$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/21976c57-99c7-4d18-80a9-a6a8620a155d.roa File: 21976c57-99c7-4d18-80a9-a6a8620a155d.roa (raw, json) Hash identifier: 00RGC2HfEwqrcKVsUQ8WpmGH4pVmovFpbX9HXFoL6FI= Subject key identifier: 40:A2:4A:4E:07:D5:FA:A2:24:95:2B:14:FE:8B:E7:0D:C8:DF:56:2D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5E57F3FF41919FAC388816E34472C66F02C34493 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/21976c57-99c7-4d18-80a9-a6a8620a155d.roa Signing time: Mon 15 Sep 2025 16:51:10 +0000 ROA not before: Mon 15 Sep 2025 16:51:10 +0000 ROA not after: Mon 20 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 52.200.0.0/13 maxlen: 13 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:57:f3:ff:41:91:9f:ac:38:88:16:e3:44:72:c6:6f:02:c3:44:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 15 16:51:10 2025 GMT Not After : Oct 20 23:59:59 2025 GMT Subject: serialNumber=3d3ec067e3a59dedaf164d4499de4c34be636637e43a28e98984395dd106c2b5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1f:c4:9d:68:bf:61:0e:67:fd:6d:a1:ee:4d: a8:cc:bb:2a:80:3c:65:f2:d6:9b:9d:af:93:e0:03: fb:05:00:4e:63:2e:7e:76:0e:58:79:b4:53:54:6e: 60:20:b3:0b:f3:e1:45:1a:14:13:30:66:1f:e3:89: c2:e5:7b:4a:95:ea:ae:30:40:d0:78:06:55:06:2f: 12:a6:cc:16:83:56:b0:c0:30:68:1e:25:81:33:0c: 50:32:dd:a7:9c:95:d6:c4:30:ad:86:a3:35:e1:f5: c0:57:46:e1:cd:bc:b4:54:46:7d:50:b9:62:d0:2a: 97:11:bc:d4:c6:16:fe:66:68:e2:be:05:01:bb:73: 9f:62:f5:a9:59:05:e0:dd:2b:61:b8:38:6c:00:c8: 3a:fd:fa:c7:e7:29:9e:61:07:cc:57:af:a8:bc:41: c3:ce:49:10:91:60:21:17:6b:63:83:01:0d:18:d5: 72:6b:1a:df:2c:ba:7d:ec:55:a2:e0:11:35:9a:0e: 03:f7:67:94:b7:36:b0:9d:75:4a:c2:03:56:05:75: 05:58:6f:8a:ca:7a:fd:37:fc:bd:72:bb:e0:5b:ba: 3c:62:eb:bc:79:6b:4b:b3:81:49:99:42:7b:12:20: 1d:7d:c3:69:81:69:70:5a:79:f5:2e:f3:ed:b9:c0: 82:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:A2:4A:4E:07:D5:FA:A2:24:95:2B:14:FE:8B:E7:0D:C8:DF:56:2D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/21976c57-99c7-4d18-80a9-a6a8620a155d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.200.0.0/13 Signature Algorithm: sha256WithRSAEncryption 65:c7:eb:17:56:e6:93:80:eb:ee:b9:8e:01:70:08:97:ea:1d: c0:52:89:0a:56:e1:c3:49:32:62:52:39:f0:37:ff:d2:b9:ed: cd:93:98:37:4d:5c:91:da:34:6e:38:01:7d:3b:f1:7d:7c:53: 1b:d6:57:04:00:ec:77:07:ce:9c:7f:da:6a:7c:f0:d6:b8:71: 63:6a:bc:2a:75:98:83:d1:8c:8f:77:42:02:cf:31:ad:a3:46: e0:8e:76:73:87:32:89:18:a2:f6:27:08:4e:13:ff:24:ea:01: 79:56:79:eb:d9:48:6a:88:8c:2a:7e:a9:a9:3b:e0:1b:ce:aa: 2c:14:0a:e2:24:a1:60:2f:65:9c:ad:51:92:e1:d9:58:d5:fb: 74:1b:9f:d3:82:58:b4:6a:9a:67:7b:d3:0b:36:7e:bc:96:8e: 44:fc:5a:03:04:54:bb:49:64:75:d9:05:14:2f:66:08:40:1e: ec:12:9e:f7:c7:ef:d9:69:80:e3:5a:27:ba:b1:91:ba:71:56: 58:c1:84:6b:0c:96:67:c9:14:e9:79:15:87:ab:f5:69:a6:f2: 28:1b:fd:03:11:52:ae:e0:a5:24:8e:6b:08:ac:11:f0:2c:48: eb:5b:90:92:4f:64:15:4f:38:5e:61:15:86:97:b8:b0:c4:6a: 7e:eb:2a:bb -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUXlfz/0GRn6w4iBbjRHLGbwLDRJMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTE1MTY1MTEwWhcNMjUxMDIwMjM1OTU5 WjB6MUkwRwYDVQQFE0AzZDNlYzA2N2UzYTU5ZGVkYWYxNjRkNDQ5OWRlNGMzNGJl NjM2NjM3ZTQzYTI4ZTk4OTg0Mzk1ZGQxMDZjMmI1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8H8SdaL9hDmf9baHuTajMuyqAPGXy1pudr5PgA/sFAE5j Ln52Dlh5tFNUbmAgswvz4UUaFBMwZh/jicLle0qV6q4wQNB4BlUGLxKmzBaDVrDA MGgeJYEzDFAy3aecldbEMK2GozXh9cBXRuHNvLRURn1QuWLQKpcRvNTGFv5maOK+ BQG7c59i9alZBeDdK2G4OGwAyDr9+sfnKZ5hB8xXr6i8QcPOSRCRYCEXa2ODAQ0Y 1XJrGt8sun3sVaLgETWaDgP3Z5S3NrCddUrCA1YFdQVYb4rKev03/L1yu+Bbujxi 67x5a0uzgUmZQnsSIB19w2mBaXBaefUu8+25wIJNAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUQKJKTgfV+qIklSsU/ovnDcjfVi0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzIxOTc2YzU3LTk5YzctNGQxOC04MGE5LWE2YTg2MjBhMTU1ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwM0yDANBgkqhkiG9w0BAQsFAAOCAQEAZcfrF1bmk4Dr7rmOAXAIl+odwFKJ Clbhw0kyYlI58Df/0rntzZOYN01ckdo0bjgBfTvxfXxTG9ZXBADsdwfOnH/aanzw 1rhxY2q8KnWYg9GMj3dCAs8xraNG4I52c4cyiRii9icIThP/JOoBeVZ569lIaoiM Kn6pqTvgG86qLBQK4iShYC9lnK1RkuHZWNX7dBuf04JYtGqaZ3vTCzZ+vJaORPxa AwRUu0lkddkFFC9mCEAe7BKe98fv2WmA41onurGRunFWWMGEawyWZ8kU6XkVh6v1 aabyKBv9AxFSruClJI5rCKwR8CxI61uQkk9kFU84XmEVhpe4sMRqfusquw== -----END CERTIFICATE-----Generated at Wed Sep 17 20:34:15 2025 by rpki-client