$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/97806270-7b10-4a9d-8a0b-7878d7576e22.roa File: 97806270-7b10-4a9d-8a0b-7878d7576e22.roa (raw, json) Hash identifier: QyxTARwZJ2YGLpbEGwaCpI3W8c2M1Y+0NKk80zkWajg= Subject key identifier: 73:21:13:54:40:4F:82:45:47:9F:75:0B:4A:C7:AD:53:4F:A4:16:11 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: E30CA45CC76FB4EDAA84FF2D61F4856AD875ED Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/97806270-7b10-4a9d-8a0b-7878d7576e22.roa Signing time: Sun 19 Oct 2025 05:32:56 +0000 ROA not before: Sun 19 Oct 2025 05:32:56 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.84.36.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: e3:0c:a4:5c:c7:6f:b4:ed:aa:84:ff:2d:61:f4:85:6a:d8:75:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 05:32:56 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=c6e6e4471a0130b0aa83161a8e2eea23dcc019a559ad85c2bc2d17ed7d4233af, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:be:ef:38:6c:c9:f1:9e:0d:a2:0c:6c:d9:54: 06:12:0a:54:0c:08:35:ad:a5:47:3e:35:e2:fe:0b: a3:ba:c1:24:41:d1:14:c7:72:6d:7e:6a:dd:81:fc: f0:be:b0:97:be:70:41:3e:ba:bb:13:dd:39:1f:54: cc:a6:a9:a7:62:1a:07:b7:8e:5f:4d:70:3b:27:df: 09:d6:71:2e:8f:09:f5:5a:50:e8:23:18:c4:c6:a3: ca:0e:60:2a:10:13:56:22:6a:47:4a:08:d3:b0:8b: 95:bc:c0:11:be:d5:8b:61:ba:27:9c:37:d9:50:51: 42:b0:87:14:eb:43:4d:4e:7e:e1:8e:9a:48:2b:56: e0:f5:2d:dc:7d:83:d4:9a:84:57:31:55:4d:9d:73: 99:76:a1:1d:6c:c1:3f:e1:cd:ae:92:99:8e:f3:dc: 5f:4d:0d:26:79:02:b1:e3:5f:85:e6:42:44:96:e6: 43:70:ff:1e:83:24:79:c1:3c:3a:e6:a5:71:45:65: 34:88:93:c4:f2:e0:dd:3a:d1:c6:33:7b:8e:20:cb: d9:28:cb:68:ac:2f:94:e6:d0:73:6d:2d:09:a1:44: 84:5f:d1:08:28:4c:a8:4a:44:c6:a4:74:4e:26:ea: 9b:14:e3:09:ab:bd:c6:93:91:cb:99:17:1f:aa:c3: 5c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:21:13:54:40:4F:82:45:47:9F:75:0B:4A:C7:AD:53:4F:A4:16:11 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/97806270-7b10-4a9d-8a0b-7878d7576e22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.84.36.0/23 Signature Algorithm: sha256WithRSAEncryption 9b:69:a9:d3:c5:f4:d8:3f:9c:f9:a2:cd:6a:74:ef:02:cc:2c: 43:d3:6e:68:84:3c:34:7d:c2:74:ac:d5:e6:13:a9:87:8a:6a: 52:5b:14:f5:e0:35:90:3d:0f:9d:4d:6f:ed:a3:59:58:73:fe: 3e:39:30:44:ef:9d:27:ee:53:c8:21:77:a0:6d:b3:25:42:7e: b8:52:f4:c8:eb:be:09:77:66:50:3d:c7:f4:fc:39:5a:41:4c: b6:88:ae:54:ad:8d:b8:af:57:26:a6:44:b5:28:65:67:c3:7b: c2:90:ef:f8:4c:3c:a8:53:26:e3:27:c9:2f:d4:80:05:65:2c: e4:d7:20:62:0d:b2:76:2e:92:14:fb:23:87:65:ca:09:18:8d: 16:ee:4d:e9:94:6a:17:8d:1d:e3:99:32:12:d1:09:b3:6f:0c: 9e:b8:70:ef:34:54:90:c7:50:ab:32:94:68:15:96:5b:f6:f8: 1e:7e:cc:db:78:c6:13:34:bd:c5:e1:48:1f:88:90:3a:81:92: 28:40:d6:24:b1:7f:99:75:1f:f7:4d:e5:c4:63:e1:95:07:a2: 93:be:ae:1a:dc:12:53:fc:79:8c:d1:27:2b:29:d3:e3:cd:8a: ed:43:e5:3a:82:b5:f2:7d:56:53:dc:3f:02:a1:a6:fc:2b:8e: d6:83:08:51 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAOMMpFzHb7TtqoT/LWH0hWrYde0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MDUzMjU2WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BjNmU2ZTQ0NzFhMDEzMGIwYWE4MzE2MWE4ZTJlZWEyM2Rj YzAxOWE1NTlhZDg1YzJiYzJkMTdlZDdkNDIzM2FmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCavu84bMnxng2iDGzZVAYSClQMCDWtpUc+NeL+C6O6wSRB 0RTHcm1+at2B/PC+sJe+cEE+ursT3TkfVMymqadiGge3jl9NcDsn3wnWcS6PCfVa UOgjGMTGo8oOYCoQE1YiakdKCNOwi5W8wBG+1YthuiecN9lQUUKwhxTrQ01OfuGO mkgrVuD1Ldx9g9SahFcxVU2dc5l2oR1swT/hza6SmY7z3F9NDSZ5ArHjX4XmQkSW 5kNw/x6DJHnBPDrmpXFFZTSIk8Ty4N060cYze44gy9koy2isL5Tm0HNtLQmhRIRf 0QgoTKhKRMakdE4m6psU4wmrvcaTkcuZFx+qw1xvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUcyETVEBPgkVHn3ULSsetU0+kFhEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzk3ODA2MjcwLTdiMTAtNGE5ZC04YTBiLTc4NzhkNzU3NmUyMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE0VCQwDQYJKoZIhvcNAQELBQADggEBAJtpqdPF9Ng/nPmizWp07wLMLEPT bmiEPDR9wnSs1eYTqYeKalJbFPXgNZA9D51Nb+2jWVhz/j45METvnSfuU8ghd6Bt syVCfrhS9Mjrvgl3ZlA9x/T8OVpBTLaIrlStjbivVyamRLUoZWfDe8KQ7/hMPKhT JuMnyS/UgAVlLOTXIGINsnYukhT7I4dlygkYjRbuTemUaheNHeOZMhLRCbNvDJ64 cO80VJDHUKsylGgVllv2+B5+zNt4xhM0vcXhSB+IkDqBkihA1iSxf5l1H/dN5cRj 4ZUHopO+rhrcElP8eYzRJysp0+PNiu1D5TqCtfJ9VlPcPwKhpvwrjtaDCFE= -----END CERTIFICATE-----Generated at Mon Oct 20 11:09:06 2025 by rpki-client