$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/859cf3b8-1ec4-4381-b79a-af880df456db.roa File: 859cf3b8-1ec4-4381-b79a-af880df456db.roa (raw, json) Hash identifier: FeSGb3/LHERBM6yIzOl19Wr1n805QwULUg1X/Hb12uE= Subject key identifier: 8C:D9:40:7A:6D:ED:49:11:FA:3E:1B:C2:DD:ED:46:3A:36:3E:5C:05 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5D4DBFF5E4CADEA6E202C3CBD80D9C482B1FD63D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/859cf3b8-1ec4-4381-b79a-af880df456db.roa Signing time: Tue 04 Nov 2025 00:30:13 +0000 ROA not before: Tue 04 Nov 2025 00:30:13 +0000 ROA not after: Tue 09 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.192.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:4d:bf:f5:e4:ca:de:a6:e2:02:c3:cb:d8:0d:9c:48:2b:1f:d6:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Nov 4 00:30:13 2025 GMT Not After : Dec 9 23:59:59 2025 GMT Subject: serialNumber=e6c2897ceff17302546b0e5497bde327a467c212f268bee8f6a8426afa665c94, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:35:4d:af:13:0d:d1:9d:7c:4e:2d:29:03:b1: ad:f6:5e:70:59:54:31:91:87:ea:4f:a0:04:21:b2: 03:81:e8:63:8e:b6:4d:7a:5e:0b:0a:f6:31:f5:18: ab:18:d0:b8:c9:2a:78:38:ec:34:3a:75:c8:3f:15: ae:22:7e:50:2a:95:56:19:8e:a9:74:db:e7:54:de: dc:4c:29:bf:c3:8d:96:47:9c:17:21:3e:ef:cc:79: 6a:e9:27:bf:1b:8c:fe:a0:15:99:be:53:c9:1d:2f: 23:09:ec:29:7b:48:91:26:f9:85:27:6a:bf:34:f5: 8c:22:04:c1:9a:9a:c2:09:92:f7:9d:e1:74:3a:18: 2b:2e:aa:39:2e:e5:31:17:34:55:d9:03:12:65:23: a4:c1:ee:56:36:de:cd:7a:7b:cf:3d:60:3b:3c:9b: 79:5c:7b:18:70:51:37:87:fc:a8:fe:cd:e5:cf:1f: c7:fb:9c:6a:aa:b7:82:2f:c1:c2:fa:86:e9:8d:31: 26:b7:bf:58:67:58:5c:3a:d6:70:02:c0:65:5b:a3: 33:90:de:87:27:6f:75:ef:e4:fc:4e:73:69:d0:89: fb:44:62:23:8e:73:4c:cd:1a:53:44:8a:b9:5e:86: 68:4c:ff:27:6e:e1:86:33:e3:e4:45:40:57:9b:3c: c2:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:D9:40:7A:6D:ED:49:11:FA:3E:1B:C2:DD:ED:46:3A:36:3E:5C:05 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/859cf3b8-1ec4-4381-b79a-af880df456db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.192.0.0/15 Signature Algorithm: sha256WithRSAEncryption a2:3c:83:77:9f:32:d6:70:ba:6d:24:f7:a5:fd:3f:98:cf:83: 30:c3:2a:d4:4f:80:d6:42:4d:ab:a6:b2:3c:57:25:84:a1:05: cb:b7:40:0f:29:be:5e:21:91:11:43:19:5b:70:0e:18:5e:5e: 4a:a7:7f:3e:45:8d:e6:17:00:1c:00:02:29:0d:25:66:14:30: 01:15:e2:19:f0:31:8e:22:f6:5f:83:03:ec:80:b9:0c:cd:e1: d8:38:c1:91:be:3d:9e:75:f4:fd:4f:03:b4:bb:70:ed:12:be: 79:7c:e9:e2:2b:89:65:79:e4:bc:8f:72:0c:18:52:5c:e6:e0: 64:b0:0d:55:75:22:ae:72:09:49:2c:3b:8c:cf:16:0d:f1:ae: b2:80:38:3d:fb:c9:9f:20:b3:14:13:1c:a9:a5:72:4a:c4:d9: 16:ef:8b:51:2d:96:0b:95:97:f9:a4:15:b1:5d:16:4b:56:a9: 4d:0e:f9:b6:80:df:2a:4b:a4:cb:ae:e3:31:1e:fd:43:84:b6: 0a:23:c0:64:d1:ed:07:04:fe:35:14:fa:db:83:e9:f7:f1:4d: ce:a7:98:3f:0f:03:fa:89:6e:e1:d9:09:2c:22:45:54:fa:70: 97:b1:91:fe:60:28:86:c4:4b:98:49:6f:77:1e:45:78:e8:f0: 86:7e:f3:4c -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUXU2/9eTK3qbiAsPL2A2cSCsf1j0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMTA0MDAzMDEzWhcNMjUxMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BlNmMyODk3Y2VmZjE3MzAyNTQ2YjBlNTQ5N2JkZTMyN2E0 NjdjMjEyZjI2OGJlZThmNmE4NDI2YWZhNjY1Yzk0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4NU2vEw3RnXxOLSkDsa32XnBZVDGRh+pPoAQhsgOB6GOO tk16XgsK9jH1GKsY0LjJKng47DQ6dcg/Fa4iflAqlVYZjql02+dU3txMKb/DjZZH nBchPu/MeWrpJ78bjP6gFZm+U8kdLyMJ7Cl7SJEm+YUnar809YwiBMGamsIJkved 4XQ6GCsuqjku5TEXNFXZAxJlI6TB7lY23s16e889YDs8m3lcexhwUTeH/Kj+zeXP H8f7nGqqt4IvwcL6humNMSa3v1hnWFw61nACwGVbozOQ3ocnb3Xv5PxOc2nQiftE YiOOc0zNGlNEirlehmhM/ydu4YYz4+RFQFebPMJZAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUjNlAem3tSRH6PhvC3e1GOjY+XAUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzg1OWNmM2I4LTFlYzQtNDM4MS1iNzlhLWFmODgwZGY0NTZkYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwE0wDANBgkqhkiG9w0BAQsFAAOCAQEAojyDd58y1nC6bST3pf0/mM+DMMMq 1E+A1kJNq6ayPFclhKEFy7dADym+XiGREUMZW3AOGF5eSqd/PkWN5hcAHAACKQ0l ZhQwARXiGfAxjiL2X4MD7IC5DM3h2DjBkb49nnX0/U8DtLtw7RK+eXzp4iuJZXnk vI9yDBhSXObgZLANVXUirnIJSSw7jM8WDfGusoA4PfvJnyCzFBMcqaVySsTZFu+L US2WC5WX+aQVsV0WS1apTQ75toDfKkuky67jMR79Q4S2CiPAZNHtBwT+NRT624Pp 9/FNzqeYPw8D+olu4dkJLCJFVPpwl7GR/mAohsRLmElvdx5FeOjwhn7zTA== -----END CERTIFICATE-----Generated at Wed Nov 5 07:43:36 2025 by rpki-client