$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5adb7708-7f77-4e24-a87c-f9e6162a0968.roa File: 5adb7708-7f77-4e24-a87c-f9e6162a0968.roa (raw, json) Hash identifier: BV1gPM2aqf742jbK/NGWQU6BXjAKJZrzs2gMbrk68+c= Subject key identifier: 31:A5:DA:4F:D3:50:BA:41:64:35:3D:B3:F9:FF:4B:9B:F3:DC:64:E9 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4F420F58484A61C8CCE227CE37105359CC52F20A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5adb7708-7f77-4e24-a87c-f9e6162a0968.roa Signing time: Sat 18 Oct 2025 23:21:16 +0000 ROA not before: Sat 18 Oct 2025 23:21:16 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.238.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:42:0f:58:48:4a:61:c8:cc:e2:27:ce:37:10:53:59:cc:52:f2:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 23:21:16 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=9dc43582be04a65ccb615a51939d7ca3ece1b813e540e9629256879e4769dd08, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:9e:e9:8a:91:93:02:b9:8d:a7:a8:0d:ef:81: 49:96:65:48:85:c8:15:65:78:b1:91:a5:55:fa:7d: 9a:76:d4:9d:09:db:a0:5b:44:cc:47:e4:82:a5:ce: 73:d2:4b:64:f3:20:51:59:1f:ad:45:5f:08:5e:9a: dc:8a:c2:50:55:f9:30:c7:0b:2d:6e:9e:c0:61:13: 1b:34:ad:8f:b1:3a:be:6b:65:8d:59:28:9e:27:50: 6f:55:93:de:8d:08:4c:b7:f3:99:ea:2d:69:a1:f7: d2:dc:95:20:ed:fb:f4:5d:0e:a1:fd:8b:44:b5:dd: 8f:a4:ba:f6:b7:b5:05:53:cb:a8:58:04:d4:a5:82: 41:6c:0e:b8:fe:6e:f1:ea:f4:66:43:c3:41:8c:6e: 18:6b:dc:54:a9:a2:3d:2f:e2:1b:0d:6a:fd:ec:91: 11:a0:dd:fc:c0:90:c5:c2:a3:6c:4f:bf:8b:7d:68: 86:02:a5:2f:ab:fd:14:9f:a8:dc:b0:61:84:e8:04: 55:74:2a:c8:64:2f:60:dd:83:7e:52:23:13:81:f6: c6:36:f4:ab:6d:1f:f5:d0:63:d3:0d:61:4d:4c:0f: be:dc:37:22:e4:a3:94:9d:d8:6a:ab:e0:cd:a9:2e: 40:55:8c:e2:8f:7e:6e:88:e2:90:a1:2b:d3:bb:75: 0b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:A5:DA:4F:D3:50:BA:41:64:35:3D:B3:F9:FF:4B:9B:F3:DC:64:E9 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5adb7708-7f77-4e24-a87c-f9e6162a0968.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.238.17.0/24 Signature Algorithm: sha256WithRSAEncryption a4:81:55:01:95:e7:c6:9c:71:de:a8:d3:8d:2b:ac:2d:70:e7: 6c:8b:c4:fa:e2:22:06:48:c7:0a:3d:0a:5f:d1:6c:6c:3f:1a: e9:f8:fd:7b:e9:c9:ec:7d:13:99:78:0c:46:1d:87:81:7b:4a: f1:1f:bb:2a:0e:45:5e:53:58:c1:64:9c:3a:c1:79:65:cb:45: 5a:4a:af:d6:3a:a7:1e:19:59:66:ad:b9:07:19:70:a0:96:a8: 8c:8a:15:d0:35:5b:53:c5:3b:ce:ea:3f:2e:fd:92:25:a0:98: a8:91:85:0d:db:2b:d4:86:60:34:04:6d:ef:99:7d:5b:21:08: 91:8a:c4:54:db:0a:09:74:b3:0e:fe:ed:cf:c4:d0:24:78:f7: b7:f9:ad:2a:4f:f1:28:09:d9:6c:75:15:93:ca:e0:c7:8d:ec: 61:5b:42:dd:e0:13:8f:7f:59:7d:45:66:55:af:02:49:43:bc: 6d:9b:8d:a7:72:85:c4:70:25:e2:0a:27:fa:64:3c:64:dc:a0: a4:7c:05:af:45:8b:a7:04:83:ac:96:a1:90:ac:e5:cf:89:6f: 9a:51:be:15:5a:ac:ab:02:b9:fd:db:fa:22:eb:ce:0d:11:f1: 7d:f8:f4:0d:22:3c:3b:20:09:16:ab:e8:2b:48:9c:73:66:11: 54:5f:30:fd -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUT0IPWEhKYcjM4ifONxBTWcxS8gowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MjMyMTE2WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZGM0MzU4MmJlMDRhNjVjY2I2MTVhNTE5MzlkN2NhM2Vj ZTFiODEzZTU0MGU5NjI5MjU2ODc5ZTQ3NjlkZDA4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDRnumKkZMCuY2nqA3vgUmWZUiFyBVleLGRpVX6fZp21J0J 26BbRMxH5IKlznPSS2TzIFFZH61FXwhemtyKwlBV+TDHCy1unsBhExs0rY+xOr5r ZY1ZKJ4nUG9Vk96NCEy385nqLWmh99LclSDt+/RdDqH9i0S13Y+kuva3tQVTy6hY BNSlgkFsDrj+bvHq9GZDw0GMbhhr3FSpoj0v4hsNav3skRGg3fzAkMXCo2xPv4t9 aIYCpS+r/RSfqNywYYToBFV0KshkL2Ddg35SIxOB9sY29KttH/XQY9MNYU1MD77c NyLko5Sd2Gqr4M2pLkBVjOKPfm6I4pChK9O7dQtZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUMaXaT9NQukFkNT2z+f9Lm/PcZOkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzVhZGI3NzA4LTdmNzctNGUyNC1hODdjLWY5ZTYxNjJhMDk2OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAS7hEwDQYJKoZIhvcNAQELBQADggEBAKSBVQGV58accd6o040rrC1w52yL xPriIgZIxwo9Cl/RbGw/Gun4/Xvpyex9E5l4DEYdh4F7SvEfuyoORV5TWMFknDrB eWXLRVpKr9Y6px4ZWWatuQcZcKCWqIyKFdA1W1PFO87qPy79kiWgmKiRhQ3bK9SG YDQEbe+ZfVshCJGKxFTbCgl0sw7+7c/E0CR497f5rSpP8SgJ2Wx1FZPK4MeN7GFb Qt3gE49/WX1FZlWvAklDvG2bjadyhcRwJeIKJ/pkPGTcoKR8Ba9Fi6cEg6yWoZCs 5c+Jb5pRvhVarKsCuf3b+iLrzg0R8X349A0iPDsgCRar6CtInHNmEVRfMP0= -----END CERTIFICATE-----Generated at Mon Oct 20 15:45:25 2025 by rpki-client