$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5e5c282f-1bc9-4534-b081-a5f45378874d.roa File: 5e5c282f-1bc9-4534-b081-a5f45378874d.roa (raw, json) Hash identifier: 0ZEOBbovgS4aeD7Y2pO2Qs8BEaGTNL/Z84PJ0yIx7CU= Subject key identifier: 2B:F8:62:4B:5D:C8:AB:5D:A3:7E:05:04:9D:E6:DD:35:39:2A:EA:10 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 79B79A79BA1911A0C3FD03184FD377C978DD1461 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5e5c282f-1bc9-4534-b081-a5f45378874d.roa Signing time: Mon 22 Sep 2025 20:08:54 +0000 ROA not before: Mon 22 Sep 2025 20:08:54 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.164.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:b7:9a:79:ba:19:11:a0:c3:fd:03:18:4f:d3:77:c9:78:dd:14:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 20:08:54 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=3dd09a7d6a34e3b45cce68b2f730e826512504d17ba7b6f26c705c3959c0b76c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4f:63:5d:58:eb:44:71:54:c4:d8:9f:bd:38: 61:e9:32:bc:d2:5c:31:bf:7b:c5:4b:2e:ee:8d:fe: 0c:7a:36:79:13:36:34:c3:0d:99:de:d9:11:a9:82: b6:28:f5:69:51:0c:21:f3:fd:30:a3:44:90:22:92: a9:93:3d:f6:c4:f6:70:bc:f6:11:60:0a:b2:17:08: 8d:07:85:32:34:02:61:6f:96:30:07:46:bf:f3:2d: 4a:ee:ec:ca:60:77:ee:ac:dc:1e:61:30:60:84:5c: 1c:61:eb:27:01:f9:ce:cb:0d:b7:64:48:c3:fa:a5: 85:c8:d9:56:e2:c3:91:01:aa:6b:a1:4e:0c:6c:56: dc:08:bf:48:81:9b:c8:a2:2f:43:b2:14:aa:69:de: 89:0d:8f:c6:a5:e7:67:f4:05:3b:0d:09:f9:e1:6e: 88:ae:5b:67:40:0a:65:3a:1a:ab:fd:64:57:7b:00: 8e:a6:1c:c7:7c:b4:8d:7c:a2:72:9e:09:1a:9c:99: c9:bb:78:33:c4:08:06:5d:84:08:fc:9a:b0:8c:8e: ed:2e:59:38:46:8a:d4:ab:c0:3a:f2:bc:7b:cf:17: 87:6b:ed:79:d8:7b:4c:18:87:86:3b:80:a0:b6:51: 45:38:0e:5a:95:e9:eb:2f:09:68:44:02:5c:81:21: cd:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:F8:62:4B:5D:C8:AB:5D:A3:7E:05:04:9D:E6:DD:35:39:2A:EA:10 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5e5c282f-1bc9-4534-b081-a5f45378874d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.164.244.0/22 Signature Algorithm: sha256WithRSAEncryption 23:b7:8a:48:05:31:61:85:91:e8:88:fb:9d:7f:8e:e1:7a:5c: 9f:eb:a3:76:6b:ea:8b:8f:71:dd:12:2f:dd:cd:0b:9a:48:b1: 26:a0:60:ef:cf:71:8f:ba:f2:4b:4a:4f:64:cd:6d:c4:7d:19: df:59:fc:65:0b:af:4b:c7:2a:40:27:c3:02:79:50:fe:08:f7: fb:e7:50:90:10:ed:07:61:b2:f5:45:e7:b4:32:e0:bc:cb:02: bd:5c:e5:42:f3:8c:4d:c1:81:8d:59:ff:9c:58:58:70:cd:d3: 4e:1f:6c:bf:63:6a:af:b8:b6:d8:0e:8c:73:58:b7:c1:55:d1: 01:28:e0:9e:86:69:b7:af:8f:27:bd:22:48:f1:a3:25:7f:bc: b8:31:0e:a6:eb:8a:ae:8a:79:bf:0b:78:2e:82:e1:fc:fd:2a: 66:ef:b2:26:55:81:a3:cc:46:40:1d:20:d4:e1:f8:38:6f:b2: d8:3f:cf:c0:05:fd:f8:e4:83:31:c3:dc:d4:13:08:d6:fb:cf: 0d:a6:4b:2c:cd:b8:d4:8b:6e:15:d7:08:4d:de:7b:0a:e6:80: af:3c:03:16:bd:f5:7f:bd:46:96:30:b2:dc:31:98:33:19:5d: 6c:04:2b:03:68:17:58:c1:f0:37:9c:1f:de:07:a4:b5:e6:30: 8d:d9:c4:e5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUebeaeboZEaDD/QMYT9N3yXjdFGEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjAwODU0WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AzZGQwOWE3ZDZhMzRlM2I0NWNjZTY4YjJmNzMwZTgyNjUx MjUwNGQxN2JhN2I2ZjI2YzcwNWMzOTU5YzBiNzZjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDAT2NdWOtEcVTE2J+9OGHpMrzSXDG/e8VLLu6N/gx6NnkT NjTDDZne2RGpgrYo9WlRDCHz/TCjRJAikqmTPfbE9nC89hFgCrIXCI0HhTI0AmFv ljAHRr/zLUru7Mpgd+6s3B5hMGCEXBxh6ycB+c7LDbdkSMP6pYXI2Vbiw5EBqmuh TgxsVtwIv0iBm8iiL0OyFKpp3okNj8al52f0BTsNCfnhboiuW2dACmU6Gqv9ZFd7 AI6mHMd8tI18onKeCRqcmcm7eDPECAZdhAj8mrCMju0uWThGitSrwDryvHvPF4dr 7XnYe0wYh4Y7gKC2UUU4DlqV6esvCWhEAlyBIc3DAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUK/hiS13Iq12jfgUEnebdNTkq6hAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzVlNWMyODJmLTFiYzktNDUzNC1iMDgxLWE1ZjQ1Mzc4ODc0ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAISpPQwDQYJKoZIhvcNAQELBQADggEBACO3ikgFMWGFkeiI+51/juF6XJ/r o3Zr6ouPcd0SL93NC5pIsSagYO/PcY+68ktKT2TNbcR9Gd9Z/GULr0vHKkAnwwJ5 UP4I9/vnUJAQ7QdhsvVF57Qy4LzLAr1c5ULzjE3BgY1Z/5xYWHDN004fbL9jaq+4 ttgOjHNYt8FV0QEo4J6Gabevjye9IkjxoyV/vLgxDqbriq6Keb8LeC6C4fz9Kmbv siZVgaPMRkAdINTh+Dhvstg/z8AF/fjkgzHD3NQTCNb7zw2mSyzNuNSLbhXXCE3e ewrmgK88Axa99X+9RpYwstwxmDMZXWwEKwNoF1jB8DecH94HpLXmMI3ZxOU= -----END CERTIFICATE-----Generated at Fri Oct 17 23:50:31 2025 by rpki-client