$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/49a4be5f-2b51-4d85-a854-00942073f6c1.roa File: 49a4be5f-2b51-4d85-a854-00942073f6c1.roa (raw, json) Hash identifier: VrSIQIY18p3kejeJo5DSbJMkBprxZRZe4/jWHZELmGw= Subject key identifier: 9A:69:48:01:33:26:9D:89:AB:B4:BF:38:33:26:60:B3:CB:2F:ED:52 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0E7495FD5F847A961828186D9B17912F925F8FE2 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/49a4be5f-2b51-4d85-a854-00942073f6c1.roa Signing time: Thu 16 Oct 2025 17:54:36 +0000 ROA not before: Thu 16 Oct 2025 17:54:36 +0000 ROA not after: Thu 20 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.222.136.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:74:95:fd:5f:84:7a:96:18:28:18:6d:9b:17:91:2f:92:5f:8f:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 16 17:54:36 2025 GMT Not After : Nov 20 23:59:59 2025 GMT Subject: serialNumber=32f370515fb3115abc5fe8de5bc33ad6ece77d33654f47d258ecfe15f24b2b72, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1a:7d:e3:bf:ba:b4:44:ac:34:af:3b:5e:eb: aa:25:b5:70:f6:cb:69:ba:e0:e1:54:f7:80:de:ec: dd:6b:1b:7d:08:a6:0c:52:2b:c1:91:6d:50:c6:76: 55:af:27:b3:ce:32:42:42:c8:c5:f4:3a:20:c4:4b: 75:81:c8:c5:1a:5d:eb:f9:61:78:b5:eb:ee:63:0c: b3:bf:0c:b6:c2:de:ff:0d:c4:f1:ee:d5:a0:ca:69: 3b:ca:fe:8f:18:4f:98:5d:a8:92:d2:16:f4:21:28: c2:8e:e1:06:f6:44:55:d2:43:01:ed:ca:51:a9:6b: dc:9b:d7:54:14:b1:88:4b:a3:64:ba:b1:d2:96:49: 0c:d7:f5:b9:b6:4f:36:32:67:f3:bb:d7:99:c0:0c: fc:b7:1b:c3:e2:9d:30:b0:7a:39:0e:ba:d9:c7:80: 93:b0:28:82:8c:05:b7:52:45:0f:4b:9c:f3:cd:e4: 83:f5:f4:a5:a7:57:98:3c:34:83:64:33:0e:a9:f1: ee:99:5d:bd:76:e0:e9:a6:04:c1:6d:84:98:46:74: e0:08:89:14:9c:15:63:62:53:53:97:64:cd:30:28: 41:09:1c:91:ea:29:20:a6:5e:6a:f3:ab:15:52:5d: 2b:e3:2e:c3:d8:89:85:c9:50:2b:d5:b0:b1:c6:05: 0b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:69:48:01:33:26:9D:89:AB:B4:BF:38:33:26:60:B3:CB:2F:ED:52 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/49a4be5f-2b51-4d85-a854-00942073f6c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.222.136.0/23 Signature Algorithm: sha256WithRSAEncryption 2b:a1:48:2a:a3:5e:c8:d4:e1:0b:56:b9:08:fa:30:6e:32:0b: 45:50:c0:c6:ce:11:cf:39:ce:f4:b7:42:fd:d6:9d:d7:d3:a3: 2c:57:fd:28:0a:48:bc:67:ff:fc:1e:d8:9e:8a:26:27:c1:80: 57:d4:d7:fe:61:b3:0d:e2:b6:f5:cd:07:79:84:fc:9e:76:6a: a3:eb:79:6b:c3:f8:76:29:24:16:80:97:db:c2:dd:2f:a7:64: 73:a1:6d:db:92:15:85:2b:17:99:70:6e:fe:32:45:62:da:14: 82:ca:30:e2:25:43:6e:39:d1:f5:50:69:cc:e5:97:24:85:6b: bc:60:bf:d4:e6:3e:08:f0:fe:bb:41:b0:29:f9:d8:ee:b1:3e: 31:d1:c6:45:7b:54:ab:4e:1c:14:c1:85:60:a7:62:43:8e:67: 8a:ea:fb:38:d6:10:c6:c3:ed:95:aa:2a:f5:10:1e:a6:d7:ba: ad:19:fa:29:b3:72:31:8e:45:89:13:b7:a2:5d:22:79:a0:32: 6d:4d:7c:45:33:45:56:f4:e8:2c:5c:98:f9:fe:8a:db:f0:0f: fb:31:d8:79:e6:97:88:e9:80:34:a0:88:0e:3d:4c:c1:7d:f4: db:f7:e0:38:45:61:99:d6:75:21:31:ce:cd:48:7f:20:e0:8f: c6:70:75:f7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDnSV/V+EepYYKBhtmxeRL5Jfj+IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE2MTc1NDM2WhcNMjUxMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0AzMmYzNzA1MTVmYjMxMTVhYmM1ZmU4ZGU1YmMzM2FkNmVj ZTc3ZDMzNjU0ZjQ3ZDI1OGVjZmUxNWYyNGIyYjcyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0Gn3jv7q0RKw0rzte66oltXD2y2m64OFU94De7N1rG30I pgxSK8GRbVDGdlWvJ7POMkJCyMX0OiDES3WByMUaXev5YXi16+5jDLO/DLbC3v8N xPHu1aDKaTvK/o8YT5hdqJLSFvQhKMKO4Qb2RFXSQwHtylGpa9yb11QUsYhLo2S6 sdKWSQzX9bm2TzYyZ/O715nADPy3G8PinTCwejkOutnHgJOwKIKMBbdSRQ9LnPPN 5IP19KWnV5g8NINkMw6p8e6ZXb124OmmBMFthJhGdOAIiRScFWNiU1OXZM0wKEEJ HJHqKSCmXmrzqxVSXSvjLsPYiYXJUCvVsLHGBQunAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUmmlIATMmnYmrtL84MyZgs8sv7VIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQ5YTRiZTVmLTJiNTEtNGQ4NS1hODU0LTAwOTQyMDczZjZjMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE03ogwDQYJKoZIhvcNAQELBQADggEBACuhSCqjXsjU4QtWuQj6MG4yC0VQ wMbOEc85zvS3Qv3WndfToyxX/SgKSLxn//we2J6KJifBgFfU1/5hsw3itvXNB3mE /J52aqPreWvD+HYpJBaAl9vC3S+nZHOhbduSFYUrF5lwbv4yRWLaFILKMOIlQ245 0fVQaczllySFa7xgv9TmPgjw/rtBsCn52O6xPjHRxkV7VKtOHBTBhWCnYkOOZ4rq +zjWEMbD7ZWqKvUQHqbXuq0Z+imzcjGORYkTt6JdInmgMm1NfEUzRVb06CxcmPn+ itvwD/sx2Hnml4jpgDSgiA49TMF99Nv34DhFYZnWdSExzs1IfyDgj8Zwdfc= -----END CERTIFICATE-----Generated at Sat Oct 18 02:12:09 2025 by rpki-client