$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b5a13dcf-1405-44b2-bf40-70456eccd7c6.roa File: b5a13dcf-1405-44b2-bf40-70456eccd7c6.roa (raw, json) Hash identifier: JAG3v3F0ACJ9Yz56GX2HxnM7WUeZikJ+W2wI/r+hiPM= Subject key identifier: E0:56:4D:E9:EA:54:33:D5:27:05:C5:0D:22:A4:30:B5:F9:8F:F5:CC Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 21DE8104E4B4C9A79DFACD57A00FBDA3F807E792 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b5a13dcf-1405-44b2-bf40-70456eccd7c6.roa Signing time: Thu 16 Oct 2025 15:29:43 +0000 ROA not before: Thu 16 Oct 2025 15:29:43 +0000 ROA not after: Thu 20 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.68.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:de:81:04:e4:b4:c9:a7:9d:fa:cd:57:a0:0f:bd:a3:f8:07:e7:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 16 15:29:43 2025 GMT Not After : Nov 20 23:59:59 2025 GMT Subject: serialNumber=a6324807994cffe888c2f612fef57303b0edcc385abaa3e8306cd4e7624a699f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:10:bb:95:b8:63:8a:d2:37:3b:c8:b8:6f:fc: 1d:ac:4d:06:59:f6:8b:f0:91:db:6c:f3:b7:ef:6b: 04:a3:8a:0c:b0:19:b7:f4:14:8e:8e:52:fa:61:d7: e2:b9:d4:6b:45:19:d6:9b:86:e2:be:dc:4f:90:dc: 86:b3:d2:14:55:dc:99:fe:22:c3:6e:f4:6e:bb:1d: ea:1f:2e:42:43:4b:55:c6:70:0f:01:9f:74:35:cc: 30:be:0d:ea:ee:66:7f:ab:ab:b0:cf:a6:a7:0b:6f: e7:47:42:00:dd:67:b4:2a:34:c9:b5:06:57:fd:63: a8:7c:ce:11:6c:7a:ff:d4:19:c6:18:6f:e2:20:74: ba:39:08:90:d0:c0:c9:9c:5c:d3:09:ef:7f:81:3f: 47:9d:06:59:02:c0:b2:de:dd:15:4c:89:6a:4c:a2: 14:73:6a:b6:a7:9b:f8:d1:d5:98:d9:b8:ef:96:ad: e1:22:d6:ca:26:59:e7:a7:b2:fb:89:6d:22:f5:d1: ca:6a:b8:92:73:8f:2a:bf:ab:8d:88:93:7a:34:c5: f1:00:de:91:f5:4a:6b:c4:fb:2f:d1:00:10:c2:fe: 79:dd:e8:a2:49:49:a1:b2:b5:1d:93:aa:44:5a:a0: a5:d4:f7:fa:bb:d2:d7:f7:1d:84:ce:07:03:bb:6f: 6c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:56:4D:E9:EA:54:33:D5:27:05:C5:0D:22:A4:30:B5:F9:8F:F5:CC X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b5a13dcf-1405-44b2-bf40-70456eccd7c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.68.33.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:03:1f:ec:7a:8c:c7:b8:17:6b:4c:86:81:c4:53:04:e5:2c: 84:8d:8e:79:11:c3:0f:17:8c:c9:e8:80:47:dc:79:23:7a:8f: d8:6a:ab:d7:cd:09:9a:d0:60:ed:55:e6:24:47:1c:84:8e:a7: 1c:04:91:b5:ee:31:c6:5e:5d:5f:00:40:7e:24:e0:43:40:9d: cb:88:cb:e4:3a:df:69:ba:05:df:2d:fd:40:45:7f:79:8f:04: a1:97:74:3e:1c:8a:99:d3:f4:51:28:48:65:5a:09:f7:96:cf: d3:a6:f9:1b:b2:27:13:c4:99:82:de:79:19:ac:1e:88:0c:5a: 74:65:b1:f4:74:c2:c1:19:dc:52:ea:f4:b7:01:f9:e8:e9:6e: 68:7c:fc:9e:55:72:0b:23:df:38:95:61:2f:d0:e5:f8:7b:c7: 26:81:b2:55:25:d2:11:d0:a5:c0:c8:6e:76:d6:b7:05:f1:83: 78:06:77:58:7a:c1:47:ab:5c:27:03:7d:a0:42:c8:78:33:ad: 93:96:31:5f:ba:a9:da:6f:2f:67:8f:05:05:50:f1:ee:fa:f4: b2:97:2b:90:d3:54:49:1a:41:cc:5a:27:c4:c1:63:11:67:c3: c3:39:c7:ec:96:ff:a5:a0:f6:b3:52:46:e9:c3:d5:81:77:c5: dc:07:67:c6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUId6BBOS0yaed+s1XoA+9o/gH55IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE2MTUyOTQzWhcNMjUxMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BhNjMyNDgwNzk5NGNmZmU4ODhjMmY2MTJmZWY1NzMwM2Iw ZWRjYzM4NWFiYWEzZTgzMDZjZDRlNzYyNGE2OTlmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCsELuVuGOK0jc7yLhv/B2sTQZZ9ovwkdts87fvawSjigyw Gbf0FI6OUvph1+K51GtFGdabhuK+3E+Q3Iaz0hRV3Jn+IsNu9G67HeofLkJDS1XG cA8Bn3Q1zDC+DeruZn+rq7DPpqcLb+dHQgDdZ7QqNMm1Blf9Y6h8zhFsev/UGcYY b+IgdLo5CJDQwMmcXNMJ73+BP0edBlkCwLLe3RVMiWpMohRzaranm/jR1ZjZuO+W reEi1somWeensvuJbSL10cpquJJzjyq/q42Ik3o0xfEA3pH1SmvE+y/RABDC/nnd 6KJJSaGytR2TqkRaoKXU9/q70tf3HYTOBwO7b2xXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU4FZN6epUM9UnBcUNIqQwtfmP9cwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2I1YTEzZGNmLTE0MDUtNDRiMi1iZjQwLTcwNDU2ZWNjZDdjNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASRCEwDQYJKoZIhvcNAQELBQADggEBADsDH+x6jMe4F2tMhoHEUwTlLISN jnkRww8XjMnogEfceSN6j9hqq9fNCZrQYO1V5iRHHISOpxwEkbXuMcZeXV8AQH4k 4ENAncuIy+Q632m6Bd8t/UBFf3mPBKGXdD4cipnT9FEoSGVaCfeWz9Om+RuyJxPE mYLeeRmsHogMWnRlsfR0wsEZ3FLq9LcB+ejpbmh8/J5Vcgsj3ziVYS/Q5fh7xyaB slUl0hHQpcDIbnbWtwXxg3gGd1h6wUerXCcDfaBCyHgzrZOWMV+6qdpvL2ePBQVQ 8e769LKXK5DTVEkaQcxaJ8TBYxFnw8M5x+yW/6Wg9rNSRunD1YF3xdwHZ8Y= -----END CERTIFICATE-----Generated at Mon Oct 20 08:29:31 2025 by rpki-client