$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b555ee04-2d3f-45b7-9312-8f1dc927e91e.roa File: b555ee04-2d3f-45b7-9312-8f1dc927e91e.roa (raw, json) Hash identifier: i7ZBBHhWmfe1NJbomboSvhWEmWGu3OilUc6sEcIBIQo= Subject key identifier: 92:22:04:41:8D:CF:90:13:C6:7F:2E:74:FA:13:82:92:71:62:8B:B3 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 526C0B3E0DD7256FE0E7E862C4856168DA07179F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b555ee04-2d3f-45b7-9312-8f1dc927e91e.roa Signing time: Sun 19 Oct 2025 07:40:09 +0000 ROA not before: Sun 19 Oct 2025 07:40:09 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.84.80.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:6c:0b:3e:0d:d7:25:6f:e0:e7:e8:62:c4:85:61:68:da:07:17:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 07:40:09 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=65a405996e38dc86c40cf1693bd748b0a09c9ae3388aa4589e48be00b6b09b1a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:43:b8:af:e2:58:0e:5c:2f:17:32:68:79:f9: a0:61:fc:d7:2d:17:d8:71:4f:a6:39:81:53:4e:f0: 48:5d:5d:a3:33:71:50:39:4b:dc:77:98:55:26:90: 9e:75:16:5b:14:3b:14:53:36:b8:72:d0:e5:56:f0: fd:ce:0c:17:8d:cd:11:65:b8:d2:47:8e:2d:00:9d: b6:1f:1b:b6:f1:db:d9:95:18:d1:1f:71:4a:93:49: 3e:20:30:c9:0c:be:68:a8:a3:2a:03:d1:16:f9:39: 45:d8:25:21:48:b6:5c:87:b6:a9:18:a9:80:e4:23: 13:96:5d:11:a7:9d:67:68:21:dc:b1:7e:e8:d5:91: 2d:f6:77:8a:3f:ff:91:8a:a2:8e:49:0c:81:2a:cc: f7:ff:a4:46:66:ff:55:18:d5:35:03:5b:6f:2b:32: 09:44:b5:a4:6c:0a:ff:2e:5e:91:00:a9:9f:9e:1f: 34:62:a5:15:f7:c6:07:01:df:0c:3c:f1:68:e5:29: cf:3f:0f:a6:d0:46:c7:20:72:09:52:36:f7:73:b8: 57:0c:aa:a6:93:3c:08:5c:fd:34:4f:77:73:16:bb: 74:e6:12:ef:db:02:1e:83:c2:cf:fd:90:f3:be:0c: 86:7f:04:51:97:c9:e1:d7:92:c6:f1:7b:9a:18:4a: 39:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:22:04:41:8D:CF:90:13:C6:7F:2E:74:FA:13:82:92:71:62:8B:B3 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b555ee04-2d3f-45b7-9312-8f1dc927e91e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.84.80.0/22 Signature Algorithm: sha256WithRSAEncryption 34:4e:ac:22:a6:f8:a6:f6:3d:3d:d7:2e:e6:1d:49:1b:3c:6b: 82:d4:d5:f2:69:75:79:5f:ca:e6:73:c5:ab:5e:51:47:fd:de: 53:f2:3d:31:58:93:55:fa:64:c1:17:e9:b2:ca:79:67:f1:96: ae:e1:88:67:db:84:c1:59:34:06:ab:9f:6e:be:1c:f0:e5:31: a0:cb:ad:92:6b:36:d1:90:d8:b4:b1:f3:7f:ed:f7:ee:f6:67: 45:c3:75:06:3b:23:73:d7:30:ab:82:7e:d4:0c:5b:0e:63:ff: 93:6c:0e:19:44:e1:91:ab:f2:96:b7:82:cb:49:8a:80:06:9b: 0c:46:b0:0d:00:ae:da:c7:08:c1:eb:6c:0a:f9:f1:de:e1:e5: 83:1d:ff:8e:18:b0:bf:85:0e:11:db:c0:a8:12:e7:cc:2b:e2: bc:da:98:05:8e:f5:fa:a9:89:2d:bc:9a:3e:60:bd:b5:74:3f: 3b:0c:02:8f:0e:a6:df:54:2a:39:0e:af:cb:6f:f5:b3:5b:1a: fe:fa:06:06:ea:a6:7c:4f:4c:88:8c:e2:46:39:1e:d7:38:65: e9:17:4b:c9:bd:4c:18:28:98:65:51:44:8b:99:c9:c8:ae:e5: 89:10:8f:b1:78:f0:a3:de:e3:3b:69:0b:88:44:4f:29:34:7c: 4f:7e:28:dc -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUmwLPg3XJW/g5+hixIVhaNoHF58wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MDc0MDA5WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A2NWE0MDU5OTZlMzhkYzg2YzQwY2YxNjkzYmQ3NDhiMGEw OWM5YWUzMzg4YWE0NTg5ZTQ4YmUwMGI2YjA5YjFhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDQ7iv4lgOXC8XMmh5+aBh/NctF9hxT6Y5gVNO8EhdXaMz cVA5S9x3mFUmkJ51FlsUOxRTNrhy0OVW8P3ODBeNzRFluNJHji0AnbYfG7bx29mV GNEfcUqTST4gMMkMvmiooyoD0Rb5OUXYJSFItlyHtqkYqYDkIxOWXRGnnWdoIdyx fujVkS32d4o//5GKoo5JDIEqzPf/pEZm/1UY1TUDW28rMglEtaRsCv8uXpEAqZ+e HzRipRX3xgcB3ww88WjlKc8/D6bQRscgcglSNvdzuFcMqqaTPAhc/TRPd3MWu3Tm Eu/bAh6Dws/9kPO+DIZ/BFGXyeHXksbxe5oYSjn3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUkiIEQY3PkBPGfy50+hOCknFii7MwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2I1NTVlZTA0LTJkM2YtNDViNy05MzEyLThmMWRjOTI3ZTkxZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI0VFAwDQYJKoZIhvcNAQELBQADggEBADROrCKm+Kb2PT3XLuYdSRs8a4LU 1fJpdXlfyuZzxateUUf93lPyPTFYk1X6ZMEX6bLKeWfxlq7hiGfbhMFZNAarn26+ HPDlMaDLrZJrNtGQ2LSx83/t9+72Z0XDdQY7I3PXMKuCftQMWw5j/5NsDhlE4ZGr 8pa3gstJioAGmwxGsA0ArtrHCMHrbAr58d7h5YMd/44YsL+FDhHbwKgS58wr4rza mAWO9fqpiS28mj5gvbV0PzsMAo8Opt9UKjkOr8tv9bNbGv76BgbqpnxPTIiM4kY5 Htc4ZekXS8m9TBgomGVRRIuZyciu5YkQj7F48KPe4ztpC4hETyk0fE9+KNw= -----END CERTIFICATE-----Generated at Mon Oct 20 03:00:02 2025 by rpki-client