$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e18a102d-b28e-4f5c-bcf3-44af2c556428.roa File: e18a102d-b28e-4f5c-bcf3-44af2c556428.roa (raw, json) Hash identifier: fnMs9TQ/KbdmBjfbKdE1rYdJe2t6U4gQWLK2hvXgLAA= Subject key identifier: 7A:43:7C:CE:80:D2:D1:27:89:86:AA:9A:8D:5B:2A:B4:6F:0C:0E:95 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 3E39733427CF33A71FEA07361A5AFBF8F1D8DE32 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e18a102d-b28e-4f5c-bcf3-44af2c556428.roa Signing time: Fri 10 Oct 2025 17:04:48 +0000 ROA not before: Fri 10 Oct 2025 17:04:48 +0000 ROA not after: Fri 14 Nov 2025 23:59:59 +0000 asID: 8987 IP address blocks: 173.82.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:39:73:34:27:cf:33:a7:1f:ea:07:36:1a:5a:fb:f8:f1:d8:de:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Oct 10 17:04:48 2025 GMT Not After : Nov 14 23:59:59 2025 GMT Subject: serialNumber=731744737057903ea982c08ab08578dc89058eb0e1324d88e2466b3fc7151c54, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:52:18:57:71:74:7c:33:ca:1f:6b:01:37:96: 53:e4:ad:6e:7a:db:71:90:02:36:d2:33:53:d0:99: fa:bd:12:fc:3d:6b:75:07:a0:ef:0e:4b:99:8a:3e: 49:c4:b9:bc:b5:6a:5a:5d:9b:95:36:1a:8c:72:62: d7:ac:9c:d4:c0:e1:21:2c:b0:a8:90:14:75:c5:f0: f3:f0:13:68:94:be:a3:51:85:ea:bd:be:38:02:a3: 07:ad:cd:1d:19:cb:f6:1e:1a:86:d5:4c:2d:4a:8a: e9:0d:da:06:32:e1:50:6f:9c:6c:42:6a:a7:68:92: 55:1d:43:7a:95:32:bf:56:da:b0:ba:d2:3c:ba:b6: 2c:71:61:c6:eb:ec:96:94:39:d3:46:5c:ca:e3:75: 8c:93:b5:96:89:bc:5f:f9:eb:05:a8:81:d6:f0:64: c1:5c:84:fe:c9:cc:97:86:97:e5:fe:36:23:14:71: 11:77:b0:bb:38:f6:f4:e6:6c:15:8a:fb:05:31:93: 5e:ad:d8:4f:de:95:33:3b:b0:b0:c3:5e:a8:af:ac: 15:ae:9c:a7:8c:96:5b:c9:99:e8:a4:d4:90:5f:85: 3a:ba:b2:8e:29:e1:84:c6:9c:6d:27:82:d9:f6:b5: 2d:83:66:1f:a7:f4:70:50:e9:6b:6f:0d:79:9c:b0: 7f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:43:7C:CE:80:D2:D1:27:89:86:AA:9A:8D:5B:2A:B4:6F:0C:0E:95 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e18a102d-b28e-4f5c-bcf3-44af2c556428.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 173.82.0.0/16 Signature Algorithm: sha256WithRSAEncryption 8e:67:b8:bd:5b:52:94:97:59:30:f3:c4:38:b8:3a:a3:0c:39: 44:36:36:56:c0:44:2c:3a:c1:1f:85:50:6f:d0:80:2f:57:f7: 47:5f:31:02:29:9b:33:bf:f7:88:b5:cf:d8:50:89:84:be:05: d8:17:e4:4d:a6:0a:64:31:5f:32:b1:ca:56:8b:cc:f6:fa:41: a4:08:ed:9c:8e:08:a8:74:0d:fb:c9:e3:a7:00:83:6f:09:94: 75:83:c2:c3:7a:b6:34:f6:78:f7:de:aa:a8:fa:c5:51:70:10: 0f:c9:2c:4a:77:a7:a1:30:af:bc:db:34:1e:3f:ac:cb:98:c0: f5:8d:26:58:23:dd:26:98:0b:6a:25:70:71:8a:42:90:52:69: 92:09:e2:b6:81:f5:a2:8b:5d:46:8b:5e:39:1b:48:f1:44:c6: 1c:8d:ba:ac:ad:ed:29:25:b0:12:16:5c:8a:da:ca:9d:09:c7: 87:d7:a7:74:95:47:e7:45:7c:73:4d:99:10:dd:1c:e7:52:cc: 20:c2:15:55:61:02:aa:cd:9a:af:31:bc:ab:7d:98:5a:c9:16: ef:88:0c:a6:89:02:2b:f3:1a:f3:86:73:7d:10:28:29:a3:01: 02:f0:11:13:74:4a:9e:a9:43:c7:af:9e:69:19:ab:a4:2e:fd: 78:3b:4c:98 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUPjlzNCfPM6cf6gc2Glr7+PHY3jIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUxMDEwMTcwNDQ4WhcNMjUxMTE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A3MzE3NDQ3MzcwNTc5MDNlYTk4MmMwOGFiMDg1NzhkYzg5 MDU4ZWIwZTEzMjRkODhlMjQ2NmIzZmM3MTUxYzU0MS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+UhhXcXR8M8ofawE3llPkrW5623GQAjbSM1PQmfq9Evw9 a3UHoO8OS5mKPknEuby1alpdm5U2GoxyYtesnNTA4SEssKiQFHXF8PPwE2iUvqNR heq9vjgCowetzR0Zy/YeGobVTC1KiukN2gYy4VBvnGxCaqdoklUdQ3qVMr9W2rC6 0jy6tixxYcbr7JaUOdNGXMrjdYyTtZaJvF/56wWogdbwZMFchP7JzJeGl+X+NiMU cRF3sLs49vTmbBWK+wUxk16t2E/elTM7sLDDXqivrBWunKeMllvJmeik1JBfhTq6 so4p4YTGnG0ngtn2tS2DZh+n9HBQ6WtvDXmcsH8DAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUekN8zoDS0SeJhqqajVsqtG8MDpUwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiL2UxOGExMDJkLWIyOGUtNGY1Yy1iY2YzLTQ0YWYyYzU1NjQyOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCtUjANBgkqhkiG9w0BAQsFAAOCAQEAjme4vVtSlJdZMPPEOLg6oww5RDY2 VsBELDrBH4VQb9CAL1f3R18xAimbM7/3iLXP2FCJhL4F2BfkTaYKZDFfMrHKVovM 9vpBpAjtnI4IqHQN+8njpwCDbwmUdYPCw3q2NPZ4996qqPrFUXAQD8ksSnenoTCv vNs0Hj+sy5jA9Y0mWCPdJpgLaiVwcYpCkFJpkgnitoH1ootdRoteORtI8UTGHI26 rK3tKSWwEhZcitrKnQnHh9endJVH50V8c02ZEN0c51LMIMIVVWECqs2arzG8q32Y WskW74gMpokCK/Ma84ZzfRAoKaMBAvARE3RKnqlDx6+eaRmrpC79eDtMmA== -----END CERTIFICATE-----Generated at Mon Oct 20 20:26:40 2025 by rpki-client