$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c99706f0-8cad-4109-a52d-9a96aab72aad.roa File: c99706f0-8cad-4109-a52d-9a96aab72aad.roa (raw, json) Hash identifier: H0+5W2l3Iy5/iXnOSCy5Dv7gW+zAMNRyOMN0Wh3gZhE= Subject key identifier: A6:57:D3:22:52:09:46:82:64:08:91:06:6A:A0:7D:F8:6C:5D:D5:66 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 184263B62F7AAA58BA9CD29BADCC0116DE2418F7 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c99706f0-8cad-4109-a52d-9a96aab72aad.roa Signing time: Sat 18 Oct 2025 19:43:54 +0000 ROA not before: Sat 18 Oct 2025 19:43:54 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.46.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:42:63:b6:2f:7a:aa:58:ba:9c:d2:9b:ad:cc:01:16:de:24:18:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 19:43:54 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=4ae6406c533c961ef5b81075c568822e4c4a78055d376bd7ee76db856e324e82, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:86:e7:20:f0:87:df:8b:d9:91:26:69:9a:13: ad:57:c4:5d:76:86:2c:9e:72:18:e7:0d:fa:fb:b3: ad:6e:ba:32:ff:62:fb:b5:fa:e6:9a:52:41:3d:f6: 8f:fa:6f:c2:db:a0:44:5b:67:7f:9e:4e:66:bb:59: 2d:2e:82:2e:8c:f7:ba:4a:4a:6a:83:5c:b3:56:ca: 14:21:88:3d:b7:98:1c:38:9b:02:6a:4f:2e:89:42: b9:28:44:b9:bf:b1:59:a4:77:e7:8c:5f:c8:bd:21: 3f:f2:6f:3e:ba:f7:74:95:20:8c:9f:97:62:4b:c4: 46:bf:4b:83:db:9e:4a:ff:78:6c:e4:69:33:1d:0f: 1a:12:60:15:f7:8c:61:0e:51:3e:70:25:a3:ee:bf: 78:65:8a:99:a6:7c:e1:9f:a9:19:97:48:a7:29:fd: d5:1e:27:a2:2e:ae:0e:6e:40:e6:8c:76:dc:b9:08: ef:74:da:11:c0:3b:90:7a:57:9e:57:0c:cb:e3:b3: a4:72:9e:d1:22:91:10:e1:37:3d:c9:e0:db:ff:4f: 2c:3b:5c:28:20:6d:24:60:06:11:38:36:fe:a3:23: 44:80:cf:a7:99:35:03:1e:82:e2:9d:b0:3a:65:a8: 01:a3:10:fc:d2:d1:4d:e3:7d:57:c5:da:74:32:77: ae:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:57:D3:22:52:09:46:82:64:08:91:06:6A:A0:7D:F8:6C:5D:D5:66 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c99706f0-8cad-4109-a52d-9a96aab72aad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.46.63.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:80:ca:62:54:e9:03:bd:58:31:56:11:2b:dd:a8:63:bb:7c: 0a:69:d7:2e:8b:b6:75:9d:e9:6c:ab:e4:04:b7:f2:db:0d:39: 0c:07:d3:e4:39:05:0a:58:4d:77:f9:8f:77:d9:33:22:41:ae: 90:54:ca:a4:18:60:0d:25:ae:76:e3:5c:b5:a6:60:15:14:78: 3a:68:71:74:98:42:a4:b1:64:f6:a2:4c:5e:6f:be:4b:0d:e2: 87:0a:e3:aa:6d:50:cb:98:37:bb:41:76:d7:f8:5c:6b:22:cf: d1:05:8b:35:67:15:41:bb:20:1c:13:15:3e:3a:3d:48:50:31: e2:34:68:99:1f:df:7c:bd:70:00:69:5e:eb:07:9b:61:e7:68: a1:59:bf:1a:73:23:d4:10:bb:fd:65:32:5a:65:f4:e1:b5:92: de:ce:53:c9:84:2a:14:37:05:bf:99:38:19:9e:d6:5a:a4:6b: 17:c8:51:98:db:ba:6a:bb:2b:48:71:50:16:c0:54:31:30:0f: b0:6c:af:6d:a0:92:37:12:6a:21:a2:f4:40:61:d1:db:25:86: e3:58:79:6c:92:a3:09:59:ea:ab:25:08:65:ba:91:99:8b:be: 96:28:5f:f6:74:83:a6:57:14:77:70:ee:65:ac:f0:bf:de:cb: a5:f5:38:69 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGEJjti96qli6nNKbrcwBFt4kGPcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTk0MzU0WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A0YWU2NDA2YzUzM2M5NjFlZjViODEwNzVjNTY4ODIyZTRj NGE3ODA1NWQzNzZiZDdlZTc2ZGI4NTZlMzI0ZTgyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDThucg8Iffi9mRJmmaE61XxF12hiyechjnDfr7s61uujL/ Yvu1+uaaUkE99o/6b8LboERbZ3+eTma7WS0ugi6M97pKSmqDXLNWyhQhiD23mBw4 mwJqTy6JQrkoRLm/sVmkd+eMX8i9IT/ybz6693SVIIyfl2JLxEa/S4Pbnkr/eGzk aTMdDxoSYBX3jGEOUT5wJaPuv3hlipmmfOGfqRmXSKcp/dUeJ6Iurg5uQOaMdty5 CO902hHAO5B6V55XDMvjs6RyntEikRDhNz3J4Nv/Tyw7XCggbSRgBhE4Nv6jI0SA z6eZNQMeguKdsDplqAGjEPzS0U3jfVfF2nQyd64TAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUplfTIlIJRoJkCJEGaqB9+Gxd1WYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2M5OTcwNmYwLThjYWQtNDEwOS1hNTJkLTlhOTZhYWI3MmFhZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0Lj8wDQYJKoZIhvcNAQELBQADggEBAF2AymJU6QO9WDFWESvdqGO7fApp 1y6LtnWd6Wyr5AS38tsNOQwH0+Q5BQpYTXf5j3fZMyJBrpBUyqQYYA0lrnbjXLWm YBUUeDpocXSYQqSxZPaiTF5vvksN4ocK46ptUMuYN7tBdtf4XGsiz9EFizVnFUG7 IBwTFT46PUhQMeI0aJkf33y9cABpXusHm2HnaKFZvxpzI9QQu/1lMlpl9OG1kt7O U8mEKhQ3Bb+ZOBme1lqkaxfIUZjbumq7K0hxUBbAVDEwD7Bsr22gkjcSaiGi9EBh 0dslhuNYeWySowlZ6qslCGW6kZmLvpYoX/Z0g6ZXFHdw7mWs8L/ey6X1OGk= -----END CERTIFICATE-----Generated at Mon Oct 20 02:57:08 2025 by rpki-client