$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1a495f29-9d36-43b3-9288-c322cf94a556.roa File: 1a495f29-9d36-43b3-9288-c322cf94a556.roa (raw, json) Hash identifier: UZ6U5OrIqLPhwHX++FgrFxAAtAOPC6eiDfzKeIzZ+ZI= Subject key identifier: BA:98:C5:38:0A:C4:FF:5C:EA:DB:0D:96:92:C7:B2:16:91:9B:97:BE Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 580D2628DA7EF8387235D193370FAA0E3DA68B4B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1a495f29-9d36-43b3-9288-c322cf94a556.roa Signing time: Thu 16 Oct 2025 16:06:37 +0000 ROA not before: Thu 16 Oct 2025 16:06:37 +0000 ROA not after: Thu 20 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.68.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:0d:26:28:da:7e:f8:38:72:35:d1:93:37:0f:aa:0e:3d:a6:8b:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 16 16:06:37 2025 GMT Not After : Nov 20 23:59:59 2025 GMT Subject: serialNumber=19b60710f149bc9de39854202a0d153676ba82b3f1a0e2a7c92ec95b1abba2e9, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:58:c3:92:23:dc:08:06:4f:2b:f6:ee:02:97: da:ec:eb:b5:b8:38:02:07:34:f2:9e:cb:33:80:c5: 95:79:b9:74:8a:63:2a:86:84:a8:68:70:0d:21:09: 5c:2a:8a:a8:91:c6:80:9b:45:10:7c:38:89:a4:37: 09:52:05:77:8c:fa:73:dc:a0:87:43:2e:b5:30:1a: 38:df:15:b7:c9:6a:9d:77:a2:8b:3d:6a:c6:0d:27: 13:97:72:a1:ad:02:c0:01:d6:5c:71:21:cd:74:be: 42:bc:0c:8a:23:d8:b8:9d:d7:47:bb:f1:c4:2d:cf: da:c3:07:fe:9d:64:ed:ec:a0:3b:10:74:10:ac:a2: 15:73:22:dc:6e:a7:64:9b:7c:18:1b:74:d1:12:f9: 8b:e2:a8:8e:88:b1:92:1f:a9:a3:a5:0f:a2:12:1e: 10:db:77:ad:54:4e:cf:8a:19:f4:51:e7:12:ae:ff: 1b:33:c2:4d:db:33:fd:5b:a6:c8:ad:97:31:f9:fb: b0:ea:eb:58:fc:96:2c:78:12:f9:7d:f1:3a:3e:8e: cb:0a:2d:1b:17:c1:82:e6:90:c5:b8:65:d0:7c:d9: 8d:d4:33:57:c2:af:28:4d:fd:7c:bc:63:75:e5:a1: 61:53:96:7f:b9:9b:70:e2:4c:b4:dd:d3:d1:be:e1: 5d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:98:C5:38:0A:C4:FF:5C:EA:DB:0D:96:92:C7:B2:16:91:9B:97:BE X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1a495f29-9d36-43b3-9288-c322cf94a556.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.68.156.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:bd:ed:59:d1:68:f7:8c:e1:97:0f:db:a9:75:48:bd:fb:df: b3:c9:2c:26:ea:52:c5:0e:84:dd:00:1f:86:6a:87:2e:49:6b: ef:80:cc:44:1f:c7:8e:09:b0:29:c4:fa:51:da:b7:fd:67:92: 68:32:d9:e5:0c:51:56:a1:6e:26:21:2e:a9:61:1d:49:eb:90: 43:e2:25:b7:54:55:d6:40:a9:57:88:f1:5d:6f:29:3b:2e:5e: 73:a6:5f:58:cb:82:2b:08:cd:b9:66:5a:b2:b2:38:fd:42:c2: 70:39:5b:e3:56:49:2e:38:93:3d:c8:1f:84:4c:88:ec:46:41: 76:56:e3:09:f7:de:5a:eb:ba:0b:e6:bb:f0:08:f9:9c:00:6f: a6:55:91:4b:c9:d1:fe:89:36:56:81:48:7c:ca:e4:a5:d0:e0: 47:9c:1a:10:a2:7d:e7:e8:db:7b:14:9c:3a:21:2d:f6:92:33: 28:8e:12:93:1d:a2:21:a1:62:7e:7b:85:f9:1e:dd:e6:1d:b7: 6f:59:2f:8e:ee:2e:4c:28:23:43:7f:48:e6:8e:64:df:37:96: 04:53:50:d6:91:6a:bf:16:98:57:13:a1:ee:8c:fb:8f:08:a5: c2:70:31:3a:55:0f:72:18:6c:b1:c0:29:7e:c3:51:a2:32:44: 14:79:58:08 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWA0mKNp++DhyNdGTNw+qDj2mi0swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE2MTYwNjM3WhcNMjUxMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0AxOWI2MDcxMGYxNDliYzlkZTM5ODU0MjAyYTBkMTUzNjc2 YmE4MmIzZjFhMGUyYTdjOTJlYzk1YjFhYmJhMmU5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDEWMOSI9wIBk8r9u4Cl9rs67W4OAIHNPKeyzOAxZV5uXSK YyqGhKhocA0hCVwqiqiRxoCbRRB8OImkNwlSBXeM+nPcoIdDLrUwGjjfFbfJap13 oos9asYNJxOXcqGtAsAB1lxxIc10vkK8DIoj2Lid10e78cQtz9rDB/6dZO3soDsQ dBCsohVzItxup2SbfBgbdNES+YviqI6IsZIfqaOlD6ISHhDbd61UTs+KGfRR5xKu /xszwk3bM/1bpsitlzH5+7Dq61j8lix4Evl98To+jssKLRsXwYLmkMW4ZdB82Y3U M1fCryhN/Xy8Y3XloWFTln+5m3DiTLTd09G+4V0nAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUupjFOArE/1zq2w2WkseyFpGbl74wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzFhNDk1ZjI5LTlkMzYtNDNiMy05Mjg4LWMzMjJjZjk0YTU1Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASRJwwDQYJKoZIhvcNAQELBQADggEBAF297VnRaPeM4ZcP26l1SL3737PJ LCbqUsUOhN0AH4Zqhy5Ja++AzEQfx44JsCnE+lHat/1nkmgy2eUMUVahbiYhLqlh HUnrkEPiJbdUVdZAqVeI8V1vKTsuXnOmX1jLgisIzblmWrKyOP1CwnA5W+NWSS44 kz3IH4RMiOxGQXZW4wn33lrrugvmu/AI+ZwAb6ZVkUvJ0f6JNlaBSHzK5KXQ4Eec GhCifefo23sUnDohLfaSMyiOEpMdoiGhYn57hfke3eYdt29ZL47uLkwoI0N/SOaO ZN83lgRTUNaRar8WmFcToe6M+48IpcJwMTpVD3IYbLHAKX7DUaIyRBR5WAg= -----END CERTIFICATE-----Generated at Mon Oct 20 11:09:24 2025 by rpki-client