:32:EE:18:66:37:4A:F2:B7:3B:18:F8:6B:9C:4B:72 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/82c8a064-4003-40bc-b013-25959707bde7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.84.176.0/24 Signature Algorithm: sha256WithRSAEncryption 68:ac:d7:4f:d9:90:23:13:44:ae:62:d6:2e:c6:15:33:22:e0: 26:9a:61:f1:87:8a:ce:49:2e:85:f6:d6:69:1c:37:e7:d1:68: 85:c9:15:03:a8:73:fd:3f:99:92:78:ee:14:24:6f:8d:0e:60: 95:37:f2:78:3b:cd:08:fb:9c:ab:8e:a3:db:af:d9:7a:32:ff: dd:b3:4b:3e:dc:bc:1e:ac:69:00:e0:46:96:52:34:42:54:52: 22:56:e0:fb:88:4c:fd:58:e9:a1:c3:8a:25:b4:82:d6:6a:7d: 62:ad:b9:03:03:c3:36:6f:40:66:a5:c6:16:cb:22:51:c5:3a: 71:40:41:9d:3a:18:14:4f:de:c6:5d:e3:19:02:66:1e:de:a7: 03:31:55:eb:c8:80:e8:d3:b8:18:ca:a1:b0:76:81:7c:26:24: 4f:ed:64:54:72:7b:e9:ea:7f:43:42:21:bf:6a:d1:8e:f9:3a: 81:7d:ba:81:77:b5:70:ac:fb:d2:db:82:33:95:62:7d:18:8c: ad:5e:46:57:17:ee:0f:fc:99:3e:a3:fd:52:65:81:2b:ee:9f: 9f:6c:69:e1:e7:5e:41:8a:d6:76:2a:f0:44:9a:80:c7:8f:da: f1:29:ae:eb:18:76:06:a6:9b:19:3c:8a:f8:3d:23:4c:73:83: 4d:73:27:1f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcQexK7AQN8YBdM7UulmcMqIq4eIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTgwMDEzWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AzYzhkMjcxNzZkNTYzZjJiODZmZmU3ZWVkOTRhMmI4N2Qx NTNlYzM2YzIxNTM4MTkwYzRmZDgzMDY3ZTVkZTAzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFmGKHZKAVbfOjHfG6omnaQpFPSpx70m+7dOHvza9TcFd6 3KrqyWAx2+7RuTzw9VvNvcqWHiM7EYvvJCLIWRbpXNWduplPTTJVS0T85zX8svOA Cqm0eIKvNS/LTU/ro9nDDnjA3Bj0KtYzpMRCdL1dePcJPHQYeqHCg75F6aI5/ZiH pp50fvsSWMnddMW/GOm04NyKTwz9pQNQZAEPcDvL2uIXPvy1L8NgWYTN/208i0Tw /zsvfEInFFkUpCLt8rh6M1G5ZBuHAr6EjA31vqLKBeAKqxAP/r6mxkWx6scjYCZN egGIy16KNTrLZcZ1JZqpbYexdwrX2tUjinMzVSfzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUtVOTaSoy7hhmN0rytzsY+GucS3IwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzgyYzhhMDY0LTQwMDMtNDBiYy1iMDEzLTI1OTU5NzA3YmRlNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0VLAwDQYJKoZIhvcNAQELBQADggEBAGis10/ZkCMTRK5i1i7GFTMi4Caa YfGHis5JLoX21mkcN+fRaIXJFQOoc/0/mZJ47hQkb40OYJU38ng7zQj7nKuOo9uv 2Xoy/92zSz7cvB6saQDgRpZSNEJUUiJW4PuITP1Y6aHDiiW0gtZqfWKtuQMDwzZv QGalxhbLIlHFOnFAQZ06GBRP3sZd4xkCZh7epwMxVevIgOjTuBjKobB2gXwmJE/t ZFRye+nqf0NCIb9q0Y75OoF9uoF3tXCs+9LbgjOVYn0YjK1eRlcX7g/8mT6j/VJl gSvun59saeHnXkGK1nYq8ESagMeP2vEprusYdgammxk8ivg9I0xzg01zJx8= -----END CERTIFICATE-----Generated at Mon Oct 20 11:56:08 2025 by rpki-client