$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8f0bc127-1f7e-4c2e-985a-a2d1465d684c.roa File: 8f0bc127-1f7e-4c2e-985a-a2d1465d684c.roa (raw, json) Hash identifier: wriYkPMNOzHYSiKC0rgU5aCMNW4nJm/Wcd9tmVdoxkE= Subject key identifier: CC:00:41:A1:71:2D:E9:E2:1D:58:1C:86:F7:68:14:D9:48:15:BB:0A Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 69026FB62443866907C9F73B57265C0FFCEDA63F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8f0bc127-1f7e-4c2e-985a-a2d1465d684c.roa Signing time: Thu 16 Oct 2025 17:14:49 +0000 ROA not before: Thu 16 Oct 2025 17:14:49 +0000 ROA not after: Thu 20 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.222.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:02:6f:b6:24:43:86:69:07:c9:f7:3b:57:26:5c:0f:fc:ed:a6:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 16 17:14:49 2025 GMT Not After : Nov 20 23:59:59 2025 GMT Subject: serialNumber=2186cae51501f80e998e51b8c396ef1c5851460fd6fb4efde9f56cc1f9f30521, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:84:ae:5c:79:2a:76:7d:94:17:5f:f2:7c:75: b4:a5:e5:49:c1:a9:8e:a8:56:ab:32:58:e9:ba:b7: 81:b7:b1:0e:a0:74:65:9f:e1:de:ba:0f:ac:3e:3a: f6:aa:5b:3d:c7:34:c6:2f:8f:ae:2b:ff:4d:39:59: b0:20:f3:ba:8d:88:5e:40:6a:04:83:05:9d:9d:d3: a6:c7:a3:69:01:06:8b:d8:2c:dd:d9:ce:a6:d7:d9: 2b:70:96:ce:7e:de:07:6d:02:e7:d5:ea:a9:ad:52: a8:75:c4:29:72:10:47:f3:57:3c:86:46:58:4f:58: 5b:4b:7e:27:6b:42:56:f3:ce:ed:31:e5:5d:11:d7: 35:0e:58:eb:24:27:b4:58:c2:00:de:ab:05:19:5d: ad:08:45:9e:eb:a7:5f:3f:62:08:75:7b:81:71:46: f5:39:2f:ed:b3:00:9e:71:84:de:a3:54:1f:d8:eb: 57:0c:28:a8:b7:72:8e:a6:41:49:e9:a1:bc:7b:e2: 74:03:5b:47:39:42:8e:17:8d:85:1d:14:f6:35:30: 22:36:8a:e5:5e:92:6f:1f:2a:f8:88:16:04:73:e7: a6:01:c7:21:fb:9c:21:39:44:00:18:39:14:9f:62: 69:55:ae:6a:b2:d7:60:b9:42:43:5b:43:05:39:83: 25:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:00:41:A1:71:2D:E9:E2:1D:58:1C:86:F7:68:14:D9:48:15:BB:0A X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8f0bc127-1f7e-4c2e-985a-a2d1465d684c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.222.203.0/24 Signature Algorithm: sha256WithRSAEncryption 13:ee:1a:41:52:ca:e3:21:ae:be:84:0d:0e:98:53:f9:85:7c: ea:73:ff:d4:cc:8a:28:38:32:dc:bc:31:87:57:43:2b:12:48: 66:98:86:3a:e5:84:20:29:58:70:f7:74:55:21:e4:d7:7e:d7: 0a:b2:6a:5c:2c:40:a8:2b:86:cc:ba:7f:d9:43:5e:07:06:40: 9f:3d:28:9e:71:91:af:c1:a1:21:b5:85:2f:4e:a9:d8:fd:20: e6:e6:5c:d4:21:ab:69:dc:cb:c8:c7:21:9c:48:19:ff:9e:13: d9:85:f8:9d:fd:7b:81:27:ce:79:05:a5:fe:5a:18:1f:b7:60: 1f:36:b5:6d:89:93:6f:c7:8a:9b:99:6d:27:87:44:22:09:80: c2:fc:ec:ed:85:01:b1:8b:0d:91:21:fb:f4:71:0a:9a:d7:37: f6:42:0b:7d:03:25:18:88:f3:35:ee:97:35:12:08:f6:77:1e: 14:4b:cb:18:9f:62:dd:99:8f:5c:55:6e:0d:2c:bb:c7:1e:c8: e4:d0:2c:3f:92:74:c0:ac:74:00:2a:3f:4e:25:94:6a:f5:4b: 20:8b:bc:56:ef:ed:85:90:98:ec:28:c5:c9:8a:09:6f:ff:61: d2:0d:b1:35:76:dc:f4:e7:d6:f3:66:3b:5f:d4:56:06:54:88: 02:c3:29:90 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUaQJvtiRDhmkHyfc7VyZcD/ztpj8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE2MTcxNDQ5WhcNMjUxMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0AyMTg2Y2FlNTE1MDFmODBlOTk4ZTUxYjhjMzk2ZWYxYzU4 NTE0NjBmZDZmYjRlZmRlOWY1NmNjMWY5ZjMwNTIxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBhK5ceSp2fZQXX/J8dbSl5UnBqY6oVqsyWOm6t4G3sQ6g dGWf4d66D6w+OvaqWz3HNMYvj64r/005WbAg87qNiF5AagSDBZ2d06bHo2kBBovY LN3ZzqbX2Stwls5+3gdtAufV6qmtUqh1xClyEEfzVzyGRlhPWFtLfidrQlbzzu0x 5V0R1zUOWOskJ7RYwgDeqwUZXa0IRZ7rp18/Ygh1e4FxRvU5L+2zAJ5xhN6jVB/Y 61cMKKi3co6mQUnpobx74nQDW0c5Qo4XjYUdFPY1MCI2iuVekm8fKviIFgRz56YB xyH7nCE5RAAYORSfYmlVrmqy12C5QkNbQwU5gyUxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUzABBoXEt6eIdWByG92gU2UgVuwowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzhmMGJjMTI3LTFmN2UtNGMyZS05ODVhLWEyZDE0NjVkNjg0Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA03sswDQYJKoZIhvcNAQELBQADggEBABPuGkFSyuMhrr6EDQ6YU/mFfOpz /9TMiig4Mty8MYdXQysSSGaYhjrlhCApWHD3dFUh5Nd+1wqyalwsQKgrhsy6f9lD XgcGQJ89KJ5xka/BoSG1hS9Oqdj9IObmXNQhq2ncy8jHIZxIGf+eE9mF+J39e4En znkFpf5aGB+3YB82tW2Jk2/HipuZbSeHRCIJgML87O2FAbGLDZEh+/RxCprXN/ZC C30DJRiI8zXulzUSCPZ3HhRLyxifYt2Zj1xVbg0su8ceyOTQLD+SdMCsdAAqP04l lGr1SyCLvFbv7YWQmOwoxcmKCW//YdINsTV23PTn1vNmO1/UVgZUiALDKZA= -----END CERTIFICATE-----Generated at Fri Oct 17 23:41:04 2025 by rpki-client