$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/189ea744-2a00-4899-ab56-38cee5ce32d8.roa File: 189ea744-2a00-4899-ab56-38cee5ce32d8.roa (raw, json) Hash identifier: Kz9hGe9RfOnNLUhLi0n98AHo99KAu84d7ktmj9Nx0F4= Subject key identifier: D4:41:01:33:09:00:E4:FD:30:C1:74:FA:E3:3E:27:20:96:68:A1:66 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2B3EFED6E6919CB35C6C167B9EAB4A765FD44753 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/189ea744-2a00-4899-ab56-38cee5ce32d8.roa Signing time: Fri 17 Oct 2025 23:10:11 +0000 ROA not before: Fri 17 Oct 2025 23:10:11 +0000 ROA not after: Fri 21 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.192.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:3e:fe:d6:e6:91:9c:b3:5c:6c:16:7b:9e:ab:4a:76:5f:d4:47:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 17 23:10:11 2025 GMT Not After : Nov 21 23:59:59 2025 GMT Subject: serialNumber=a6c15b1fe02e522d307576fc398c0ef9ca64deeb597141e9a5b5a4d6f87be84f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:8f:02:89:c4:63:94:de:3c:c0:9d:a2:79:12: c3:00:db:54:1c:da:7f:01:a0:5e:75:27:c2:c9:e2: a4:ee:63:84:c3:f9:51:20:f8:79:5c:22:96:67:6a: d0:39:28:cf:c6:0e:d7:6d:15:1c:df:57:58:3d:46: 0d:1b:a6:d9:ed:20:b2:82:c4:ce:07:39:94:a6:84: 76:a3:cb:9e:32:1d:39:7b:fe:0f:b8:95:0d:ec:e8: 23:c6:4d:fb:c7:d6:eb:ff:23:c2:cf:9e:ff:a2:ff: 5f:97:0a:75:62:f9:54:9a:42:70:cf:18:21:14:f9: 8c:f3:93:78:28:04:d5:71:35:2a:86:b5:cd:5f:86: 16:1c:24:38:4a:9e:cb:16:22:f5:9d:da:e6:d6:bb: 2e:f9:49:e7:19:4c:33:6f:e2:97:0c:83:9e:43:67: 94:8b:c0:5e:a6:c1:fd:09:47:7d:d1:da:42:40:86: 83:49:f0:ab:af:cc:b8:c4:7e:57:07:6d:4a:5b:ae: 3d:04:16:3c:00:52:6d:7c:47:3b:a0:e1:38:42:b8: ba:62:cd:9a:21:50:6b:d2:e7:71:43:98:b6:f7:df: a8:01:5b:58:a9:01:ec:81:30:a1:cf:26:87:57:7f: 74:a5:96:e9:9c:5c:49:35:1d:84:e1:f8:07:c0:fc: 12:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:41:01:33:09:00:E4:FD:30:C1:74:FA:E3:3E:27:20:96:68:A1:66 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/189ea744-2a00-4899-ab56-38cee5ce32d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.192.210.0/24 Signature Algorithm: sha256WithRSAEncryption 62:ce:1c:0c:6d:80:0d:b4:7e:40:33:8e:da:42:01:66:23:f7: 4c:4c:38:9b:e6:78:0e:68:0c:5e:00:23:4d:3e:6b:ab:dd:5f: 48:df:da:36:78:57:f0:4d:23:df:0f:b2:aa:d2:a1:42:22:69: 3b:99:e4:65:ba:21:26:87:ff:8d:1f:2e:3e:ab:aa:f7:79:a0: 49:44:82:d1:13:12:22:64:21:7b:6e:a1:e0:ca:b8:94:20:bc: 36:11:b0:0f:e9:0b:7a:ea:91:22:e1:7e:85:81:16:b6:91:03: e8:fc:5d:d6:cd:e5:c1:a1:de:53:9f:99:b6:3b:85:ea:f3:fe: 17:79:9d:f4:b1:2c:90:00:9f:05:27:0c:5c:24:0f:d3:fd:43: 61:7c:59:cf:ab:56:06:f1:31:90:c4:90:80:3b:06:35:08:59: 76:f2:99:7b:32:8e:81:02:1a:80:69:1c:c3:ef:37:d0:65:94: 7d:f7:74:51:60:5f:96:c0:c6:4b:28:e1:56:ae:32:d4:43:aa: 06:04:61:09:50:38:53:45:79:11:ca:b7:53:87:4d:dc:ab:94: 3b:11:48:33:21:9d:45:64:f6:99:8e:30:8a:39:a9:51:eb:be: 13:60:48:23:8d:08:75:15:9d:7a:fc:e5:77:5f:fc:0a:f7:58: d4:74:4b:f5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKz7+1uaRnLNcbBZ7nqtKdl/UR1MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE3MjMxMDExWhcNMjUxMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BhNmMxNWIxZmUwMmU1MjJkMzA3NTc2ZmMzOThjMGVmOWNh NjRkZWViNTk3MTQxZTlhNWI1YTRkNmY4N2JlODRmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDdjwKJxGOU3jzAnaJ5EsMA21Qc2n8BoF51J8LJ4qTuY4TD +VEg+HlcIpZnatA5KM/GDtdtFRzfV1g9Rg0bptntILKCxM4HOZSmhHajy54yHTl7 /g+4lQ3s6CPGTfvH1uv/I8LPnv+i/1+XCnVi+VSaQnDPGCEU+Yzzk3goBNVxNSqG tc1fhhYcJDhKnssWIvWd2ubWuy75SecZTDNv4pcMg55DZ5SLwF6mwf0JR33R2kJA hoNJ8KuvzLjEflcHbUpbrj0EFjwAUm18Rzug4ThCuLpizZohUGvS53FDmLb336gB W1ipAeyBMKHPJodXf3SllumcXEk1HYTh+AfA/BKBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU1EEBMwkA5P0wwXT64z4nIJZooWYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzE4OWVhNzQ0LTJhMDAtNDg5OS1hYjU2LTM4Y2VlNWNlMzJkOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA2wNIwDQYJKoZIhvcNAQELBQADggEBAGLOHAxtgA20fkAzjtpCAWYj90xM OJvmeA5oDF4AI00+a6vdX0jf2jZ4V/BNI98PsqrSoUIiaTuZ5GW6ISaH/40fLj6r qvd5oElEgtETEiJkIXtuoeDKuJQgvDYRsA/pC3rqkSLhfoWBFraRA+j8XdbN5cGh 3lOfmbY7herz/hd5nfSxLJAAnwUnDFwkD9P9Q2F8Wc+rVgbxMZDEkIA7BjUIWXby mXsyjoECGoBpHMPvN9BllH33dFFgX5bAxkso4VauMtRDqgYEYQlQOFNFeRHKt1OH TdyrlDsRSDMhnUVk9pmOMIo5qVHrvhNgSCONCHUVnXr85Xdf/Ar3WNR0S/U= -----END CERTIFICATE-----Generated at Sat Oct 18 02:40:21 2025 by rpki-client