$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5d730dc9-9a90-4992-90db-97aa2cb34dc5.roa File: 5d730dc9-9a90-4992-90db-97aa2cb34dc5.roa (raw, json) Hash identifier: 03XN92Fas/Q5igKmL/T2uqj0tRSNih2QTcYOk2vCTmU= Subject key identifier: 37:22:59:D9:3C:DF:23:F2:A3:80:0D:14:BB:C3:4E:82:C5:7D:DC:3E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3F5400EE5441F0AC17D57A7B3E61D110C13629C0 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5d730dc9-9a90-4992-90db-97aa2cb34dc5.roa Signing time: Fri 26 Sep 2025 02:55:12 +0000 ROA not before: Fri 26 Sep 2025 02:55:12 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.239.208.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:54:00:ee:54:41:f0:ac:17:d5:7a:7b:3e:61:d1:10:c1:36:29:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 02:55:12 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=443293610b73cb8dd49a9249d5fa87a273e0cee0e84d81c92a7f31e055b77b23, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:08:ab:ea:05:ae:9a:eb:63:fc:2f:ae:08:42: 4b:8b:17:a7:68:72:f4:0c:e8:10:cc:93:7f:5b:fd: 99:63:44:ae:85:1c:c5:c2:ff:c4:e6:1e:49:1a:61: 1d:b3:80:59:22:7f:99:1b:02:fb:f5:35:a2:11:b9: b7:3d:9f:d9:82:37:36:18:69:97:8d:11:28:78:20: bd:ff:c9:c5:09:f3:e3:43:42:ac:b5:45:3d:7a:2c: cc:db:f4:4d:7c:fc:b4:57:7a:49:89:76:5c:b6:ea: ae:d6:c5:ee:9b:af:ed:5b:ce:7d:30:40:00:e0:16: 2a:55:cd:20:ed:ab:b2:91:a5:90:43:b9:8b:4d:d7: 1c:71:57:d4:c0:31:88:6d:67:da:ec:db:a5:f7:d9: 3d:43:41:49:7d:65:89:7c:e7:10:32:40:03:02:ce: 2f:71:68:05:61:0b:81:0a:96:cf:5f:98:5e:ba:b9: bd:0c:1a:24:44:d9:21:7c:7a:2b:e7:d5:cb:26:81: de:a6:a5:7a:3e:44:64:2a:87:24:8d:c0:32:1c:f3: bc:b0:eb:0f:7b:f2:0e:60:9f:b3:de:bb:1f:6e:e1: 68:53:85:e9:29:dc:a5:90:54:61:59:07:83:06:a9: 04:be:43:c4:3b:76:b5:7b:22:ed:8f:44:3a:5f:98: 57:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:22:59:D9:3C:DF:23:F2:A3:80:0D:14:BB:C3:4E:82:C5:7D:DC:3E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5d730dc9-9a90-4992-90db-97aa2cb34dc5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.239.208.0/23 Signature Algorithm: sha256WithRSAEncryption 85:f4:9d:08:11:b5:f1:d0:11:5a:47:73:e4:df:7c:b2:07:fb: 85:7d:fb:78:d6:2a:28:5d:45:b2:73:65:9c:96:7f:55:96:67: dc:a9:e7:cb:7a:69:69:b4:12:96:6c:52:a0:91:a2:af:72:0c: bf:f3:aa:ea:0f:1a:f6:e8:50:d9:48:9d:26:b3:3e:e0:2d:1a: dd:5e:8b:3d:b0:b6:db:9b:96:23:5f:08:9a:2b:3d:34:c9:f4: 6d:82:fe:15:69:33:d8:1c:d5:c3:cf:cf:e3:9c:e3:b0:ad:14: b5:0f:d6:d7:c9:90:2e:38:ec:31:ca:0a:17:26:9d:1b:2a:4f: ff:66:2d:1f:b6:3f:ee:53:67:1c:83:c9:ab:04:46:b9:82:f8: 7c:80:3f:b7:b0:3e:28:61:ec:8b:18:1c:61:a2:23:56:a7:bc: f0:b6:a4:47:2e:81:c4:c7:d8:be:86:83:f0:98:b2:a3:eb:62: 28:2f:fc:6a:32:7a:9e:4f:a8:96:0d:af:22:42:f9:b4:b2:df: c7:cb:11:77:72:9c:d4:4a:9c:e5:c6:bc:79:02:ab:73:56:6a: bd:60:1d:b7:5b:38:bb:89:57:91:07:58:a1:d3:55:64:46:21: 5d:4a:72:d0:ed:62:2e:1b:43:ab:ee:aa:84:0c:b5:f5:ec:35: 4e:12:98:49 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUP1QA7lRB8KwX1Xp7PmHREME2KcAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MDI1NTEyWhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A0NDMyOTM2MTBiNzNjYjhkZDQ5YTkyNDlkNWZhODdhMjcz ZTBjZWUwZTg0ZDgxYzkyYTdmMzFlMDU1Yjc3YjIzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCNCKvqBa6a62P8L64IQkuLF6docvQM6BDMk39b/ZljRK6F HMXC/8TmHkkaYR2zgFkif5kbAvv1NaIRubc9n9mCNzYYaZeNESh4IL3/ycUJ8+ND Qqy1RT16LMzb9E18/LRXekmJdly26q7Wxe6br+1bzn0wQADgFipVzSDtq7KRpZBD uYtN1xxxV9TAMYhtZ9rs26X32T1DQUl9ZYl85xAyQAMCzi9xaAVhC4EKls9fmF66 ub0MGiRE2SF8eivn1csmgd6mpXo+RGQqhySNwDIc87yw6w978g5gn7Peux9u4WhT hekp3KWQVGFZB4MGqQS+Q8Q7drV7Iu2PRDpfmFdBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUNyJZ2TzfI/KjgA0Uu8NOgsV93D4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzVkNzMwZGM5LTlhOTAtNDk5Mi05MGRiLTk3YWEyY2IzNGRjNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE279AwDQYJKoZIhvcNAQELBQADggEBAIX0nQgRtfHQEVpHc+TffLIH+4V9 +3jWKihdRbJzZZyWf1WWZ9yp58t6aWm0EpZsUqCRoq9yDL/zquoPGvboUNlInSaz PuAtGt1eiz2wttubliNfCJorPTTJ9G2C/hVpM9gc1cPPz+Oc47CtFLUP1tfJkC44 7DHKChcmnRsqT/9mLR+2P+5TZxyDyasERrmC+HyAP7ewPihh7IsYHGGiI1anvPC2 pEcugcTH2L6Gg/CYsqPrYigv/Goyep5PqJYNryJC+bSy38fLEXdynNRKnOXGvHkC q3NWar1gHbdbOLuJV5EHWKHTVWRGIV1KctDtYi4bQ6vuqoQMtfXsNU4SmEk= -----END CERTIFICATE-----Generated at Fri Oct 17 22:03:09 2025 by rpki-client