$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5c708611-f3fb-4a92-968f-eb90bd9e03b6.roa File: 5c708611-f3fb-4a92-968f-eb90bd9e03b6.roa (raw, json) Hash identifier: FmMnffsFWuN7H1hhkE/GpaA2Q+gDTFLeXRvJpIRu1HE= Subject key identifier: CC:9E:2B:E6:8F:D0:70:10:76:74:B2:7E:38:59:C7:21:1E:F8:99:FD Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 437F66547A08D5F5108DBCCBC463F3EDBD35AA6F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5c708611-f3fb-4a92-968f-eb90bd9e03b6.roa Signing time: Sat 18 Oct 2025 20:31:21 +0000 ROA not before: Sat 18 Oct 2025 20:31:21 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.165.44.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:7f:66:54:7a:08:d5:f5:10:8d:bc:cb:c4:63:f3:ed:bd:35:aa:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 20:31:21 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=939a9dd78951a4e15d568f7d0df7c5ef6a2d1e3db6d663f4214676dc596abab5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5d:8c:f1:7c:ac:17:cf:25:65:2a:11:3a:bb: 5d:67:75:b8:37:5e:38:f4:7f:a3:ab:94:04:cd:32: 8a:3b:2a:cd:06:62:a1:fc:54:b8:81:65:a2:a7:65: 79:eb:2e:d9:1b:b8:41:0a:59:8e:e0:c5:d2:23:9d: 5d:47:bf:4c:bc:ee:57:35:35:17:e3:80:85:50:53: 9f:28:1d:4e:3e:97:15:59:2b:04:3e:f6:7a:40:b2: 44:a4:79:c4:19:35:95:db:fc:d3:b3:ac:b4:3b:fa: fc:80:c1:42:33:cd:0c:dc:9c:95:02:b6:6d:38:c7: 1f:22:0b:03:98:6d:7c:d1:97:fe:ff:85:db:3b:c5: c0:19:46:76:76:43:c4:d6:10:1e:fd:cb:fb:63:db: 66:c4:78:fa:59:d7:11:08:24:54:f8:e6:6a:30:ba: 86:64:f6:90:52:95:95:43:c4:ba:e4:33:61:0c:1d: 05:11:af:9a:e8:1b:f1:c6:bb:d3:c5:60:a0:b7:5c: 59:0a:08:41:c7:f6:0e:77:52:3d:e0:5c:43:bf:77: 2d:a4:4c:19:ee:29:df:92:98:da:a1:25:86:4f:81: 37:1f:d3:68:7e:5a:68:ec:89:b9:ba:76:c4:4f:fa: a3:99:b5:9a:77:b6:51:d8:0b:a0:1e:e8:d5:85:93: 32:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:9E:2B:E6:8F:D0:70:10:76:74:B2:7E:38:59:C7:21:1E:F8:99:FD X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5c708611-f3fb-4a92-968f-eb90bd9e03b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.165.44.0/23 Signature Algorithm: sha256WithRSAEncryption 88:9e:78:e5:6c:c8:a8:ce:f5:52:22:d9:1f:6e:89:12:e7:40: 05:cf:9f:60:71:3c:a2:59:63:f8:43:56:5f:e5:d4:1f:83:55: d4:aa:dc:d2:e2:9f:d5:ff:06:ed:bb:37:26:3c:a1:f2:c1:1e: 48:5b:65:0b:b5:a0:f5:33:a3:36:f3:ce:66:da:45:77:ba:7e: c2:c2:54:b0:0a:91:54:4b:7e:c8:55:9a:8e:81:8f:54:0d:e8: a3:34:53:d1:84:f8:6b:26:e6:6f:8b:d6:1d:f1:45:b5:dc:66: 4e:23:e6:2e:3d:d0:c9:7b:dc:ce:06:a5:a5:40:c8:31:31:89: 5a:1b:41:4a:fb:8d:88:f1:07:22:53:e3:37:79:fa:01:65:71: 5d:3d:3b:16:3f:45:b3:fc:20:fb:36:59:05:1a:38:b8:b3:85: 61:ac:f3:9b:5b:25:71:46:be:3d:52:b9:89:c6:a4:35:52:85: 9f:49:c3:6a:37:3b:6d:e1:4d:76:aa:4e:27:5d:b5:ef:2b:c4: d1:b7:7f:d6:59:ed:88:b3:dd:ff:1b:04:db:5d:42:3f:63:60: b0:75:de:0f:eb:2f:12:9f:a2:7f:9c:e8:c9:d9:97:c3:d5:7a: b7:2d:b5:ca:cf:83:31:24:97:53:bf:f5:50:94:72:15:59:df: c3:28:40:38 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQ39mVHoI1fUQjbzLxGPz7b01qm8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MjAzMTIxWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A5MzlhOWRkNzg5NTFhNGUxNWQ1NjhmN2QwZGY3YzVlZjZh MmQxZTNkYjZkNjYzZjQyMTQ2NzZkYzU5NmFiYWI1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCXYzxfKwXzyVlKhE6u11ndbg3Xjj0f6OrlATNMoo7Ks0G YqH8VLiBZaKnZXnrLtkbuEEKWY7gxdIjnV1Hv0y87lc1NRfjgIVQU58oHU4+lxVZ KwQ+9npAskSkecQZNZXb/NOzrLQ7+vyAwUIzzQzcnJUCtm04xx8iCwOYbXzRl/7/ hds7xcAZRnZ2Q8TWEB79y/tj22bEePpZ1xEIJFT45mowuoZk9pBSlZVDxLrkM2EM HQURr5roG/HGu9PFYKC3XFkKCEHH9g53Uj3gXEO/dy2kTBnuKd+SmNqhJYZPgTcf 02h+Wmjsibm6dsRP+qOZtZp3tlHYC6Ae6NWFkzJfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUzJ4r5o/QcBB2dLJ+OFnHIR74mf0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzVjNzA4NjExLWYzZmItNGE5Mi05NjhmLWViOTBiZDllMDNiNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESpSwwDQYJKoZIhvcNAQELBQADggEBAIieeOVsyKjO9VIi2R9uiRLnQAXP n2BxPKJZY/hDVl/l1B+DVdSq3NLin9X/Bu27NyY8ofLBHkhbZQu1oPUzozbzzmba RXe6fsLCVLAKkVRLfshVmo6Bj1QN6KM0U9GE+Gsm5m+L1h3xRbXcZk4j5i490Ml7 3M4GpaVAyDExiVobQUr7jYjxByJT4zd5+gFlcV09OxY/RbP8IPs2WQUaOLizhWGs 85tbJXFGvj1SuYnGpDVShZ9Jw2o3O23hTXaqTiddte8rxNG3f9ZZ7Yiz3f8bBNtd Qj9jYLB13g/rLxKfon+c6MnZl8PVercttcrPgzEkl1O/9VCUchVZ38MoQDg= -----END CERTIFICATE-----Generated at Mon Oct 20 02:58:25 2025 by rpki-client