$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a302b4cd-657c-424d-a2f7-589e219d6941.roa File: a302b4cd-657c-424d-a2f7-589e219d6941.roa (raw, json) Hash identifier: qq3egPBn/M6BEuPq1fvWCFu8crGSqlWrrAvI3V90EWE= Subject key identifier: E9:A8:18:E7:D9:4D:D6:C2:A6:8E:78:C2:A4:8C:EA:54:9F:B1:E1:4B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 182121D3167E93E13822301DA1BA57B9432BDC87 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a302b4cd-657c-424d-a2f7-589e219d6941.roa Signing time: Mon 22 Sep 2025 23:44:37 +0000 ROA not before: Mon 22 Sep 2025 23:44:37 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.84.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:21:21:d3:16:7e:93:e1:38:22:30:1d:a1:ba:57:b9:43:2b:dc:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 23:44:37 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=b46d0bd8ebe1c097b7fc2eb6c9667ddbbe3dfbca5aee554dd9622c2e2beac939, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b3:f2:17:35:d3:49:48:14:17:fb:e1:42:fd: d0:b4:50:bd:df:11:fd:89:7a:40:74:13:d4:d1:2e: 24:6d:f9:c1:98:79:00:52:ae:26:ce:a2:e4:fb:23: a0:11:52:f8:53:b4:26:46:23:c3:dd:14:b2:b1:13: 78:3c:9b:d2:53:9f:5a:e1:e6:12:44:34:f3:cf:e6: 70:53:43:7a:19:75:70:fe:ba:9e:e9:b1:a2:2d:cf: 37:7d:9f:6f:c4:fc:58:63:5b:c7:20:b1:85:d8:12: d8:61:f9:f7:70:78:e3:32:e8:dc:91:d2:b8:9a:ae: 9e:14:77:f6:87:37:75:d8:b1:52:57:19:b0:cd:99: dc:12:11:28:f3:be:fb:14:dc:92:31:ea:6d:02:a8: 80:05:fc:a0:e4:d3:a4:9b:de:35:90:43:15:8f:85: e0:1b:3d:6f:9d:ba:6f:a2:a3:07:27:17:ff:0a:e5: 02:78:31:e7:6b:6c:f0:04:8e:01:09:a4:06:d8:0c: e9:9f:f1:3e:e7:99:74:c4:21:92:25:67:96:d3:1f: d4:ef:16:41:c6:7c:25:34:8b:95:2f:97:18:7c:b6: a3:af:40:16:1f:42:36:f2:61:2d:af:b3:6e:f1:bd: 32:e7:44:9b:2b:bb:b5:73:f0:32:0f:2a:2e:77:66: a8:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:A8:18:E7:D9:4D:D6:C2:A6:8E:78:C2:A4:8C:EA:54:9F:B1:E1:4B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a302b4cd-657c-424d-a2f7-589e219d6941.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.84.170.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:53:52:c2:06:ea:be:1f:5e:6b:c2:63:ed:34:5f:22:8a:dc: 14:72:44:0e:8a:d1:3f:58:68:d3:e0:41:b4:6a:3a:7d:be:c9: 5c:e1:ab:c2:8a:76:6e:eb:b7:69:6c:f8:3d:24:7f:a8:47:e0: f6:b1:6d:68:fe:c7:4e:af:5d:1b:3e:4c:fd:75:f9:d1:71:48: 54:6d:d6:d5:ba:0d:db:10:0c:38:63:2d:06:ae:2e:83:db:2a: c8:40:66:f8:be:19:91:9f:5e:e3:1a:f5:24:e4:86:66:67:9a: e8:02:d5:87:a9:67:27:cc:57:fb:66:51:cd:c5:59:51:a4:43: b2:16:6b:0b:a4:53:81:c0:a1:af:4e:a7:0b:ea:22:1f:85:19: 88:a5:13:eb:b5:68:32:05:ac:88:69:e4:f0:2d:e3:c6:c4:23: bd:ba:56:92:58:9c:6c:bf:96:41:b0:d6:b0:da:d6:bc:42:19: 56:89:c0:61:99:7e:82:65:4b:a1:a2:bb:4f:e4:fa:56:df:03: eb:27:ea:2e:d9:0c:fd:84:40:01:bc:88:78:55:f2:12:e1:d3: cb:46:e2:9e:92:3e:5e:1c:49:68:11:e4:29:f7:23:0c:91:ac: 32:55:53:77:10:e5:b6:6c:01:7b:9d:b6:a7:b5:f1:ce:74:16: f5:85:3a:54 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGCEh0xZ+k+E4IjAdobpXuUMr3IcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjM0NDM3WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BiNDZkMGJkOGViZTFjMDk3YjdmYzJlYjZjOTY2N2RkYmJl M2RmYmNhNWFlZTU1NGRkOTYyMmMyZTJiZWFjOTM5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDjs/IXNdNJSBQX++FC/dC0UL3fEf2JekB0E9TRLiRt+cGY eQBSribOouT7I6ARUvhTtCZGI8PdFLKxE3g8m9JTn1rh5hJENPPP5nBTQ3oZdXD+ up7psaItzzd9n2/E/FhjW8cgsYXYEthh+fdweOMy6NyR0riarp4Ud/aHN3XYsVJX GbDNmdwSESjzvvsU3JIx6m0CqIAF/KDk06Sb3jWQQxWPheAbPW+dum+iowcnF/8K 5QJ4MedrbPAEjgEJpAbYDOmf8T7nmXTEIZIlZ5bTH9TvFkHGfCU0i5Uvlxh8tqOv QBYfQjbyYS2vs27xvTLnRJsru7Vz8DIPKi53Zqh1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU6agY59lN1sKmjnjCpIzqVJ+x4UswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2EzMDJiNGNkLTY1N2MtNDI0ZC1hMmY3LTU4OWUyMTlkNjk0MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0VKowDQYJKoZIhvcNAQELBQADggEBAHxTUsIG6r4fXmvCY+00XyKK3BRy RA6K0T9YaNPgQbRqOn2+yVzhq8KKdm7rt2ls+D0kf6hH4PaxbWj+x06vXRs+TP11 +dFxSFRt1tW6DdsQDDhjLQauLoPbKshAZvi+GZGfXuMa9STkhmZnmugC1YepZyfM V/tmUc3FWVGkQ7IWawukU4HAoa9OpwvqIh+FGYilE+u1aDIFrIhp5PAt48bEI726 VpJYnGy/lkGw1rDa1rxCGVaJwGGZfoJlS6Giu0/k+lbfA+sn6i7ZDP2EQAG8iHhV 8hLh08tG4p6SPl4cSWgR5Cn3IwyRrDJVU3cQ5bZsAXudtqe18c50FvWFOlQ= -----END CERTIFICATE-----Generated at Fri Oct 17 22:02:22 2025 by rpki-client