$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7b50cb87-4268-430e-8be1-26602b069e65.roa File: 7b50cb87-4268-430e-8be1-26602b069e65.roa (raw, json) Hash identifier: mMrJTHpAr3YaAQe4MwndcUVd+A/Eoa/gAn04vb6y9tE= Subject key identifier: DF:DD:7A:A6:EE:DB:94:6D:E0:25:0D:3D:60:66:01:05:4E:7C:71:7B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 535771F6BC75C28C2B806B676DD040253516D360 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7b50cb87-4268-430e-8be1-26602b069e65.roa Signing time: Mon 06 Oct 2025 17:14:07 +0000 ROA not before: Mon 06 Oct 2025 17:14:07 +0000 ROA not after: Mon 10 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.93.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:57:71:f6:bc:75:c2:8c:2b:80:6b:67:6d:d0:40:25:35:16:d3:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 6 17:14:07 2025 GMT Not After : Nov 10 23:59:59 2025 GMT Subject: serialNumber=ca1be0ae78d903b8c18a3bf385e4e3545ff52eb005260e1f0e4d80455c348509, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:63:25:4b:6f:d7:d2:73:0c:31:7a:1c:1b:20: da:94:9e:1a:95:98:9e:20:6e:88:42:19:7d:e6:7b: fc:b6:15:88:c0:ac:0d:71:1b:5d:49:92:2a:04:06: 25:eb:a9:02:6d:ef:33:15:dd:4c:09:21:f7:e2:b0: 75:9b:a8:d5:32:f8:18:5b:0c:6c:34:17:fc:db:64: 90:ea:d4:b3:5b:30:fa:09:5e:91:f5:0f:bd:a6:a0: 9f:a5:70:cc:a3:1a:d3:02:79:ca:56:1c:28:da:33: e3:bc:5c:be:27:cd:29:66:e5:3f:5b:ec:59:9f:bd: aa:39:70:9b:e8:64:07:a8:65:1f:52:7a:9f:4a:1f: 18:33:8f:a0:a0:d9:92:bd:16:40:d3:87:aa:de:d4: 25:57:42:21:b7:37:3e:f7:61:2d:e2:ff:5b:e0:f9: d9:a2:45:4c:0a:70:7f:83:ee:e1:c6:50:8d:1d:92: 12:53:2e:12:46:9c:f2:17:e7:af:8b:be:43:00:a7: 18:ec:59:5c:bf:52:6a:fe:7d:13:6f:14:be:52:31: 12:d7:46:67:01:82:94:21:c4:47:63:aa:bd:ce:0e: 4e:da:13:a8:49:b8:24:ae:69:50:3b:66:13:e8:a3: 01:88:72:82:be:7e:64:ca:40:ad:1a:ed:69:5d:4e: cf:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:DD:7A:A6:EE:DB:94:6D:E0:25:0D:3D:60:66:01:05:4E:7C:71:7B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7b50cb87-4268-430e-8be1-26602b069e65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.93.243.0/24 Signature Algorithm: sha256WithRSAEncryption 28:c3:d4:b8:06:f1:f4:bf:e3:25:b6:0d:89:02:3a:ef:9f:a1: 6f:36:5c:13:e0:ef:f7:68:9f:ee:0c:41:d3:9d:5e:99:50:ed: 8f:4f:87:3a:cd:ba:f6:c3:c4:f0:58:bf:ea:d2:53:da:28:8e: f1:08:5f:88:d8:74:c8:50:99:bd:36:09:26:25:72:bc:c1:c6: d4:ca:4f:d9:30:35:e4:b4:78:47:a3:5c:c0:1a:22:f0:aa:6e: 96:9a:00:8e:41:d2:9d:49:f6:88:8c:20:c9:8e:18:2b:14:23: e7:5c:6c:27:ff:4b:41:c6:48:a3:bb:74:74:2b:25:2d:6c:04: 34:01:7f:2c:55:a4:0c:7a:2f:bc:09:7c:7c:39:7e:4e:11:a3: 79:73:3a:28:5f:72:e7:26:72:61:86:c0:79:27:8b:d8:24:de: e5:fb:ad:c3:04:5a:93:d3:53:77:db:68:c1:82:4f:cc:a1:e7: d3:61:f3:f8:95:39:d1:30:1f:63:38:f5:05:98:12:9c:0f:60: 78:59:51:d1:a2:4a:d5:ba:89:61:f2:78:e8:6e:81:c2:a6:0c: 12:7a:d7:8a:7e:94:0a:3e:36:5d:27:3a:1f:4d:82:cf:3e:1a: d2:3c:dd:94:c6:4b:e0:aa:f9:f9:7a:70:32:ef:d3:7d:4f:0f: c1:af:bb:e4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUU1dx9rx1wowrgGtnbdBAJTUW02AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDA2MTcxNDA3WhcNMjUxMTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BjYTFiZTBhZTc4ZDkwM2I4YzE4YTNiZjM4NWU0ZTM1NDVm ZjUyZWIwMDUyNjBlMWYwZTRkODA0NTVjMzQ4NTA5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCYyVLb9fScwwxehwbINqUnhqVmJ4gbohCGX3me/y2FYjA rA1xG11JkioEBiXrqQJt7zMV3UwJIffisHWbqNUy+BhbDGw0F/zbZJDq1LNbMPoJ XpH1D72moJ+lcMyjGtMCecpWHCjaM+O8XL4nzSlm5T9b7Fmfvao5cJvoZAeoZR9S ep9KHxgzj6Cg2ZK9FkDTh6re1CVXQiG3Nz73YS3i/1vg+dmiRUwKcH+D7uHGUI0d khJTLhJGnPIX56+LvkMApxjsWVy/Umr+fRNvFL5SMRLXRmcBgpQhxEdjqr3ODk7a E6hJuCSuaVA7ZhPoowGIcoK+fmTKQK0a7WldTs/rAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU3916pu7blG3gJQ09YGYBBU58cXswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzdiNTBjYjg3LTQyNjgtNDMwZS04YmUxLTI2NjAyYjA2OWU2NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0XfMwDQYJKoZIhvcNAQELBQADggEBACjD1LgG8fS/4yW2DYkCOu+foW82 XBPg7/don+4MQdOdXplQ7Y9PhzrNuvbDxPBYv+rSU9oojvEIX4jYdMhQmb02CSYl crzBxtTKT9kwNeS0eEejXMAaIvCqbpaaAI5B0p1J9oiMIMmOGCsUI+dcbCf/S0HG SKO7dHQrJS1sBDQBfyxVpAx6L7wJfHw5fk4Ro3lzOihfcucmcmGGwHkni9gk3uX7 rcMEWpPTU3fbaMGCT8yh59Nh8/iVOdEwH2M49QWYEpwPYHhZUdGiStW6iWHyeOhu gcKmDBJ614p+lAo+Nl0nOh9Ngs8+GtI83ZTGS+Cq+fl6cDLv031PD8Gvu+Q= -----END CERTIFICATE-----Generated at Sat Oct 18 02:20:08 2025 by rpki-client