$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b5b83c83-bebc-4a11-968a-640322c15845.roa File: b5b83c83-bebc-4a11-968a-640322c15845.roa (raw, json) Hash identifier: eyuRXOmCAYYlt8GgaRDdh2BCyGCE+jyrVnFecvtO5CA= Subject key identifier: 92:A9:A5:73:3F:80:D7:AE:73:04:60:39:E0:76:34:41:7C:9C:DF:3C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4560C97A98C5441F8C0ABD0623C02127EDD9099B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b5b83c83-bebc-4a11-968a-640322c15845.roa Signing time: Fri 19 Sep 2025 00:42:55 +0000 ROA not before: Fri 19 Sep 2025 00:42:55 +0000 ROA not after: Fri 24 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.68.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:60:c9:7a:98:c5:44:1f:8c:0a:bd:06:23:c0:21:27:ed:d9:09:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 19 00:42:55 2025 GMT Not After : Oct 24 23:59:59 2025 GMT Subject: serialNumber=adcef2f05a342642ad0cb625bce154807f7c4acdc4aade597ed0fb6bd19be53a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:29:a2:54:f7:7b:df:11:16:c5:a9:84:5f:f2: 97:38:fc:ff:e9:7b:9c:b9:22:78:4e:49:5f:73:51: ff:ac:71:91:2e:b9:de:38:60:a0:76:8c:f1:6c:04: fd:58:5f:b3:1f:84:ed:98:d0:7e:97:04:e4:23:2a: 32:c5:59:33:c0:b2:00:09:3f:dd:9e:d2:b4:b3:56: 52:f4:59:88:0a:37:96:ac:84:61:c5:30:bb:de:8a: 1f:62:b5:c3:ca:17:81:23:f4:58:8d:4c:d8:86:ff: 9b:38:9e:7d:26:d2:91:46:7e:14:88:79:f8:52:22: af:f2:77:b7:8f:60:8a:7f:14:77:4b:eb:82:ba:a2: eb:40:cd:39:49:ad:9d:37:f0:80:e2:9e:4a:e4:24: 6d:5a:9e:0e:be:46:cb:74:b1:75:14:19:37:b1:87: c7:57:cf:66:90:bd:36:c6:66:e2:6a:69:61:24:e6: c3:82:5f:08:6d:c9:26:d0:db:d5:eb:40:28:d8:51: 1a:7a:74:a9:5a:0d:f4:fb:19:a4:56:42:52:b6:6f: 76:af:b2:e4:6f:60:d3:0a:17:61:e3:b4:01:f4:8c: 0b:e8:75:0c:0b:c7:04:4d:c1:46:88:06:d1:23:32: 0b:ff:f4:34:5f:48:45:41:18:df:b5:95:ec:30:85: 46:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:A9:A5:73:3F:80:D7:AE:73:04:60:39:E0:76:34:41:7C:9C:DF:3C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b5b83c83-bebc-4a11-968a-640322c15845.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.68.48.0/22 Signature Algorithm: sha256WithRSAEncryption 19:cf:df:f7:d4:9e:fc:bd:3e:eb:14:96:bc:5d:6e:84:65:75: 14:31:e0:76:b3:82:08:89:6c:b1:e6:01:eb:44:62:ec:85:56: ef:70:89:61:17:cf:20:7f:fe:5a:32:5b:3b:94:3b:92:d8:15: a1:12:f5:61:b6:11:ea:10:57:af:5d:5e:67:c5:90:69:75:81: b1:20:84:23:90:73:8b:19:69:d4:98:b2:12:72:c6:f1:a1:a7: 2c:f8:fe:3c:da:82:14:b5:e2:96:50:7d:35:0e:f6:76:45:68: ce:a6:a7:99:9c:91:1b:ba:6c:75:d8:8a:ae:7b:e8:6b:33:11: f6:53:58:88:93:f6:76:dd:34:a3:e4:2b:1f:eb:43:90:2c:9f: 52:98:39:ca:fc:b8:b6:58:9b:aa:b8:81:83:cb:3e:07:2d:b6: b7:aa:81:09:c1:ef:1e:17:f9:93:4b:73:46:9e:56:0b:42:10: 86:82:d2:d2:50:f4:8d:ce:4c:98:84:8f:63:a1:8b:55:aa:05: d8:c0:39:54:bb:a3:e2:37:9d:7d:49:3a:7b:51:74:53:ea:3d: 87:14:bb:5b:56:cf:64:d7:41:d1:e4:df:20:63:0d:2e:70:e6: 9e:93:28:cc:7c:93:f7:26:10:3d:c4:f3:ec:47:33:7b:df:86: db:a6:a6:30 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURWDJepjFRB+MCr0GI8AhJ+3ZCZswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTE5MDA0MjU1WhcNMjUxMDI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BhZGNlZjJmMDVhMzQyNjQyYWQwY2I2MjViY2UxNTQ4MDdm N2M0YWNkYzRhYWRlNTk3ZWQwZmI2YmQxOWJlNTNhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNKaJU93vfERbFqYRf8pc4/P/pe5y5InhOSV9zUf+scZEu ud44YKB2jPFsBP1YX7MfhO2Y0H6XBOQjKjLFWTPAsgAJP92e0rSzVlL0WYgKN5as hGHFMLveih9itcPKF4Ej9FiNTNiG/5s4nn0m0pFGfhSIefhSIq/yd7ePYIp/FHdL 64K6outAzTlJrZ038IDinkrkJG1ang6+Rst0sXUUGTexh8dXz2aQvTbGZuJqaWEk 5sOCXwhtySbQ29XrQCjYURp6dKlaDfT7GaRWQlK2b3avsuRvYNMKF2HjtAH0jAvo dQwLxwRNwUaIBtEjMgv/9DRfSEVBGN+1lewwhUYXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUkqmlcz+A165zBGA54HY0QXyc3zwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2I1YjgzYzgzLWJlYmMtNGExMS05NjhhLTY0MDMyMmMxNTg0NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAISRDAwDQYJKoZIhvcNAQELBQADggEBABnP3/fUnvy9PusUlrxdboRldRQx 4HazggiJbLHmAetEYuyFVu9wiWEXzyB//loyWzuUO5LYFaES9WG2EeoQV69dXmfF kGl1gbEghCOQc4sZadSYshJyxvGhpyz4/jzaghS14pZQfTUO9nZFaM6mp5mckRu6 bHXYiq576GszEfZTWIiT9nbdNKPkKx/rQ5Asn1KYOcr8uLZYm6q4gYPLPgcttreq gQnB7x4X+ZNLc0aeVgtCEIaC0tJQ9I3OTJiEj2Ohi1WqBdjAOVS7o+I3nX1JOntR dFPqPYcUu1tWz2TXQdHk3yBjDS5w5p6TKMx8k/cmED3E8+xHM3vfhtumpjA= -----END CERTIFICATE-----Generated at Fri Sep 19 06:03:56 2025 by rpki-client