$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5023eea5-a695-4879-a1a0-4caa86a3674b.roa File: 5023eea5-a695-4879-a1a0-4caa86a3674b.roa (raw, json) Hash identifier: ayKarVtSLynrjGc0ACLbJVpJtQGCMF1Vk1aV95hOWDw= Subject key identifier: 10:C6:8F:3D:E8:75:87:50:CC:5E:19:90:FC:30:6F:6E:A7:58:25:B8 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 34AAA633B66BB175458035EA1725BD16FC031249 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5023eea5-a695-4879-a1a0-4caa86a3674b.roa Signing time: Tue 23 Sep 2025 00:00:57 +0000 ROA not before: Tue 23 Sep 2025 00:00:57 +0000 ROA not after: Tue 28 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.85.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:aa:a6:33:b6:6b:b1:75:45:80:35:ea:17:25:bd:16:fc:03:12:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 23 00:00:57 2025 GMT Not After : Oct 28 23:59:59 2025 GMT Subject: serialNumber=9a2cc755157e820624b92ede4ede407216d656735173e9bce1831d5c1fc07c54, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:65:fa:3b:d3:78:73:d5:e9:74:37:b7:e6:72: 25:85:72:39:f8:9f:61:a1:79:49:4f:01:7b:2d:02: 7c:22:e0:9d:5e:da:06:ed:d9:dc:56:18:78:8f:e9: 35:36:0d:64:83:dc:00:1a:58:90:9d:67:13:94:bb: f9:49:4e:84:e0:cc:d4:61:c4:93:b7:2b:61:d7:5c: 22:fd:11:c3:62:03:e1:98:e0:1b:b3:05:20:c2:f0: d9:b6:f8:fe:bd:2d:83:35:1a:e6:7f:39:fd:45:69: 39:69:05:b5:f8:ef:fa:e1:d7:e6:4c:c5:05:90:7b: 88:ba:30:84:14:a2:1f:a0:50:cb:ea:26:bf:06:09: 68:de:30:a2:e1:57:cf:95:9c:31:4a:2e:18:b9:e2: f6:3e:0a:66:95:8c:a0:7e:02:e7:12:78:01:0a:b6: f3:6e:1a:d7:ae:4a:b3:2b:2d:aa:03:8c:8e:9a:9e: 60:81:8a:c2:7b:de:4f:dc:2f:b4:80:0a:ac:6b:15: c7:bc:d2:70:1e:1b:5a:a8:95:7c:57:81:f1:c1:b8: b2:1e:04:7a:69:eb:0f:f7:df:d3:2a:e2:be:05:a3: 17:83:f7:cc:41:c9:15:01:4d:7a:6c:88:de:48:0c: 87:e9:c3:80:26:31:10:48:24:a8:e3:20:e2:31:6f: c8:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:C6:8F:3D:E8:75:87:50:CC:5E:19:90:FC:30:6F:6E:A7:58:25:B8 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5023eea5-a695-4879-a1a0-4caa86a3674b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.85.157.0/24 Signature Algorithm: sha256WithRSAEncryption 26:15:95:e0:61:48:fc:96:6a:97:29:75:57:72:ac:95:12:fa: a1:b1:4e:30:ab:b2:3e:68:15:85:d7:7e:24:8c:8d:93:d6:fd: 1c:57:a9:bd:d8:d2:72:1d:f9:4b:37:2e:28:2d:f5:e5:09:7d: f6:bd:eb:b6:96:d6:03:55:a7:8a:7c:3c:89:06:d3:4e:98:e4: 44:11:23:9d:6b:87:a1:89:b7:0c:6e:17:e6:4b:13:2e:b9:68: 42:9a:49:d5:74:0b:88:4c:b3:f9:36:4a:24:89:d3:4e:06:88: 0a:ce:ee:65:26:2b:73:68:74:83:a8:5c:0c:96:96:a2:f3:7a: 96:69:a7:6b:c2:39:4f:28:f8:f7:3a:d3:fa:01:41:12:c0:57: 2b:27:28:3c:f4:01:21:ff:5d:8b:49:38:51:b4:1a:0a:f9:f3: eb:aa:76:29:eb:8f:25:39:37:29:c7:3c:d9:84:e0:59:92:81: 12:03:74:84:79:d5:2b:ab:56:5d:6a:bd:1c:57:e6:56:7a:00: d5:4a:6d:d3:25:e9:0d:0d:cd:54:37:d6:22:89:4b:b7:c7:bf: 4b:5f:61:62:e0:01:7a:5a:2c:5d:f0:2a:bb:5e:e8:07:7a:f9: 5f:d4:3f:a7:95:41:d4:f7:4b:aa:51:5a:99:f7:f1:21:eb:9d: fe:9b:4a:d1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNKqmM7ZrsXVFgDXqFyW9FvwDEkkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIzMDAwMDU3WhcNMjUxMDI4MjM1OTU5 WjB6MUkwRwYDVQQFE0A5YTJjYzc1NTE1N2U4MjA2MjRiOTJlZGU0ZWRlNDA3MjE2 ZDY1NjczNTE3M2U5YmNlMTgzMWQ1YzFmYzA3YzU0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCKZfo703hz1el0N7fmciWFcjn4n2GheUlPAXstAnwi4J1e 2gbt2dxWGHiP6TU2DWSD3AAaWJCdZxOUu/lJToTgzNRhxJO3K2HXXCL9EcNiA+GY 4BuzBSDC8Nm2+P69LYM1GuZ/Of1FaTlpBbX47/rh1+ZMxQWQe4i6MIQUoh+gUMvq Jr8GCWjeMKLhV8+VnDFKLhi54vY+CmaVjKB+AucSeAEKtvNuGteuSrMrLaoDjI6a nmCBisJ73k/cL7SACqxrFce80nAeG1qolXxXgfHBuLIeBHpp6w/339Mq4r4FoxeD 98xByRUBTXpsiN5IDIfpw4AmMRBIJKjjIOIxb8ipAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUEMaPPeh1h1DMXhmQ/DBvbqdYJbgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzUwMjNlZWE1LWE2OTUtNDg3OS1hMWEwLTRjYWE4NmEzNjc0Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0VZ0wDQYJKoZIhvcNAQELBQADggEBACYVleBhSPyWapcpdVdyrJUS+qGx TjCrsj5oFYXXfiSMjZPW/RxXqb3Y0nId+Us3Ligt9eUJffa967aW1gNVp4p8PIkG 006Y5EQRI51rh6GJtwxuF+ZLEy65aEKaSdV0C4hMs/k2SiSJ004GiArO7mUmK3No dIOoXAyWlqLzepZpp2vCOU8o+Pc60/oBQRLAVysnKDz0ASH/XYtJOFG0Ggr58+uq dinrjyU5NynHPNmE4FmSgRIDdIR51SurVl1qvRxX5lZ6ANVKbdMl6Q0NzVQ31iKJ S7fHv0tfYWLgAXpaLF3wKrte6Ad6+V/UP6eVQdT3S6pRWpn38SHrnf6bStE= -----END CERTIFICATE-----Generated at Sat Oct 18 00:00:17 2025 by rpki-client