$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/025a5aaa-8204-4b71-9a80-05f319e5df2b.roa File: 025a5aaa-8204-4b71-9a80-05f319e5df2b.roa (raw, json) Hash identifier: piKBuqOCZYzHUXBZzElI4ElZy6JFduMwbv0CN6UgO5M= Subject key identifier: CB:EB:F0:3E:61:2B:A7:30:81:17:8C:34:48:25:5E:DC:F9:1B:85:73 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5F574D80C3D6B8A48706A2431C71E13061B831FB Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/025a5aaa-8204-4b71-9a80-05f319e5df2b.roa Signing time: Sat 18 Oct 2025 07:40:10 +0000 ROA not before: Sat 18 Oct 2025 07:40:10 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.155.10.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:57:4d:80:c3:d6:b8:a4:87:06:a2:43:1c:71:e1:30:61:b8:31:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 07:40:10 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=37f76ccd212ec88eca5b4e1a7060f474e8c883f9b8a206c8bb0fc71c20d93748, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:bd:52:07:af:7f:a5:32:3b:b4:28:24:20:5a: 17:9c:e9:ae:2f:0b:fb:7d:98:50:7b:33:fb:2e:5e: 72:04:ce:b6:81:e1:88:0e:08:7c:7c:33:a0:ea:ac: 8f:9a:4d:19:c9:d0:6a:5c:65:dd:2a:b1:7f:f8:89: ed:58:a4:c0:70:5c:a7:ea:2b:66:15:1f:10:cb:8e: 72:04:9c:cd:02:08:fe:2a:0f:1d:ab:74:78:80:ac: 6a:18:63:6c:e4:31:ce:c1:01:2f:28:6d:f9:f3:32: f5:b4:f0:a0:a2:30:98:d1:f1:45:e0:3c:03:f3:8b: 32:85:01:62:6a:cb:bf:73:12:1a:0e:63:08:38:2a: b4:24:d2:78:9b:83:05:91:32:96:e3:dd:b9:ca:ba: 91:ad:e8:47:20:ca:de:4b:a6:62:d1:25:62:75:28: f9:ec:8d:c7:2c:35:c8:86:3e:6b:d7:f4:f7:a9:e8: f0:2f:75:3d:97:1f:99:81:38:ea:0e:62:1d:b1:90: 7a:bb:1b:fb:59:85:65:a4:c4:05:51:a0:c2:fb:db: 96:f8:bc:28:f7:1c:8f:de:ba:e5:17:af:5c:0f:0c: 45:db:d6:64:0e:50:72:b8:15:96:11:6a:0e:8e:5b: e0:9f:71:16:a7:91:8d:22:11:f3:8d:0f:fc:a5:08: 03:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:EB:F0:3E:61:2B:A7:30:81:17:8C:34:48:25:5E:DC:F9:1B:85:73 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/025a5aaa-8204-4b71-9a80-05f319e5df2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.155.10.0/23 Signature Algorithm: sha256WithRSAEncryption 38:45:c6:90:b8:8c:6b:39:b0:c7:6d:7b:d0:c9:50:1a:03:7c: bf:65:89:a4:48:d1:6d:02:ba:fa:9a:e1:69:ee:18:cd:d7:e5: ba:0a:5b:62:bd:78:c1:24:00:01:90:f7:59:c1:bf:f0:0c:7a: a5:c0:fa:f1:5e:df:88:87:f1:29:34:01:a1:84:54:7d:0c:fc: d0:e3:1b:e0:2c:b2:b1:6f:66:7a:a9:4d:04:f7:b2:bb:aa:6b: a5:cd:be:d8:0d:16:f4:3a:4c:7d:b1:23:9e:76:a5:ae:6e:30: 98:17:ab:2c:fa:3c:65:b3:2c:19:5d:80:fc:0d:f8:4c:be:fa: e9:eb:6b:d2:87:28:1c:f1:28:68:7a:c3:35:d3:df:ce:31:7b: c3:47:7e:47:be:10:42:57:f0:15:01:2e:36:b2:e1:0b:d9:27: a2:e7:72:ca:3f:ac:b0:fb:9b:45:15:78:5b:e9:3a:0f:7a:80: 9e:36:8c:dc:41:94:07:18:19:a1:36:3f:5a:24:8c:46:99:29: 4b:4e:ad:e9:77:2d:a7:67:88:e8:da:c5:18:ec:86:e0:05:77: 68:81:19:ba:a1:79:7d:6f:2e:08:14:41:b7:8e:5c:ef:0f:99: ea:5e:54:b4:26:1b:e9:9a:4a:e3:f3:c0:25:c2:d0:d7:54:29: 05:0d:4b:b5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUX1dNgMPWuKSHBqJDHHHhMGG4MfswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MDc0MDEwWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AzN2Y3NmNjZDIxMmVjODhlY2E1YjRlMWE3MDYwZjQ3NGU4 Yzg4M2Y5YjhhMjA2YzhiYjBmYzcxYzIwZDkzNzQ4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQChvVIHr3+lMju0KCQgWhec6a4vC/t9mFB7M/suXnIEzraB 4YgOCHx8M6DqrI+aTRnJ0GpcZd0qsX/4ie1YpMBwXKfqK2YVHxDLjnIEnM0CCP4q Dx2rdHiArGoYY2zkMc7BAS8obfnzMvW08KCiMJjR8UXgPAPzizKFAWJqy79zEhoO Ywg4KrQk0nibgwWRMpbj3bnKupGt6Ecgyt5LpmLRJWJ1KPnsjccsNciGPmvX9Pep 6PAvdT2XH5mBOOoOYh2xkHq7G/tZhWWkxAVRoML725b4vCj3HI/euuUXr1wPDEXb 1mQOUHK4FZYRag6OW+CfcRankY0iEfOND/ylCAM3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUy+vwPmErpzCBF4w0SCVe3PkbhXMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzAyNWE1YWFhLTgyMDQtNGI3MS05YTgwLTA1ZjMxOWU1ZGYyYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESmwowDQYJKoZIhvcNAQELBQADggEBADhFxpC4jGs5sMdte9DJUBoDfL9l iaRI0W0Cuvqa4WnuGM3X5boKW2K9eMEkAAGQ91nBv/AMeqXA+vFe34iH8Sk0AaGE VH0M/NDjG+AssrFvZnqpTQT3sruqa6XNvtgNFvQ6TH2xI552pa5uMJgXqyz6PGWz LBldgPwN+Ey++unra9KHKBzxKGh6wzXT384xe8NHfke+EEJX8BUBLjay4QvZJ6Ln cso/rLD7m0UVeFvpOg96gJ42jNxBlAcYGaE2P1okjEaZKUtOrel3LadniOjaxRjs huAFd2iBGbqheX1vLggUQbeOXO8PmepeVLQmG+maSuPzwCXC0NdUKQUNS7U= -----END CERTIFICATE-----Generated at Mon Oct 20 06:11:51 2025 by rpki-client