$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8a6ad66c-b93c-44ed-9b5c-3ccfa62c556d.roa File: 8a6ad66c-b93c-44ed-9b5c-3ccfa62c556d.roa (raw, json) Hash identifier: p7RP5Khcn3FICWm7xZ/gJaohyrUuRQeJwi2OCUwHim8= Subject key identifier: 73:F4:ED:6B:5E:97:25:CF:FD:CE:4D:61:38:E4:01:FA:66:E0:00:DE Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4535DCAC8C426CC726290EEB3AE8C11B8DCAAC9F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8a6ad66c-b93c-44ed-9b5c-3ccfa62c556d.roa Signing time: Mon 22 Sep 2025 23:56:02 +0000 ROA not before: Mon 22 Sep 2025 23:56:02 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.84.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:35:dc:ac:8c:42:6c:c7:26:29:0e:eb:3a:e8:c1:1b:8d:ca:ac:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 23:56:02 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=dbe1802e2489a3ec25439d3d26dd643a9cbf9ef98dc6d8447db3879d548c5b59, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:3c:c7:be:0b:fe:1d:5f:66:12:b2:95:07:ff: 3b:28:4f:32:13:31:ca:87:6e:a2:73:84:f0:eb:57: a9:73:97:96:c5:5f:3b:b9:ad:16:d5:28:8b:0a:2d: 63:87:68:73:2c:2c:5d:41:7b:90:8a:b1:12:65:11: 57:bd:44:6f:6a:ed:ef:41:21:8e:4e:d7:5c:b9:d5: b1:c0:df:c4:c0:2f:d8:34:0e:3a:51:8e:c7:a4:00: 47:bb:6c:2f:f2:41:82:61:9a:86:66:4b:a0:d0:4a: dc:f9:f5:c8:56:f1:16:34:b5:aa:a2:bf:b5:bd:b9: ac:2a:76:1d:95:06:b2:80:dc:16:52:a5:cb:a1:b3: c9:db:61:ec:44:e9:1b:5d:0a:1a:ff:22:82:6a:42: 7d:18:b2:d7:fe:f1:66:ea:68:86:dd:7a:8e:c4:5e: 6d:6c:f2:7c:02:43:b3:2b:e2:36:b3:88:5f:46:1a: 13:6b:b0:c3:e9:cf:92:79:0e:04:4f:65:8c:f1:a8: cd:9d:58:df:39:7d:58:ba:17:81:08:c1:54:77:6a: cf:69:20:c9:d8:71:77:b5:de:70:c1:b4:c2:d5:b5: 68:28:59:9a:51:7b:48:23:2d:4a:0e:9d:c2:7c:45: c8:54:af:6d:84:50:7a:ac:2f:bc:56:a5:e6:44:72: 1f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:F4:ED:6B:5E:97:25:CF:FD:CE:4D:61:38:E4:01:FA:66:E0:00:DE X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8a6ad66c-b93c-44ed-9b5c-3ccfa62c556d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.84.60.0/24 Signature Algorithm: sha256WithRSAEncryption 50:0d:3f:4a:77:7e:c8:c1:31:a1:09:99:38:10:e9:69:09:32: 20:fe:d4:9b:e7:e5:15:61:46:bf:26:fe:f7:4f:82:d4:5f:10: 09:cb:90:7b:87:a4:01:b4:d2:67:9f:ef:79:03:86:be:3b:4f: 13:07:92:a1:c5:bb:de:6b:42:de:8a:20:13:12:85:6c:7f:27: 00:a5:44:0c:a7:b1:dc:46:30:03:2b:7d:52:74:46:9d:b9:f5: da:50:f4:73:37:b2:55:03:52:e4:6a:19:37:e3:fd:43:be:e5: 32:b0:e4:3c:12:80:65:1d:35:67:73:b9:ad:a1:b3:ea:88:c3: 9e:02:55:0b:50:b4:4d:fd:e6:de:4a:65:ec:1e:28:81:b6:75: 04:04:d3:6b:fd:9f:90:5e:b0:00:ec:d2:91:2c:fe:05:23:66: bf:77:6a:52:ad:91:42:c0:3f:99:dd:ad:00:9c:2c:ae:a3:24: 65:70:99:f9:b7:65:3c:65:4b:89:56:eb:92:97:fc:44:dc:ff: ff:7f:de:d9:c5:f3:16:74:17:72:64:fa:33:99:fe:b5:ee:dd: 8b:eb:4b:32:02:fd:8b:60:06:4e:e0:4c:65:da:c9:d1:20:e3: 2b:34:56:9d:d2:7b:80:39:12:bf:c4:07:14:46:ed:81:dc:a5: d8:2e:03:3b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURTXcrIxCbMcmKQ7rOujBG43KrJ8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjM1NjAyWhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BkYmUxODAyZTI0ODlhM2VjMjU0MzlkM2QyNmRkNjQzYTlj YmY5ZWY5OGRjNmQ4NDQ3ZGIzODc5ZDU0OGM1YjU5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD0PMe+C/4dX2YSspUH/zsoTzITMcqHbqJzhPDrV6lzl5bF Xzu5rRbVKIsKLWOHaHMsLF1Be5CKsRJlEVe9RG9q7e9BIY5O11y51bHA38TAL9g0 DjpRjsekAEe7bC/yQYJhmoZmS6DQStz59chW8RY0taqiv7W9uawqdh2VBrKA3BZS pcuhs8nbYexE6RtdChr/IoJqQn0Ystf+8WbqaIbdeo7EXm1s8nwCQ7Mr4jaziF9G GhNrsMPpz5J5DgRPZYzxqM2dWN85fVi6F4EIwVR3as9pIMnYcXe13nDBtMLVtWgo WZpRe0gjLUoOncJ8RchUr22EUHqsL7xWpeZEch9dAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUc/Tta16XJc/9zk1hOOQB+mbgAN4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzhhNmFkNjZjLWI5M2MtNDRlZC05YjVjLTNjY2ZhNjJjNTU2ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0VDwwDQYJKoZIhvcNAQELBQADggEBAFANP0p3fsjBMaEJmTgQ6WkJMiD+ 1Jvn5RVhRr8m/vdPgtRfEAnLkHuHpAG00mef73kDhr47TxMHkqHFu95rQt6KIBMS hWx/JwClRAynsdxGMAMrfVJ0Rp259dpQ9HM3slUDUuRqGTfj/UO+5TKw5DwSgGUd NWdzua2hs+qIw54CVQtQtE395t5KZeweKIG2dQQE02v9n5BesADs0pEs/gUjZr93 alKtkULAP5ndrQCcLK6jJGVwmfm3ZTxlS4lW65KX/ETc//9/3tnF8xZ0F3Jk+jOZ /rXu3YvrSzIC/YtgBk7gTGXaydEg4ys0Vp3Se4A5Er/EBxRG7YHcpdguAzs= -----END CERTIFICATE-----Generated at Fri Oct 17 23:41:27 2025 by rpki-client