$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/547067c3-cc3d-4459-9927-5b75a61b5b48.roa File: 547067c3-cc3d-4459-9927-5b75a61b5b48.roa (raw, json) Hash identifier: 5caRZGkWaCH6M3D2m7mA23Tl9DaiAsFtqOW5HiYit+E= Subject key identifier: FA:FD:FB:BD:D1:1E:4E:7F:EB:E5:3D:35:9F:EC:FD:BA:1B:1C:20:75 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 515D4FD439398CD43997F4EDADE3EBCE6FC9D877 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/547067c3-cc3d-4459-9927-5b75a61b5b48.roa Signing time: Mon 22 Sep 2025 17:27:59 +0000 ROA not before: Mon 22 Sep 2025 17:27:59 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.155.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:5d:4f:d4:39:39:8c:d4:39:97:f4:ed:ad:e3:eb:ce:6f:c9:d8:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 17:27:59 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=de033962d5ffe9cf1b742c4aff9f55b5a9dedd499349ceab8db958901a201b04, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:0c:43:0f:ca:05:f4:33:7d:6c:d7:aa:a8:6c: 35:01:4e:3e:d3:6f:b7:76:f0:c2:57:fa:6c:d3:46: e5:db:a9:b2:33:81:9a:e5:78:cf:2d:87:67:ac:5e: 6b:f0:1c:be:42:0c:e0:5e:e2:06:b0:eb:bd:1e:5f: 18:04:d5:60:13:03:dd:5e:a5:ad:41:16:e9:cc:48: 89:aa:7d:c2:85:6f:1c:d2:ba:56:fb:77:54:05:e5: c2:62:be:c9:72:a5:6c:32:57:c9:3c:02:37:62:52: 2e:a8:cb:ee:db:39:c7:0f:ce:ac:d3:90:8a:72:7c: 7d:d4:e0:af:dd:0e:a7:dd:02:80:3d:94:8e:5a:d6: eb:19:ce:ea:2b:35:8c:33:9c:83:d0:2b:5c:d7:db: 62:ba:17:5c:2c:d1:17:93:49:fd:ec:9f:73:01:62: 91:1c:c8:43:19:87:f4:da:c0:2c:9a:c3:7b:24:f2: 93:3f:f8:e7:65:50:fe:6e:6e:c0:fa:15:7c:fe:e2: e6:52:8a:b7:79:19:ae:56:88:3e:f7:b8:c8:66:d0: 18:b1:cf:87:2e:ab:e2:9e:9d:5f:61:70:bd:8d:61: 36:79:8d:0a:f0:eb:e1:63:39:53:ae:d5:bd:97:cc: 9b:dc:a4:db:b9:71:bf:24:77:45:f5:1a:53:85:ec: 4d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:FD:FB:BD:D1:1E:4E:7F:EB:E5:3D:35:9F:EC:FD:BA:1B:1C:20:75 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/547067c3-cc3d-4459-9927-5b75a61b5b48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.155.180.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:60:43:51:36:07:c9:b7:8e:e9:4f:6f:57:f9:16:e3:e6:64: 26:ce:b6:c6:1b:67:d9:36:9b:a0:e0:f2:0c:f8:7a:ad:cd:fa: 6e:4c:e6:7b:d4:70:3c:dd:c6:6b:a8:df:b5:a7:61:e5:27:be: ce:3e:60:ee:9d:65:12:74:ae:a4:ce:e0:c5:96:03:e6:a2:c3: 42:10:3e:a3:12:96:11:9b:61:ee:3b:66:c0:9f:d1:b6:b6:b6: e9:db:a0:88:a0:50:c1:1c:c8:cd:61:01:f1:46:e1:96:dc:21: 0f:13:52:87:10:50:65:19:40:da:59:a7:ed:4a:dc:d8:31:73: 85:81:9e:aa:cd:c6:f9:ed:03:63:72:f8:93:a4:94:48:fa:84: 84:55:31:be:5b:80:71:16:90:cd:e7:da:e5:32:0c:61:fd:e4: 67:26:63:03:a8:bb:29:9b:b2:48:fe:b8:1d:b1:8d:00:b6:f5: 15:15:bc:4a:f3:86:5d:42:0d:16:ba:d4:27:c5:2f:9e:d6:57: 3d:62:b6:b7:97:7b:ff:f4:af:d5:48:45:21:e8:6b:c7:be:8a: ff:dd:1b:57:9d:da:20:d3:ed:b0:ad:2b:a7:a6:e2:c5:dd:db: e6:55:63:89:ec:3b:fd:a9:11:9a:11:77:07:e3:a4:f9:28:20: 73:9d:47:52 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUV1P1Dk5jNQ5l/TtrePrzm/J2HcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMTcyNzU5WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BkZTAzMzk2MmQ1ZmZlOWNmMWI3NDJjNGFmZjlmNTViNWE5 ZGVkZDQ5OTM0OWNlYWI4ZGI5NTg5MDFhMjAxYjA0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDbDEMPygX0M31s16qobDUBTj7Tb7d28MJX+mzTRuXbqbIz gZrleM8th2esXmvwHL5CDOBe4gaw670eXxgE1WATA91epa1BFunMSImqfcKFbxzS ulb7d1QF5cJivslypWwyV8k8AjdiUi6oy+7bOccPzqzTkIpyfH3U4K/dDqfdAoA9 lI5a1usZzuorNYwznIPQK1zX22K6F1ws0ReTSf3sn3MBYpEcyEMZh/TawCyaw3sk 8pM/+OdlUP5ubsD6FXz+4uZSird5Ga5WiD73uMhm0Bixz4cuq+KenV9hcL2NYTZ5 jQrw6+FjOVOu1b2XzJvcpNu5cb8kd0X1GlOF7E2FAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU+v37vdEeTn/r5T01n+z9uhscIHUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzU0NzA2N2MzLWNjM2QtNDQ1OS05OTI3LTViNzVhNjFiNWI0OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASm7QwDQYJKoZIhvcNAQELBQADggEBAE1gQ1E2B8m3julPb1f5FuPmZCbO tsYbZ9k2m6Dg8gz4eq3N+m5M5nvUcDzdxmuo37WnYeUnvs4+YO6dZRJ0rqTO4MWW A+aiw0IQPqMSlhGbYe47ZsCf0ba2tunboIigUMEcyM1hAfFG4ZbcIQ8TUocQUGUZ QNpZp+1K3Ngxc4WBnqrNxvntA2Ny+JOklEj6hIRVMb5bgHEWkM3n2uUyDGH95Gcm YwOouymbskj+uB2xjQC29RUVvErzhl1CDRa61CfFL57WVz1itreXe//0r9VIRSHo a8e+iv/dG1ed2iDT7bCtK6em4sXd2+ZVY4nsO/2pEZoRdwfjpPkoIHOdR1I= -----END CERTIFICATE-----Generated at Sat Oct 18 05:11:45 2025 by rpki-client