$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f826645d-7a89-4260-a8f4-3dedc60df037.roa File: f826645d-7a89-4260-a8f4-3dedc60df037.roa (raw, json) Hash identifier: w6tgCc3WUOhUe9O0Pne7uNnV7OZYcI5IkdkislFBLuk= Subject key identifier: 08:04:3F:D8:A1:3E:6A:7A:DE:92:95:59:02:AC:F8:78:BC:6F:8C:49 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1CE230C4724AF6E7130255B48A28F77FA25D2D85 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f826645d-7a89-4260-a8f4-3dedc60df037.roa Signing time: Thu 16 Oct 2025 22:14:03 +0000 ROA not before: Thu 16 Oct 2025 22:14:03 +0000 ROA not after: Thu 20 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.182.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:e2:30:c4:72:4a:f6:e7:13:02:55:b4:8a:28:f7:7f:a2:5d:2d:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 16 22:14:03 2025 GMT Not After : Nov 20 23:59:59 2025 GMT Subject: serialNumber=f38c5bd16fd2497fa9cd4694e483d754a7a2830eba5d3f09dce8b41cf9e84b9a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:6a:35:b4:75:62:bf:fa:4b:6a:a1:8f:e8:b8: dd:32:ed:72:f9:6e:a4:53:fb:e3:1d:ae:19:0d:84: 52:d9:ad:ee:ca:96:31:01:6b:44:26:55:d9:18:60: 48:04:26:be:9d:71:02:52:b2:76:be:dc:f7:d1:81: 62:41:7b:b4:3b:ff:7a:b3:16:09:1c:fb:5b:bd:3d: 83:d1:a2:28:45:38:d0:31:d3:44:c9:98:b3:29:c0: c1:cd:d4:24:19:88:09:c0:0e:69:ee:a0:66:89:78: d8:8f:a2:ef:3f:02:fb:1a:df:8e:7d:bd:36:c4:0f: 39:7c:70:ad:a8:49:ad:45:e9:29:44:54:a0:ae:48: 80:f7:9c:70:44:55:88:04:4e:4b:dc:3a:f9:e0:9f: 5e:0e:25:83:94:27:5a:c7:96:a1:30:45:59:1e:d3: 3e:23:9c:20:8d:b9:eb:db:a3:70:f7:29:35:b7:aa: c5:13:54:00:c9:9a:65:b2:a5:02:c9:44:2a:d4:90: 7e:c8:d3:a2:88:a9:99:c0:a0:7c:85:b7:03:29:8c: 6a:b1:30:f3:62:b8:f8:73:8f:c7:d5:54:a6:70:3f: 05:9c:70:71:e8:02:f5:db:d3:14:c6:f5:b1:27:87: f5:22:a9:6f:1b:32:c6:ff:9f:a0:72:06:2d:37:b0: 8f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:04:3F:D8:A1:3E:6A:7A:DE:92:95:59:02:AC:F8:78:BC:6F:8C:49 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f826645d-7a89-4260-a8f4-3dedc60df037.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.182.72.0/21 Signature Algorithm: sha256WithRSAEncryption 3d:14:c2:3b:35:d4:b3:ff:ff:5a:d1:d8:cd:79:af:24:b6:cd: f0:cf:38:57:71:68:c6:79:58:e2:2f:a6:35:eb:8c:df:16:3e: cd:ee:1c:27:38:a1:51:fe:1c:e0:43:ad:91:7b:6f:8f:e2:0b: d3:fe:99:11:6a:a9:44:63:45:cb:ab:0e:8a:97:72:8d:5d:c1: ba:79:d5:7a:42:c8:87:f5:cd:54:7f:77:af:89:2c:4b:45:e2: 06:fe:e4:0b:22:e0:3b:b1:e8:4d:48:f3:56:9a:b1:1d:62:aa: 45:9b:20:86:cd:b2:96:ae:33:d3:cf:fc:53:9a:24:a6:6c:14: 1d:d4:e8:b7:99:8d:e0:13:61:de:e7:22:16:d3:43:84:cc:f6: d1:00:80:fd:81:6c:5a:d2:2f:ec:65:32:25:e0:5c:f4:b2:25: 19:ba:b4:e1:81:20:47:46:93:5e:35:13:96:36:6c:cf:a3:09: e0:50:99:bb:44:54:d1:68:a1:6f:bc:85:f6:43:19:20:2d:9c: 38:88:09:3e:a6:c5:e3:c3:fc:c8:55:28:9f:26:a1:30:6f:2f: e4:65:0f:42:39:95:34:e4:1c:e3:d6:8a:43:12:b3:bd:93:07: ab:6f:30:42:7d:bc:4d:6f:68:bd:4f:80:ff:2d:32:2b:40:d7: 53:cb:83:d3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHOIwxHJK9ucTAlW0iij3f6JdLYUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE2MjIxNDAzWhcNMjUxMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BmMzhjNWJkMTZmZDI0OTdmYTljZDQ2OTRlNDgzZDc1NGE3 YTI4MzBlYmE1ZDNmMDlkY2U4YjQxY2Y5ZTg0YjlhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCgajW0dWK/+ktqoY/ouN0y7XL5bqRT++MdrhkNhFLZre7K ljEBa0QmVdkYYEgEJr6dcQJSsna+3PfRgWJBe7Q7/3qzFgkc+1u9PYPRoihFONAx 00TJmLMpwMHN1CQZiAnADmnuoGaJeNiPou8/Avsa3459vTbEDzl8cK2oSa1F6SlE VKCuSID3nHBEVYgETkvcOvngn14OJYOUJ1rHlqEwRVke0z4jnCCNuevbo3D3KTW3 qsUTVADJmmWypQLJRCrUkH7I06KIqZnAoHyFtwMpjGqxMPNiuPhzj8fVVKZwPwWc cHHoAvXb0xTG9bEnh/UiqW8bMsb/n6ByBi03sI91AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUCAQ/2KE+anrekpVZAqz4eLxvjEkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2Y4MjY2NDVkLTdhODktNDI2MC1hOGY0LTNkZWRjNjBkZjAzNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAM2tkgwDQYJKoZIhvcNAQELBQADggEBAD0Uwjs11LP//1rR2M15ryS2zfDP OFdxaMZ5WOIvpjXrjN8WPs3uHCc4oVH+HOBDrZF7b4/iC9P+mRFqqURjRcurDoqX co1dwbp51XpCyIf1zVR/d6+JLEtF4gb+5Asi4Dux6E1I81aasR1iqkWbIIbNspau M9PP/FOaJKZsFB3U6LeZjeATYd7nIhbTQ4TM9tEAgP2BbFrSL+xlMiXgXPSyJRm6 tOGBIEdGk141E5Y2bM+jCeBQmbtEVNFooW+8hfZDGSAtnDiICT6mxePD/MhVKJ8m oTBvL+RlD0I5lTTkHOPWikMSs72TB6tvMEJ9vE1vaL1PgP8tMitA11PLg9M= -----END CERTIFICATE-----Generated at Mon Oct 20 18:12:29 2025 by rpki-client