$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5cd124aa-916e-4eb6-ab0f-bd8029002f67.roa File: 5cd124aa-916e-4eb6-ab0f-bd8029002f67.roa (raw, json) Hash identifier: PLYSfGhOwnW9T4mCLbd3huJwq/0xTFh4j6pN4X23WJM= Subject key identifier: 29:0E:05:31:C5:81:D6:F9:E4:23:82:F0:99:9B:FF:AB:52:CD:F4:3A Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4F8C4909ED5C7D12C2C2536D4282A8175A530112 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5cd124aa-916e-4eb6-ab0f-bd8029002f67.roa Signing time: Wed 24 Sep 2025 23:14:24 +0000 ROA not before: Wed 24 Sep 2025 23:14:24 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.67.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:8c:49:09:ed:5c:7d:12:c2:c2:53:6d:42:82:a8:17:5a:53:01:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 23:14:24 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=afb828ca9b1f56e5a1377c22f9d2ff7028bbb0e6fc16eb0afb214591e3e72270, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:3c:95:9b:94:77:a5:c9:db:5e:da:55:b7:bb: ac:46:40:3b:9a:7d:fe:2f:d6:d1:41:4a:06:71:2d: b2:c2:e2:2d:c7:be:2a:c2:86:90:20:09:a7:71:ea: dc:04:8b:f8:f7:3f:6c:1c:0e:dd:41:aa:06:6b:2e: 07:93:2c:d9:77:94:80:7c:a6:2f:33:62:e0:16:ac: 0b:59:85:b3:d1:75:1a:55:b8:9c:3e:12:02:cf:29: 00:0f:a0:59:ea:8f:41:15:31:67:c0:c1:2d:06:fd: 2c:dc:1f:80:38:45:6a:d8:9a:03:33:da:c8:78:ff: 98:94:54:2f:d8:c3:f8:72:5b:0f:5b:04:e9:54:ae: e3:cf:63:8d:30:ec:6c:e4:16:1a:75:67:05:1d:b3: f4:72:88:e4:33:c1:4a:c9:dd:8c:92:6f:ca:79:0d: 5e:60:5d:ab:a9:79:76:a7:73:ea:8e:fc:f2:d8:6d: f0:9d:55:53:a2:d1:4a:b7:e2:0f:56:28:99:9c:7b: 81:90:53:19:bb:ac:06:55:79:72:29:00:61:78:b9: e5:39:df:4a:b5:81:62:b8:98:39:09:41:43:52:98: ad:13:bf:0d:b3:68:d7:9b:08:4e:db:97:1d:83:4f: 79:e2:ed:dd:70:53:39:71:18:f6:f1:53:51:8b:2d: 69:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:0E:05:31:C5:81:D6:F9:E4:23:82:F0:99:9B:FF:AB:52:CD:F4:3A X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5cd124aa-916e-4eb6-ab0f-bd8029002f67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.67.160.0/19 Signature Algorithm: sha256WithRSAEncryption 3c:19:a0:f0:67:20:52:13:0d:90:6e:70:91:f3:f3:0a:a9:c2: 16:ce:b3:3a:35:99:52:d4:17:a9:74:4f:ab:94:c2:66:2b:aa: eb:5d:3e:d3:be:39:67:35:fc:80:10:f9:b1:4f:11:8e:2e:51: 25:f2:91:08:23:da:1f:38:b8:c3:33:79:14:c0:35:36:ff:4f: c8:29:5e:8e:8c:9e:a3:96:db:97:47:14:13:fd:66:4d:2b:99: 7f:f8:fe:46:9d:9a:1a:62:7a:00:65:05:f3:fc:13:1b:bd:10: 39:ba:64:4c:f2:08:de:ea:1a:bc:00:19:b3:d5:2c:f6:4f:f5: bc:13:c6:90:43:a1:0e:a9:46:e1:b7:6d:bb:19:80:3c:5b:ae: ea:eb:82:bb:0a:bb:97:b7:52:73:e8:91:f5:ff:8b:05:2c:91: f1:c7:a0:a9:98:9c:d9:9f:8d:7e:01:1a:11:1a:bc:2e:3a:45: 4f:67:6c:7e:fd:a8:48:f4:51:2b:4c:19:ee:7a:2f:5f:6f:82: b0:3b:f4:25:65:be:59:c7:f6:6f:71:35:08:0d:d3:65:7f:29: e6:eb:1a:de:73:50:83:e9:8b:74:df:f1:74:ae:b9:48:72:87: cb:1e:c7:04:b3:03:02:7b:0a:a9:63:78:62:75:3f:97:a6:f9: df:8b:b2:07 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUT4xJCe1cfRLCwlNtQoKoF1pTARIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MjMxNDI0WhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BhZmI4MjhjYTliMWY1NmU1YTEzNzdjMjJmOWQyZmY3MDI4 YmJiMGU2ZmMxNmViMGFmYjIxNDU5MWUzZTcyMjcwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCMPJWblHelydte2lW3u6xGQDuaff4v1tFBSgZxLbLC4i3H virChpAgCadx6twEi/j3P2wcDt1BqgZrLgeTLNl3lIB8pi8zYuAWrAtZhbPRdRpV uJw+EgLPKQAPoFnqj0EVMWfAwS0G/SzcH4A4RWrYmgMz2sh4/5iUVC/Yw/hyWw9b BOlUruPPY40w7GzkFhp1ZwUds/RyiOQzwUrJ3YySb8p5DV5gXaupeXanc+qO/PLY bfCdVVOi0Uq34g9WKJmce4GQUxm7rAZVeXIpAGF4ueU530q1gWK4mDkJQUNSmK0T vw2zaNebCE7blx2DT3ni7d1wUzlxGPbxU1GLLWkBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUKQ4FMcWB1vnkI4LwmZv/q1LN9DowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzVjZDEyNGFhLTkxNmUtNGViNi1hYjBmLWJkODAyOTAwMmY2Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUSQ6AwDQYJKoZIhvcNAQELBQADggEBADwZoPBnIFITDZBucJHz8wqpwhbO szo1mVLUF6l0T6uUwmYrqutdPtO+OWc1/IAQ+bFPEY4uUSXykQgj2h84uMMzeRTA NTb/T8gpXo6MnqOW25dHFBP9Zk0rmX/4/kadmhpiegBlBfP8Exu9EDm6ZEzyCN7q GrwAGbPVLPZP9bwTxpBDoQ6pRuG3bbsZgDxbrurrgrsKu5e3UnPokfX/iwUskfHH oKmYnNmfjX4BGhEavC46RU9nbH79qEj0UStMGe56L19vgrA79CVlvlnH9m9xNQgN 02V/KebrGt5zUIPpi3Tf8XSuuUhyh8sexwSzAwJ7CqljeGJ1P5em+d+Lsgc= -----END CERTIFICATE-----Generated at Fri Oct 17 21:57:14 2025 by rpki-client