$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/da65d884-dde0-426c-86f9-773157743dea.roa File: da65d884-dde0-426c-86f9-773157743dea.roa (raw, json) Hash identifier: A0KeAdWlmZRKRcEARXjMPHjjUl2beLu4SrVOfdvBHYg= Subject key identifier: EB:D1:5B:DE:D9:71:2F:2C:91:3D:DA:40:1C:93:55:75:58:07:BE:3C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 029B88FA4A45C7DCAE0BBE84EB35AF17D16BB11B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/da65d884-dde0-426c-86f9-773157743dea.roa Signing time: Tue 21 Oct 2025 08:02:47 +0000 ROA not before: Tue 21 Oct 2025 08:02:47 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.83.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:9b:88:fa:4a:45:c7:dc:ae:0b:be:84:eb:35:af:17:d1:6b:b1:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 21 08:02:47 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=1248181eea5e7f9d983287e6139f47c6300f86b582aa32231cdbde9e3695b4e4, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:25:86:42:80:18:cd:57:5d:22:5e:b5:18:0a: 8e:89:1e:21:45:ce:b3:1a:36:18:dd:0e:66:19:dd: ac:eb:1a:7f:15:1c:93:9f:6a:b3:d3:3f:5d:bc:af: 29:45:ed:87:1d:d9:ad:a0:3d:7f:3a:c4:c9:f5:a8: 4b:c5:b7:78:84:40:96:4e:8b:9e:88:fe:cf:f0:ac: a2:64:08:e8:e6:e4:12:61:19:3c:ef:ab:4d:10:08: cb:ca:e9:9a:41:12:bc:d2:a1:94:d8:04:8e:80:ec: 7b:30:ac:43:10:fb:cb:bd:89:4f:9c:b3:7f:e1:a9: c3:e4:ab:e3:ed:da:9b:1a:76:b0:ed:b8:f5:a3:a0: bf:5c:09:a8:24:4c:3a:cd:78:76:6d:b6:dc:f1:1a: 54:59:32:b7:53:af:6f:19:69:5b:03:55:53:d8:99: 0b:37:81:c8:77:8d:c4:51:59:66:0e:68:00:9d:ae: 44:4b:7e:71:c3:f6:9f:b2:f1:57:99:c4:11:97:50: c9:64:27:c1:7e:b7:d2:92:04:d5:45:42:bc:94:1f: d9:7a:4e:db:6f:22:cd:9d:d4:76:2c:0b:0a:e8:2c: da:d4:b6:72:b7:f9:42:6f:a4:c6:0c:d7:e0:7e:cd: 6a:13:32:75:5e:62:7a:65:a4:91:26:be:5c:6f:96: 9a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:D1:5B:DE:D9:71:2F:2C:91:3D:DA:40:1C:93:55:75:58:07:BE:3C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/da65d884-dde0-426c-86f9-773157743dea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.83.0.0/18 Signature Algorithm: sha256WithRSAEncryption 38:b6:22:04:c5:03:c6:f1:fe:a2:d5:86:02:2a:2b:3d:f4:f5: e2:7e:1c:8f:de:b9:55:8a:9f:ff:36:9e:19:21:a6:e0:ff:42: 18:35:c1:65:23:9d:27:3b:51:c7:fd:3c:ad:fa:a4:e4:d3:b6: 77:aa:a6:63:dd:57:1b:9b:87:5f:0e:44:14:b0:57:4a:62:6e: c1:07:c0:17:e3:1f:c2:74:16:a4:61:f4:e4:eb:32:ac:b2:ab: 6c:f9:38:b1:25:c1:d6:19:02:cb:dd:f7:94:22:7a:98:ce:c9: c9:5a:57:06:42:4a:0e:55:94:26:b6:a2:7e:08:1d:52:7c:dc: 7d:12:06:a2:de:c7:af:4a:81:ff:27:17:e5:2e:b8:7c:3a:92: cc:bc:a3:84:6f:56:d3:9c:f1:7f:5f:7e:b2:1c:66:d6:ba:ed: ec:fb:29:f4:39:cb:ee:f9:be:cc:ac:22:b7:04:d6:2c:a4:f1: 02:3e:96:92:63:b7:df:3f:eb:63:fd:eb:c6:ba:31:26:01:66: 88:b8:79:5a:e3:b3:ad:b1:41:ca:bd:de:0b:cc:f5:75:22:43: 47:25:ec:6a:33:ec:5c:fe:5b:7a:2f:23:36:00:a1:23:68:03: 60:55:ac:26:2b:d1:4c:7b:94:65:7a:ee:56:37:3a:8a:e9:25: c5:a3:6d:2d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUApuI+kpFx9yuC76E6zWvF9FrsRswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDIxMDgwMjQ3WhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AxMjQ4MTgxZWVhNWU3ZjlkOTgzMjg3ZTYxMzlmNDdjNjMw MGY4NmI1ODJhYTMyMjMxY2RiZGU5ZTM2OTViNGU0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDIJYZCgBjNV10iXrUYCo6JHiFFzrMaNhjdDmYZ3azrGn8V HJOfarPTP128rylF7Ycd2a2gPX86xMn1qEvFt3iEQJZOi56I/s/wrKJkCOjm5BJh GTzvq00QCMvK6ZpBErzSoZTYBI6A7HswrEMQ+8u9iU+cs3/hqcPkq+Pt2psadrDt uPWjoL9cCagkTDrNeHZtttzxGlRZMrdTr28ZaVsDVVPYmQs3gch3jcRRWWYOaACd rkRLfnHD9p+y8VeZxBGXUMlkJ8F+t9KSBNVFQryUH9l6TttvIs2d1HYsCwroLNrU tnK3+UJvpMYM1+B+zWoTMnVeYnplpJEmvlxvlpoRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU69Fb3tlxLyyRPdpAHJNVdVgHvjwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2RhNjVkODg0LWRkZTAtNDI2Yy04NmY5LTc3MzE1Nzc0M2RlYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAY2UwAwDQYJKoZIhvcNAQELBQADggEBADi2IgTFA8bx/qLVhgIqKz309eJ+ HI/euVWKn/82nhkhpuD/Qhg1wWUjnSc7Ucf9PK36pOTTtneqpmPdVxubh18ORBSw V0pibsEHwBfjH8J0FqRh9OTrMqyyq2z5OLElwdYZAsvd95QiepjOyclaVwZCSg5V lCa2on4IHVJ83H0SBqLex69Kgf8nF+UuuHw6ksy8o4RvVtOc8X9ffrIcZta67ez7 KfQ5y+75vsysIrcE1iyk8QI+lpJjt98/62P968a6MSYBZoi4eVrjs62xQcq93gvM 9XUiQ0cl7Goz7Fz+W3ovIzYAoSNoA2BVrCYr0Ux7lGV67lY3OorpJcWjbS0= -----END CERTIFICATE-----Generated at Wed Nov 5 10:35:32 2025 by rpki-client