$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4eb048e1-25d5-48c0-b618-70720af8d5e7.roa File: 4eb048e1-25d5-48c0-b618-70720af8d5e7.roa (raw, json) Hash identifier: AQtCe8uIDO8lPd3EVNSs//f+rUB+Lg5P4oc9XQialf0= Subject key identifier: 4E:E5:10:1C:77:3B:51:51:60:C0:73:9C:88:D1:7A:5C:4D:57:ED:AD Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 47AA8C35343FD4811C1D5CAC64D81718895FD2FE Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4eb048e1-25d5-48c0-b618-70720af8d5e7.roa Signing time: Fri 10 Oct 2025 16:20:11 +0000 ROA not before: Fri 10 Oct 2025 16:20:11 +0000 ROA not after: Fri 14 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.168.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:aa:8c:35:34:3f:d4:81:1c:1d:5c:ac:64:d8:17:18:89:5f:d2:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 10 16:20:11 2025 GMT Not After : Nov 14 23:59:59 2025 GMT Subject: serialNumber=233fa3ddb180dda21c3cf52e6e44b2cfd9a03bb8aa93a43188b90beead2e9fdb, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1b:87:54:b7:34:9e:1e:d9:1b:40:6e:3a:ec: cc:21:77:6e:57:77:06:5e:2e:a9:2c:01:9f:cf:e9: f0:5d:cf:ab:93:ec:3c:36:55:a1:75:e0:9d:68:98: 52:dd:da:48:77:10:97:c0:a2:b6:87:aa:a2:84:62: c0:1e:23:71:90:3b:ab:e0:90:e5:18:f5:6d:11:21: 54:74:82:b4:e1:d4:2e:c2:95:53:8e:b1:e6:59:51: 1c:35:05:91:99:4d:ef:dd:d4:c6:2d:b9:0c:d8:2e: f7:ac:74:12:99:2b:25:41:ff:bf:13:2f:34:c7:d7: fc:6c:5d:57:2d:b0:2a:ec:f3:d4:8c:31:63:ca:35: 2c:e0:b1:34:41:36:29:43:29:f9:ab:d4:ec:64:1a: 34:75:61:64:ed:3b:b9:d4:8f:6a:b9:0a:80:a6:76: ad:02:33:c5:d0:22:9a:ee:eb:3e:83:b2:05:6f:25: 69:35:61:f4:09:9b:97:2c:8b:42:f6:ca:a1:d9:c5: ab:45:d0:b6:84:9a:da:25:03:6b:e4:ad:ed:64:f2: 32:58:17:50:52:87:fb:98:3e:88:1c:ed:2d:14:ef: 01:27:1b:14:f1:90:4a:16:10:6b:f7:0a:33:34:0d: bb:33:44:f8:ed:bf:6e:2e:1f:e2:f4:ed:95:61:90: 83:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:E5:10:1C:77:3B:51:51:60:C0:73:9C:88:D1:7A:5C:4D:57:ED:AD X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4eb048e1-25d5-48c0-b618-70720af8d5e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.168.224.0/21 Signature Algorithm: sha256WithRSAEncryption 9f:14:f8:67:e2:85:00:b5:6b:26:12:05:6d:2d:78:f3:fd:ff: d0:fd:40:ad:e5:3e:67:e3:e7:3f:cb:fa:01:f3:a7:0b:61:97: ae:f2:34:bd:b3:67:d4:c7:54:7b:4e:9b:bf:05:17:7d:8b:f5: ec:ea:72:25:17:8e:fe:d8:c5:a7:9c:7f:aa:5e:af:5c:a8:ed: 06:87:f9:2d:72:c6:75:95:66:76:14:76:48:3a:fd:8a:52:e6: a9:37:ad:60:eb:13:cb:d7:c2:05:c1:fb:3c:7e:b6:fe:38:ea: b6:54:ea:4a:30:3d:81:3b:39:1b:92:48:3f:d9:df:15:3d:72: a3:df:c1:20:dc:1d:b7:85:7a:6a:de:aa:f8:c8:cc:00:c4:f9: 34:31:55:7a:ac:2c:b9:7a:f6:43:de:e9:e1:56:cc:2b:3f:51: 0d:84:77:c8:1e:73:92:5f:c6:bb:c7:e6:96:e5:f1:b2:23:69: 73:e6:1a:5f:6d:4a:54:30:bb:1c:d4:56:fa:ee:0a:3d:b3:da: a1:b6:fb:0d:ea:f6:91:6e:fb:ac:76:dc:8a:af:d7:3b:a0:25: 52:91:bd:7c:e9:4d:1a:c1:8a:a3:33:c7:5c:ed:ee:2f:61:3d: d7:75:8b:f3:5f:36:80:53:54:5e:b9:89:ab:cc:74:87:67:ad: 2c:4b:f2:cb -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUR6qMNTQ/1IEcHVysZNgXGIlf0v4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDEwMTYyMDExWhcNMjUxMTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0AyMzNmYTNkZGIxODBkZGEyMWMzY2Y1MmU2ZTQ0YjJjZmQ5 YTAzYmI4YWE5M2E0MzE4OGI5MGJlZWFkMmU5ZmRiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHG4dUtzSeHtkbQG467Mwhd25XdwZeLqksAZ/P6fBdz6uT 7Dw2VaF14J1omFLd2kh3EJfAoraHqqKEYsAeI3GQO6vgkOUY9W0RIVR0grTh1C7C lVOOseZZURw1BZGZTe/d1MYtuQzYLvesdBKZKyVB/78TLzTH1/xsXVctsCrs89SM MWPKNSzgsTRBNilDKfmr1OxkGjR1YWTtO7nUj2q5CoCmdq0CM8XQIpru6z6DsgVv JWk1YfQJm5csi0L2yqHZxatF0LaEmtolA2vkre1k8jJYF1BSh/uYPogc7S0U7wEn GxTxkEoWEGv3CjM0DbszRPjtv24uH+L07ZVhkIM5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUTuUQHHc7UVFgwHOciNF6XE1X7a0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzRlYjA0OGUxLTI1ZDUtNDhjMC1iNjE4LTcwNzIwYWY4ZDVlNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAM2qOAwDQYJKoZIhvcNAQELBQADggEBAJ8U+GfihQC1ayYSBW0tePP9/9D9 QK3lPmfj5z/L+gHzpwthl67yNL2zZ9THVHtOm78FF32L9ezqciUXjv7Yxaecf6pe r1yo7QaH+S1yxnWVZnYUdkg6/YpS5qk3rWDrE8vXwgXB+zx+tv446rZU6kowPYE7 ORuSSD/Z3xU9cqPfwSDcHbeFemreqvjIzADE+TQxVXqsLLl69kPe6eFWzCs/UQ2E d8gec5JfxrvH5pbl8bIjaXPmGl9tSlQwuxzUVvruCj2z2qG2+w3q9pFu+6x23Iqv 1zugJVKRvXzpTRrBiqMzx1zt7i9hPdd1i/NfNoBTVF65iavMdIdnrSxL8ss= -----END CERTIFICATE-----Generated at Sat Oct 18 02:42:10 2025 by rpki-client