$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f5a9ebb5-44f4-4a05-a18d-69ef08e12d6a.roa File: f5a9ebb5-44f4-4a05-a18d-69ef08e12d6a.roa (raw, json) Hash identifier: RdEcqyprCV5ECOLB99SpRzpG8Wj+Wvg0WawthrJItXM= Subject key identifier: FD:B6:7B:8D:6E:76:43:6F:10:25:26:57:E0:5D:F0:AD:71:F5:D3:45 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3F09509F1B7AF48180536C45609BE99455B63E6D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f5a9ebb5-44f4-4a05-a18d-69ef08e12d6a.roa Signing time: Sun 19 Oct 2025 07:10:07 +0000 ROA not before: Sun 19 Oct 2025 07:10:07 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.85.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:09:50:9f:1b:7a:f4:81:80:53:6c:45:60:9b:e9:94:55:b6:3e:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 07:10:07 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=4b8f959a622d8dc36d1f0140ba6570617986552b3bc556bd55809e4c85744b37, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:24:f6:53:00:54:29:26:cc:5d:9b:53:31:5d: 32:a4:c1:9a:77:3a:0f:a9:64:11:3f:c7:3e:41:79: 0d:5e:66:b9:fd:18:f0:99:79:a9:d9:de:07:78:c9: 4a:b1:b0:83:01:0b:6d:81:c1:ef:f1:38:22:83:3d: 8d:4e:19:1c:2e:9a:1c:b7:c8:29:9d:0e:ec:44:5c: ef:ae:ba:78:50:6d:9d:9d:3b:4c:12:27:3e:34:7e: d9:32:39:9b:a0:31:98:f1:83:3c:1f:3b:b0:3e:80: 49:3c:ca:30:4f:9f:24:8d:43:87:26:7e:f4:d7:35: 69:ea:77:9a:2d:3c:8b:b6:d2:a3:73:7f:d2:46:66: e8:52:3d:05:ab:32:21:b0:5b:b9:90:3b:26:61:5f: 6e:f6:2c:aa:dd:67:80:de:27:4a:83:46:52:9f:02: 53:36:d7:10:ea:63:a5:f0:02:ab:e8:1b:7d:4f:8c: 29:71:91:41:41:f5:ab:2b:5a:a8:f4:5f:9e:fc:af: 2f:9c:44:e9:75:19:b0:76:3c:a7:5f:5e:f4:30:42: 68:78:fc:d1:8f:13:45:37:98:41:aa:00:5d:81:0a: b2:00:ba:99:65:6f:76:2a:d9:fb:8c:0f:fc:0f:18: 08:05:02:55:ff:7f:5e:5b:e8:8a:91:3d:c7:a2:0b: 1b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:B6:7B:8D:6E:76:43:6F:10:25:26:57:E0:5D:F0:AD:71:F5:D3:45 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f5a9ebb5-44f4-4a05-a18d-69ef08e12d6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.85.125.0/24 Signature Algorithm: sha256WithRSAEncryption 05:3a:a4:fc:be:13:50:72:7b:13:79:84:cb:8a:91:7a:d9:27: 1c:f7:da:06:f2:bd:90:81:e6:94:35:a3:da:ec:65:24:3c:89: b6:b9:9f:69:85:13:10:87:29:ba:46:ac:64:54:a9:64:c7:4e: 91:bc:21:80:e1:6a:06:2f:42:ec:9b:c7:70:6d:0f:e4:eb:bc: 56:97:de:8b:6a:e5:ab:45:6d:53:69:3d:cb:da:2e:90:19:45: 06:69:7f:b5:94:87:1f:9a:81:a8:75:65:09:e7:87:96:10:5d: a4:f6:5f:71:a9:1a:df:db:d3:02:0d:13:9c:d8:25:97:f3:fa: c7:45:6a:1f:50:f7:d2:f6:26:68:9d:2a:8c:73:39:08:cc:cd: 86:dc:a5:d0:1b:07:68:41:a1:95:31:81:92:9f:2c:3d:be:f8: de:90:42:95:41:8e:5c:62:01:13:59:52:f5:17:cb:28:de:4a: a4:e4:99:83:63:ca:01:2f:bf:d3:ac:0e:68:23:3e:34:ef:f3: ef:91:85:82:db:0f:47:5b:f6:9a:43:35:20:34:c2:4c:21:5f: ce:31:39:37:a4:c8:aa:6a:ca:4d:d5:ab:40:69:f2:3d:69:57: c1:0c:97:0c:df:9a:00:b0:ab:96:3c:ed:53:1c:ee:d8:81:e9: 24:e5:40:5c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPwlQnxt69IGAU2xFYJvplFW2Pm0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MDcxMDA3WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A0YjhmOTU5YTYyMmQ4ZGMzNmQxZjAxNDBiYTY1NzA2MTc5 ODY1NTJiM2JjNTU2YmQ1NTgwOWU0Yzg1NzQ0YjM3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCbJPZTAFQpJsxdm1MxXTKkwZp3Og+pZBE/xz5BeQ1eZrn9 GPCZeanZ3gd4yUqxsIMBC22Bwe/xOCKDPY1OGRwumhy3yCmdDuxEXO+uunhQbZ2d O0wSJz40ftkyOZugMZjxgzwfO7A+gEk8yjBPnySNQ4cmfvTXNWnqd5otPIu20qNz f9JGZuhSPQWrMiGwW7mQOyZhX272LKrdZ4DeJ0qDRlKfAlM21xDqY6XwAqvoG31P jClxkUFB9asrWqj0X578ry+cROl1GbB2PKdfXvQwQmh4/NGPE0U3mEGqAF2BCrIA upllb3Yq2fuMD/wPGAgFAlX/f15b6IqRPceiCxt7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU/bZ7jW52Q28QJSZX4F3wrXH100UwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2Y1YTllYmI1LTQ0ZjQtNGEwNS1hMThkLTY5ZWYwOGUxMmQ2YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0VX0wDQYJKoZIhvcNAQELBQADggEBAAU6pPy+E1ByexN5hMuKkXrZJxz3 2gbyvZCB5pQ1o9rsZSQ8iba5n2mFExCHKbpGrGRUqWTHTpG8IYDhagYvQuybx3Bt D+TrvFaX3otq5atFbVNpPcvaLpAZRQZpf7WUhx+agah1ZQnnh5YQXaT2X3GpGt/b 0wINE5zYJZfz+sdFah9Q99L2JmidKoxzOQjMzYbcpdAbB2hBoZUxgZKfLD2++N6Q QpVBjlxiARNZUvUXyyjeSqTkmYNjygEvv9OsDmgjPjTv8++RhYLbD0db9ppDNSA0 wkwhX84xOTekyKpqyk3Vq0Bp8j1pV8EMlwzfmgCwq5Y87VMc7tiB6STlQFw= -----END CERTIFICATE-----Generated at Mon Oct 20 17:29:09 2025 by rpki-client