$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/514750e8-e427-48e8-bafa-6135dd4bc915.roa File: 514750e8-e427-48e8-bafa-6135dd4bc915.roa (raw, json) Hash identifier: U8fsfUDtlgDR+l0aNbdUsT/OhhsDGAIrzw5pXvIk4qw= Subject key identifier: 3A:2F:67:AF:EF:FA:3E:ED:9F:04:53:74:A2:B0:12:44:A7:C4:44:22 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 24961015881F4E62C23C50B59898C0077FBF2AE0 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/514750e8-e427-48e8-bafa-6135dd4bc915.roa Signing time: Mon 22 Sep 2025 21:38:58 +0000 ROA not before: Mon 22 Sep 2025 21:38:58 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.238.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:96:10:15:88:1f:4e:62:c2:3c:50:b5:98:98:c0:07:7f:bf:2a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 21:38:58 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=a3d2bb7c37dfa92f8a35be68ed53f40224843bd853a5337bc0532d0316c8332f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:71:f8:e3:79:9e:cd:77:d9:7a:17:87:2f:c0: e8:84:6d:7d:15:f4:68:5d:bb:15:c3:78:88:1c:df: 0f:9c:17:d4:c5:aa:e5:fb:c7:6d:93:57:02:60:0f: 43:02:0a:7c:df:af:3b:54:eb:8c:d4:99:f8:a1:8b: 75:6b:ce:6d:d8:19:67:32:9e:63:83:e4:7f:7a:3f: 2c:4d:af:f4:47:5b:7c:f9:6d:88:48:a5:a8:f5:67: 74:40:7c:93:06:0f:70:1f:06:ad:d9:10:51:d3:93: ce:91:c3:c2:de:e3:d4:f4:58:26:84:12:f1:00:ec: ce:f3:e8:a4:8f:c7:8d:b2:5e:1e:43:1a:74:67:52: 7a:6e:46:80:fc:cd:3d:c2:74:59:8b:92:5a:52:56: 58:d9:5f:33:26:26:a6:f3:24:ed:73:4d:84:a2:ea: b0:65:d2:e5:1f:03:bc:e1:03:fa:de:9f:28:61:54: f0:bf:b3:cc:4d:2a:29:af:86:53:e6:b4:3b:c8:3c: 21:14:0f:07:69:a8:64:28:61:43:e4:79:f0:fe:99: 7f:25:81:ef:9c:73:a4:a8:95:3e:a2:28:cf:04:a6: 57:13:e3:e1:01:9d:39:09:c0:e0:7c:91:15:92:ad: 71:55:a7:fb:c3:17:ac:9a:6f:42:61:6f:22:b8:9c: 79:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:2F:67:AF:EF:FA:3E:ED:9F:04:53:74:A2:B0:12:44:A7:C4:44:22 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/514750e8-e427-48e8-bafa-6135dd4bc915.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.238.243.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:4c:0c:8c:d9:e8:25:11:d3:36:d7:8f:97:b8:f7:16:c7:4e: 65:bc:36:f2:1b:70:01:90:5b:18:f9:e4:a3:4e:9b:5f:e6:a3: 0e:c4:93:d7:38:19:02:ab:62:02:02:74:56:ca:4a:ce:6f:09: a4:d0:e7:98:ac:09:f8:23:ef:46:a5:1f:f4:af:3c:aa:7f:4e: c9:7a:f8:ab:73:59:72:d8:fe:a6:38:ff:2b:21:5a:8a:cb:35: 0a:76:34:83:97:47:80:3a:a7:06:99:e2:d4:82:86:64:ab:55: 4c:ca:f8:29:14:57:09:d5:13:d4:b7:77:08:22:47:a2:f2:6e: eb:1d:48:47:87:e9:23:13:c1:72:91:89:9b:16:07:00:db:75: 5c:41:d3:6a:14:b9:74:91:6a:3d:25:79:c0:55:ee:b6:c4:2a: af:9f:f3:ad:38:e1:34:82:60:56:89:e3:70:a1:4f:71:7b:8f: bd:75:2d:85:5e:55:e7:03:33:76:b2:13:e8:2d:9a:c6:21:89: a7:8c:49:70:e0:6e:d0:33:59:1f:8d:02:05:3e:e8:f0:9f:eb: 16:64:18:96:db:d6:57:b1:16:a5:43:f6:8c:0b:78:9c:18:ca: 5d:88:79:35:77:82:a8:f2:51:ee:ae:da:0d:4d:16:ef:73:ad: 26:29:c2:c6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJJYQFYgfTmLCPFC1mJjAB3+/KuAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjEzODU4WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BhM2QyYmI3YzM3ZGZhOTJmOGEzNWJlNjhlZDUzZjQwMjI0 ODQzYmQ4NTNhNTMzN2JjMDUzMmQwMzE2YzgzMzJmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5cfjjeZ7Nd9l6F4cvwOiEbX0V9GhduxXDeIgc3w+cF9TF quX7x22TVwJgD0MCCnzfrztU64zUmfihi3Vrzm3YGWcynmOD5H96PyxNr/RHW3z5 bYhIpaj1Z3RAfJMGD3AfBq3ZEFHTk86Rw8Le49T0WCaEEvEA7M7z6KSPx42yXh5D GnRnUnpuRoD8zT3CdFmLklpSVljZXzMmJqbzJO1zTYSi6rBl0uUfA7zhA/renyhh VPC/s8xNKimvhlPmtDvIPCEUDwdpqGQoYUPkefD+mX8lge+cc6SolT6iKM8EplcT 4+EBnTkJwOB8kRWSrXFVp/vDF6yab0JhbyK4nHmRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUOi9nr+/6Pu2fBFN0orASRKfERCIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzUxNDc1MGU4LWU0MjctNDhlOC1iYWZhLTYxMzVkZDRiYzkxNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAS7vMwDQYJKoZIhvcNAQELBQADggEBAF9MDIzZ6CUR0zbXj5e49xbHTmW8 NvIbcAGQWxj55KNOm1/mow7Ek9c4GQKrYgICdFbKSs5vCaTQ55isCfgj70alH/Sv PKp/Tsl6+KtzWXLY/qY4/yshWorLNQp2NIOXR4A6pwaZ4tSChmSrVUzK+CkUVwnV E9S3dwgiR6LybusdSEeH6SMTwXKRiZsWBwDbdVxB02oUuXSRaj0lecBV7rbEKq+f 86044TSCYFaJ43ChT3F7j711LYVeVecDM3ayE+gtmsYhiaeMSXDgbtAzWR+NAgU+ 6PCf6xZkGJbb1lexFqVD9owLeJwYyl2IeTV3gqjyUe6u2g1NFu9zrSYpwsY= -----END CERTIFICATE-----Generated at Sat Oct 18 02:37:55 2025 by rpki-client