$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b5128da0-dbfa-49fc-9c01-ebc6b79e03ff.roa File: b5128da0-dbfa-49fc-9c01-ebc6b79e03ff.roa (raw, json) Hash identifier: JCvRI2GNBaxo3BjRWQJUZ1dRDeKoY5pW9wsW7kxm8b8= Subject key identifier: 87:48:EE:4A:36:0B:F1:60:2B:33:40:14:79:AC:28:FC:6C:68:67:5D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 45E7C1A13D4FC4D77C1BA05B729F05741F62FFAD Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b5128da0-dbfa-49fc-9c01-ebc6b79e03ff.roa Signing time: Tue 23 Sep 2025 17:03:29 +0000 ROA not before: Tue 23 Sep 2025 17:03:29 +0000 ROA not after: Tue 28 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 161.188.182.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:e7:c1:a1:3d:4f:c4:d7:7c:1b:a0:5b:72:9f:05:74:1f:62:ff:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 23 17:03:29 2025 GMT Not After : Oct 28 23:59:59 2025 GMT Subject: serialNumber=62f36a41bd819b2d7a48bf30c10ed0dffef34b8efa3d91eb8d4e88acbc380983, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ed:24:99:da:bc:76:bc:70:9f:c8:03:95:a7: ab:5e:b5:e9:ae:42:d9:03:15:30:80:44:6c:83:a0: 06:65:eb:9f:2d:e0:ad:4d:38:12:62:1a:b7:8c:a6: 11:73:d4:f6:c2:f1:d7:20:14:be:13:41:5a:5c:32: f1:51:7f:49:67:7c:50:0f:80:60:b9:11:d3:b0:39: c1:89:d0:62:08:75:aa:65:54:04:96:2f:6e:89:63: 01:79:80:34:37:ff:30:a5:07:a8:6b:1a:c8:9a:30: fe:37:29:73:dc:99:b4:b4:1a:66:ec:48:3d:9e:b1: 24:a8:19:ad:7d:35:ba:ac:36:2d:e0:56:ad:8d:94: b0:82:81:6e:ff:17:fd:fe:03:27:f4:37:ef:a7:f9: ee:5d:4d:36:ec:fd:15:e1:19:1d:64:36:bd:28:96: cb:85:74:23:a3:c5:6a:dd:43:d1:6b:96:78:5c:0c: 7d:ca:94:90:cb:3a:82:47:6e:de:53:f6:03:89:99: e0:a1:be:fd:24:48:99:e5:e2:24:43:12:6e:ac:04: 1e:18:7f:b0:25:b4:d9:88:fa:4d:d2:b4:cf:4b:92: c2:4f:19:b7:d2:9a:3d:cb:94:6b:6b:9f:d3:13:2e: 0b:2a:dc:1c:4f:5e:43:d9:ed:6c:e8:cb:29:08:a8: 34:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:48:EE:4A:36:0B:F1:60:2B:33:40:14:79:AC:28:FC:6C:68:67:5D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b5128da0-dbfa-49fc-9c01-ebc6b79e03ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 161.188.182.0/23 Signature Algorithm: sha256WithRSAEncryption a6:63:63:e8:a1:06:f3:30:ea:44:e1:2d:67:cb:2b:a3:6a:f3: 91:7f:2e:3e:e1:29:68:7d:f2:74:36:41:69:05:5b:90:61:ea: 54:93:3f:78:bb:9b:3c:fe:cf:9e:dc:30:07:4a:2c:25:4e:f7: 13:5c:b2:b5:93:03:43:40:66:c3:23:e3:a4:57:6e:38:e3:ff: cf:df:7f:c2:0b:21:f0:95:46:0c:3d:d1:e6:e6:17:78:92:b4: 13:f1:9a:5f:c3:b4:23:44:8a:d1:a1:67:07:43:b0:b9:5e:77: e0:af:b3:7a:7e:fd:50:1e:de:09:9f:ca:05:0f:18:2a:0d:98: 42:07:e4:fa:4c:25:d8:40:b3:45:97:24:8f:9e:8c:1b:6b:9b: dd:b7:23:47:f6:4d:3f:f2:18:d8:c9:c8:46:de:f9:06:27:fa: f3:68:71:dc:28:62:b5:fd:2d:09:09:80:40:7f:b5:7a:c1:4a: 42:c9:18:3e:d7:ab:f4:d4:59:72:ff:7a:ba:63:63:43:64:f2: 6b:f0:83:ac:e6:98:d8:5a:7b:c8:52:c2:09:be:91:17:88:ea: d8:2c:91:ab:fd:a4:35:d5:e1:be:16:31:1c:0c:fb:85:2f:94: f5:44:60:c0:ee:60:25:26:37:3e:30:c7:58:bd:f2:a4:83:12: 78:c8:9d:74 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURefBoT1PxNd8G6Bbcp8FdB9i/60wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIzMTcwMzI5WhcNMjUxMDI4MjM1OTU5 WjB6MUkwRwYDVQQFE0A2MmYzNmE0MWJkODE5YjJkN2E0OGJmMzBjMTBlZDBkZmZl ZjM0YjhlZmEzZDkxZWI4ZDRlODhhY2JjMzgwOTgzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC27SSZ2rx2vHCfyAOVp6tetemuQtkDFTCARGyDoAZl658t 4K1NOBJiGreMphFz1PbC8dcgFL4TQVpcMvFRf0lnfFAPgGC5EdOwOcGJ0GIIdapl VASWL26JYwF5gDQ3/zClB6hrGsiaMP43KXPcmbS0GmbsSD2esSSoGa19NbqsNi3g Vq2NlLCCgW7/F/3+Ayf0N++n+e5dTTbs/RXhGR1kNr0olsuFdCOjxWrdQ9Frlnhc DH3KlJDLOoJHbt5T9gOJmeChvv0kSJnl4iRDEm6sBB4Yf7AltNmI+k3StM9LksJP GbfSmj3LlGtrn9MTLgsq3BxPXkPZ7WzoyykIqDQbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUh0juSjYL8WArM0AUeawo/GxoZ10wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2I1MTI4ZGEwLWRiZmEtNDlmYy05YzAxLWViYzZiNzllMDNmZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAGhvLYwDQYJKoZIhvcNAQELBQADggEBAKZjY+ihBvMw6kThLWfLK6Nq85F/ Lj7hKWh98nQ2QWkFW5Bh6lSTP3i7mzz+z57cMAdKLCVO9xNcsrWTA0NAZsMj46RX bjjj/8/ff8ILIfCVRgw90ebmF3iStBPxml/DtCNEitGhZwdDsLled+Cvs3p+/VAe 3gmfygUPGCoNmEIH5PpMJdhAs0WXJI+ejBtrm923I0f2TT/yGNjJyEbe+QYn+vNo cdwoYrX9LQkJgEB/tXrBSkLJGD7Xq/TUWXL/erpjY0Nk8mvwg6zmmNhae8hSwgm+ kReI6tgskav9pDXV4b4WMRwM+4UvlPVEYMDuYCUmNz4wx1i98qSDEnjInXQ= -----END CERTIFICATE-----Generated at Wed Oct 8 21:34:29 2025 by rpki-client