$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8de11f75-3268-4580-baf2-2b859acf1b83.roa File: 8de11f75-3268-4580-baf2-2b859acf1b83.roa (raw, json) Hash identifier: EVvW4nMdBUPAvp1JwTj+T6qa07qnv4W2aPXa1RCtLgU= Subject key identifier: D6:16:0B:E7:97:68:98:63:23:A9:35:70:C9:4D:D2:C0:33:A2:2F:80 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 301219BC58D51CB6DE562D3BE167B4B19383905C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8de11f75-3268-4580-baf2-2b859acf1b83.roa Signing time: Tue 21 Oct 2025 10:10:13 +0000 ROA not before: Tue 21 Oct 2025 10:10:13 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 54.88.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:12:19:bc:58:d5:1c:b6:de:56:2d:3b:e1:67:b4:b1:93:83:90:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 21 10:10:13 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=d65b7bc88465300b356db37c4d8c7e3e301ab4c64fccd3bc44dee93dc0a1281c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:cb:82:c5:9d:6b:93:95:65:21:06:be:80:8f: 5e:e9:3a:da:6d:c6:8a:ea:e2:07:d6:76:96:95:68: 4a:a1:53:ea:22:cf:ea:c8:e7:ea:85:bb:15:20:91: c0:7c:5c:89:72:2d:91:32:0c:d8:57:a7:9e:50:63: 31:34:b7:18:2e:d2:34:97:bb:a4:b8:a7:a1:5e:80: 0b:d8:f5:fb:36:c9:65:0f:ca:46:63:0e:f9:f1:dc: a0:73:8e:22:c6:8e:f5:9b:7e:4d:27:40:c8:f1:8f: bf:53:77:33:5b:76:30:5f:1f:03:88:02:d3:49:c1: 31:98:c2:8e:41:9e:4a:6f:f8:22:8b:e6:fd:5c:3c: 20:4d:d4:9d:d3:e4:73:0b:05:1c:f5:95:d7:fc:41: 1d:03:4d:f5:f6:ab:63:df:7d:2c:37:46:8a:5b:4c: 74:38:2a:e7:f9:fa:3c:a6:0b:7b:ad:e4:cb:2c:16: 22:96:6f:32:0e:fe:7f:b2:e8:d5:14:47:83:54:0b: a3:0f:d6:aa:01:94:8c:e6:84:14:77:a9:92:5b:81: c0:50:fa:f3:62:57:02:0f:52:05:46:c1:fd:61:70: 2e:ed:1a:fb:32:ea:73:99:ce:b7:08:b2:22:1a:0f: 1f:97:be:7f:c1:84:5b:20:73:74:9f:c4:c8:2a:26: ce:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:16:0B:E7:97:68:98:63:23:A9:35:70:C9:4D:D2:C0:33:A2:2F:80 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8de11f75-3268-4580-baf2-2b859acf1b83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.88.0.0/16 Signature Algorithm: sha256WithRSAEncryption 68:f2:ac:9f:3c:b8:a8:5f:00:48:07:9b:9f:87:f9:ff:ec:f1: 38:10:15:ff:34:6c:e2:45:51:30:ba:20:8c:44:61:0a:b3:35: ce:01:52:cd:f5:4d:3e:fc:56:12:66:0d:18:d5:fa:1e:49:9a: f2:ff:d2:46:51:2c:f2:b0:1e:88:d7:82:52:93:11:f8:4e:f7: 10:61:65:db:39:1a:9b:3b:10:2a:14:01:bc:dc:5c:ab:af:85: 4f:95:a5:66:e5:44:8f:4d:6c:09:f6:f4:ba:96:12:e2:c4:c1: b9:f0:74:1a:00:bb:a3:88:5e:12:0b:c2:78:60:04:bb:4a:90: e7:97:30:6a:4e:04:9d:72:17:0b:f6:45:43:87:db:58:f5:b3: 80:9d:a2:cb:4d:81:b8:83:62:20:e9:61:43:3e:ed:05:88:7c: 15:a3:1d:50:48:3b:d9:5c:a0:55:02:ed:9e:da:12:3b:9d:16: a5:10:d2:9f:c4:bf:f8:e3:92:b2:40:53:ed:69:44:04:1a:43: ab:89:e7:40:33:69:d7:14:e2:7e:40:6d:d9:f8:39:f8:d3:93: b9:1c:1a:dc:f1:b4:45:a7:06:a6:20:38:59:97:fd:d9:bb:a5: 01:11:43:50:1a:67:ea:b2:18:34:6c:13:e3:46:61:3d:02:43: eb:c0:e6:3b -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUMBIZvFjVHLbeVi074We0sZODkFwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDIxMTAxMDEzWhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BkNjViN2JjODg0NjUzMDBiMzU2ZGIzN2M0ZDhjN2UzZTMw MWFiNGM2NGZjY2QzYmM0NGRlZTkzZGMwYTEyODFjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDjy4LFnWuTlWUhBr6Aj17pOtptxorq4gfWdpaVaEqhU+oi z+rI5+qFuxUgkcB8XIlyLZEyDNhXp55QYzE0txgu0jSXu6S4p6FegAvY9fs2yWUP ykZjDvnx3KBzjiLGjvWbfk0nQMjxj79TdzNbdjBfHwOIAtNJwTGYwo5Bnkpv+CKL 5v1cPCBN1J3T5HMLBRz1ldf8QR0DTfX2q2PffSw3RopbTHQ4Kuf5+jymC3ut5Mss FiKWbzIO/n+y6NUUR4NUC6MP1qoBlIzmhBR3qZJbgcBQ+vNiVwIPUgVGwf1hcC7t Gvsy6nOZzrcIsiIaDx+Xvn/BhFsgc3SfxMgqJs5XAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU1hYL55domGMjqTVwyU3SwDOiL4AwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzhkZTExZjc1LTMyNjgtNDU4MC1iYWYyLTJiODU5YWNmMWI4My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA2WDANBgkqhkiG9w0BAQsFAAOCAQEAaPKsnzy4qF8ASAebn4f5/+zxOBAV /zRs4kVRMLogjERhCrM1zgFSzfVNPvxWEmYNGNX6Hkma8v/SRlEs8rAeiNeCUpMR +E73EGFl2zkamzsQKhQBvNxcq6+FT5WlZuVEj01sCfb0upYS4sTBufB0GgC7o4he EgvCeGAEu0qQ55cwak4EnXIXC/ZFQ4fbWPWzgJ2iy02BuINiIOlhQz7tBYh8FaMd UEg72VygVQLtntoSO50WpRDSn8S/+OOSskBT7WlEBBpDq4nnQDNp1xTifkBt2fg5 +NOTuRwa3PG0RacGpiA4WZf92bulARFDUBpn6rIYNGwT40ZhPQJD68DmOw== -----END CERTIFICATE-----Generated at Wed Nov 5 09:17:46 2025 by rpki-client