$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c01a992b-9ec4-42de-9eff-0e570021c59f.roa File: c01a992b-9ec4-42de-9eff-0e570021c59f.roa (raw, json) Hash identifier: p19CT1OK9iAhB0y/xg86p+syFv5EgfT+fi+vbn6i2mo= Subject key identifier: 2D:6B:62:FB:02:95:28:16:EC:1F:2D:E9:15:BB:14:C8:C9:12:FF:E7 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2818921BA5A1F6A2B820B1C4F4A39FCFE62C6C8D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c01a992b-9ec4-42de-9eff-0e570021c59f.roa Signing time: Fri 17 Oct 2025 23:51:22 +0000 ROA not before: Fri 17 Oct 2025 23:51:22 +0000 ROA not after: Fri 21 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.192.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:18:92:1b:a5:a1:f6:a2:b8:20:b1:c4:f4:a3:9f:cf:e6:2c:6c:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 17 23:51:22 2025 GMT Not After : Nov 21 23:59:59 2025 GMT Subject: serialNumber=30b71faf00d01dcda347d2c70b1465e660216fd39b0b045bb38d92d552e65931, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:60:c1:7f:e4:f2:51:80:b1:6c:b4:74:87:5b: 41:70:10:e3:d0:76:41:86:45:d0:88:e9:9a:59:1c: 19:b7:f8:92:93:0c:23:41:8c:f5:8f:d0:50:e3:58: 6f:ca:95:13:d2:05:55:69:63:7b:de:ab:3a:87:20: 11:cd:4f:0a:70:4d:20:a1:5f:2f:ae:8e:82:85:2e: 34:c8:bf:f5:62:63:1f:17:14:34:e7:e7:39:28:0f: b6:4f:1a:c5:bf:3c:1f:4f:69:62:6c:7c:3b:bb:4d: 13:3a:05:8d:c4:f5:78:d1:73:19:c3:0a:e3:8a:a7: 80:20:42:d2:46:c8:ac:4e:b5:7e:b6:b7:68:66:6e: a3:3e:25:d2:e9:45:fc:b5:a8:4a:86:3c:17:9c:e4: 45:2b:88:87:68:04:77:cf:12:e3:87:64:a3:31:18: 51:56:c4:df:1e:a0:8c:78:17:7d:bf:79:b8:e2:54: 9d:07:89:8c:5f:31:9d:e7:af:56:58:aa:dc:67:b9: 26:c2:a8:ed:dd:63:8a:1c:67:f7:c8:e3:fb:4f:b8: ab:cd:53:f7:a1:fd:64:dd:23:54:7c:3b:33:f0:ef: 55:96:f1:0d:e9:38:e6:cf:f3:27:9c:fe:10:16:47: ba:91:8e:02:07:a3:d8:49:b9:b9:9f:7c:97:56:63: 93:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:6B:62:FB:02:95:28:16:EC:1F:2D:E9:15:BB:14:C8:C9:12:FF:E7 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c01a992b-9ec4-42de-9eff-0e570021c59f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.192.132.0/22 Signature Algorithm: sha256WithRSAEncryption 64:ae:d8:11:76:23:b3:22:06:a9:e0:91:22:d9:e4:8b:d4:ce: 5d:7c:12:ee:1c:c0:55:b1:82:11:88:02:c3:ab:67:82:c9:31: 5f:71:8d:08:5a:25:8e:de:05:65:3d:dc:6b:9c:12:35:6d:0e: bc:90:da:77:49:6c:7f:c4:5f:01:9d:02:7e:46:aa:34:c2:2b: 35:08:45:34:06:59:f4:aa:d4:f8:c7:e8:a0:df:d3:f1:47:80: ce:a6:72:67:47:1e:bb:d7:a4:a0:52:34:53:56:5f:10:c4:ef: 82:38:f3:b1:c4:9b:af:32:7c:09:a0:58:af:f3:1d:33:93:76: f6:48:86:b8:57:ed:85:6c:d7:87:f8:09:07:b0:13:c4:78:1d: 09:b5:7f:98:f9:1c:39:d4:92:1c:9c:45:08:81:80:d8:27:d0: 27:d7:6f:4b:ad:41:19:88:58:89:47:33:29:41:f8:cb:58:c3: d2:23:1e:00:a3:57:4c:53:9f:96:67:2e:38:5b:56:29:96:0a: 9f:af:58:ef:bb:40:aa:c7:f6:e6:bb:50:de:00:99:aa:c3:95: 30:42:a0:f3:c8:50:97:f1:32:fd:8c:2f:76:1f:3b:58:6f:8f: 05:18:45:29:9f:58:65:7e:92:31:3b:92:68:8d:67:a2:15:3a: b6:e9:ea:9c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKBiSG6Wh9qK4ILHE9KOfz+YsbI0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE3MjM1MTIyWhcNMjUxMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AzMGI3MWZhZjAwZDAxZGNkYTM0N2QyYzcwYjE0NjVlNjYw MjE2ZmQzOWIwYjA0NWJiMzhkOTJkNTUyZTY1OTMxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCUYMF/5PJRgLFstHSHW0FwEOPQdkGGRdCI6ZpZHBm3+JKT DCNBjPWP0FDjWG/KlRPSBVVpY3veqzqHIBHNTwpwTSChXy+ujoKFLjTIv/ViYx8X FDTn5zkoD7ZPGsW/PB9PaWJsfDu7TRM6BY3E9XjRcxnDCuOKp4AgQtJGyKxOtX62 t2hmbqM+JdLpRfy1qEqGPBec5EUriIdoBHfPEuOHZKMxGFFWxN8eoIx4F32/ebji VJ0HiYxfMZ3nr1ZYqtxnuSbCqO3dY4ocZ/fI4/tPuKvNU/eh/WTdI1R8OzPw71WW 8Q3pOObP8yec/hAWR7qRjgIHo9hJubmffJdWY5MLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQULWti+wKVKBbsHy3pFbsUyMkS/+cwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2MwMWE5OTJiLTllYzQtNDJkZS05ZWZmLTBlNTcwMDIxYzU5Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI2wIQwDQYJKoZIhvcNAQELBQADggEBAGSu2BF2I7MiBqngkSLZ5IvUzl18 Eu4cwFWxghGIAsOrZ4LJMV9xjQhaJY7eBWU93GucEjVtDryQ2ndJbH/EXwGdAn5G qjTCKzUIRTQGWfSq1PjH6KDf0/FHgM6mcmdHHrvXpKBSNFNWXxDE74I487HEm68y fAmgWK/zHTOTdvZIhrhX7YVs14f4CQewE8R4HQm1f5j5HDnUkhycRQiBgNgn0CfX b0utQRmIWIlHMylB+MtYw9IjHgCjV0xTn5ZnLjhbVimWCp+vWO+7QKrH9ua7UN4A marDlTBCoPPIUJfxMv2ML3YfO1hvjwUYRSmfWGV+kjE7kmiNZ6IVOrbp6pw= -----END CERTIFICATE-----Generated at Mon Oct 20 02:56:29 2025 by rpki-client