$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/601b876d-76de-403f-bffe-d4b9fbcd5ceb.roa File: 601b876d-76de-403f-bffe-d4b9fbcd5ceb.roa (raw, json) Hash identifier: Y0zL3tv7YQlvnh/H8in+Bi6sNI/H2SF+KVPU1I0czr8= Subject key identifier: 44:2F:EB:8A:52:A7:FC:35:25:E3:CF:54:D6:E4:BE:73:36:AB:3B:BA Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4F0A1A37083D2C63D4B3107C121F3E9C527D16 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/601b876d-76de-403f-bffe-d4b9fbcd5ceb.roa Signing time: Tue 23 Sep 2025 00:38:58 +0000 ROA not before: Tue 23 Sep 2025 00:38:58 +0000 ROA not after: Tue 28 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.84.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:0a:1a:37:08:3d:2c:63:d4:b3:10:7c:12:1f:3e:9c:52:7d:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 23 00:38:58 2025 GMT Not After : Oct 28 23:59:59 2025 GMT Subject: serialNumber=1cf71f586a6a21a45c51020f702d27b768b597d200ebd0d078bb805b10b54b8e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:1a:48:de:3f:5f:a1:30:fc:51:a1:14:31:d6: 98:99:eb:05:4a:a4:f2:20:ee:7e:de:3b:eb:2a:46: cb:23:dc:c0:1f:f8:2c:ac:22:9c:c2:8c:71:0a:46: 8c:c1:39:cb:80:14:b0:df:97:85:77:73:94:f1:25: 1c:ad:0c:c8:11:10:4c:16:69:77:f7:5b:26:e1:b6: 18:80:c3:9c:f5:8f:9d:c4:50:48:3c:9a:f2:29:5f: 25:f8:9a:1b:df:1e:5e:7a:4e:be:eb:e8:0f:47:fd: 88:83:38:a5:52:7f:dd:9f:cf:2f:69:de:be:88:c4: 0d:3b:2b:aa:04:f3:ed:c0:68:dd:5e:c6:02:e7:6d: c2:71:e7:e1:bb:64:94:f5:47:32:70:d3:dc:03:b7: 31:1e:71:c4:6a:9a:2b:47:b1:7e:26:5b:83:bc:a5: ed:fa:74:1f:93:78:9c:a2:f2:ab:19:1c:05:0d:c3: 6f:af:43:f3:67:c0:06:13:82:26:67:53:05:0d:cf: 83:4f:af:cc:5d:a2:ed:7a:dd:87:d9:c3:a0:8a:44: 27:ac:ef:7d:35:e7:84:e5:07:b5:81:92:76:f1:2c: f6:65:c6:7f:53:be:b2:ec:e2:0b:9f:0c:18:1d:ba: d4:d6:b3:2f:cc:b4:ab:de:b1:9b:be:c9:64:2b:03: 62:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:2F:EB:8A:52:A7:FC:35:25:E3:CF:54:D6:E4:BE:73:36:AB:3B:BA X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/601b876d-76de-403f-bffe-d4b9fbcd5ceb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.84.72.0/21 Signature Algorithm: sha256WithRSAEncryption 3a:69:63:76:7e:da:57:f6:e2:07:60:e6:5e:c2:04:ef:82:6b: d5:7e:ac:b0:e8:87:a8:83:0f:b2:74:e3:30:39:c3:d0:a4:d5: 1d:8d:19:d7:40:ea:c2:d6:eb:6d:5d:cc:0e:d3:53:5e:9d:2d: 8a:b5:c7:b2:a1:6e:d7:c2:6f:30:a6:12:8f:f0:64:d4:ce:15: 58:ee:4c:53:99:29:e2:e2:01:7a:2f:68:02:44:c8:f7:b0:04: