$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1b207793-6735-46c0-8edd-5671429343b2.roa File: 1b207793-6735-46c0-8edd-5671429343b2.roa (raw, json) Hash identifier: 5l6rIeXCb9iufd9YZ2jBCG7OttoS7jFZkDNcrWWn0JE= Subject key identifier: 11:78:76:6B:5E:26:67:EA:76:BB:95:10:A8:4F:57:31:44:C3:2F:13 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 442F26E5D697CA6E53E109F5C7ABAFED5413514A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1b207793-6735-46c0-8edd-5671429343b2.roa Signing time: Wed 08 Oct 2025 00:59:40 +0000 ROA not before: Wed 08 Oct 2025 00:59:40 +0000 ROA not after: Wed 12 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 161.188.154.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:2f:26:e5:d6:97:ca:6e:53:e1:09:f5:c7:ab:af:ed:54:13:51:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 8 00:59:40 2025 GMT Not After : Nov 12 23:59:59 2025 GMT Subject: serialNumber=cd68e9dfaea29ae722cf72889c16d9471f81c125ddc04e7946efa4bfa6c9ba78, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:78:09:bf:81:b0:32:c0:dd:d7:29:38:d7:e3: 88:a4:b4:57:40:89:1b:83:18:51:8e:db:5f:05:04: d6:28:62:26:65:2b:73:27:bb:f7:24:83:c6:63:22: ba:69:55:1f:4b:47:c7:14:a8:22:05:52:45:e0:a4: 52:53:d8:3c:c0:cd:97:dc:f5:b7:4d:4f:99:a1:56: 57:ea:a2:f0:e4:b0:64:92:c9:5a:4d:bf:f9:bd:ab: 76:8c:69:f2:44:0e:72:be:35:f8:79:19:e0:cf:3f: 05:41:16:f4:91:01:0d:99:99:86:f4:43:60:48:46: 44:00:4a:24:e8:8c:f5:ba:8f:19:7b:d8:ec:ef:d3: 58:c4:e7:5f:32:76:72:dc:ea:51:4f:a5:ae:a3:01: 85:7f:d5:b9:e1:b4:af:cf:9a:06:13:e0:ca:d0:45: e2:aa:96:ef:65:af:ed:f4:ea:3d:f9:4f:d6:5f:bc: 00:56:8e:66:16:6f:bf:65:f4:c4:e4:1e:83:48:7e: bd:1a:6a:19:bb:21:4f:77:2a:b5:9a:bf:13:e9:7a: d6:09:ba:1c:43:d7:36:84:6f:46:c9:2c:84:e9:cd: 9d:81:32:48:8b:6e:46:80:40:97:08:4e:97:35:68: bf:48:59:02:cc:86:22:f9:e9:db:fb:c8:c9:e3:af: 93:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:78:76:6B:5E:26:67:EA:76:BB:95:10:A8:4F:57:31:44:C3:2F:13 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1b207793-6735-46c0-8edd-5671429343b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 161.188.154.0/23 Signature Algorithm: sha256WithRSAEncryption 11:50:46:7f:ba:02:98:1b:24:05:1c:2d:62:20:ce:8c:4f:7e: d9:ec:3c:c0:bf:86:8b:a7:57:4f:d3:e1:32:1b:06:7d:9c:a8: 1b:77:a2:ed:7f:cf:c2:71:7d:ae:fa:9a:00:80:e9:bc:50:37: 9c:2d:0f:81:e4:9e:b0:dd:9b:5e:15:f4:e9:8e:17:82:07:f5: cc:7a:e1:7d:9d:cb:51:73:a4:2e:4f:c1:fd:47:0b:44:15:d5: 7c:bc:61:f4:26:40:40:15:e0:70:78:5f:b5:da:43:3b:14:7a: b9:40:cc:10:41:0c:c9:01:1b:7e:47:16:f0:40:f6:95:e1:5e: 8a:ad:89:da:ef:74:9a:7a:b0:fa:f6:06:e7:e5:c3:c4:91:a8: 09:01:e8:e3:5f:3d:56:45:61:20:7e:44:b6:34:f1:f8:5f:60: d1:bc:3c:b1:b1:fa:2f:58:1c:f0:4b:e1:19:bd:8d:f0:25:32: 5f:75:27:3e:65:59:7e:1f:1c:5f:10:2b:c2:8b:fd:f6:ab:fc: 60:35:fe:15:7d:05:6e:1a:35:20:6b:e1:f6:29:0e:9b:da:ab: 5a:a6:bc:ae:58:d5:07:1d:66:d6:08:dd:76:17:40:2b:8f:37: 23:ae:3d:1f:ec:a0:c3:d4:68:db:dc:1c:87:09:a2:e6:25:6f: c3:57:21:d7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURC8m5daXym5T4Qn1x6uv7VQTUUowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDA4MDA1OTQwWhcNMjUxMTEyMjM1OTU5 WjB6MUkwRwYDVQQFE0BjZDY4ZTlkZmFlYTI5YWU3MjJjZjcyODg5YzE2ZDk0NzFm ODFjMTI1ZGRjMDRlNzk0NmVmYTRiZmE2YzliYTc4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNeAm/gbAywN3XKTjX44iktFdAiRuDGFGO218FBNYoYiZl K3Mnu/ckg8ZjIrppVR9LR8cUqCIFUkXgpFJT2DzAzZfc9bdNT5mhVlfqovDksGSS yVpNv/m9q3aMafJEDnK+Nfh5GeDPPwVBFvSRAQ2ZmYb0Q2BIRkQASiTojPW6jxl7 2Ozv01jE518ydnLc6lFPpa6jAYV/1bnhtK/PmgYT4MrQReKqlu9lr+306j35T9Zf vABWjmYWb79l9MTkHoNIfr0aahm7IU93KrWavxPpetYJuhxD1zaEb0bJLITpzZ2B MkiLbkaAQJcITpc1aL9IWQLMhiL56dv7yMnjr5OFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUEXh2a14mZ+p2u5UQqE9XMUTDLxMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzFiMjA3NzkzLTY3MzUtNDZjMC04ZWRkLTU2NzE0MjkzNDNiMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAGhvJowDQYJKoZIhvcNAQELBQADggEBABFQRn+6ApgbJAUcLWIgzoxPftns PMC/hounV0/T4TIbBn2cqBt3ou1/z8Jxfa76mgCA6bxQN5wtD4HknrDdm14V9OmO F4IH9cx64X2dy1FzpC5Pwf1HC0QV1Xy8YfQmQEAV4HB4X7XaQzsUerlAzBBBDMkB G35HFvBA9pXhXoqtidrvdJp6sPr2Buflw8SRqAkB6ONfPVZFYSB+RLY08fhfYNG8 PLGx+i9YHPBL4Rm9jfAlMl91Jz5lWX4fHF8QK8KL/far/GA1/hV9BW4aNSBr4fYp Dpvaq1qmvK5Y1QcdZtYI3XYXQCuPNyOuPR/soMPUaNvcHIcJouYlb8NXIdc= -----END CERTIFICATE-----Generated at Fri Oct 17 00:52:31 2025 by rpki-client