$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bb6adb48-8c33-4560-8621-daed06a56433.roa File: bb6adb48-8c33-4560-8621-daed06a56433.roa (raw, json) Hash identifier: uNaRh7HEpSHJlSwpGbYNrX1emCOoZyzFQ7xFxELCe4o= Subject key identifier: E5:C3:A9:76:56:AD:DD:3C:F3:EC:D8:95:DF:4E:5F:A0:D8:C4:76:F4 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0AE358C3BC9602969C1AC4B5033EF9C700E60B62 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bb6adb48-8c33-4560-8621-daed06a56433.roa Signing time: Sun 19 Oct 2025 08:11:29 +0000 ROA not before: Sun 19 Oct 2025 08:11:29 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.85.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:e3:58:c3:bc:96:02:96:9c:1a:c4:b5:03:3e:f9:c7:00:e6:0b:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 08:11:29 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=f098be2bdeaff87e058b7ef5c6b1bfb3d2fd76a49fca753bdc7e2d0907e31807, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c2:04:74:15:6d:47:a6:6a:46:04:66:4c:fe: 0b:13:38:4c:6f:ca:4e:35:29:3b:85:ad:dd:8b:db: d9:60:95:da:03:25:90:07:49:35:b1:9d:32:14:e9: 4a:20:23:0d:50:c8:3c:61:ee:18:a0:d2:aa:5c:30: ca:c5:af:0c:d6:fd:2b:04:09:c1:09:62:b6:33:0e: 8f:67:11:f9:0e:12:3b:f7:36:ab:88:6e:34:94:46: 58:f7:16:3c:47:9e:cd:3f:bd:53:32:c0:ff:94:13: 60:4c:93:61:91:97:76:8f:22:34:2c:81:f3:d0:a4: 51:e7:ff:ac:70:46:93:dc:11:b1:67:43:97:be:20: 13:b2:9f:e5:c5:78:a5:2f:5c:7a:36:08:45:0a:77: de:c6:cf:f3:51:83:17:0d:29:dd:38:84:e4:bd:85: a3:25:7f:cd:4f:39:87:a3:49:70:9d:c7:fa:d1:df: c1:ef:7c:0c:6c:15:c4:0d:82:1b:ef:91:1c:8b:41: 7a:00:c6:54:9f:e3:e3:74:5b:ef:a5:96:c6:9c:9a: 02:dd:17:5a:8b:4c:f2:2d:03:d8:08:59:64:d6:09: 3a:b3:a8:26:a9:23:86:b1:4d:c5:f3:03:b3:31:cc: 96:9f:da:b3:02:87:f1:e6:8b:79:ef:b7:8c:dd:9c: 77:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:C3:A9:76:56:AD:DD:3C:F3:EC:D8:95:DF:4E:5F:A0:D8:C4:76:F4 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bb6adb48-8c33-4560-8621-daed06a56433.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.85.68.0/23 Signature Algorithm: sha256WithRSAEncryption 9a:76:5d:30:19:ed:82:7a:52:7b:93:a3:09:fe:45:94:6b:af: c4:66:13:e0:a4:58:f3:75:d6:83:79:2c:9a:31:af:b4:0f:90: b3:5a:11:01:79:d4:09:e1:4f:c8:60:8b:c0:23:53:7b:f3:22: 11:f9:e8:6a:51:d9:0f:6d:88:41:a3:91:86:1a:48:76:5a:d1: 53:3f:71:b6:c7:a0:90:78:be:0e:81:6d:1d:16:24:b3:1f:d3: 6b:eb:76:c8:71:c0:99:d0:be:21:8a:d1:f8:3f:9f:2b:be:26: 82:84:8d:d3:63:f3:45:1c:8f:20:bc:d1:15:39:32:20:24:9d: e4:35:07:69:3e:09:d1:d6:79:5a:02:8e:62:f4:69:85:aa:42: f9:8b:f7:8d:a4:02:0f:2f:a9:07:07:0f:de:04:29:fd:c7:df: d3:dd:7e:4f:70:86:90:6d:34:ba:07:5d:e6:66:2a:16:5b:6b: e0:c0:96:5d:78:5f:ba:ac:29:c1:7e:e3:10:05:b7:21:41:0a: bb:3e:9a:a3:a3:e9:ab:e4:3c:47:94:6c:34:c5:1b:79:50:52: 3a:81:e9:ec:e7:05:19:89:e0:1d:ea:f0:c9:00:79:3e:44:6f: 6c:46:84:87:48:cf:59:57:85:71:f7:d2:85:80:5f:4a:d9:a6: 46:92:e3:8f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCuNYw7yWApacGsS1Az75xwDmC2IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MDgxMTI5WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BmMDk4YmUyYmRlYWZmODdlMDU4YjdlZjVjNmIxYmZiM2Qy ZmQ3NmE0OWZjYTc1M2JkYzdlMmQwOTA3ZTMxODA3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5wgR0FW1HpmpGBGZM/gsTOExvyk41KTuFrd2L29lgldoD JZAHSTWxnTIU6UogIw1QyDxh7hig0qpcMMrFrwzW/SsECcEJYrYzDo9nEfkOEjv3 NquIbjSURlj3FjxHns0/vVMywP+UE2BMk2GRl3aPIjQsgfPQpFHn/6xwRpPcEbFn Q5e+IBOyn+XFeKUvXHo2CEUKd97Gz/NRgxcNKd04hOS9haMlf81POYejSXCdx/rR 38HvfAxsFcQNghvvkRyLQXoAxlSf4+N0W++llsacmgLdF1qLTPItA9gIWWTWCTqz qCapI4axTcXzA7MxzJaf2rMCh/Hmi3nvt4zdnHdjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU5cOpdlat3Tzz7NiV305foNjEdvQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2JiNmFkYjQ4LThjMzMtNDU2MC04NjIxLWRhZWQwNmE1NjQzMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE0VUQwDQYJKoZIhvcNAQELBQADggEBAJp2XTAZ7YJ6UnuTown+RZRrr8Rm E+CkWPN11oN5LJoxr7QPkLNaEQF51AnhT8hgi8AjU3vzIhH56GpR2Q9tiEGjkYYa SHZa0VM/cbbHoJB4vg6BbR0WJLMf02vrdshxwJnQviGK0fg/nyu+JoKEjdNj80Uc jyC80RU5MiAkneQ1B2k+CdHWeVoCjmL0aYWqQvmL942kAg8vqQcHD94EKf3H39Pd fk9whpBtNLoHXeZmKhZba+DAll14X7qsKcF+4xAFtyFBCrs+mqOj6avkPEeUbDTF G3lQUjqB6eznBRmJ4B3q8MkAeT5Eb2xGhIdIz1lXhXH30oWAX0rZpkaS448= -----END CERTIFICATE-----Generated at Mon Oct 20 11:13:34 2025 by rpki-client