$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5a620a26-d1b7-45a3-b60a-a1b3159fc175.roa File: 5a620a26-d1b7-45a3-b60a-a1b3159fc175.roa (raw, json) Hash identifier: 5TSYW1rDUYu+6yJMnDglPLVqdAIHNgRMHHzot3nNbkM= Subject key identifier: D0:B7:C8:7C:A3:C2:77:10:1C:47:F1:7B:82:70:39:20:92:AC:29:FD Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 24A1697B5569648E171232D2764CE59C43BEFCA2 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5a620a26-d1b7-45a3-b60a-a1b3159fc175.roa Signing time: Thu 23 Oct 2025 17:23:46 +0000 ROA not before: Thu 23 Oct 2025 17:23:46 +0000 ROA not after: Thu 27 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.154.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:a1:69:7b:55:69:64:8e:17:12:32:d2:76:4c:e5:9c:43:be:fc:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 23 17:23:46 2025 GMT Not After : Nov 27 23:59:59 2025 GMT Subject: serialNumber=36951127c3ed3c0487073c0ff8dac55688ea8c275d0558df3bf850190bcd513c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:4c:52:5c:d8:82:fe:8f:de:7b:e1:f2:b6:a6: 62:67:a9:68:d2:f4:c0:21:74:d8:77:c6:2c:67:37: 86:35:5b:43:15:59:1c:a6:ac:aa:f9:f9:9d:2e:2b: 89:a7:8d:dd:a1:fe:fd:9c:38:2c:de:22:1e:86:a3: 10:4a:01:b3:ed:b1:7b:c3:25:a6:cd:38:a9:6d:a3: a5:c6:79:a0:61:76:a8:99:eb:cc:39:19:ea:63:a9: 61:6c:70:82:93:7a:55:1f:9d:7f:87:25:83:5c:57: 58:a0:f5:42:29:71:74:1d:fd:3d:5c:f7:db:56:bd: a2:f9:71:89:1d:16:98:2c:cd:df:d5:e2:ae:70:80: 9a:74:ac:d1:64:1c:24:0a:76:1a:c6:0d:2b:f1:7e: 95:cb:8d:7d:92:15:2c:64:08:92:03:7d:c9:21:74: 8a:d7:d7:81:ee:dc:35:12:3a:2d:d9:93:a9:f2:03: 6c:fd:24:9f:c5:d2:2d:63:70:a6:3b:94:5e:41:17: 5f:d2:d8:a6:a2:1c:5d:ab:79:47:af:2c:33:e7:52: 8b:bc:37:ea:ac:25:df:69:38:c4:3b:43:52:34:eb: 56:35:f1:12:e0:e8:9c:2e:99:a5:54:e0:f1:9a:36: 23:38:22:7d:44:51:27:40:54:f4:c1:9e:03:1e:b0: 24:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:B7:C8:7C:A3:C2:77:10:1C:47:F1:7B:82:70:39:20:92:AC:29:FD X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5a620a26-d1b7-45a3-b60a-a1b3159fc175.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.154.0.0/15 Signature Algorithm: sha256WithRSAEncryption 48:da:73:ba:8c:2f:ac:8d:50:4b:18:1d:32:a3:df:d8:17:19: a6:e7:4b:5a:39:30:be:38:18:3d:c0:63:bf:d4:a7:62:d1:1e: f9:5c:79:53:da:c1:49:fc:0b:a9:6a:a4:8e:55:74:b5:bb:9a: 77:c7:8e:b2:d6:ca:4d:be:f1:79:58:bf:cf:07:bf:df:40:5c: 52:57:f2:3a:95:78:bf:4c:55:f0:51:25:28:77:32:ed:ec:e7: bd:6b:ee:46:fc:fb:c2:92:74:67:8b:fc:52:2f:e1:fb:d0:3c: 60:27:45:37:0c:db:67:18:e3:d2:08:15:57:c2:5a:a9:e8:4f: ea:71:d3:3b:db:a9:33:89:d1:6c:12:ee:cc:d6:6d:53:dd:c4: 6b:6a:cf:09:11:69:3d:44:77:7c:92:10:b5:28:37:a2:35:02: a8:65:a4:d0:1e:06:a8:db:45:1e:44:50:a1:f7:5a:d6:d4:07: e6:0f:34:6d:c2:8d:ea:d8:59:fd:2e:5e:62:4e:ae:47:f7:2f: f3:28:7c:aa:30:b0:ec:c9:37:39:95:ae:f9:b9:7c:2b:63:fa: 4f:9a:eb:50:bd:1d:55:3b:0d:c8:4d:2f:09:ad:b3:44:e1:49: 0b:f2:6c:dd:8a:b7:9f:c3:98:ae:eb:bc:90:4f:c1:f2:ee:52: d7:69:ca:25 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUJKFpe1VpZI4XEjLSdkzlnEO+/KIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDIzMTcyMzQ2WhcNMjUxMTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AzNjk1MTEyN2MzZWQzYzA0ODcwNzNjMGZmOGRhYzU1Njg4 ZWE4YzI3NWQwNTU4ZGYzYmY4NTAxOTBiY2Q1MTNjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDuTFJc2IL+j9574fK2pmJnqWjS9MAhdNh3xixnN4Y1W0MV WRymrKr5+Z0uK4mnjd2h/v2cOCzeIh6GoxBKAbPtsXvDJabNOKlto6XGeaBhdqiZ 68w5GepjqWFscIKTelUfnX+HJYNcV1ig9UIpcXQd/T1c99tWvaL5cYkdFpgszd/V 4q5wgJp0rNFkHCQKdhrGDSvxfpXLjX2SFSxkCJIDfckhdIrX14Hu3DUSOi3Zk6ny A2z9JJ/F0i1jcKY7lF5BF1/S2KaiHF2reUevLDPnUou8N+qsJd9pOMQ7Q1I061Y1 8RLg6JwumaVU4PGaNiM4In1EUSdAVPTBngMesCRhAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU0LfIfKPCdxAcR/F7gnA5IJKsKf0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzVhNjIwYTI2LWQxYjctNDVhMy1iNjBhLWExYjMxNTlmYzE3NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwESmjANBgkqhkiG9w0BAQsFAAOCAQEASNpzuowvrI1QSxgdMqPf2BcZpudL WjkwvjgYPcBjv9SnYtEe+Vx5U9rBSfwLqWqkjlV0tbuad8eOstbKTb7xeVi/zwe/ 30BcUlfyOpV4v0xV8FElKHcy7eznvWvuRvz7wpJ0Z4v8Ui/h+9A8YCdFNwzbZxjj 0ggVV8JaqehP6nHTO9upM4nRbBLuzNZtU93Ea2rPCRFpPUR3fJIQtSg3ojUCqGWk 0B4GqNtFHkRQofda1tQH5g80bcKN6thZ/S5eYk6uR/cv8yh8qjCw7Mk3OZWu+bl8 K2P6T5rrUL0dVTsNyE0vCa2zROFJC/Js3Yq3n8OYruu8kE/B8u5S12nKJQ== -----END CERTIFICATE-----Generated at Wed Nov 5 08:42:38 2025 by rpki-client