$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a1847d78-36f0-4cb4-803b-1d3ee14aab01.roa File: a1847d78-36f0-4cb4-803b-1d3ee14aab01.roa (raw, json) Hash identifier: 2GQcJOy0bcg575tK+xfYv7Z618WqLDm/r8srrrvLpnc= Subject key identifier: 75:C8:F7:31:5D:DC:23:50:6C:A1:CC:8C:8A:A2:A8:B9:E2:49:49:D3 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6CDDC9F7905F2FF59BD0AB98B8B19F42B3938604 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a1847d78-36f0-4cb4-803b-1d3ee14aab01.roa Signing time: Fri 17 Oct 2025 22:30:18 +0000 ROA not before: Fri 17 Oct 2025 22:30:18 +0000 ROA not after: Fri 21 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.192.136.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:dd:c9:f7:90:5f:2f:f5:9b:d0:ab:98:b8:b1:9f:42:b3:93:86:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 17 22:30:18 2025 GMT Not After : Nov 21 23:59:59 2025 GMT Subject: serialNumber=01872b505b512bd7c739e13d7915242a914541e8dd40e35aefc6b9a3a600d22d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a5:03:60:57:0b:1d:6f:99:a0:0c:cc:81:6a: 97:3f:36:ae:1c:ef:18:d4:15:b8:40:e8:db:67:68: 73:73:31:2e:c8:be:32:09:06:b2:dd:9a:8f:31:c9: bc:2c:c3:17:a6:68:fc:6f:02:06:4e:91:da:03:7a: 0b:3c:45:c4:6a:55:e1:37:b4:a8:fe:c1:c1:44:6f: de:c8:8b:90:9c:c7:0d:1f:12:2c:38:e9:5d:69:01: 3e:f9:97:ae:7d:a6:c5:02:8c:ac:49:7f:c2:49:25: 9a:88:38:37:bc:c4:81:a3:5d:a9:ca:67:b5:7f:66: 73:9d:ec:ea:73:71:29:22:9a:b7:07:43:d6:a1:8e: 6a:bf:7c:7d:5f:af:a3:4c:da:de:b0:16:a6:8f:88: 17:6c:e5:80:5e:b7:1a:70:45:07:66:78:1b:9b:6d: a0:22:5a:3f:e9:be:b9:b2:a2:07:c0:84:e9:99:49: 29:69:c4:e7:4b:db:79:3b:3a:25:6a:02:d5:18:df: 67:78:68:52:b9:3f:c5:1a:a0:99:33:20:06:4a:f7: 92:53:43:db:11:45:48:96:15:1d:c9:a2:c1:da:fe: 2e:0e:3c:7f:d8:4d:00:0d:79:a7:1d:8e:d3:22:04: f2:a0:25:b7:07:18:74:c2:e0:0a:75:f4:a0:32:6a: 5b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:C8:F7:31:5D:DC:23:50:6C:A1:CC:8C:8A:A2:A8:B9:E2:49:49:D3 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a1847d78-36f0-4cb4-803b-1d3ee14aab01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.192.136.0/23 Signature Algorithm: sha256WithRSAEncryption 9b:9d:ef:7f:c5:e4:9f:b9:06:89:2f:a0:15:98:46:35:c1:0c: bb:70:0b:7b:7d:97:5a:c1:f0:5d:71:a8:ea:36:23:6e:a9:bc: 36:0a:c8:a6:96:41:57:a4:11:1c:37:f8:0c:c5:62:58:af:db: 10:27:54:76:e8:31:df:ee:1e:c3:fe:83:0e:c6:9a:84:96:49: 9b:75:00:cb:32:8c:53:9b:3e:af:fe:77:0c:fa:0d:cc:64:a1: 50:5d:65:a7:1d:54:43:12:29:82:59:e3:c2:69:37:7f:93:02: 0b:69:65:47:39:9d:38:52:3f:de:ba:8c:6a:93:cf:d3:39:c9: 18:e5:ec:2d:5d:8e:1d:5b:b7:e5:12:09:61:d3:f8:69:ee:c9: b1:4a:bf:5a:63:db:b7:e8:f5:8f:60:3a:38:b0:35:1a:43:89: 4e:5e:5b:b7:a1:b1:cf:e8:b6:4d:60:11:72:aa:45:5b:b1:ef: 93:9d:33:76:a9:af:b9:76:8b:29:0d:32:b1:b1:9b:2a:87:28: 5c:88:20:15:c2:0f:9f:58:ed:93:30:48:23:b6:fd:69:58:a0: 94:75:36:0b:81:73:67:46:f8:fc:89:b3:c8:de:52:c0:50:84: 87:9b:a4:4b:40:18:e8:37:61:c3:cd:ce:aa:4a:34:c1:2b:56: 5f:c1:95:c2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbN3J95BfL/Wb0KuYuLGfQrOThgQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE3MjIzMDE4WhcNMjUxMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AwMTg3MmI1MDViNTEyYmQ3YzczOWUxM2Q3OTE1MjQyYTkx NDU0MWU4ZGQ0MGUzNWFlZmM2YjlhM2E2MDBkMjJkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvpQNgVwsdb5mgDMyBapc/Nq4c7xjUFbhA6NtnaHNzMS7I vjIJBrLdmo8xybwswxemaPxvAgZOkdoDegs8RcRqVeE3tKj+wcFEb97Ii5Ccxw0f Eiw46V1pAT75l659psUCjKxJf8JJJZqIODe8xIGjXanKZ7V/ZnOd7OpzcSkimrcH Q9ahjmq/fH1fr6NM2t6wFqaPiBds5YBetxpwRQdmeBubbaAiWj/pvrmyogfAhOmZ SSlpxOdL23k7OiVqAtUY32d4aFK5P8UaoJkzIAZK95JTQ9sRRUiWFR3JosHa/i4O PH/YTQANeacdjtMiBPKgJbcHGHTC4Ap19KAyalsnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUdcj3MV3cI1BsocyMiqKoueJJSdMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2ExODQ3ZDc4LTM2ZjAtNGNiNC04MDNiLTFkM2VlMTRhYWIwMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE2wIgwDQYJKoZIhvcNAQELBQADggEBAJud73/F5J+5BokvoBWYRjXBDLtw C3t9l1rB8F1xqOo2I26pvDYKyKaWQVekERw3+AzFYliv2xAnVHboMd/uHsP+gw7G moSWSZt1AMsyjFObPq/+dwz6DcxkoVBdZacdVEMSKYJZ48JpN3+TAgtpZUc5nThS P966jGqTz9M5yRjl7C1djh1bt+USCWHT+GnuybFKv1pj27fo9Y9gOjiwNRpDiU5e W7ehsc/otk1gEXKqRVux75OdM3apr7l2iykNMrGxmyqHKFyIIBXCD59Y7ZMwSCO2 /WlYoJR1NguBc2dG+PyJs8jeUsBQhIebpEtAGOg3YcPNzqpKNMErVl/BlcI= -----END CERTIFICATE-----Generated at Mon Oct 20 02:55:47 2025 by rpki-client