$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/89e94404-6436-40e5-9e54-f47872dd0c17.roa File: 89e94404-6436-40e5-9e54-f47872dd0c17.roa (raw, json) Hash identifier: GsT5LGzUtIr5jz1I86s9ooKYuZ6O9c/pn6ZKeNmv+oY= Subject key identifier: 3A:EB:85:27:58:3E:99:7E:7B:32:AB:4A:94:3A:08:6D:06:BB:53:1F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 52E2ABF0B8BE2CD3657FF3376B86BEBF6836EB92 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/89e94404-6436-40e5-9e54-f47872dd0c17.roa Signing time: Sun 19 Oct 2025 06:52:31 +0000 ROA not before: Sun 19 Oct 2025 06:52:31 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.85.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:e2:ab:f0:b8:be:2c:d3:65:7f:f3:37:6b:86:be:bf:68:36:eb:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 06:52:31 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=3c6bef27cc2be6ff459e18e8a3f375fc409a7cce01746c8285cf14d24d908922, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:39:b4:5b:d1:d4:64:04:8d:ff:b2:57:a3:c2: f6:68:7d:e3:b0:f4:8b:7e:9e:ae:41:d3:85:89:b1: ca:f7:38:38:c7:36:b7:7a:98:7f:9c:30:a8:f1:72: c4:10:2e:91:e2:f2:88:32:a3:54:e7:94:2a:84:a6: 0f:37:68:93:85:56:cb:68:45:3c:a1:a9:69:41:85: 47:cf:ae:82:de:b8:5d:eb:ad:2d:ba:88:34:ba:22: a2:b7:b1:af:56:40:47:98:ee:3c:da:55:21:7e:5b: 9e:84:62:39:e8:e3:c9:65:87:9b:87:36:93:6c:f9: 03:73:de:f0:0f:31:1c:6b:09:2a:61:34:a2:d8:14: 33:9f:51:fe:09:7e:2b:dc:aa:7f:fc:6c:10:c7:8f: c0:ae:bb:91:c8:b8:1f:a0:19:7a:16:e0:96:da:4a: af:ab:6e:ca:e9:ec:51:7e:36:cb:34:19:ca:df:47: f5:1b:1f:12:64:0c:57:f1:7e:78:06:b3:2a:2e:a1: 04:bc:8d:4c:93:cb:15:0e:40:33:60:b8:89:fb:04: 7c:4c:50:e3:c3:36:0b:78:b1:41:e8:c7:98:3b:4f: ba:b6:63:67:c2:91:e3:12:41:33:03:de:e2:ce:f0: 98:80:4c:be:de:08:18:8e:87:cd:61:4b:ff:a4:01: 03:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:EB:85:27:58:3E:99:7E:7B:32:AB:4A:94:3A:08:6D:06:BB:53:1F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/89e94404-6436-40e5-9e54-f47872dd0c17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.85.68.0/22 Signature Algorithm: sha256WithRSAEncryption 36:68:da:f9:99:8c:24:d0:68:c2:5e:7f:d5:ca:3d:4a:43:86: aa:70:3a:44:df:1e:7e:2d:97:4f:23:a6:e2:02:62:88:8b:59: 72:07:01:b1:74:5c:ca:d3:46:8e:c3:47:1f:e5:74:6b:2a:84: 71:6d:8e:f1:04:68:f2:6b:9c:ae:88:12:a1:04:cb:34:4e:97: cc:49:1c:a3:e0:5a:79:32:04:cd:6b:f8:60:10:f1:0b:73:35: ec:9f:42:82:85:20:62:9e:d4:6e:49:e6:15:96:d6:df:04:79: f4:f2:e3:0c:cc:66:76:2d:d3:0e:5b:e5:3c:2b:a5:1d:2b:94: 1c:6b:d8:1d:81:0b:50:3e:ab:3d:35:c7:a6:f8:66:c3:88:d0: eb:5b:12:45:8c:09:f0:d0:f3:3f:ae:d0:1a:5c:fd:0c:f6:2c: 33:20:b3:ec:6f:de:5c:0e:02:28:d6:6e:f6:0b:86:81:e0:2b: f7:b1:ce:b8:0a:be:2e:53:cc:a0:dd:cc:b5:4c:f9:72:af:f8: 45:83:93:ba:5c:6f:47:cd:2c:6a:e3:3d:b1:48:10:b5:d0:fd: 82:24:88:d6:21:6e:9a:d7:bb:5f:a9:65:00:01:bc:b7:b4:db: dc:1b:0b:81:d6:df:f2:14:37:85:e1:d2:8b:8a:5c:f7:77:a9: b0:5a:a6:4b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUuKr8Li+LNNlf/M3a4a+v2g265IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MDY1MjMxWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AzYzZiZWYyN2NjMmJlNmZmNDU5ZTE4ZThhM2YzNzVmYzQw OWE3Y2NlMDE3NDZjODI4NWNmMTRkMjRkOTA4OTIyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCcObRb0dRkBI3/slejwvZofeOw9It+nq5B04WJscr3ODjH Nrd6mH+cMKjxcsQQLpHi8ogyo1TnlCqEpg83aJOFVstoRTyhqWlBhUfProLeuF3r rS26iDS6IqK3sa9WQEeY7jzaVSF+W56EYjno48llh5uHNpNs+QNz3vAPMRxrCSph NKLYFDOfUf4Jfivcqn/8bBDHj8Cuu5HIuB+gGXoW4JbaSq+rbsrp7FF+Nss0Gcrf R/UbHxJkDFfxfngGsyouoQS8jUyTyxUOQDNguIn7BHxMUOPDNgt4sUHox5g7T7q2 Y2fCkeMSQTMD3uLO8JiATL7eCBiOh81hS/+kAQNBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUOuuFJ1g+mX57MqtKlDoIbQa7Ux8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzg5ZTk0NDA0LTY0MzYtNDBlNS05ZTU0LWY0Nzg3MmRkMGMxNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI0VUQwDQYJKoZIhvcNAQELBQADggEBADZo2vmZjCTQaMJef9XKPUpDhqpw OkTfHn4tl08jpuICYoiLWXIHAbF0XMrTRo7DRx/ldGsqhHFtjvEEaPJrnK6IEqEE yzROl8xJHKPgWnkyBM1r+GAQ8QtzNeyfQoKFIGKe1G5J5hWW1t8EefTy4wzMZnYt 0w5b5TwrpR0rlBxr2B2BC1A+qz01x6b4ZsOI0OtbEkWMCfDQ8z+u0Bpc/Qz2LDMg s+xv3lwOAijWbvYLhoHgK/exzrgKvi5TzKDdzLVM+XKv+EWDk7pcb0fNLGrjPbFI ELXQ/YIkiNYhbprXu1+pZQABvLe029wbC4HW3/IUN4Xh0ouKXPd3qbBapks= -----END CERTIFICATE-----Generated at Mon Oct 20 06:35:06 2025 by rpki-client