$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f6426ab6-e129-49be-bb33-3392c0121da9.roa File: f6426ab6-e129-49be-bb33-3392c0121da9.roa (raw, json) Hash identifier: h2+hUd87FYgSHIMyBd+20Fd0t8y01Jeoe/HnBaEhzoI= Subject key identifier: 13:3F:34:1B:0D:23:EE:6E:63:70:91:C3:35:7D:2C:03:64:C0:AB:EB Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 584D90AF9C2C1116FB2EA507321CF2AE68E33319 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f6426ab6-e129-49be-bb33-3392c0121da9.roa Signing time: Thu 16 Oct 2025 19:58:16 +0000 ROA not before: Thu 16 Oct 2025 19:58:16 +0000 ROA not after: Thu 20 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.182.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:4d:90:af:9c:2c:11:16:fb:2e:a5:07:32:1c:f2:ae:68:e3:33:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 16 19:58:16 2025 GMT Not After : Nov 20 23:59:59 2025 GMT Subject: serialNumber=adadb0686d5ad73ca1fc18c6371bc5f190ebd494d785334ab8e5888811f85e69, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ba:02:cc:bd:68:09:a2:2c:1a:2b:bf:97:11: 98:11:34:4a:0d:c9:7a:e5:43:91:fc:db:77:06:95: ed:1b:88:b6:a1:4d:af:25:9a:bf:ae:7a:2e:91:ac: 66:e8:03:cf:88:69:d4:be:ef:88:e7:4e:8f:9d:90: 6d:9e:53:de:b7:17:70:9d:ff:9d:3e:c5:fe:83:67: 80:34:4b:8b:ee:59:9c:23:25:f8:e1:01:7b:aa:a6: b8:37:c2:f1:1d:e3:a1:dc:c9:58:52:fa:e6:75:43: 2d:8d:78:cf:db:99:06:0a:6c:44:d3:71:b3:ee:59: 27:c1:b2:52:29:42:ad:39:c3:2d:07:6f:5c:bb:64: ca:b2:55:a2:17:13:bc:be:17:d0:e3:30:95:d9:93: ea:47:af:4b:51:d9:cf:36:35:f1:a6:30:50:1d:49: 3e:78:ca:90:d4:60:3f:db:79:c0:80:ac:a2:12:8b: f2:28:93:a2:0a:92:bf:ec:e7:ae:c8:28:cb:c9:6a: df:cf:c6:4e:64:0a:88:c9:d9:bd:f8:1d:f9:90:7b: af:68:6f:7c:12:14:db:c9:d3:f1:76:a2:9a:9c:45: 8f:bd:47:5a:95:c4:26:d7:3b:f3:21:56:95:cb:07: b0:3c:6b:1f:de:bf:38:54:a5:bd:e7:ef:b4:d7:37: d7:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:3F:34:1B:0D:23:EE:6E:63:70:91:C3:35:7D:2C:03:64:C0:AB:EB X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f6426ab6-e129-49be-bb33-3392c0121da9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.182.216.0/24 Signature Algorithm: sha256WithRSAEncryption aa:47:11:97:2a:b9:c2:24:09:93:00:52:a7:17:39:66:a6:b3: c0:8b:16:56:27:dc:36:9c:39:e7:39:1a:41:70:f5:ca:d5:85: e2:59:f3:08:9e:78:e1:e0:5f:96:10:6a:8b:a3:d2:27:f1:5e: 74:60:ed:ae:de:fa:20:d4:67:73:e4:0c:d9:71:79:1c:80:18: 38:b6:61:58:d9:45:36:df:13:51:69:2b:7b:34:39:6e:a4:f0: 1a:f7:99:c2:68:67:79:04:69:8c:ab:e4:71:fa:56:f2:13:6f: 07:33:17:a3:2e:1f:da:43:a2:6f:32:d8:f4:f3:ab:03:96:ea: 7e:ca:2e:04:c6:40:7b:b5:b0:d9:39:23:98:78:4a:02:32:04: 22:49:53:7c:64:aa:bd:53:d0:e6:aa:81:7d:ce:51:b9:9a:bf: e8:73:b2:03:32:24:d7:98:ed:19:ab:01:bf:84:09:80:44:f0: 4d:6c:ff:93:56:c0:ba:7b:e2:ca:ea:b2:b0:e4:89:b7:4e:f8: a2:f1:8c:5a:9e:29:1c:bd:e8:55:02:07:bf:ed:26:a8:9a:42: 14:71:14:4d:ad:0a:0a:65:cd:aa:44:0c:e3:f5:20:56:c1:33: f5:c0:bf:32:39:5a:90:15:17:7f:5b:e4:68:a0:7a:e6:79:7e: 63:72:5b:92 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWE2Qr5wsERb7LqUHMhzyrmjjMxkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE2MTk1ODE2WhcNMjUxMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BhZGFkYjA2ODZkNWFkNzNjYTFmYzE4YzYzNzFiYzVmMTkw ZWJkNDk0ZDc4NTMzNGFiOGU1ODg4ODExZjg1ZTY5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCNugLMvWgJoiwaK7+XEZgRNEoNyXrlQ5H823cGle0biLah Ta8lmr+uei6RrGboA8+IadS+74jnTo+dkG2eU963F3Cd/50+xf6DZ4A0S4vuWZwj JfjhAXuqprg3wvEd46HcyVhS+uZ1Qy2NeM/bmQYKbETTcbPuWSfBslIpQq05wy0H b1y7ZMqyVaIXE7y+F9DjMJXZk+pHr0tR2c82NfGmMFAdST54ypDUYD/becCArKIS i/Iok6IKkr/s567IKMvJat/Pxk5kCojJ2b34HfmQe69ob3wSFNvJ0/F2opqcRY+9 R1qVxCbXO/MhVpXLB7A8ax/evzhUpb3n77TXN9f3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUEz80Gw0j7m5jcJHDNX0sA2TAq+swHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2Y2NDI2YWI2LWUxMjktNDliZS1iYjMzLTMzOTJjMDEyMWRhOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA2ttgwDQYJKoZIhvcNAQELBQADggEBAKpHEZcqucIkCZMAUqcXOWams8CL FlYn3DacOec5GkFw9crVheJZ8wieeOHgX5YQaouj0ifxXnRg7a7e+iDUZ3PkDNlx eRyAGDi2YVjZRTbfE1FpK3s0OW6k8Br3mcJoZ3kEaYyr5HH6VvITbwczF6MuH9pD om8y2PTzqwOW6n7KLgTGQHu1sNk5I5h4SgIyBCJJU3xkqr1T0OaqgX3OUbmav+hz sgMyJNeY7RmrAb+ECYBE8E1s/5NWwLp74srqsrDkibdO+KLxjFqeKRy96FUCB7/t JqiaQhRxFE2tCgplzapEDOP1IFbBM/XAvzI5WpAVF39b5GigeuZ5fmNyW5I= -----END CERTIFICATE-----Generated at Mon Oct 20 06:07:05 2025 by rpki-client