$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c5d65e12-b41a-41ae-99c1-cf44b2b54399.roa File: c5d65e12-b41a-41ae-99c1-cf44b2b54399.roa (raw, json) Hash identifier: 7YK6hB7iA7u+o/551HvVr+gaYkJ3Ni6sM5EN0m3Zkts= Subject key identifier: 6F:C8:8B:50:61:41:B2:93:FA:73:82:A5:D8:4B:EB:5F:F4:32:D3:55 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0E4CF83A59B177AC75BBD41C5C16412D7AB92FF9 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c5d65e12-b41a-41ae-99c1-cf44b2b54399.roa Signing time: Sat 18 Oct 2025 08:10:08 +0000 ROA not before: Sat 18 Oct 2025 08:10:08 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.161.12.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:4c:f8:3a:59:b1:77:ac:75:bb:d4:1c:5c:16:41:2d:7a:b9:2f:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 08:10:08 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=8102dccbead53a12d79ff3a6875d353442783917de95ef23261782e06994d590, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9f:cf:d8:2d:3a:51:28:b7:fb:a0:5b:e0:4c: b7:29:6b:b6:3a:34:30:c9:c0:c6:a7:b7:c6:3c:fd: 20:11:dd:2f:22:87:e9:9e:52:e1:cd:4b:83:e1:ab: d7:67:02:82:5f:4a:82:a4:50:be:dd:24:dd:7e:cc: ed:16:2b:ce:94:5f:0d:b3:32:fa:07:ba:8f:cb:11: 72:42:72:94:eb:47:9a:36:66:55:d1:52:68:df:c7: aa:76:ca:16:2c:19:49:b5:e7:4e:f3:aa:4f:fb:73: 7e:cb:74:90:4e:b4:89:7d:40:bf:d9:1c:c6:a1:a6: 1a:f4:22:f3:eb:0b:81:ed:b4:ff:91:0b:c6:d5:9f: 23:70:5d:80:ef:17:0f:3e:3b:3e:6b:08:f1:1e:bd: f4:ce:5c:a3:a7:66:e6:fe:83:68:3b:96:ff:81:e0: 7d:42:68:3a:c0:ed:e0:47:1e:77:b9:88:79:0e:a4: 38:a6:62:a0:b6:bf:31:38:d9:35:c3:b5:cb:97:95: 4a:f7:d4:64:73:35:f1:17:35:70:83:08:21:ff:5c: 5d:f4:ec:f8:5a:f2:04:32:14:ff:18:5f:66:87:74: 5f:f6:75:58:e7:74:97:5b:6f:d5:f7:3b:52:ba:81: 3a:f3:54:89:33:b3:86:2b:69:2b:6d:11:82:0d:f8: 94:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:C8:8B:50:61:41:B2:93:FA:73:82:A5:D8:4B:EB:5F:F4:32:D3:55 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c5d65e12-b41a-41ae-99c1-cf44b2b54399.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.161.12.0/23 Signature Algorithm: sha256WithRSAEncryption 83:47:05:e9:fe:bb:62:0f:4f:fc:bb:a3:c8:6b:0a:7f:50:95: 3e:4b:86:ae:e5:7a:ce:3d:bb:74:9d:3a:6e:5a:3b:73:f7:f1: 3b:f9:10:eb:b7:71:87:7f:49:8d:9c:39:3f:65:c4:ee:7c:be: 49:96:eb:b7:9b:90:c1:b7:99:99:0e:d7:96:d2:75:4a:17:c5: fa:a0:0a:31:68:a5:fb:08:0c:b7:0a:2a:ca:4e:15:f6:d0:96: 3a:ca:59:eb:a8:1d:c4:12:93:a4:5c:cd:ca:92:3f:56:dc:6f: f3:b7:d5:7e:71:36:7a:ec:66:9b:87:a6:ed:22:89:fd:05:cd: ab:ec:21:1f:b5:6c:58:ca:d9:a2:3c:33:2f:df:c9:8b:2a:f2: 5a:7f:5f:a8:c5:07:71:2d:77:ea:6e:3c:69:31:6e:ed:42:55: 20:c3:19:04:2b:6d:aa:00:5c:03:a7:c3:11:0f:bd:db:7b:b4: 3f:a3:f5:44:e6:82:48:11:20:36:91:45:45:58:97:df:c8:5e: 9a:b2:9e:5d:dd:88:fe:4d:84:b4:11:94:9a:dd:aa:d7:65:80: 7d:8d:fe:f1:1c:7e:f9:09:08:a7:03:4c:6c:68:e6:5e:f4:fb: d2:99:06:c4:bf:6e:ac:6f:cc:16:15:ba:e7:5e:16:4c:67:65: 3f:ef:2f:f3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDkz4Olmxd6x1u9QcXBZBLXq5L/kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MDgxMDA4WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A4MTAyZGNjYmVhZDUzYTEyZDc5ZmYzYTY4NzVkMzUzNDQy NzgzOTE3ZGU5NWVmMjMyNjE3ODJlMDY5OTRkNTkwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxn8/YLTpRKLf7oFvgTLcpa7Y6NDDJwMant8Y8/SAR3S8i h+meUuHNS4Phq9dnAoJfSoKkUL7dJN1+zO0WK86UXw2zMvoHuo/LEXJCcpTrR5o2 ZlXRUmjfx6p2yhYsGUm1507zqk/7c37LdJBOtIl9QL/ZHMahphr0IvPrC4HttP+R C8bVnyNwXYDvFw8+Oz5rCPEevfTOXKOnZub+g2g7lv+B4H1CaDrA7eBHHne5iHkO pDimYqC2vzE42TXDtcuXlUr31GRzNfEXNXCDCCH/XF307Pha8gQyFP8YX2aHdF/2 dVjndJdbb9X3O1K6gTrzVIkzs4YraSttEYIN+JRfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUb8iLUGFBspP6c4Kl2EvrX/Qy01UwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2M1ZDY1ZTEyLWI0MWEtNDFhZS05OWMxLWNmNDRiMmI1NDM5OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESoQwwDQYJKoZIhvcNAQELBQADggEBAINHBen+u2IPT/y7o8hrCn9QlT5L hq7les49u3SdOm5aO3P38Tv5EOu3cYd/SY2cOT9lxO58vkmW67ebkMG3mZkO15bS dUoXxfqgCjFopfsIDLcKKspOFfbQljrKWeuoHcQSk6RczcqSP1bcb/O31X5xNnrs ZpuHpu0iif0FzavsIR+1bFjK2aI8My/fyYsq8lp/X6jFB3Etd+puPGkxbu1CVSDD GQQrbaoAXAOnwxEPvdt7tD+j9UTmgkgRIDaRRUVYl9/IXpqynl3diP5NhLQRlJrd qtdlgH2N/vEcfvkJCKcDTGxo5l70+9KZBsS/bqxvzBYVuudeFkxnZT/vL/M= -----END CERTIFICATE-----Generated at Mon Oct 20 02:56:42 2025 by rpki-client