$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6310568e-f381-4c3d-b298-9ebbb69c3cc5.roa File: 6310568e-f381-4c3d-b298-9ebbb69c3cc5.roa (raw, json) Hash identifier: Ib5/GbLK3WINWDrn/f+LI7P9Lsx4jJCUN4sGo9C2Z08= Subject key identifier: 41:41:0F:CE:96:39:61:DC:48:28:43:C3:A9:FD:05:1F:29:9A:60:68 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6CCBBD3932F1DD0D74E9E820AE7916CC46424244 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6310568e-f381-4c3d-b298-9ebbb69c3cc5.roa Signing time: Fri 19 Sep 2025 02:37:12 +0000 ROA not before: Fri 19 Sep 2025 02:37:12 +0000 ROA not after: Fri 24 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.192.232.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:cb:bd:39:32:f1:dd:0d:74:e9:e8:20:ae:79:16:cc:46:42:42:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 19 02:37:12 2025 GMT Not After : Oct 24 23:59:59 2025 GMT Subject: serialNumber=dda6aa0601832c7eb656933ae0a48963605182efa63accb03b32b8f76365b4a9, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:60:f9:1c:97:37:ff:a8:17:11:7a:b4:76:6b: a0:f1:e5:51:7a:14:b2:f9:bd:ed:64:bb:19:5f:b2: dd:7e:42:f3:02:76:22:14:12:73:46:a8:47:1d:16: f7:cd:d6:21:bd:ca:1f:f5:15:37:87:90:94:2c:51: 18:e1:b1:2c:20:92:6a:dc:29:05:4f:7b:49:8a:53: 89:be:f0:92:0a:47:52:21:6b:67:31:59:5e:83:90: 80:ef:3c:05:6e:84:b6:6e:a9:bc:ef:96:e2:c4:fd: b4:6e:ba:b9:8c:ec:58:15:6e:2c:3a:19:ba:8a:ea: e3:22:73:b8:a4:1f:65:40:78:ed:f6:9f:d4:70:7e: 5e:68:09:0a:02:1b:c2:2c:6a:83:ce:f2:a1:1a:bd: 5c:0c:6a:19:f9:52:12:40:7c:50:8b:72:89:87:9e: d8:56:d7:07:ff:3f:32:a1:3d:e1:32:12:2a:52:fb: dc:bd:f0:5c:3f:c9:c8:bc:e1:5f:59:0d:6c:9f:5c: 39:cd:17:bf:67:15:84:5d:54:5d:75:e4:b2:0c:d8: 73:fa:8f:fe:c1:a1:38:98:da:53:06:ac:7a:d9:aa: 38:55:05:8d:34:99:61:65:17:1b:c6:e3:f5:5a:94: 29:76:ad:b2:7b:1a:19:79:08:0d:d5:c9:3b:2d:04: 69:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:41:0F:CE:96:39:61:DC:48:28:43:C3:A9:FD:05:1F:29:9A:60:68 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6310568e-f381-4c3d-b298-9ebbb69c3cc5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.192.232.0/23 Signature Algorithm: sha256WithRSAEncryption 67:b0:21:55:ee:4d:f8:74:81:96:e1:fc:59:ec:f7:18:1a:7f: 94:b4:dc:5a:9e:64:66:f8:78:a4:0a:b5:c9:bb:ac:f9:94:30: 28:cc:d3:10:6d:6c:b8:fe:29:ca:6d:8b:c6:df:e9:2b:22:1d: 7f:e5:27:6a:94:2b:05:81:3b:f7:b3:3e:a7:00:94:8a:9a:6b: cf:5d:4e:ca:65:cd:fc:f0:c3:08:8d:a9:1f:51:8a:af:92:da: 8e:bc:54:2a:20:6e:1c:6e:f3:80:2f:0b:5a:30:dd:86:39:78: ec:bc:bb:25:88:85:b8:2b:fe:fd:91:bc:28:26:f4:a5:c9:cb: c2:a6:52:10:d4:80:1d:a8:d9:bd:50:1c:9a:09:c3:64:96:99: 78:74:e9:3d:23:b5:f3:f8:22:77:fe:ab:d2:37:3e:59:e3:c2: 9f:e4:ef:b4:86:cf:67:4b:99:9f:5e:ff:94:83:a8:46:72:3c: ed:37:fa:d8:f5:91:10:d1:2b:b8:74:e5:c2:a6:f1:64:f9:2a: 6a:f7:25:66:ca:f1:12:4d:41:4d:67:8a:ab:83:7d:8a:f5:f5: 37:18:fe:d9:38:c8:f8:59:d7:e8:2f:3b:4a:bb:40:14:86:d8: e9:e2:49:b4:bb:fe:06:4c:7b:ed:f9:8e:ea:94:49:0b:17:3c: db:da:87:e2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbMu9OTLx3Q106eggrnkWzEZCQkQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTE5MDIzNzEyWhcNMjUxMDI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BkZGE2YWEwNjAxODMyYzdlYjY1NjkzM2FlMGE0ODk2MzYw NTE4MmVmYTYzYWNjYjAzYjMyYjhmNzYzNjViNGE5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCPYPkclzf/qBcRerR2a6Dx5VF6FLL5ve1kuxlfst1+QvMC diIUEnNGqEcdFvfN1iG9yh/1FTeHkJQsURjhsSwgkmrcKQVPe0mKU4m+8JIKR1Ih a2cxWV6DkIDvPAVuhLZuqbzvluLE/bRuurmM7FgVbiw6GbqK6uMic7ikH2VAeO32 n9Rwfl5oCQoCG8IsaoPO8qEavVwMahn5UhJAfFCLcomHnthW1wf/PzKhPeEyEipS +9y98Fw/yci84V9ZDWyfXDnNF79nFYRdVF115LIM2HP6j/7BoTiY2lMGrHrZqjhV BY00mWFlFxvG4/ValCl2rbJ7Ghl5CA3VyTstBGmHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUQUEPzpY5YdxIKEPDqf0FHymaYGgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzYzMTA1NjhlLWYzODEtNGMzZC1iMjk4LTllYmJiNjljM2NjNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE2wOgwDQYJKoZIhvcNAQELBQADggEBAGewIVXuTfh0gZbh/Fns9xgaf5S0 3FqeZGb4eKQKtcm7rPmUMCjM0xBtbLj+Kcpti8bf6SsiHX/lJ2qUKwWBO/ezPqcA lIqaa89dTsplzfzwwwiNqR9Riq+S2o68VCogbhxu84AvC1ow3YY5eOy8uyWIhbgr /v2RvCgm9KXJy8KmUhDUgB2o2b1QHJoJw2SWmXh06T0jtfP4Inf+q9I3Plnjwp/k 77SGz2dLmZ9e/5SDqEZyPO03+tj1kRDRK7h05cKm8WT5Kmr3JWbK8RJNQU1niquD fYr19TcY/tk4yPhZ1+gvO0q7QBSG2OniSbS7/gZMe+35juqUSQsXPNvah+I= -----END CERTIFICATE-----Generated at Fri Oct 17 23:52:21 2025 by rpki-client