$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d55161b2-31ef-4872-8f81-7b9f8936332f.roa File: d55161b2-31ef-4872-8f81-7b9f8936332f.roa (raw, json) Hash identifier: HqsHJbe3Wlwg+jBqBT2PiVrcNWQoWVMrIlGadnJzO7Y= Subject key identifier: E3:CD:76:BE:67:75:77:F5:0B:F6:27:83:57:74:CC:F9:47:B6:A1:82 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 09AA24A347AB9A2D933231A6F14F005B9B506A4C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d55161b2-31ef-4872-8f81-7b9f8936332f.roa Signing time: Sun 19 Oct 2025 07:22:42 +0000 ROA not before: Sun 19 Oct 2025 07:22:42 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.84.84.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:aa:24:a3:47:ab:9a:2d:93:32:31:a6:f1:4f:00:5b:9b:50:6a:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 07:22:42 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=54245363ba4f8c13ed9bb76a9ed76b8175cb17c98dee60effc18f150b46e271e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c6:45:f8:44:70:7e:d7:16:3c:3a:10:ea:e5: e8:11:31:c0:84:e8:e4:15:e0:0f:3b:05:9d:f3:4e: 90:7d:f2:7b:4e:3f:dd:c0:a7:e1:f9:45:6e:ea:c3: aa:7e:f6:18:75:dd:e6:dc:08:af:52:e2:46:2a:04: c5:1f:e7:9a:60:74:1a:50:c0:c1:79:ee:5b:28:76: 9f:f7:49:1b:12:a8:35:61:77:ac:43:65:e1:7e:b3: 16:39:8e:0d:42:0c:8d:e6:74:69:9d:e5:42:2e:89: b1:a5:0d:bf:af:c7:db:14:70:2d:56:65:03:6b:33: 96:d8:81:24:c0:3d:f6:01:db:9a:fd:b5:c8:dd:1e: 57:a1:6d:ff:90:71:b2:32:92:eb:35:82:b8:2a:23: a2:9b:8d:25:38:c0:e8:44:5e:fe:60:4a:be:68:54: 5e:1d:17:31:08:e8:88:2c:ad:3b:d5:42:87:79:aa: 38:8e:10:20:45:5f:d4:f7:3e:44:87:b6:0b:e8:da: a1:a8:03:ae:0f:ff:a0:c4:12:7e:ae:c8:23:1e:ee: 62:41:2c:86:d1:5d:73:05:77:bf:c0:93:5c:82:ed: 89:d6:68:94:3b:79:21:2b:7d:6b:6f:20:77:c7:d1: 72:34:93:57:83:7f:a9:a6:2c:f5:e5:55:ba:d6:28: 80:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:CD:76:BE:67:75:77:F5:0B:F6:27:83:57:74:CC:F9:47:B6:A1:82 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d55161b2-31ef-4872-8f81-7b9f8936332f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.84.84.0/23 Signature Algorithm: sha256WithRSAEncryption a5:ac:a7:44:61:95:eb:e5:40:cb:a2:d8:cd:eb:57:de:1e:f9: f9:1b:52:c5:e3:db:f8:dd:ae:0f:ed:b2:c0:62:ff:cb:29:55: 59:65:be:36:5c:f5:53:02:ee:5b:7a:8d:17:29:70:60:f7:01: eb:2f:25:ba:d7:7c:96:35:4d:68:85:de:fa:f7:de:f2:16:52: 59:ac:15:e3:7d:0f:a3:ae:05:d7:d5:09:5a:54:f9:3d:57:be: 7b:90:d6:9d:d6:29:6b:21:aa:e2:a9:8e:ca:50:5e:e0:04:3a: dd:f7:e5:eb:27:98:5a:dc:55:eb:bb:35:21:77:a4:fe:dd:66: 17:ca:ce:03:64:63:17:f4:d0:7d:b6:41:8d:72:80:ae:bc:73: 13:6f:2d:99:50:e5:9a:5d:ae:0d:30:de:9b:38:bc:de:a6:d2: 0d:be:4d:8f:3a:1e:be:dd:2e:5b:f0:5d:aa:d3:d3:c2:e5:8c: 8a:26:d7:3b:4f:e6:44:cc:98:12:32:d4:0e:cd:ad:5b:97:af: 61:a5:b6:ae:6c:8c:3d:7a:06:1a:a4:54:59:cb:0a:94:74:fb: 78:3f:72:47:a4:15:20:39:23:13:35:e0:2b:fa:a2:ae:df:fd: 85:6e:79:fa:f1:67:10:4a:1e:7b:2a:28:96:18:65:a0:0a:de: 82:50:a7:70 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCaoko0ermi2TMjGm8U8AW5tQakwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MDcyMjQyWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A1NDI0NTM2M2JhNGY4YzEzZWQ5YmI3NmE5ZWQ3NmI4MTc1 Y2IxN2M5OGRlZTYwZWZmYzE4ZjE1MGI0NmUyNzFlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrxkX4RHB+1xY8OhDq5egRMcCE6OQV4A87BZ3zTpB98ntO P93Ap+H5RW7qw6p+9hh13ebcCK9S4kYqBMUf55pgdBpQwMF57lsodp/3SRsSqDVh d6xDZeF+sxY5jg1CDI3mdGmd5UIuibGlDb+vx9sUcC1WZQNrM5bYgSTAPfYB25r9 tcjdHlehbf+QcbIykus1grgqI6KbjSU4wOhEXv5gSr5oVF4dFzEI6IgsrTvVQod5 qjiOECBFX9T3PkSHtgvo2qGoA64P/6DEEn6uyCMe7mJBLIbRXXMFd7/Ak1yC7YnW aJQ7eSErfWtvIHfH0XI0k1eDf6mmLPXlVbrWKIDhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU4812vmd1d/UL9ieDV3TM+Ue2oYIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2Q1NTE2MWIyLTMxZWYtNDg3Mi04ZjgxLTdiOWY4OTM2MzMyZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE0VFQwDQYJKoZIhvcNAQELBQADggEBAKWsp0RhlevlQMui2M3rV94e+fkb UsXj2/jdrg/tssBi/8spVVllvjZc9VMC7lt6jRcpcGD3AesvJbrXfJY1TWiF3vr3 3vIWUlmsFeN9D6OuBdfVCVpU+T1XvnuQ1p3WKWshquKpjspQXuAEOt335esnmFrc Veu7NSF3pP7dZhfKzgNkYxf00H22QY1ygK68cxNvLZlQ5Zpdrg0w3ps4vN6m0g2+ TY86Hr7dLlvwXarT08LljIom1ztP5kTMmBIy1A7NrVuXr2Gltq5sjD16BhqkVFnL CpR0+3g/ckekFSA5IxM14Cv6oq7f/YVuefrxZxBKHnsqKJYYZaAK3oJQp3A= -----END CERTIFICATE-----Generated at Mon Oct 20 11:09:43 2025 by rpki-client