$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cb4fc092-e580-400a-b2d8-503cebd78c57.roa File: cb4fc092-e580-400a-b2d8-503cebd78c57.roa (raw, json) Hash identifier: ByXfYovFNG0IIMLEjTjoTf0ZIH0b0nFrQPwbpt4sCTk= Subject key identifier: 12:ED:F7:FC:5F:50:86:5F:02:91:5A:63:07:77:55:26:62:02:F6:50 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 69EBE07A2FA034043D5B58261428BF798A663459 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cb4fc092-e580-400a-b2d8-503cebd78c57.roa Signing time: Sun 19 Oct 2025 06:00:14 +0000 ROA not before: Sun 19 Oct 2025 06:00:14 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.95.60.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:eb:e0:7a:2f:a0:34:04:3d:5b:58:26:14:28:bf:79:8a:66:34:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 06:00:14 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=1e217b75368930ed031b257fffe0731db0f198adfa0f4482c3fb46f13b64fd7a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:41:64:96:ba:d2:83:07:97:57:65:87:7b:4d: b0:1e:41:ba:02:df:b9:ea:f1:64:3a:6d:f2:d4:8d: 79:2e:6b:d3:a4:60:5e:29:48:ed:3d:b6:9a:92:4f: 39:8b:49:42:3f:ef:d5:45:75:dc:e8:5f:e9:fa:ec: ab:f1:a7:4c:05:3a:90:bb:aa:0a:ba:63:7f:e9:ac: 56:0c:79:38:c1:7e:fa:f9:31:04:f5:52:a8:d1:3e: 51:ef:5e:8e:c5:cc:d4:4d:87:69:25:eb:8d:fa:3a: ac:83:ae:ef:9e:ed:a9:62:96:9a:46:85:7c:b2:b5: 41:d3:e4:d4:0d:9f:c0:5e:e0:5e:f2:01:da:11:d3: d2:ca:4d:fc:2e:37:aa:a2:f6:dd:00:2d:98:6e:5c: 73:62:32:c1:2c:da:f3:62:ee:9d:92:c0:57:e2:66: c2:d9:11:39:1e:97:bb:51:80:50:92:84:8d:db:88: 5d:db:b0:7a:52:b6:ea:68:01:6b:a2:59:f1:4f:32: a8:d0:1f:77:b4:f7:2b:67:42:46:61:a6:ba:6e:bd: 53:08:a8:46:cc:92:bd:22:e0:e4:cf:49:04:55:a6: 10:59:7c:85:f7:6e:e4:1b:01:40:e0:69:30:f2:76: c2:c1:3c:63:27:c1:e5:24:5b:23:c8:32:10:8c:c8: 62:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:ED:F7:FC:5F:50:86:5F:02:91:5A:63:07:77:55:26:62:02:F6:50 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cb4fc092-e580-400a-b2d8-503cebd78c57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.95.60.0/22 Signature Algorithm: sha256WithRSAEncryption 81:8f:41:1d:2b:cb:a1:f6:41:2e:d5:d4:16:c5:3c:36:12:36: ee:d6:58:9f:6a:58:f6:c6:1c:31:d5:78:7e:6a:4f:99:c2:89: 58:69:40:d6:24:4f:04:ab:a6:1b:52:60:f9:dd:ae:52:ac:d0: 98:6f:13:9b:93:11:95:f4:c7:77:51:f9:a3:7d:17:70:08:10: d8:d4:e2:73:98:c2:a5:e0:7d:23:01:ad:f5:fe:81:9b:00:b1: 49:8f:1d:9d:92:17:53:15:21:38:3e:19:41:1b:11:3e:ac:77: d9:7f:22:52:27:d9:56:f3:7b:71:fb:b5:62:7e:24:5f:a7:61: 89:db:00:9b:95:09:78:45:5b:dd:0d:57:0c:1d:c5:28:88:01: 70:69:4a:fa:06:b3:45:ff:1f:67:06:03:3f:14:82:1a:d4:7b: 80:7c:b5:eb:01:6c:b6:af:83:78:29:54:f7:6d:60:74:5c:79: 5a:53:8a:3a:51:21:d1:1e:ba:8b:07:4f:96:64:ca:63:cd:56: 79:0b:47:8c:f0:a5:45:d8:b6:e8:a3:26:5f:33:48:cc:1c:3d: c5:44:fe:cd:80:e5:b3:ff:34:ce:b7:92:33:a0:73:ce:b7:41: 01:bc:8c:af:22:43:12:2c:d4:fb:8e:a3:3b:47:a7:f9:26:44: 8c:c5:ff:cc -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUaevgei+gNAQ9W1gmFCi/eYpmNFkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MDYwMDE0WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AxZTIxN2I3NTM2ODkzMGVkMDMxYjI1N2ZmZmUwNzMxZGIw ZjE5OGFkZmEwZjQ0ODJjM2ZiNDZmMTNiNjRmZDdhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJQWSWutKDB5dXZYd7TbAeQboC37nq8WQ6bfLUjXkua9Ok YF4pSO09tpqSTzmLSUI/79VFddzoX+n67Kvxp0wFOpC7qgq6Y3/prFYMeTjBfvr5 MQT1UqjRPlHvXo7FzNRNh2kl6436OqyDru+e7alilppGhXyytUHT5NQNn8Be4F7y AdoR09LKTfwuN6qi9t0ALZhuXHNiMsEs2vNi7p2SwFfiZsLZETkel7tRgFCShI3b iF3bsHpStupoAWuiWfFPMqjQH3e09ytnQkZhprpuvVMIqEbMkr0i4OTPSQRVphBZ fIX3buQbAUDgaTDydsLBPGMnweUkWyPIMhCMyGJtAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUEu33/F9Qhl8CkVpjB3dVJmIC9lAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2NiNGZjMDkyLWU1ODAtNDAwYS1iMmQ4LTUwM2NlYmQ3OGM1Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI0XzwwDQYJKoZIhvcNAQELBQADggEBAIGPQR0ry6H2QS7V1BbFPDYSNu7W WJ9qWPbGHDHVeH5qT5nCiVhpQNYkTwSrphtSYPndrlKs0JhvE5uTEZX0x3dR+aN9 F3AIENjU4nOYwqXgfSMBrfX+gZsAsUmPHZ2SF1MVITg+GUEbET6sd9l/IlIn2Vbz e3H7tWJ+JF+nYYnbAJuVCXhFW90NVwwdxSiIAXBpSvoGs0X/H2cGAz8UghrUe4B8 tesBbLavg3gpVPdtYHRceVpTijpRIdEeuosHT5ZkymPNVnkLR4zwpUXYtuijJl8z SMwcPcVE/s2A5bP/NM63kjOgc863QQG8jK8iQxIs1PuOoztHp/kmRIzF/8w= -----END CERTIFICATE-----Generated at Mon Oct 20 06:30:25 2025 by rpki-client