$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6ceaa9ef-e996-415f-b455-e219972c312f.roa File: 6ceaa9ef-e996-415f-b455-e219972c312f.roa (raw, json) Hash identifier: 00Y8DIDaSoKbNGUfbdKsHFCnvlW0bpZbGtY0iXvy/dI= Subject key identifier: 01:B8:36:0E:51:72:82:C9:8C:FB:78:FD:E2:0B:3C:CB:91:51:38:87 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1294CA5524FDC1C296261C3C71E2866D154F3091 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6ceaa9ef-e996-415f-b455-e219972c312f.roa Signing time: Fri 19 Sep 2025 02:09:32 +0000 ROA not before: Fri 19 Sep 2025 02:09:32 +0000 ROA not after: Fri 24 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.192.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:94:ca:55:24:fd:c1:c2:96:26:1c:3c:71:e2:86:6d:15:4f:30:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 19 02:09:32 2025 GMT Not After : Oct 24 23:59:59 2025 GMT Subject: serialNumber=013641b98d38066e4e3964f52bf9f6e06dd39072a98aaa67a48b2e411295e03f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:72:d2:1f:d2:ff:3f:5e:f0:e1:7b:8a:fd:af: 91:58:7e:6b:b5:ca:9c:b7:d9:12:74:c1:ce:0f:50: 92:69:d2:2b:32:ce:6c:2f:f3:8f:e0:c1:e9:4c:c7: 6b:ea:bf:24:90:7b:9a:eb:03:b9:35:8f:79:dc:02: 7f:82:32:5b:94:54:6f:4f:c7:a1:7e:b6:45:d7:e5: 0a:97:de:66:fe:19:b1:0a:17:3f:4b:61:ed:01:f9: 77:f1:0a:60:bc:ed:9c:d6:1c:5c:2b:8d:0e:c8:81: 1b:f9:68:67:50:e6:6f:ee:bc:1c:7f:d7:35:12:55: 6b:e0:ae:83:4d:82:6b:9d:93:e4:ee:31:e9:ef:73: f7:82:ff:82:2b:f3:1c:c0:32:aa:e1:4f:e0:5b:bd: 85:f5:03:55:45:66:7c:a0:01:36:fd:1b:bc:c4:93: 5d:a5:e5:69:62:12:c4:17:78:85:0e:07:d6:6b:52: 42:52:d8:1e:ff:9b:dd:c4:61:a5:2a:b9:20:89:46: 98:74:fc:73:3f:6a:1b:60:c7:7d:85:cf:09:25:77: 22:95:9e:70:5c:ca:e8:37:8e:1b:d3:f7:86:45:a4: fd:e0:cd:66:39:15:03:07:ed:09:b6:08:73:23:3e: 70:3c:ec:e8:66:94:fa:d6:cf:d3:c0:34:71:e2:38: d4:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:B8:36:0E:51:72:82:C9:8C:FB:78:FD:E2:0B:3C:CB:91:51:38:87 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6ceaa9ef-e996-415f-b455-e219972c312f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.192.141.0/24 Signature Algorithm: sha256WithRSAEncryption 62:91:cd:f5:b1:eb:dd:97:e1:10:e0:70:9d:ae:df:ae:a7:d1: 3f:c0:6a:de:65:3e:b9:81:72:0b:45:ec:8d:a4:29:9b:9b:f1: e4:c7:2f:17:9b:0c:ab:e1:3d:9b:b4:63:8f:0f:df:21:b4:26: 67:98:b6:e2:e5:57:d4:40:eb:63:56:bc:20:d6:cd:bd:6e:d4: f2:8f:e5:03:db:f6:66:0d:28:a3:c3:d0:26:90:92:c0:7a:bf: 88:c6:72:49:c6:79:5c:ec:60:96:fb:42:19:75:24:49:1d:bf: b8:aa:7d:a5:bf:bd:70:6f:ac:cd:b3:0d:ae:7b:b0:52:92:45: 4e:f5:6b:4c:29:cc:16:ca:27:ed:a3:87:1b:aa:82:3b:90:f1: 3e:17:e4:02:0a:bc:31:64:ba:36:ec:d9:bd:17:e0:82:00:bc: cb:38:db:02:d6:e2:a8:3a:28:09:50:5f:0d:84:d9:29:c6:bb: 7e:e0:b8:a0:e3:cd:31:4a:98:f4:cb:48:ee:b7:41:3e:ab:fb: ff:0e:30:fd:4f:e2:a6:fe:10:8d:f0:0c:e8:1a:be:ac:54:95: 6c:32:c1:9a:f4:d9:4c:26:ed:95:67:12:42:a8:1b:14:7a:60: 51:82:c0:79:77:e5:77:9a:0d:9b:9b:27:22:bd:83:61:78:14: 6e:d1:d4:03 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEpTKVST9wcKWJhw8ceKGbRVPMJEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTE5MDIwOTMyWhcNMjUxMDI0MjM1OTU5 WjB6MUkwRwYDVQQFE0AwMTM2NDFiOThkMzgwNjZlNGUzOTY0ZjUyYmY5ZjZlMDZk ZDM5MDcyYTk4YWFhNjdhNDhiMmU0MTEyOTVlMDNmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCTctIf0v8/XvDhe4r9r5FYfmu1ypy32RJ0wc4PUJJp0isy zmwv84/gwelMx2vqvySQe5rrA7k1j3ncAn+CMluUVG9Px6F+tkXX5QqX3mb+GbEK Fz9LYe0B+XfxCmC87ZzWHFwrjQ7IgRv5aGdQ5m/uvBx/1zUSVWvgroNNgmudk+Tu Menvc/eC/4Ir8xzAMqrhT+BbvYX1A1VFZnygATb9G7zEk12l5WliEsQXeIUOB9Zr UkJS2B7/m93EYaUquSCJRph0/HM/ahtgx32FzwkldyKVnnBcyug3jhvT94ZFpP3g zWY5FQMH7Qm2CHMjPnA87OhmlPrWz9PANHHiONSlAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUAbg2DlFygsmM+3j94gs8y5FROIcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzZjZWFhOWVmLWU5OTYtNDE1Zi1iNDU1LWUyMTk5NzJjMzEyZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA2wI0wDQYJKoZIhvcNAQELBQADggEBAGKRzfWx692X4RDgcJ2u366n0T/A at5lPrmBcgtF7I2kKZub8eTHLxebDKvhPZu0Y48P3yG0JmeYtuLlV9RA62NWvCDW zb1u1PKP5QPb9mYNKKPD0CaQksB6v4jGcknGeVzsYJb7Qhl1JEkdv7iqfaW/vXBv rM2zDa57sFKSRU71a0wpzBbKJ+2jhxuqgjuQ8T4X5AIKvDFkujbs2b0X4IIAvMs4 2wLW4qg6KAlQXw2E2SnGu37guKDjzTFKmPTLSO63QT6r+/8OMP1P4qb+EI3wDOga vqxUlWwywZr02Uwm7ZVnEkKoGxR6YFGCwHl35XeaDZubJyK9g2F4FG7R1AM= -----END CERTIFICATE-----Generated at Fri Oct 17 21:58:46 2025 by rpki-client