f0:5e:52:82:d7:7f:1d:91:3b:c2:e2:72:65:3f:86:8c:e6:2c: 73:b1:f0:56:15:57:a8:28:7b:7d:21:18:c1:f8:c0:c1:27:3c: c5:a8:bd:b1:66:ec:21:dc:1a:6f:f0:77:68:5f:7b:00:f7:95: c1:58:40:3e:a6:09:10:5b:c5:fa:4f:0c:62:65:2e:4c:c0:29: 88:80:3b:72:d0:c3:75:fa:83:86:5a:02:c3:76:71:6c:5f:65: eb:7d:f3:0b:94:7d:68:53:a8:73:f4:bd:2f:ba:c1:be:c0:b3: 14:57:9e:e7:07:1a:6d:17:68:ec:06:13:0b:6f:3e:ce:8c:8f: 39:35:3b:67:7d:9b:fa:52:14:1a:7d:d8:fb:db:e7:20:2f:4f: 20:55:a4:73:c3:4e:e0:74:a2:09:3c:54:80:de:ea:23:fd:5b: dd:fe:4b:77 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITTwoaNwg9LGPUsxB8Eh8+nFJ9FjANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzJkZjZmM2IzYTM0YjYzODZkMWEzMmQ4ZjRmYTMxNzhlZjMx ODg3ZDhiNDI4ZGZhYTQ3NjAeFw0yNTA5MjMwMDM4NThaFw0yNTEwMjgyMzU5NTla MHoxSTBHBgNVBAUTQDFjZjcxZjU4NmE2YTIxYTQ1YzUxMDIwZjcwMmQyN2I3Njhi NTk3ZDIwMGViZDBkMDc4YmI4MDViMTBiNTRiOGUxLTArBgNVBAMTJDVmMjc2MDQ1 LTViOWYtNDVlZi05MjNkLWYzZmNlMjRhNjIyNTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAKYaSN4/X6Ew/FGhFDHWmJnrBUqk8iDuft476ypGyyPcwB/4 LKwinMKMcQpGjME5y4AUsN+XhXdzlPElHK0MyBEQTBZpd/dbJuG2GIDDnPWPncRQ SDya8ilfJfiaG98eXnpOvuvoD0f9iIM4pVJ/3Z/PL2nevojEDTsrqgTz7cBo3V7G AudtwnHn4btklPVHMnDT3AO3MR5xxGqaK0exfiZbg7yl7fp0H5N4nKLyqxkcBQ3D b69D82fABhOCJmdTBQ3Pg0+vzF2i7Xrdh9nDoIpEJ6zvfTXnhOUHtYGSdvEs9mXG f1O+suziC58MGB261NazL8y0q96xm77JZCsDYkcCAwEAAaOCArEwggKtMB0GA1Ud DgQWBBREL+uKUqf8NSXjz1TW5L5zNqs7ujAfBgNVHSMEGDAWgBQlrdNCsB63pY6t GZAmiLVLP4H0uDAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzg1MWNlZjE3LTEz MmEtNDMzNy1iN2QxLWJmMTZhNTJmZmQwMy9kZjZmM2IzYTM0YjYzODZkMWEzMmQ4 ZjRmYTMxNzhlZjMxODg3ZDhiNDI4ZGZhYTQ3Ni5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9mNzAzNjk2ZS1lNDdiLTRjMjAtYmQ5My02Zjgw OTA0ZTQyZDIvNjAxYjg3NmQtNzZkZS00MDNmLWJmZmUtZDRiOWZiY2Q1Y2ViLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMt NmY4MDkwNGU0MmQyL3RqaHRHakxZOVBveGVPOHhpSDJMUW8zNnBIWS5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAzRUSDANBgkqhkiG9w0BAQsFAAOCAQEAOmljdn7aV/biB2DmXsIE74Jr1X6s sOiHqIMPsnTjMDnD0KTVHY0Z10DqwtbrbV3MDtNTXp0tirXHsqFu18JvMKYSj/Bk 1M4VWO5MU5kp4uIBei9oAkTI97AE8F5Sgtd/HZE7wuJyZT+GjOYsc7HwVhVXqCh7 fSEYwfjAwSc8xai9sWbsIdwab/B3aF97APeVwVhAPqYJEFvF+k8MYmUuTMApiIA7 ctDDdfqDhloCw3ZxbF9l633zC5R9aFOoc/S9L7rBvsCzFFee5wcabRdo7AYTC28+ zoyPOTU7Z32b+lIUGn3Y+9vnIC9PIFWkc8NO4HSiCTxUgN7qI/1b3f5Ldw== -----END CERTIFICATE-----Generated at Sat Oct 18 02:19:16 2025 by rpki-client