$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f1a920d3-9a00-489f-8797-cb2c59f7a82a.roa File: f1a920d3-9a00-489f-8797-cb2c59f7a82a.roa (raw, json) Hash identifier: rNbU//yg9B8Zrk2eyz3Y+Tsdvbw+jdj8xK1Zf0XAYWo= Subject key identifier: 00:C2:6D:B3:BC:3B:EC:26:55:1E:79:DA:26:1B:7E:49:C5:93:3A:B0 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5B984E27222ED4911C27B211D7A7798C491E5EEE Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f1a920d3-9a00-489f-8797-cb2c59f7a82a.roa Signing time: Sat 18 Oct 2025 09:53:41 +0000 ROA not before: Sat 18 Oct 2025 09:53:41 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.238.52.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:98:4e:27:22:2e:d4:91:1c:27:b2:11:d7:a7:79:8c:49:1e:5e:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 09:53:41 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=497d9dd656aa535138a03669dbe9540c0b23a6d3d09d38dab0cf54e1383fc1d9, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:17:57:e2:dc:ce:50:ae:29:67:57:c6:b5:03: 78:0c:49:6f:27:91:b3:79:b7:dd:0a:c4:28:e4:d3: 9c:a9:a3:16:01:52:e2:ce:e5:4f:b5:6d:c7:26:bf: 3b:b1:02:9a:4e:6d:24:8d:f2:6f:a7:d2:0f:68:b1: c2:4b:8b:69:03:26:7b:26:e0:42:b2:ef:1f:65:02: 64:f6:a9:b9:ab:e2:54:db:4a:00:1d:97:6b:4c:bc: 00:c2:a8:60:27:11:ad:ae:17:be:3c:ab:9f:84:1a: 45:3d:1c:4b:e1:4e:cc:cb:11:54:4c:13:66:ad:24: e2:37:42:6a:a3:56:60:41:d1:3d:cc:e8:71:ec:cc: 70:fe:f7:b2:cf:d1:83:c0:c8:b7:1a:ec:fb:93:91: a8:57:ea:b2:b0:ec:1c:1a:6a:6d:ac:90:68:55:41: df:6d:4e:92:c7:a4:21:6d:00:6d:4c:f8:39:e1:52: a6:3a:b0:54:c9:99:68:b5:d4:7d:97:76:52:e1:8b: f7:97:42:0a:73:ef:f6:d3:dd:dc:55:68:c3:5d:fd: aa:99:74:e8:2f:b9:f3:45:31:d6:d6:b4:f1:ca:de: 16:c1:2c:1e:f3:65:8c:c3:6e:07:ef:84:e1:a6:80: ab:17:7f:17:ca:0d:d6:18:9a:01:71:13:9e:01:1d: ad:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:C2:6D:B3:BC:3B:EC:26:55:1E:79:DA:26:1B:7E:49:C5:93:3A:B0 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f1a920d3-9a00-489f-8797-cb2c59f7a82a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.238.52.0/23 Signature Algorithm: sha256WithRSAEncryption 82:37:9e:0c:67:04:20:d4:19:99:1a:cc:93:cd:a9:04:57:2f: 60:74:a0:5e:c6:dc:0e:22:e3:9c:e3:11:44:40:f2:a0:11:ec: a9:28:1e:3a:6b:45:91:23:64:e8:0c:e9:01:dc:ca:e1:de:68: 7b:bc:8e:bb:3f:b0:ed:1f:72:75:25:f1:c6:38:ce:84:99:10: 89:08:15:c2:c5:7d:f7:88:f2:80:ca:b2:73:0d:93:4b:7a:02: 2b:9a:1c:ce:ec:c2:45:4e:6f:25:df:40:6e:84:16:12:af:32: bd:a4:d5:73:ef:f4:c3:5a:7a:a7:c6:e6:45:72:a0:b1:d6:77: 7e:a6:5c:e4:98:cd:4f:67:62:a0:66:14:54:3c:91:c2:d4:61: 35:2b:84:b3:3f:6b:24:40:d8:5a:d7:10:bf:47:a4:37:84:cd: 26:6f:76:09:e3:cb:f4:3c:f0:70:15:47:7b:61:f4:0e:d7:89: 4b:10:3f:98:68:df:cb:4f:df:18:3c:6a:45:ec:58:2b:a5:4d: df:06:9c:c1:a8:a5:7b:f6:60:9f:ba:9e:58:f8:11:b4:e9:2a: f9:52:97:9c:01:65:64:ee:d2:5a:82:42:53:2c:9e:40:6a:55: 89:4f:82:4d:38:fe:ad:15:05:83:32:db:1c:9c:8a:0c:f4:bd: 86:e2:a3:1f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUW5hOJyIu1JEcJ7IR16d5jEkeXu4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MDk1MzQxWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A0OTdkOWRkNjU2YWE1MzUxMzhhMDM2NjlkYmU5NTQwYzBi MjNhNmQzZDA5ZDM4ZGFiMGNmNTRlMTM4M2ZjMWQ5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCdF1fi3M5QrilnV8a1A3gMSW8nkbN5t90KxCjk05ypoxYB UuLO5U+1bccmvzuxAppObSSN8m+n0g9oscJLi2kDJnsm4EKy7x9lAmT2qbmr4lTb SgAdl2tMvADCqGAnEa2uF748q5+EGkU9HEvhTszLEVRME2atJOI3QmqjVmBB0T3M 6HHszHD+97LP0YPAyLca7PuTkahX6rKw7Bwaam2skGhVQd9tTpLHpCFtAG1M+Dnh UqY6sFTJmWi11H2XdlLhi/eXQgpz7/bT3dxVaMNd/aqZdOgvufNFMdbWtPHK3hbB LB7zZYzDbgfvhOGmgKsXfxfKDdYYmgFxE54BHa0JAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUAMJts7w77CZVHnnaJht+ScWTOrAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2YxYTkyMGQzLTlhMDAtNDg5Zi04Nzk3LWNiMmM1OWY3YTgyYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAES7jQwDQYJKoZIhvcNAQELBQADggEBAII3ngxnBCDUGZkazJPNqQRXL2B0 oF7G3A4i45zjEURA8qAR7KkoHjprRZEjZOgM6QHcyuHeaHu8jrs/sO0fcnUl8cY4 zoSZEIkIFcLFffeI8oDKsnMNk0t6AiuaHM7swkVObyXfQG6EFhKvMr2k1XPv9MNa eqfG5kVyoLHWd36mXOSYzU9nYqBmFFQ8kcLUYTUrhLM/ayRA2FrXEL9HpDeEzSZv dgnjy/Q88HAVR3th9A7XiUsQP5ho38tP3xg8akXsWCulTd8GnMGopXv2YJ+6nlj4 EbTpKvlSl5wBZWTu0lqCQlMsnkBqVYlPgk04/q0VBYMy2xycigz0vYbiox8= -----END CERTIFICATE-----Generated at Mon Oct 20 11:09:27 2025 by rpki-client