$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0444b0cf-37d0-4324-9cad-a00e13461e7d.roa File: 0444b0cf-37d0-4324-9cad-a00e13461e7d.roa (raw, json) Hash identifier: B57lRcSPVlBMim3MkRCkvI+zJBmsBWow8fsWf1xR9SE= Subject key identifier: D6:B2:9C:74:64:CF:4E:4E:11:38:EA:82:AD:68:C5:8F:B2:7F:AF:8B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0D9B6EE6BD61D4B1E7230F7DF889731714F41535 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0444b0cf-37d0-4324-9cad-a00e13461e7d.roa Signing time: Tue 23 Sep 2025 00:42:30 +0000 ROA not before: Tue 23 Sep 2025 00:42:30 +0000 ROA not after: Tue 28 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.84.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:9b:6e:e6:bd:61:d4:b1:e7:23:0f:7d:f8:89:73:17:14:f4:15:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 23 00:42:30 2025 GMT Not After : Oct 28 23:59:59 2025 GMT Subject: serialNumber=76b46db24c4a97aa9241544bba183cd9443a51bb1b487f3fd77d9e4c077a4481, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:62:fc:0c:9a:4c:ae:65:f5:2d:07:22:53:f3: bb:47:f0:e2:19:42:5f:23:ed:b8:08:47:e0:48:33: 2a:78:29:6b:fb:23:4f:70:04:cf:78:b6:af:4f:1d: de:b8:bf:dd:d5:d1:63:92:9b:01:08:0c:a0:ac:ed: 5f:3d:60:74:7b:07:60:b7:33:2d:fe:aa:d2:12:c7: db:4b:21:3b:28:99:dd:10:e6:cc:57:07:c7:73:12: 6b:4a:6d:5e:ce:32:39:a9:21:81:b5:2b:b6:0a:07: ad:b0:cf:01:3d:2f:d4:54:07:d0:c2:05:b2:c5:3c: aa:5d:27:75:94:70:d9:e9:d2:12:85:44:7f:7c:c9: a6:03:ca:bb:38:a6:92:98:13:e7:82:a2:38:4e:05: a1:d4:e4:6e:c4:11:91:62:2f:32:18:47:0f:f7:c4: 30:7a:81:b4:3b:81:0f:ff:3c:e6:6c:ff:e6:65:be: 29:78:2d:96:35:ca:3c:4e:59:90:f6:21:9c:5e:72: 05:4c:da:30:71:05:c8:6f:82:b5:59:3a:ad:fb:fb: c5:af:db:f7:c4:8b:5d:c7:f2:f3:4c:38:93:5c:70: 8b:ca:92:02:57:e5:46:62:dc:46:2e:43:cd:d3:be: 06:56:83:0a:0b:6b:6f:b3:a6:10:96:04:72:2b:3e: fe:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:B2:9C:74:64:CF:4E:4E:11:38:EA:82:AD:68:C5:8F:B2:7F:AF:8B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0444b0cf-37d0-4324-9cad-a00e13461e7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.84.192.0/20 Signature Algorithm: sha256WithRSAEncryption 90:37:4c:d6:de:65:8c:04:4a:9a:23:dd:6f:b3:cb:8f:db:0f: 48:ac:b1:b0:ec:89:36:24:4e:cf:9b:79:92:9d:ef:77:04:b1: 9e:37:2a:df:72:af:9f:59:18:da:3b:52:41:f8:30:f1:29:57: 94:b0:8a:ff:c7:15:b9:37:22:02:bc:18:6b:2a:b0:bf:38:26: 4f:cf:ba:c8:e0:df:95:fe:49:15:44:71:74:7d:94:1f:f1:e6: 6d:f7:7e:4a:d0:7d:d0:ef:93:d7:77:b7:f9:78:7f:15:68:20: 19:35:02:c5:c0:8d:ac:db:af:ca:66:86:4a:a2:f0:bb:1e:87: c5:4e:c7:90:44:21:c9:f1:5b:56:77:42:83:42:40:eb:d6:81: 8e:ba:98:74:4a:89:11:c1:23:46:a6:49:8f:34:25:68:b7:3d: 31:e1:2b:ee:0b:15:1e:1b:ba:8e:f2:d8:0b:9f:0e:e2:88:eb: 01:ab:22:55:15:42:46:a1:41:51:33:04:4e:78:72:af:c7:c8: da:e2:b5:e9:f5:5d:c3:c5:1e:4d:d6:59:26:7e:c1:92:bd:b0: 04:bf:57:d0:13:13:41:21:2c:14:21:c9:a6:4f:0e:f0:ea:49: 71:0f:aa:8e:c3:6a:be:bd:a7:e0:ba:81:7d:5d:38:db:ce:72: 64:81:9d:37 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDZtu5r1h1LHnIw99+IlzFxT0FTUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIzMDA0MjMwWhcNMjUxMDI4MjM1OTU5 WjB6MUkwRwYDVQQFE0A3NmI0NmRiMjRjNGE5N2FhOTI0MTU0NGJiYTE4M2NkOTQ0 M2E1MWJiMWI0ODdmM2ZkNzdkOWU0YzA3N2E0NDgxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDgYvwMmkyuZfUtByJT87tH8OIZQl8j7bgIR+BIMyp4KWv7 I09wBM94tq9PHd64v93V0WOSmwEIDKCs7V89YHR7B2C3My3+qtISx9tLITsomd0Q 5sxXB8dzEmtKbV7OMjmpIYG1K7YKB62wzwE9L9RUB9DCBbLFPKpdJ3WUcNnp0hKF RH98yaYDyrs4ppKYE+eCojhOBaHU5G7EEZFiLzIYRw/3xDB6gbQ7gQ//POZs/+Zl vil4LZY1yjxOWZD2IZxecgVM2jBxBchvgrVZOq37+8Wv2/fEi13H8vNMOJNccIvK kgJX5UZi3EYuQ83TvgZWgwoLa2+zphCWBHIrPv4TAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU1rKcdGTPTk4ROOqCrWjFj7J/r4swHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzA0NDRiMGNmLTM3ZDAtNDMyNC05Y2FkLWEwMGUxMzQ2MWU3ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQ0VMAwDQYJKoZIhvcNAQELBQADggEBAJA3TNbeZYwESpoj3W+zy4/bD0is sbDsiTYkTs+beZKd73cEsZ43Kt9yr59ZGNo7UkH4MPEpV5Swiv/HFbk3IgK8GGsq sL84Jk/Pusjg35X+SRVEcXR9lB/x5m33fkrQfdDvk9d3t/l4fxVoIBk1AsXAjazb r8pmhkqi8Lseh8VOx5BEIcnxW1Z3QoNCQOvWgY66mHRKiRHBI0amSY80JWi3PTHh K+4LFR4buo7y2AufDuKI6wGrIlUVQkahQVEzBE54cq/HyNriten1XcPFHk3WWSZ+ wZK9sAS/V9ATE0EhLBQhyaZPDvDqSXEPqo7Dar69p+C6gX1dONvOcmSBnTc= -----END CERTIFICATE-----Generated at Sat Oct 18 02:15:21 2025 by rpki-client