$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/59d3bc98-9281-4f8a-b92d-d608081873ca.roa File: 59d3bc98-9281-4f8a-b92d-d608081873ca.roa (raw, json) Hash identifier: aYAEohPrazHO2FIDEu/5uEwz6FxD1GK9/g39hf32w3g= Subject key identifier: AC:04:69:5E:9E:D5:56:54:4A:D3:D7:C9:35:1F:C9:1E:8A:B1:59:F5 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 17A5B857F70517AC5521D59BD5734D62D4FFA13B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/59d3bc98-9281-4f8a-b92d-d608081873ca.roa Signing time: Mon 22 Sep 2025 22:06:47 +0000 ROA not before: Mon 22 Sep 2025 22:06:47 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.238.66.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:a5:b8:57:f7:05:17:ac:55:21:d5:9b:d5:73:4d:62:d4:ff:a1:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 22:06:47 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=ae615cf950af206061e69e150bef8cb0c8b15629eff5140b7daf2c2d920527cd, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:de:90:40:70:56:d1:30:b5:3f:9f:44:5b:79: fb:72:e4:62:3f:a5:9f:cf:7f:32:4d:38:91:54:fc: 3a:5d:32:15:4d:02:63:f7:95:71:92:70:c0:46:e4: dc:a5:20:ac:2c:e2:30:0c:11:c7:da:dd:da:6f:42: 1b:2e:18:0b:4a:0b:0d:25:08:33:6a:bf:f9:bf:1c: a9:be:ce:8a:35:41:f9:76:4e:af:09:d0:f8:a0:2f: 5a:15:80:a0:a8:01:d4:a3:43:05:1b:40:2f:0e:d7: 47:c0:06:68:e7:b1:34:24:48:06:6c:b8:85:04:a2: 0d:1c:93:f5:5e:3b:86:8b:5e:ab:a0:b1:58:38:e7: 6f:ae:ed:16:1d:c4:12:3e:19:5f:81:c8:0d:31:42: 92:9d:dc:a6:8c:98:7a:58:08:87:ad:c5:5e:09:6d: 4f:80:44:a2:1c:65:dc:29:c8:70:99:e9:24:3e:a0: 4e:2f:72:98:10:9d:1e:aa:94:e7:d2:57:00:79:43: e6:e7:73:0f:14:92:b9:33:44:bd:0c:dd:84:e1:7b: 2a:03:13:39:99:46:4b:fd:6c:eb:24:3a:9c:ce:9b: ff:31:23:42:31:22:28:fd:ef:8d:ba:b8:3d:ca:db: ce:0b:72:f3:8e:b0:b9:c7:3e:8f:ff:84:2b:23:52: ae:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:04:69:5E:9E:D5:56:54:4A:D3:D7:C9:35:1F:C9:1E:8A:B1:59:F5 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/59d3bc98-9281-4f8a-b92d-d608081873ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.238.66.0/23 Signature Algorithm: sha256WithRSAEncryption 01:23:8c:33:e4:d6:a7:41:5e:94:cc:6f:da:16:47:a9:9f:89: 49:1d:5b:63:a5:02:ec:b7:a0:35:36:1f:9e:51:7a:eb:32:12: 72:fb:73:b3:16:32:57:b3:e8:6c:a1:bf:13:d9:65:a9:66:f8: d9:48:de:a0:55:8d:c1:cc:b6:39:d5:70:97:e4:eb:04:9b:25: 86:c3:e4:99:f8:45:a5:ea:c7:2d:78:47:9d:c7:8a:51:25:6e: 61:87:a9:41:64:cd:6e:ef:32:b1:4e:5e:a6:b3:7b:78:e2:79: 71:fc:a8:3a:d6:37:3f:5a:e5:f5:02:49:37:2b:fd:ee:47:96: 48:62:21:12:da:61:6e:d7:63:ce:8d:fd:b1:7c:4f:8b:8f:b6: b5:54:61:46:f4:59:ae:0f:3f:7f:85:73:36:cc:38:bc:7a:e7: 24:7d:bf:0b:fe:49:0c:1a:e2:ea:77:fe:3d:3c:fd:75:61:b9: be:f0:5f:0d:a5:b7:45:58:4c:7c:ec:35:1e:55:2a:66:61:7f: c3:87:2e:2e:92:f0:26:95:37:2c:36:d6:46:4f:bb:36:c4:e5: d0:82:ec:b3:92:9b:41:b4:ae:75:59:91:62:c9:96:eb:e3:44: 47:4e:ef:1f:75:78:bb:0c:17:20:77:70:6a:57:db:31:a0:b1: 80:01:ec:b4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUF6W4V/cFF6xVIdWb1XNNYtT/oTswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjIwNjQ3WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BhZTYxNWNmOTUwYWYyMDYwNjFlNjllMTUwYmVmOGNiMGM4 YjE1NjI5ZWZmNTE0MGI3ZGFmMmMyZDkyMDUyN2NkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC33pBAcFbRMLU/n0Rbefty5GI/pZ/PfzJNOJFU/DpdMhVN AmP3lXGScMBG5NylIKws4jAMEcfa3dpvQhsuGAtKCw0lCDNqv/m/HKm+zoo1Qfl2 Tq8J0PigL1oVgKCoAdSjQwUbQC8O10fABmjnsTQkSAZsuIUEog0ck/VeO4aLXqug sVg452+u7RYdxBI+GV+ByA0xQpKd3KaMmHpYCIetxV4JbU+ARKIcZdwpyHCZ6SQ+ oE4vcpgQnR6qlOfSVwB5Q+bncw8UkrkzRL0M3YTheyoDEzmZRkv9bOskOpzOm/8x I0IxIij97426uD3K284LcvOOsLnHPo//hCsjUq7FAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUrARpXp7VVlRK09fJNR/JHoqxWfUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzU5ZDNiYzk4LTkyODEtNGY4YS1iOTJkLWQ2MDgwODE4NzNjYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAES7kIwDQYJKoZIhvcNAQELBQADggEBAAEjjDPk1qdBXpTMb9oWR6mfiUkd W2OlAuy3oDU2H55ReusyEnL7c7MWMlez6GyhvxPZZalm+NlI3qBVjcHMtjnVcJfk 6wSbJYbD5Jn4RaXqxy14R53HilElbmGHqUFkzW7vMrFOXqaze3jieXH8qDrWNz9a 5fUCSTcr/e5HlkhiIRLaYW7XY86N/bF8T4uPtrVUYUb0Wa4PP3+FczbMOLx65yR9 vwv+SQwa4up3/j08/XVhub7wXw2lt0VYTHzsNR5VKmZhf8OHLi6S8CaVNyw21kZP uzbE5dCC7LOSm0G0rnVZkWLJluvjREdO7x91eLsMFyB3cGpX2zGgsYAB7LQ= -----END CERTIFICATE-----Generated at Fri Oct 17 22:05:35 2025 by rpki-client