$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c5acd829-4870-4b40-b059-c79692029cb7.roa File: c5acd829-4870-4b40-b059-c79692029cb7.roa (raw, json) Hash identifier: nySpxJ2qEuGTzFUpp3YELPqqyqZpX62xnKJvINuMyY0= Subject key identifier: 3E:BB:13:A8:E9:DB:F7:6D:91:A8:BE:44:6F:4E:8F:FD:21:8D:A1:13 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 79319F2E603C81713C0BE84E08CEE1033685EA20 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c5acd829-4870-4b40-b059-c79692029cb7.roa Signing time: Fri 26 Sep 2025 02:54:43 +0000 ROA not before: Fri 26 Sep 2025 02:54:43 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.239.140.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:31:9f:2e:60:3c:81:71:3c:0b:e8:4e:08:ce:e1:03:36:85:ea:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 02:54:43 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=8dcffebe411057be32a5fb05a89bfd5bc9667d844ccef98ec812f69cc1b1aba7, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2f:88:51:31:ad:26:e6:e6:2a:25:75:d5:35: a6:e5:81:58:20:94:b7:46:86:fc:84:98:2c:3a:4d: 2f:44:68:c7:aa:76:c7:e7:83:0a:8b:bb:0b:4a:55: 60:0c:43:b9:ee:e1:94:e9:01:8f:28:5b:ed:71:f0: 6d:ab:50:7f:2a:cd:68:fa:5c:f6:61:ca:a3:3b:45: 6e:93:bc:01:5a:cf:c8:41:47:f3:7b:43:03:b3:54: 6f:79:17:53:d7:61:4f:fe:f8:71:17:d6:39:6f:0b: cd:98:f1:e8:88:eb:18:23:4f:79:6a:60:93:27:4b: 3d:c0:bf:11:9b:f3:b7:b6:fb:7a:3c:88:fa:4f:28: 12:22:6a:d3:af:50:f1:1f:c4:7d:1a:92:a7:7d:c4: 6b:fd:92:fd:8d:b4:2a:a3:68:21:9f:17:64:25:54: e4:1f:70:1b:ad:3a:7d:be:7b:7f:5d:1c:9f:53:f6: d1:2a:58:8e:b8:df:07:04:1c:e5:78:22:a7:ba:c9: 95:5b:95:23:89:99:bf:37:3f:57:e7:76:bd:d5:2b: 5a:fe:6e:3a:42:cd:63:c4:9a:3a:97:20:8e:94:b8: 72:a4:72:3c:f4:2e:a9:49:70:fe:ce:92:1f:98:8f: 3b:14:c9:ef:4e:8d:3e:12:c3:86:b4:8b:2f:39:70: 08:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:BB:13:A8:E9:DB:F7:6D:91:A8:BE:44:6F:4E:8F:FD:21:8D:A1:13 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c5acd829-4870-4b40-b059-c79692029cb7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.239.140.0/23 Signature Algorithm: sha256WithRSAEncryption 28:0f:a9:38:8c:04:36:93:51:77:57:b4:79:36:d2:83:57:25: c4:44:bb:ff:88:e7:97:b0:49:65:f8:a7:37:15:b4:46:9f:0e: b2:15:f2:61:6f:59:04:5c:2d:8e:9d:4c:04:ab:e0:8e:e5:6c: db:e4:39:a2:84:01:46:f1:cf:11:bc:22:f1:49:f0:35:5d:52: 98:7c:94:5b:bd:22:08:11:ea:7f:44:1f:49:ef:45:ce:72:bd: 8b:76:5a:f5:07:80:b0:bf:be:30:7f:ce:c0:35:c7:03:14:65: e8:b4:24:f8:00:b2:c3:75:12:bc:e6:28:cf:69:6b:7e:a0:4f: db:c0:bd:df:b4:83:c0:bc:5b:41:da:d2:97:eb:23:14:ea:f8: a0:1e:6a:05:5e:88:70:90:79:f9:59:7c:aa:2a:db:7b:ee:39: e8:00:2f:3e:2b:4d:28:be:cd:be:d0:7e:c6:dc:76:19:41:d1: 13:4a:2c:c3:37:6b:f3:18:96:3f:2b:1b:21:00:a8:01:7d:b7: b7:29:47:ef:59:d1:fd:a4:4d:cc:94:3f:dc:8e:e4:83:02:b7: 3b:2d:49:43:f5:fb:6a:6e:07:bf:ad:f0:37:70:3c:7b:a7:28: d6:1c:d6:b4:e2:aa:41:62:b0:0c:37:ba:8b:25:2d:a0:64:5c: 52:33:d6:2d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUeTGfLmA8gXE8C+hOCM7hAzaF6iAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MDI1NDQzWhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZGNmZmViZTQxMTA1N2JlMzJhNWZiMDVhODliZmQ1YmM5 NjY3ZDg0NGNjZWY5OGVjODEyZjY5Y2MxYjFhYmE3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5L4hRMa0m5uYqJXXVNablgVgglLdGhvyEmCw6TS9EaMeq dsfngwqLuwtKVWAMQ7nu4ZTpAY8oW+1x8G2rUH8qzWj6XPZhyqM7RW6TvAFaz8hB R/N7QwOzVG95F1PXYU/++HEX1jlvC82Y8eiI6xgjT3lqYJMnSz3AvxGb87e2+3o8 iPpPKBIiatOvUPEfxH0akqd9xGv9kv2NtCqjaCGfF2QlVOQfcButOn2+e39dHJ9T 9tEqWI643wcEHOV4Iqe6yZVblSOJmb83P1fndr3VK1r+bjpCzWPEmjqXII6UuHKk cjz0LqlJcP7Okh+YjzsUye9OjT4Sw4a0iy85cAg1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUPrsTqOnb922RqL5Eb06P/SGNoRMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2M1YWNkODI5LTQ4NzAtNGI0MC1iMDU5LWM3OTY5MjAyOWNiNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE274wwDQYJKoZIhvcNAQELBQADggEBACgPqTiMBDaTUXdXtHk20oNXJcRE u/+I55ewSWX4pzcVtEafDrIV8mFvWQRcLY6dTASr4I7lbNvkOaKEAUbxzxG8IvFJ 8DVdUph8lFu9IggR6n9EH0nvRc5yvYt2WvUHgLC/vjB/zsA1xwMUZei0JPgAssN1 ErzmKM9pa36gT9vAvd+0g8C8W0Ha0pfrIxTq+KAeagVeiHCQeflZfKoq23vuOegA Lz4rTSi+zb7QfsbcdhlB0RNKLMM3a/MYlj8rGyEAqAF9t7cpR+9Z0f2kTcyUP9yO 5IMCtzstSUP1+2puB7+t8DdwPHunKNYc1rTiqkFisAw3uoslLaBkXFIz1i0= -----END CERTIFICATE-----Generated at Mon Oct 20 08:41:59 2025 by rpki-client