$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6f3cdde0-237a-47f0-8afc-7455d117acb5.roa File: 6f3cdde0-237a-47f0-8afc-7455d117acb5.roa (raw, json) Hash identifier: w4qmqGJlQj5jr8OSpRbtKOwLqu/5njL/TEKD2++sjl4= Subject key identifier: FF:98:C6:8E:2E:12:99:1B:F5:6E:0B:F7:AC:40:28:78:6F:A5:B6:66 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7FCF3FE52EDE715E4395FD668C70054E1D063CD9 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6f3cdde0-237a-47f0-8afc-7455d117acb5.roa Signing time: Tue 23 Sep 2025 00:38:27 +0000 ROA not before: Tue 23 Sep 2025 00:38:27 +0000 ROA not after: Tue 28 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.85.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:cf:3f:e5:2e:de:71:5e:43:95:fd:66:8c:70:05:4e:1d:06:3c:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 23 00:38:27 2025 GMT Not After : Oct 28 23:59:59 2025 GMT Subject: serialNumber=c98ac03ab922fc70487ec09adacf1afd16cb41b0ab08173fa9b80a34bc0b3493, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:96:77:f6:00:ec:ec:6f:08:af:46:9a:b3:b4: f7:eb:9a:e8:ce:63:cb:92:8f:39:51:1c:8e:16:b1: 1e:06:b6:70:f1:e5:b0:53:6d:55:44:37:cf:d6:bc: 40:7a:64:d4:98:ed:90:0f:ed:a9:7c:b3:7e:99:9d: 65:63:27:b7:20:f6:a9:dc:61:c7:ee:63:ce:e1:1b: 02:4c:4a:ef:65:61:02:68:99:5e:98:4f:77:16:34: d2:9d:a1:ca:65:c0:31:61:ed:86:b5:b6:a4:6d:c5: d7:75:fb:d9:3e:0e:0e:95:62:17:b5:dc:4a:f3:a8: 2c:47:39:25:ba:77:cc:2a:4f:a6:e1:ec:46:19:c8: 59:72:14:c3:12:41:3c:15:53:8b:55:97:32:54:be: b3:6b:4d:e5:6c:43:c6:43:31:3d:ac:b7:90:ce:97: b2:ca:a9:0f:c7:bb:f9:f4:b7:ae:ab:b5:c2:ca:ec: a3:b4:a5:9b:43:c9:00:c7:fa:86:b3:33:54:cb:68: d9:70:c4:11:b0:ee:95:7b:90:ba:05:3a:6c:15:e2: b5:03:8d:15:98:ce:25:aa:49:ae:e4:8b:d1:3c:0c: 20:6f:92:ed:f9:4f:40:cf:82:c5:e6:b4:8c:5a:0e: e0:71:72:a4:bf:a8:56:5e:c9:12:e5:9f:38:98:ed: 38:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:98:C6:8E:2E:12:99:1B:F5:6E:0B:F7:AC:40:28:78:6F:A5:B6:66 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6f3cdde0-237a-47f0-8afc-7455d117acb5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.85.8.0/22 Signature Algorithm: sha256WithRSAEncryption 87:c1:52:50:e4:47:8e:76:eb:32:b2:9a:ea:62:b4:8c:7c:aa: b1:65:cc:f4:00:df:1e:84:51:42:b9:20:d3:fa:4d:b6:97:5f: f6:2f:6b:8a:6b:51:ed:bf:d9:04:53:69:68:06:aa:6b:1f:96: ac:c6:d2:ae:16:ba:95:0c:bf:a5:7a:ed:63:03:3d:98:af:fd: 34:92:10:7d:d5:d7:4d:6e:1b:f4:65:ee:aa:9b:93:e6:69:99: 04:e7:d9:1e:44:da:57:7a:0b:df:49:eb:1e:3d:53:84:19:3d: 38:78:e9:a1:7d:fc:62:7d:82:67:be:61:b0:5a:4c:37:bb:9c: 92:39:67:54:f5:da:06:4a:d9:b3:84:b4:f6:a5:52:1e:a6:d2: 09:ff:a4:d5:9c:7f:f0:dd:aa:cd:c1:1c:27:0b:eb:42:fa:63: c3:2f:a4:64:95:af:0a:a3:98:b9:d8:e0:29:7f:4d:bb:9e:9f: 1e:cd:35:7a:a4:52:3a:53:32:77:61:64:f6:9a:af:c5:8d:7b: 70:58:93:e0:5c:84:e4:86:fb:88:89:99:a2:1c:62:5d:fd:f0: b6:a3:64:3e:65:8f:26:37:a4:0a:bb:a1:0b:e1:40:1e:5f:c3: d6:af:4f:19:82:35:95:dc:97:a7:d5:4d:75:93:77:ed:9b:61: 4a:83:8b:df -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUf88/5S7ecV5Dlf1mjHAFTh0GPNkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIzMDAzODI3WhcNMjUxMDI4MjM1OTU5 WjB6MUkwRwYDVQQFE0BjOThhYzAzYWI5MjJmYzcwNDg3ZWMwOWFkYWNmMWFmZDE2 Y2I0MWIwYWIwODE3M2ZhOWI4MGEzNGJjMGIzNDkzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/lnf2AOzsbwivRpqztPfrmujOY8uSjzlRHI4WsR4GtnDx 5bBTbVVEN8/WvEB6ZNSY7ZAP7al8s36ZnWVjJ7cg9qncYcfuY87hGwJMSu9lYQJo mV6YT3cWNNKdocplwDFh7Ya1tqRtxdd1+9k+Dg6VYhe13ErzqCxHOSW6d8wqT6bh 7EYZyFlyFMMSQTwVU4tVlzJUvrNrTeVsQ8ZDMT2st5DOl7LKqQ/Hu/n0t66rtcLK 7KO0pZtDyQDH+oazM1TLaNlwxBGw7pV7kLoFOmwV4rUDjRWYziWqSa7ki9E8DCBv ku35T0DPgsXmtIxaDuBxcqS/qFZeyRLlnziY7TiDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU/5jGji4SmRv1bgv3rEAoeG+ltmYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzZmM2NkZGUwLTIzN2EtNDdmMC04YWZjLTc0NTVkMTE3YWNiNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI0VQgwDQYJKoZIhvcNAQELBQADggEBAIfBUlDkR4526zKymupitIx8qrFl zPQA3x6EUUK5INP6TbaXX/Yva4prUe2/2QRTaWgGqmsflqzG0q4WupUMv6V67WMD PZiv/TSSEH3V101uG/Rl7qqbk+ZpmQTn2R5E2ld6C99J6x49U4QZPTh46aF9/GJ9 gme+YbBaTDe7nJI5Z1T12gZK2bOEtPalUh6m0gn/pNWcf/Ddqs3BHCcL60L6Y8Mv pGSVrwqjmLnY4Cl/Tbuenx7NNXqkUjpTMndhZPaar8WNe3BYk+BchOSG+4iJmaIc Yl398LajZD5ljyY3pAq7oQvhQB5fw9avTxmCNZXcl6fVTXWTd+2bYUqDi98= -----END CERTIFICATE-----Generated at Fri Oct 17 21:59:59 2025 by rpki-client