$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d2740bde-9cd3-407c-ad77-87e8d87903b0.roa File: d2740bde-9cd3-407c-ad77-87e8d87903b0.roa (raw, json) Hash identifier: 1ZQPQYSB9Wk2xHhDozytnserqXD6suwP25xem/Db/GA= Subject key identifier: 70:9E:76:CB:80:11:87:42:43:A3:8B:0F:AF:91:0D:6A:3E:79:72:37 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0E9D7E5DF28F698BEB2F68CC590E46C712E534F6 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d2740bde-9cd3-407c-ad77-87e8d87903b0.roa Signing time: Fri 10 Oct 2025 16:10:54 +0000 ROA not before: Fri 10 Oct 2025 16:10:54 +0000 ROA not after: Fri 14 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.79.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:9d:7e:5d:f2:8f:69:8b:eb:2f:68:cc:59:0e:46:c7:12:e5:34:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 10 16:10:54 2025 GMT Not After : Nov 14 23:59:59 2025 GMT Subject: serialNumber=ea43d1a18e580d3b49c52d4f3389f53305be8e8645569a645e18996d1cae1b96, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2c:02:14:44:14:c3:3f:e2:ac:c3:d0:bd:a7: 72:66:8f:d9:46:cd:56:e8:07:bb:c8:6e:16:50:43: 71:07:7f:e8:15:a4:9b:b5:f0:07:da:98:0e:b0:cf: f0:9a:f0:1c:c0:0d:de:67:09:38:30:10:66:98:fe: a3:25:cf:14:92:5a:bb:3f:7f:7d:95:b8:0c:a4:2f: c4:0b:fb:5f:7e:ac:0e:f7:6a:53:14:fb:3d:a9:db: 2f:a8:44:c7:a5:70:2e:be:97:bb:09:87:bb:20:0f: 3a:e7:0e:47:f9:58:01:35:45:22:15:ce:57:28:79: 91:da:0f:0f:17:9a:7e:d7:26:a8:4b:06:ec:be:5b: b2:af:d0:9d:30:59:4c:7e:70:e6:4f:85:f3:1e:2c: 54:8a:b6:95:f3:8d:f3:08:44:5f:c6:83:45:ac:a7: 12:76:be:51:75:83:00:07:66:77:cc:01:ee:19:f3: b4:8b:80:27:cb:54:5d:9c:67:f4:62:3a:7a:9b:75: fa:75:f1:4a:75:27:0c:e7:70:d0:35:a7:c5:8f:63: d9:dd:60:ce:30:90:e2:5e:4e:c4:ad:fe:85:8a:82: 32:6b:a5:7a:ce:12:9b:2f:5b:82:68:cc:15:2e:b3: 33:9e:93:7c:c3:b8:80:ab:ce:6c:4b:04:9d:ca:e0: 6e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:9E:76:CB:80:11:87:42:43:A3:8B:0F:AF:91:0D:6A:3E:79:72:37 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d2740bde-9cd3-407c-ad77-87e8d87903b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.79.32.0/19 Signature Algorithm: sha256WithRSAEncryption 87:4d:a0:c8:47:f7:b1:11:10:27:7a:8c:0e:52:b3:1c:a7:b3: 19:3b:6f:75:31:e9:7b:7e:02:8b:3b:20:05:c6:ed:02:f8:db: e4:b6:0e:2a:a1:c7:43:a7:34:35:11:1d:71:bf:7c:8c:55:ab: 22:a0:a1:c2:bd:85:f8:84:76:cf:ef:1f:76:6f:3e:da:47:91: 07:4c:28:b2:4e:1e:25:b9:27:59:e4:47:51:1a:bf:3f:0b:4d: 5b:c1:22:9b:73:5b:94:62:e0:b1:d3:01:9d:3b:2d:1e:8f:3f: 5c:a0:01:cb:15:3f:4d:23:83:a1:7b:7a:9d:76:a0:63:c3:cc: e6:db:62:b1:aa:2f:92:d3:e1:54:2c:08:f3:2c:62:18:11:32: 42:9c:bd:a1:2b:e4:8c:b8:76:e6:75:74:b2:bb:01:a6:d4:00: 6c:8f:d5:90:a3:ca:22:68:17:53:a6:ae:06:be:54:35:66:e6: 8b:66:e6:4d:ae:27:ae:06:05:93:ff:23:4e:9a:c9:f0:17:39: d8:4e:3b:c7:7b:f5:b0:64:8d:10:5b:a2:8d:20:6e:bd:bb:c5: 02:78:5d:e0:47:a0:aa:66:00:fe:e3:1b:98:12:f8:45:aa:dd: fc:31:c1:65:b7:52:41:99:47:00:e1:6c:72:fe:1e:31:1c:34: 86:95:01:54 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDp1+XfKPaYvrL2jMWQ5GxxLlNPYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDEwMTYxMDU0WhcNMjUxMTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BlYTQzZDFhMThlNTgwZDNiNDljNTJkNGYzMzg5ZjUzMzA1 YmU4ZTg2NDU1NjlhNjQ1ZTE4OTk2ZDFjYWUxYjk2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7LAIURBTDP+Ksw9C9p3Jmj9lGzVboB7vIbhZQQ3EHf+gV pJu18AfamA6wz/Ca8BzADd5nCTgwEGaY/qMlzxSSWrs/f32VuAykL8QL+19+rA73 alMU+z2p2y+oRMelcC6+l7sJh7sgDzrnDkf5WAE1RSIVzlcoeZHaDw8Xmn7XJqhL Buy+W7Kv0J0wWUx+cOZPhfMeLFSKtpXzjfMIRF/Gg0WspxJ2vlF1gwAHZnfMAe4Z 87SLgCfLVF2cZ/RiOnqbdfp18Up1JwzncNA1p8WPY9ndYM4wkOJeTsSt/oWKgjJr pXrOEpsvW4JozBUuszOek3zDuICrzmxLBJ3K4G6bAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUcJ52y4ARh0JDo4sPr5ENaj55cjcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2QyNzQwYmRlLTljZDMtNDA3Yy1hZDc3LTg3ZThkODc5MDNiMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAU0TyAwDQYJKoZIhvcNAQELBQADggEBAIdNoMhH97ERECd6jA5Ssxynsxk7 b3Ux6Xt+Aos7IAXG7QL42+S2Diqhx0OnNDURHXG/fIxVqyKgocK9hfiEds/vH3Zv PtpHkQdMKLJOHiW5J1nkR1Eavz8LTVvBIptzW5Ri4LHTAZ07LR6PP1ygAcsVP00j g6F7ep12oGPDzObbYrGqL5LT4VQsCPMsYhgRMkKcvaEr5Iy4duZ1dLK7AabUAGyP 1ZCjyiJoF1Omrga+VDVm5otm5k2uJ64GBZP/I06ayfAXOdhOO8d79bBkjRBboo0g br27xQJ4XeBHoKpmAP7jG5gS+EWq3fwxwWW3UkGZRwDhbHL+HjEcNIaVAVQ= -----END CERTIFICATE-----Generated at Mon Oct 20 06:00:10 2025 by rpki-client