$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a121bc55-f66d-4837-aa61-d997a5c3b93b.roa File: a121bc55-f66d-4837-aa61-d997a5c3b93b.roa (raw, json) Hash identifier: +8fyRnFWIqgEi/1jbkgAe1rbT1uOzYT4QiAiWViOdnI= Subject key identifier: 6D:B1:FA:3C:D5:00:C8:FA:67:D3:C9:A7:E1:88:1F:1E:0C:37:37:07 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 602197E636C5533CB35BB385FF3A7FDFA9A5CE26 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a121bc55-f66d-4837-aa61-d997a5c3b93b.roa Signing time: Tue 23 Sep 2025 00:17:13 +0000 ROA not before: Tue 23 Sep 2025 00:17:13 +0000 ROA not after: Tue 28 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.84.218.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:21:97:e6:36:c5:53:3c:b3:5b:b3:85:ff:3a:7f:df:a9:a5:ce:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 23 00:17:13 2025 GMT Not After : Oct 28 23:59:59 2025 GMT Subject: serialNumber=6a42a2bd315b58335d999ebf9b6fc838ceb21587b3b6eeefe78c6640a43b9abd, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c1:77:fb:51:bc:34:a6:f2:46:82:1d:57:e8: 9d:6e:e1:71:26:a5:fa:2c:c2:a3:44:56:53:e7:52: f7:29:ae:b8:c7:79:f3:e7:50:09:7c:cc:36:92:09: 04:a5:a6:97:a2:e6:f2:49:af:c8:de:ab:2c:c2:87: 30:7b:dc:fe:06:aa:49:96:ba:c3:e9:53:6f:83:de: ed:af:33:06:2f:46:ec:78:3e:8b:a8:3f:9f:f6:27: 15:46:e3:0b:65:78:76:4b:61:af:0d:03:9b:69:ff: 4a:30:94:33:52:4a:c1:1f:aa:26:d3:3f:7e:bf:04: b6:f8:d3:b4:21:44:33:52:f1:c1:f4:6e:f7:e8:38: fb:4b:ea:92:ec:84:0e:89:5f:63:3e:8f:a9:ef:86: 2d:ec:36:86:37:4a:6b:50:14:38:b3:f1:f3:b4:34: a6:c0:3e:38:55:77:ab:5a:b2:90:17:63:29:b2:3f: 7f:d8:38:59:f0:80:e9:22:40:0b:31:09:30:94:76: 75:87:f9:cf:95:08:f7:e9:01:24:ed:8b:c0:36:23: 5a:ac:8a:cd:fd:53:46:d2:43:cd:d5:5f:81:8d:78: 4f:6a:d6:1b:f7:4f:0e:14:78:f7:a8:ce:c1:46:b3: 8a:ea:48:27:69:4c:93:72:bd:e8:1b:ed:d3:e0:5a: 04:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:B1:FA:3C:D5:00:C8:FA:67:D3:C9:A7:E1:88:1F:1E:0C:37:37:07 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a121bc55-f66d-4837-aa61-d997a5c3b93b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.84.218.0/23 Signature Algorithm: sha256WithRSAEncryption 1a:8a:e8:92:5c:39:74:c0:5c:2c:b9:3f:b2:35:ba:2d:01:6f: 73:e8:0c:c9:fe:c8:fb:6b:f9:f9:81:64:2b:67:97:24:d9:20: 5c:a2:06:59:b0:84:d1:f6:b1:4d:3e:90:9a:d6:d0:03:87:e8: 45:bc:e5:17:95:b6:8f:e0:72:f9:ae:8c:96:f2:df:9c:96:24: db:d4:b7:b0:6e:63:68:e0:bc:f1:b6:ef:4e:f8:a1:f1:e7:f3: fe:c1:2b:ad:f1:ea:13:a8:40:74:dd:63:7a:3c:ff:3f:1b:c5: 37:92:9d:f4:fe:45:c1:71:5e:05:a2:7c:28:90:42:61:d3:d4: 41:65:69:64:e7:4c:48:38:53:85:c5:a4:f8:16:a9:24:53:21: c4:db:db:54:a6:80:70:96:d5:32:0e:62:5e:18:3f:f6:de:3a: 96:f6:bf:2b:86:fc:24:ec:12:b8:59:36:13:a2:d1:8a:04:a5: a6:9d:1d:5b:73:0f:a7:73:19:25:3e:79:60:22:aa:5b:f3:13: 10:c8:45:d8:44:23:7f:e9:1a:88:1b:0e:79:66:41:54:34:43: 19:21:a7:91:f0:5f:be:55:91:d3:3a:e0:40:b2:54:5f:1f:49: 91:bf:dc:93:ef:c2:d2:45:1a:ab:a0:7d:39:b2:42:7d:bd:e3: 93:17:ef:a1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYCGX5jbFUzyzW7OF/zp/36mlziYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIzMDAxNzEzWhcNMjUxMDI4MjM1OTU5 WjB6MUkwRwYDVQQFE0A2YTQyYTJiZDMxNWI1ODMzNWQ5OTllYmY5YjZmYzgzOGNl YjIxNTg3YjNiNmVlZWZlNzhjNjY0MGE0M2I5YWJkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8wXf7Ubw0pvJGgh1X6J1u4XEmpfoswqNEVlPnUvcprrjH efPnUAl8zDaSCQSlppei5vJJr8jeqyzChzB73P4GqkmWusPpU2+D3u2vMwYvRux4 PouoP5/2JxVG4wtleHZLYa8NA5tp/0owlDNSSsEfqibTP36/BLb407QhRDNS8cH0 bvfoOPtL6pLshA6JX2M+j6nvhi3sNoY3SmtQFDiz8fO0NKbAPjhVd6taspAXYymy P3/YOFnwgOkiQAsxCTCUdnWH+c+VCPfpASTti8A2I1qsis39U0bSQ83VX4GNeE9q 1hv3Tw4UePeozsFGs4rqSCdpTJNyvegb7dPgWgQ5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUbbH6PNUAyPpn08mn4YgfHgw3NwcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2ExMjFiYzU1LWY2NmQtNDgzNy1hYTYxLWQ5OTdhNWMzYjkzYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE0VNowDQYJKoZIhvcNAQELBQADggEBABqK6JJcOXTAXCy5P7I1ui0Bb3Po DMn+yPtr+fmBZCtnlyTZIFyiBlmwhNH2sU0+kJrW0AOH6EW85ReVto/gcvmujJby 35yWJNvUt7BuY2jgvPG27074ofHn8/7BK63x6hOoQHTdY3o8/z8bxTeSnfT+RcFx XgWifCiQQmHT1EFlaWTnTEg4U4XFpPgWqSRTIcTb21SmgHCW1TIOYl4YP/beOpb2 vyuG/CTsErhZNhOi0YoEpaadHVtzD6dzGSU+eWAiqlvzExDIRdhEI3/pGogbDnlm QVQ0Qxkhp5HwX75VkdM64ECyVF8fSZG/3JPvwtJFGqugfTmyQn2945MX76E= -----END CERTIFICATE-----Generated at Fri Oct 17 21:57:25 2025 by rpki-client