$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f20f78b4-2897-4bf3-8564-f48844ab0dfc.roa File: f20f78b4-2897-4bf3-8564-f48844ab0dfc.roa (raw, json) Hash identifier: FhUS8oKeiut5lJSJ8O8Ro1sJ0soNrv/ylHStbPvZCuo= Subject key identifier: CA:04:46:51:66:CF:4D:1C:F1:B7:7A:7F:BF:A1:C9:1A:8E:FF:FC:CC Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 50760EAE6F011E3C53DC49CB582F882AD40C7255 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f20f78b4-2897-4bf3-8564-f48844ab0dfc.roa Signing time: Sun 19 Oct 2025 07:00:10 +0000 ROA not before: Sun 19 Oct 2025 07:00:10 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.85.196.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:76:0e:ae:6f:01:1e:3c:53:dc:49:cb:58:2f:88:2a:d4:0c:72:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 07:00:10 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=81d1241b88e373f7b9292990070b8531b3375d4d6734e9c54eff5b0a7e84003b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4d:5f:f0:d8:71:5d:a0:9f:6e:a5:c3:ef:59: 67:b4:07:f9:75:f5:2f:22:8f:8c:df:b2:0d:92:21: 29:b3:87:13:64:60:e3:14:47:ed:72:2a:e5:b2:2f: e0:a9:c8:4e:2b:06:ed:03:79:c4:73:51:2e:8d:d7: f3:ce:65:02:bc:af:a5:49:c2:58:63:49:e6:74:ae: fe:1f:a4:8a:55:8d:87:3a:a8:77:76:b4:14:3f:42: ee:89:5f:60:52:7d:7c:1f:13:1d:5a:30:97:a2:ac: 81:e2:75:d7:52:60:6c:eb:29:8c:c8:52:9f:9b:07: 44:d3:c4:ef:03:e0:aa:e1:57:1a:1d:01:5b:0d:49: 60:6b:5f:90:3b:6c:7b:4d:85:41:ea:dd:54:12:b9: 41:3d:69:23:71:92:89:7c:93:98:73:7b:ac:c0:38: 2e:ed:af:df:7b:40:4b:ae:7d:07:ee:10:b2:e4:2e: b2:04:ba:08:70:16:a8:d5:55:fd:6b:c6:fd:12:cd: 87:5f:aa:55:15:bc:8b:e5:25:8e:17:f1:66:12:52: c6:f7:0f:09:f4:ff:5d:5e:58:0d:8f:d9:7f:c5:8f: 01:aa:b5:49:53:8a:b5:03:c6:12:46:02:fa:6c:34: 5b:98:d7:16:57:8c:53:fd:a0:99:01:c5:68:03:92: ff:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:04:46:51:66:CF:4D:1C:F1:B7:7A:7F:BF:A1:C9:1A:8E:FF:FC:CC X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f20f78b4-2897-4bf3-8564-f48844ab0dfc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.85.196.0/23 Signature Algorithm: sha256WithRSAEncryption 44:f3:a0:17:f4:86:71:d8:27:7b:2b:0d:10:5e:43:1d:e3:fd: de:de:33:92:ce:de:5a:5e:3d:ae:44:b8:c3:c2:80:80:a8:f5: 7c:c6:a3:a2:b6:49:33:d8:1d:67:75:24:12:56:5f:67:2c:c4: e4:8e:cc:1a:eb:3e:c6:10:26:f8:53:15:5d:e8:6a:0f:8d:57: 05:bb:92:d6:f0:ab:0b:93:32:96:3f:ad:4c:cd:58:02:b7:4c: 32:dc:40:37:90:88:25:7b:48:a9:61:23:44:f3:00:67:84:aa: a2:d7:12:ad:09:50:b6:f2:d8:8c:93:a2:6b:c5:32:0b:29:1b: d1:30:dd:ad:d2:5e:50:ec:86:67:41:d8:86:9b:56:af:6f:61: 24:1a:44:10:25:fd:a2:c0:e7:41:43:dc:c8:3d:88:a1:a5:a5: 7c:5e:75:ec:d1:c4:7c:18:95:4f:b4:be:b1:3c:15:c2:76:f3: 64:96:70:96:c0:5a:7d:8d:1d:21:3b:80:2f:27:12:43:32:66: 3c:4a:85:b6:04:ed:ae:69:86:3f:74:89:0f:be:99:27:25:b6: db:db:54:f4:37:bd:96:97:fe:08:25:ce:73:18:cd:cc:2e:99: 89:ff:51:ab:83:d3:5c:4c:57:10:e4:85:fb:93:f1:c7:c0:b0: ca:6a:79:8b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUHYOrm8BHjxT3EnLWC+IKtQMclUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MDcwMDEwWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A4MWQxMjQxYjg4ZTM3M2Y3YjkyOTI5OTAwNzBiODUzMWIz Mzc1ZDRkNjczNGU5YzU0ZWZmNWIwYTdlODQwMDNiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDPTV/w2HFdoJ9upcPvWWe0B/l19S8ij4zfsg2SISmzhxNk YOMUR+1yKuWyL+CpyE4rBu0DecRzUS6N1/POZQK8r6VJwlhjSeZ0rv4fpIpVjYc6 qHd2tBQ/Qu6JX2BSfXwfEx1aMJeirIHidddSYGzrKYzIUp+bB0TTxO8D4KrhVxod AVsNSWBrX5A7bHtNhUHq3VQSuUE9aSNxkol8k5hze6zAOC7tr997QEuufQfuELLk LrIEughwFqjVVf1rxv0SzYdfqlUVvIvlJY4X8WYSUsb3Dwn0/11eWA2P2X/FjwGq tUlTirUDxhJGAvpsNFuY1xZXjFP9oJkBxWgDkv/vAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUygRGUWbPTRzxt3p/v6HJGo7//MwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2YyMGY3OGI0LTI4OTctNGJmMy04NTY0LWY0ODg0NGFiMGRmYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE0VcQwDQYJKoZIhvcNAQELBQADggEBAETzoBf0hnHYJ3srDRBeQx3j/d7e M5LO3lpePa5EuMPCgICo9XzGo6K2STPYHWd1JBJWX2csxOSOzBrrPsYQJvhTFV3o ag+NVwW7ktbwqwuTMpY/rUzNWAK3TDLcQDeQiCV7SKlhI0TzAGeEqqLXEq0JULby 2IyTomvFMgspG9Ew3a3SXlDshmdB2IabVq9vYSQaRBAl/aLA50FD3Mg9iKGlpXxe dezRxHwYlU+0vrE8FcJ282SWcJbAWn2NHSE7gC8nEkMyZjxKhbYE7a5phj90iQ++ mSclttvbVPQ3vZaX/gglznMYzcwumYn/UauD01xMVxDkhfuT8cfAsMpqeYs= -----END CERTIFICATE-----Generated at Mon Oct 20 11:11:03 2025 by rpki-client