$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b77ad572-6f71-409b-bedc-46a8082743bb.roa File: b77ad572-6f71-409b-bedc-46a8082743bb.roa (raw, json) Hash identifier: p9rS8J8TOJnK3JORsNiNjfmGsDZI2BSSx2fFRGVuxKY= Subject key identifier: 29:A9:21:FD:6C:9F:88:11:AC:C7:2E:63:3B:D7:D7:82:3C:59:AF:78 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4E14CBD8332250E1F6F4809B429CF4E0FBD76488 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b77ad572-6f71-409b-bedc-46a8082743bb.roa Signing time: Sun 19 Oct 2025 05:31:41 +0000 ROA not before: Sun 19 Oct 2025 05:31:41 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.84.122.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:14:cb:d8:33:22:50:e1:f6:f4:80:9b:42:9c:f4:e0:fb:d7:64:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 05:31:41 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=5bfeaeffebc3a0341cff501dfadf515084ea38556c750d3404686eef2d9382c3, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:cf:fe:5e:d3:48:87:10:2d:53:cd:87:1e:6a: ee:08:ca:59:54:c5:ca:cd:c0:b4:1c:e0:21:3b:cf: 9e:cc:72:6c:79:d5:0c:09:5a:08:3d:d4:be:7e:36: 25:10:3c:3b:27:9f:ee:84:3e:f3:dd:33:57:67:59: d6:47:f2:02:9f:bc:65:3e:c1:ca:71:53:af:8e:be: df:60:aa:0d:81:de:ba:8f:99:34:5c:99:d3:f5:d7: 41:38:88:34:96:c4:e2:f3:c8:3d:89:e6:85:7b:7e: 2f:bd:75:af:c4:d3:5e:9d:9b:c7:16:6a:fa:94:91: a6:93:09:30:6e:ce:51:39:82:1f:69:1f:26:25:ae: bf:62:42:ce:c1:08:72:74:28:1a:f3:e5:45:ff:db: 99:61:9c:7f:a2:90:92:7f:8a:09:ac:e9:a0:f4:a6: d0:9d:61:9d:4c:82:61:f8:37:d1:63:96:11:9f:f0: fa:b6:4a:de:27:59:9c:37:12:40:30:98:22:0b:37: ea:0e:ff:4e:e5:2d:6f:b0:d4:dd:98:c4:fc:1e:f6: a7:a9:50:b3:08:51:38:e8:11:6f:90:4f:8d:4b:7e: 5d:40:15:9e:c5:bd:12:98:ab:32:7a:4f:d9:93:df: 9d:99:7f:d1:37:b5:ba:8f:52:bd:c0:6e:c2:8d:ca: 91:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:A9:21:FD:6C:9F:88:11:AC:C7:2E:63:3B:D7:D7:82:3C:59:AF:78 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b77ad572-6f71-409b-bedc-46a8082743bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.84.122.0/23 Signature Algorithm: sha256WithRSAEncryption 21:bc:90:4d:27:0e:c7:95:d3:fc:85:d0:fd:1f:25:9c:29:c5: 22:72:3c:04:36:45:86:c2:60:4f:ea:1a:b3:3a:86:fc:48:98: 74:57:ee:a9:55:50:b1:1c:34:70:f2:26:dc:dc:b6:ed:a2:05: 78:3d:00:68:e3:ae:ac:f7:3a:51:d9:67:49:b5:18:9b:2d:b1: 03:64:2f:73:7e:74:30:27:29:cf:c1:8a:ff:52:4a:8d:43:18: b0:86:b1:20:2f:bb:ef:2f:1c:8c:dc:ec:89:8c:a8:b8:67:b8: 5a:62:cb:20:e3:74:09:d3:40:c5:f1:a0:65:aa:42:83:a7:4e: 22:f8:cd:1d:36:46:9c:ae:d7:c8:49:69:f9:04:1c:0b:9b:43: d5:6d:4d:b1:d1:9a:e6:86:89:bb:b8:c3:b7:b1:d4:a9:0b:d0: 59:79:de:52:38:dd:a3:b9:d1:e2:5d:47:b2:aa:37:8d:c2:0a: 63:fd:f4:84:14:f4:ce:59:03:07:22:f8:c0:e4:dc:75:69:87: ad:64:69:69:c2:7f:4b:63:8a:d4:af:e4:b3:8e:cc:b2:81:de: 91:4b:3c:42:cb:20:b2:f6:18:cd:0f:a0:15:58:ec:57:68:d8: cc:16:42:58:3a:40:e4:a8:cf:a6:32:cd:73:c6:71:d9:15:5f: 0d:db:83:9b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUThTL2DMiUOH29ICbQpz04PvXZIgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MDUzMTQxWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A1YmZlYWVmZmViYzNhMDM0MWNmZjUwMWRmYWRmNTE1MDg0 ZWEzODU1NmM3NTBkMzQwNDY4NmVlZjJkOTM4MmMzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCVz/5e00iHEC1TzYceau4IyllUxcrNwLQc4CE7z57Mcmx5 1QwJWgg91L5+NiUQPDsnn+6EPvPdM1dnWdZH8gKfvGU+wcpxU6+Ovt9gqg2B3rqP mTRcmdP110E4iDSWxOLzyD2J5oV7fi+9da/E016dm8cWavqUkaaTCTBuzlE5gh9p HyYlrr9iQs7BCHJ0KBrz5UX/25lhnH+ikJJ/igms6aD0ptCdYZ1MgmH4N9FjlhGf 8Pq2St4nWZw3EkAwmCILN+oO/07lLW+w1N2YxPwe9qepULMIUTjoEW+QT41Lfl1A FZ7FvRKYqzJ6T9mT352Zf9E3tbqPUr3AbsKNypEtAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUKakh/WyfiBGsxy5jO9fXgjxZr3gwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2I3N2FkNTcyLTZmNzEtNDA5Yi1iZWRjLTQ2YTgwODI3NDNiYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE0VHowDQYJKoZIhvcNAQELBQADggEBACG8kE0nDseV0/yF0P0fJZwpxSJy PAQ2RYbCYE/qGrM6hvxImHRX7qlVULEcNHDyJtzctu2iBXg9AGjjrqz3OlHZZ0m1 GJstsQNkL3N+dDAnKc/Biv9SSo1DGLCGsSAvu+8vHIzc7ImMqLhnuFpiyyDjdAnT QMXxoGWqQoOnTiL4zR02Rpyu18hJafkEHAubQ9VtTbHRmuaGibu4w7ex1KkL0Fl5 3lI43aO50eJdR7KqN43CCmP99IQU9M5ZAwci+MDk3HVph61kaWnCf0tjitSv5LOO zLKB3pFLPELLILL2GM0PoBVY7Fdo2MwWQlg6QOSoz6YyzXPGcdkVXw3bg5s= -----END CERTIFICATE-----Generated at Mon Oct 20 06:10:06 2025 by rpki-client