$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/22586366-872a-4037-9f6a-47cc45bc4ab9.roa File: 22586366-872a-4037-9f6a-47cc45bc4ab9.roa (raw, json) Hash identifier: 1it1iAXASA9wUcd76+q5zFNwPLS8d+uDyssI7UBE95g= Subject key identifier: D4:85:21:A6:4F:15:A7:51:8C:2C:F4:50:38:D8:F5:98:77:CC:BB:25 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4F839CEC1A820DD7F67BBAE95371C2B7C33FD0D0 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/22586366-872a-4037-9f6a-47cc45bc4ab9.roa Signing time: Fri 10 Oct 2025 17:04:19 +0000 ROA not before: Fri 10 Oct 2025 17:04:19 +0000 ROA not after: Fri 14 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.219.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:83:9c:ec:1a:82:0d:d7:f6:7b:ba:e9:53:71:c2:b7:c3:3f:d0:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 10 17:04:19 2025 GMT Not After : Nov 14 23:59:59 2025 GMT Subject: serialNumber=94ed2e2a1d9b9ff223962fc7906414ec35379a43dfef8f1204e80125b572be5e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f7:42:74:eb:db:0c:60:65:d9:d4:85:fb:dc: 18:6c:72:bb:7d:c0:c9:ff:63:9a:6c:4d:d8:a1:83: eb:3d:57:8c:8b:9c:c1:83:53:e7:e9:3e:3b:ad:ac: 77:8c:84:ee:a7:a4:ea:36:74:ce:7b:92:02:b7:7a: 4d:44:7d:7e:02:aa:c8:49:31:6a:67:71:26:11:96: 07:92:bf:e1:a9:fe:d0:89:f8:4f:bb:1e:67:af:be: fd:26:93:b0:dd:57:e4:ae:c4:6d:ac:a9:9f:c0:5d: 6b:98:d2:bc:de:b0:9c:b3:f7:19:09:ea:e3:7c:4a: 70:92:7e:63:0c:d1:cc:50:cd:03:72:71:b8:c4:67: ea:24:19:bf:5a:fa:52:e6:8c:da:db:46:f2:a1:eb: 6a:35:e9:45:09:b4:cb:4f:a7:ae:9c:23:86:ca:ef: 18:5c:f5:9d:4a:0b:36:a1:f7:dc:5c:33:70:b3:dd: fc:68:75:8d:93:aa:82:49:de:24:73:50:ec:ab:2a: d8:e7:b5:a8:72:7d:a9:bf:41:48:ad:be:46:ad:df: fb:8a:a2:ec:8d:8d:47:55:ae:b5:8d:3a:c0:57:c8: 11:84:94:b9:6f:2a:53:ec:cd:e2:d2:7b:ef:df:2b: 0e:a5:85:d9:89:49:14:e1:96:6d:4c:50:ac:92:de: 38:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:85:21:A6:4F:15:A7:51:8C:2C:F4:50:38:D8:F5:98:77:CC:BB:25 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/22586366-872a-4037-9f6a-47cc45bc4ab9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.219.128.0/18 Signature Algorithm: sha256WithRSAEncryption 73:84:87:db:f5:d2:e8:11:4a:a9:37:13:bf:14:4a:3c:1a:77: 1a:94:04:e2:92:f3:bf:c4:21:68:8e:25:8c:c8:a1:73:10:eb: 7c:48:2f:5e:f3:80:03:0e:38:30:4b:2d:1c:1f:fc:d8:52:58: f2:a3:eb:9c:1c:94:83:54:b0:b9:4d:da:bc:df:36:0c:89:97: 96:e7:0d:ed:e1:f4:4f:b5:eb:92:2b:84:8a:61:ee:c6:74:8d: 64:dc:e7:11:8a:cf:0e:3e:b3:d6:16:de:cf:c5:72:03:6a:4f: ce:d5:3c:3e:05:3e:88:ec:ee:9b:21:cc:a6:4b:fa:7f:10:8b: 16:86:67:c4:d2:30:cd:c5:ec:44:44:fb:9c:8b:57:e3:04:d5: 38:f7:1c:99:d1:76:74:c0:3b:de:ab:03:14:ac:c0:02:6d:8d: 1b:cd:fa:71:36:76:33:fb:05:c5:93:33:57:24:f3:3d:e3:52: 03:07:6d:5c:33:3a:41:e6:16:fa:95:3b:e9:33:4d:47:33:db: b9:5a:f7:0f:ca:db:5f:f8:1f:da:f1:89:e8:59:2d:da:e3:b5: 4c:5d:b4:6f:6f:ea:b1:a8:75:6f:22:c4:5e:02:de:1b:55:28: cd:5f:b4:f1:d5:9e:a4:4c:ca:46:20:97:4e:fe:4b:d7:cf:79: a7:b3:f0:0a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUT4Oc7BqCDdf2e7rpU3HCt8M/0NAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDEwMTcwNDE5WhcNMjUxMTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A5NGVkMmUyYTFkOWI5ZmYyMjM5NjJmYzc5MDY0MTRlYzM1 Mzc5YTQzZGZlZjhmMTIwNGU4MDEyNWI1NzJiZTVlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDB90J069sMYGXZ1IX73Bhscrt9wMn/Y5psTdihg+s9V4yL nMGDU+fpPjutrHeMhO6npOo2dM57kgK3ek1EfX4CqshJMWpncSYRlgeSv+Gp/tCJ +E+7Hmevvv0mk7DdV+SuxG2sqZ/AXWuY0rzesJyz9xkJ6uN8SnCSfmMM0cxQzQNy cbjEZ+okGb9a+lLmjNrbRvKh62o16UUJtMtPp66cI4bK7xhc9Z1KCzah99xcM3Cz 3fxodY2TqoJJ3iRzUOyrKtjntahyfam/QUitvkat3/uKouyNjUdVrrWNOsBXyBGE lLlvKlPszeLSe+/fKw6lhdmJSRThlm1MUKyS3jjvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU1IUhpk8Vp1GMLPRQONj1mHfMuyUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzIyNTg2MzY2LTg3MmEtNDAzNy05ZjZhLTQ3Y2M0NWJjNGFiOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAY224AwDQYJKoZIhvcNAQELBQADggEBAHOEh9v10ugRSqk3E78USjwadxqU BOKS87/EIWiOJYzIoXMQ63xIL17zgAMOODBLLRwf/NhSWPKj65wclINUsLlN2rzf NgyJl5bnDe3h9E+165IrhIph7sZ0jWTc5xGKzw4+s9YW3s/FcgNqT87VPD4FPojs 7pshzKZL+n8QixaGZ8TSMM3F7ERE+5yLV+ME1Tj3HJnRdnTAO96rAxSswAJtjRvN +nE2djP7BcWTM1ck8z3jUgMHbVwzOkHmFvqVO+kzTUcz27la9w/K21/4H9rxiehZ LdrjtUxdtG9v6rGodW8ixF4C3htVKM1ftPHVnqRMykYgl07+S9fPeaez8Ao= -----END CERTIFICATE-----Generated at Sat Oct 18 02:41:55 2025 by rpki-client