$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e67bc679-ec51-4ea6-98b0-12876e64bf84.roa File: e67bc679-ec51-4ea6-98b0-12876e64bf84.roa (raw, json) Hash identifier: M92LdNNTKWTTR3QVjQGT/sqd7GSpUXT3YN1ug254b4A= Subject key identifier: D4:BA:3A:19:D2:F1:47:23:59:B8:B3:E1:32:71:AF:BB:41:25:4E:44 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7E9FE8D92CBB20DB51B781795B48DD2C0AE3530C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e67bc679-ec51-4ea6-98b0-12876e64bf84.roa Signing time: Thu 16 Oct 2025 23:19:14 +0000 ROA not before: Thu 16 Oct 2025 23:19:14 +0000 ROA not after: Thu 20 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.192.160.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:9f:e8:d9:2c:bb:20:db:51:b7:81:79:5b:48:dd:2c:0a:e3:53:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 16 23:19:14 2025 GMT Not After : Nov 20 23:59:59 2025 GMT Subject: serialNumber=bd86c73c7feee5f0850211196dbab887a33ba411a7848f9fa04dd4707087aa85, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:cd:55:18:7d:35:d7:52:fa:ab:d2:66:22:fd: 94:98:00:98:21:4e:d8:07:9f:fe:b0:97:ef:ce:bb: 7f:7e:83:22:80:fa:5a:56:bc:ad:c2:08:19:a9:6a: 3f:b0:c5:99:3e:43:80:e7:ed:65:94:e0:79:97:6d: 4b:d7:01:fb:22:84:19:aa:37:58:8a:e9:65:ce:57: 83:77:f7:f0:a4:e6:79:8c:cd:ea:82:a1:bf:e3:13: 4e:c5:a1:02:25:f1:48:07:c2:ab:cd:b7:e0:ef:06: a3:c6:c7:61:ae:d4:2e:ff:86:ac:e0:15:1e:dc:60: d6:d1:79:e4:ff:aa:e9:eb:72:d4:0e:1a:29:5d:05: db:6c:0e:9f:54:8c:1a:30:fc:14:80:df:5b:51:a5: 7b:61:79:0c:c0:97:b1:63:cb:44:7f:b5:67:9f:c3: 96:91:d4:81:e0:53:ee:70:01:5f:8b:9b:21:51:ae: a2:b4:b7:58:97:28:36:c8:49:08:e6:18:49:b2:ea: 31:27:51:ce:b0:4d:75:19:6c:4f:7d:f8:e3:80:ce: 2c:c3:16:1c:6e:c7:99:dc:97:ff:64:ab:63:04:a1: 2e:dd:ce:46:13:9c:6d:55:86:a4:5d:ab:bc:41:e6: f5:0f:ab:ff:ca:d9:76:e4:6e:e8:d4:5e:37:5b:b1: 9c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:BA:3A:19:D2:F1:47:23:59:B8:B3:E1:32:71:AF:BB:41:25:4E:44 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e67bc679-ec51-4ea6-98b0-12876e64bf84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.192.160.0/23 Signature Algorithm: sha256WithRSAEncryption 51:b0:6f:81:91:f4:cd:3f:a2:2b:ce:7a:18:1b:e2:6a:6b:66: cb:19:74:4a:b4:3f:ce:d3:bd:ae:d3:42:78:b2:4a:33:86:36: fa:7d:96:28:0b:0e:33:d7:41:e8:18:4c:34:a9:b3:56:54:29: cb:64:59:12:c8:cb:7d:db:d4:a4:cb:47:44:30:1c:f5:12:73: cb:03:fd:e4:5b:8c:d1:42:9b:6e:6e:ad:2b:ea:9c:1d:cc:33: 71:99:05:21:27:7d:2a:cf:f3:24:bc:a9:2e:bc:d8:a8:a5:70: 84:93:62:e1:e8:0d:cb:3d:58:af:7a:46:e5:27:65:16:05:9e: 82:ae:ae:d3:83:d2:43:88:f9:77:68:2d:45:46:04:99:cf:a6: d9:98:3d:a4:dc:97:d6:d0:22:b6:f3:18:4d:2e:94:2b:b4:7b: 56:22:7a:27:d7:da:f8:95:41:82:c0:0f:7e:d3:c9:fa:c4:c1: c0:23:d2:a7:a9:87:8e:c2:0b:76:5f:f3:46:be:de:4b:80:8d: e6:94:8b:38:a6:e6:14:6b:cd:f7:c1:73:6e:92:14:7e:2d:49: 80:26:55:01:9d:9f:8a:d1:ae:37:ad:ca:1e:63:9f:1c:0c:9a: c5:4a:f6:39:c6:48:4c:d0:83:3d:1d:45:17:38:e4:da:84:30: 32:f0:17:49 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfp/o2Sy7INtRt4F5W0jdLArjUwwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE2MjMxOTE0WhcNMjUxMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BiZDg2YzczYzdmZWVlNWYwODUwMjExMTk2ZGJhYjg4N2Ez M2JhNDExYTc4NDhmOWZhMDRkZDQ3MDcwODdhYTg1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFzVUYfTXXUvqr0mYi/ZSYAJghTtgHn/6wl+/Ou39+gyKA +lpWvK3CCBmpaj+wxZk+Q4Dn7WWU4HmXbUvXAfsihBmqN1iK6WXOV4N39/Ck5nmM zeqCob/jE07FoQIl8UgHwqvNt+DvBqPGx2Gu1C7/hqzgFR7cYNbReeT/qunrctQO GildBdtsDp9UjBow/BSA31tRpXtheQzAl7Fjy0R/tWefw5aR1IHgU+5wAV+LmyFR rqK0t1iXKDbISQjmGEmy6jEnUc6wTXUZbE99+OOAzizDFhxux5ncl/9kq2MEoS7d zkYTnG1VhqRdq7xB5vUPq//K2XbkbujUXjdbsZwfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU1Lo6GdLxRyNZuLPhMnGvu0ElTkQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2U2N2JjNjc5LWVjNTEtNGVhNi05OGIwLTEyODc2ZTY0YmY4NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE2wKAwDQYJKoZIhvcNAQELBQADggEBAFGwb4GR9M0/oivOehgb4mprZssZ dEq0P87Tva7TQniySjOGNvp9ligLDjPXQegYTDSps1ZUKctkWRLIy33b1KTLR0Qw HPUSc8sD/eRbjNFCm25urSvqnB3MM3GZBSEnfSrP8yS8qS682KilcISTYuHoDcs9 WK96RuUnZRYFnoKurtOD0kOI+XdoLUVGBJnPptmYPaTcl9bQIrbzGE0ulCu0e1Yi eifX2viVQYLAD37TyfrEwcAj0qeph47CC3Zf80a+3kuAjeaUizim5hRrzffBc26S FH4tSYAmVQGdn4rRrjetyh5jnxwMmsVK9jnGSEzQgz0dRRc45NqEMDLwF0k= -----END CERTIFICATE-----Generated at Mon Oct 20 05:18:01 2025 by rpki-client