$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/68cdee14-ef1e-4f65-afca-75eaa1d22bd4.roa File: 68cdee14-ef1e-4f65-afca-75eaa1d22bd4.roa (raw, json) Hash identifier: X5dxrKq/RXs87ZhrjArbSlvp4RUOb0b5oSMe+no7Znw= Subject key identifier: 0E:1D:D4:8D:0C:A1:9A:93:5A:E5:CA:3B:FA:8C:F0:DC:A8:01:31:48 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5D9F965B4BADFAAA293ACBB84E4534951F4446BA Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/68cdee14-ef1e-4f65-afca-75eaa1d22bd4.roa Signing time: Fri 17 Oct 2025 23:51:24 +0000 ROA not before: Fri 17 Oct 2025 23:51:24 +0000 ROA not after: Fri 21 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.192.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:9f:96:5b:4b:ad:fa:aa:29:3a:cb:b8:4e:45:34:95:1f:44:46:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 17 23:51:24 2025 GMT Not After : Nov 21 23:59:59 2025 GMT Subject: serialNumber=cc14c66e77a4a35c66152f2255db6d666913070f84c2c08515534f7bca02c6f7, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:48:da:41:40:d5:c1:da:2f:43:f1:e3:d1:ad: 49:7c:00:c3:06:b2:91:4b:ac:21:b0:ea:86:4b:e9: e9:88:fd:05:a6:0e:6c:f9:7c:7a:56:54:b4:db:aa: ce:11:98:e3:64:6b:da:9a:02:7e:26:e4:b8:e9:a9: 19:76:e7:74:5e:8b:64:97:76:e5:cb:a2:d9:ea:03: 30:24:7c:8f:6c:7c:75:71:ef:8c:d0:e1:22:49:55: d4:d1:07:95:14:da:9c:8e:98:dc:9f:33:3b:80:9e: 50:cd:5d:21:c3:15:11:83:37:5a:b7:e5:79:cd:37: 5d:ea:0b:9f:97:55:76:4a:ba:07:a3:41:1e:08:fb: c7:3d:54:c5:75:f8:39:a3:d0:fb:8e:5a:f8:65:ac: 0b:d5:e2:93:ea:5d:76:da:8e:e2:32:ae:d5:87:28: d1:4a:a6:eb:63:00:8e:15:f7:cf:75:3d:99:61:c7: a7:45:1c:d5:ec:e8:4c:7d:8b:0b:70:c4:22:58:89: 09:4b:ce:27:82:be:af:50:8a:89:fb:13:5a:9b:0d: ba:d8:4f:c6:54:7d:cc:c4:89:8a:89:d7:be:27:0e: ec:88:3d:6e:d6:77:5c:21:26:20:25:5a:09:95:a3: 92:7b:52:78:c4:ff:3b:bd:b7:d1:d7:99:82:b1:7b: f4:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:1D:D4:8D:0C:A1:9A:93:5A:E5:CA:3B:FA:8C:F0:DC:A8:01:31:48 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/68cdee14-ef1e-4f65-afca-75eaa1d22bd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.192.20.0/24 Signature Algorithm: sha256WithRSAEncryption 41:57:07:5c:d5:62:0d:32:eb:41:fc:9b:a5:f0:ad:f0:4c:a3: ec:d0:51:e9:24:50:87:dd:a5:c7:9c:74:2c:38:67:6b:59:d8: b7:cc:dc:49:e9:ea:54:ee:f2:67:d5:89:0c:b9:02:55:94:b9: ef:fa:8a:62:1c:e2:2e:5a:c7:e4:2a:8b:af:0d:32:a8:9c:a6: 81:e6:eb:0f:f6:4e:27:83:7f:a3:9f:57:6a:32:9b:ac:d6:61: 60:c8:b0:53:45:72:d0:15:a9:ab:65:47:0c:1f:54:c8:91:05: fa:e9:82:d7:77:03:b8:6b:97:32:c0:0e:15:3b:ce:c7:e2:1a: 99:34:a9:92:ad:45:61:bf:44:3b:e3:d3:54:f0:7a:87:35:cc: bd:5b:9e:57:b0:4a:f2:f9:31:d1:4e:27:53:f3:2c:18:3d:4e: fe:61:33:a6:a6:fe:ad:07:64:43:e2:27:b5:26:f7:21:81:a4: 19:c4:41:ed:8a:54:7d:27:dd:bc:3f:84:61:d4:dd:a5:e6:54: 03:f0:a6:4a:d3:69:ff:a0:8f:6d:03:38:96:7e:72:2f:40:d1: 36:63:94:50:bd:a9:d4:e1:02:41:e9:ad:f5:4e:97:3c:05:32: 59:4e:1d:fd:33:b6:ad:66:99:ad:8d:4e:8f:3b:4a:08:c0:97: 5d:ac:fd:3c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXZ+WW0ut+qopOsu4TkU0lR9ERrowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE3MjM1MTI0WhcNMjUxMTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BjYzE0YzY2ZTc3YTRhMzVjNjYxNTJmMjI1NWRiNmQ2NjY5 MTMwNzBmODRjMmMwODUxNTUzNGY3YmNhMDJjNmY3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCmSNpBQNXB2i9D8ePRrUl8AMMGspFLrCGw6oZL6emI/QWm Dmz5fHpWVLTbqs4RmONka9qaAn4m5LjpqRl253Rei2SXduXLotnqAzAkfI9sfHVx 74zQ4SJJVdTRB5UU2pyOmNyfMzuAnlDNXSHDFRGDN1q35XnNN13qC5+XVXZKugej QR4I+8c9VMV1+Dmj0PuOWvhlrAvV4pPqXXbajuIyrtWHKNFKputjAI4V9891PZlh x6dFHNXs6Ex9iwtwxCJYiQlLzieCvq9Qion7E1qbDbrYT8ZUfczEiYqJ174nDuyI PW7Wd1whJiAlWgmVo5J7UnjE/zu9t9HXmYKxe/S1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUDh3UjQyhmpNa5co7+ozw3KgBMUgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzY4Y2RlZTE0LWVmMWUtNGY2NS1hZmNhLTc1ZWFhMWQyMmJkNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA2wBQwDQYJKoZIhvcNAQELBQADggEBAEFXB1zVYg0y60H8m6XwrfBMo+zQ UekkUIfdpcecdCw4Z2tZ2LfM3Enp6lTu8mfViQy5AlWUue/6imIc4i5ax+Qqi68N MqicpoHm6w/2TieDf6OfV2oym6zWYWDIsFNFctAVqatlRwwfVMiRBfrpgtd3A7hr lzLADhU7zsfiGpk0qZKtRWG/RDvj01Tweoc1zL1bnlewSvL5MdFOJ1PzLBg9Tv5h M6am/q0HZEPiJ7Um9yGBpBnEQe2KVH0n3bw/hGHU3aXmVAPwpkrTaf+gj20DOJZ+ ci9A0TZjlFC9qdThAkHprfVOlzwFMllOHf0ztq1mma2NTo87SgjAl12s/Tw= -----END CERTIFICATE-----Generated at Mon Oct 20 11:55:36 2025 by rpki-client