$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/02791f4b-f691-441a-a98c-14b99db55306.roa File: 02791f4b-f691-441a-a98c-14b99db55306.roa (raw, json) Hash identifier: oDSyqkcNRyIjID14Rxi7XtF8Rjx4bF5419sv/LeRM60= Subject key identifier: C6:5A:20:E2:84:D1:29:67:F4:7D:C3:74:76:53:AD:36:08:31:CD:91 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 64A4CFD14349913E607095F82FFF823EF1889B8E Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/02791f4b-f691-441a-a98c-14b99db55306.roa Signing time: Sat 18 Oct 2025 15:50:07 +0000 ROA not before: Sat 18 Oct 2025 15:50:07 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.155.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:a4:cf:d1:43:49:91:3e:60:70:95:f8:2f:ff:82:3e:f1:88:9b:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 15:50:07 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=39b6a3c14b006d9917cb4fa44280088946b72cacbc0bc32f4cf80ef16eacd6c7, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:24:3c:28:20:ef:4c:f7:b4:f2:2f:ff:16:aa: 0e:7c:7a:1d:2d:91:f8:80:8f:30:93:e9:33:18:e3: 18:45:2d:c8:7d:d5:0a:e0:d5:63:a1:4e:3b:52:01: 81:32:09:69:51:41:5b:fd:8b:6e:77:b1:32:e7:75: 7a:fe:d3:8f:b3:0f:81:4e:4f:0a:c8:2e:25:da:ec: 22:7f:97:b0:2e:a1:a3:7b:ba:05:aa:52:82:73:90: 1c:03:7c:48:dd:7c:0d:62:95:34:71:08:d6:61:08: ae:ee:8a:b4:96:67:8e:4c:e0:83:fe:f3:88:7c:1c: 44:55:b6:09:bc:f5:aa:95:5f:b2:2f:7f:5f:8f:05: 66:9f:e8:89:f1:89:e1:47:ac:90:bb:52:06:9f:30: b8:2b:c2:64:17:00:c8:c9:79:89:32:24:4d:50:8e: ab:af:89:07:10:a2:b3:37:0f:e9:09:3a:66:bc:d1: 7b:9c:e6:1b:42:aa:cc:39:94:b6:a7:ff:5d:f8:1a: e5:76:a3:83:19:13:83:22:c4:fe:47:3b:77:50:02: c8:55:68:26:05:96:d8:bb:35:22:46:c2:62:d3:80: c2:ab:7e:12:3f:2c:71:1c:01:69:97:59:b2:3a:c6: bd:50:41:b4:2f:4a:1e:d3:0d:fa:be:67:0e:32:ae: f5:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:5A:20:E2:84:D1:29:67:F4:7D:C3:74:76:53:AD:36:08:31:CD:91 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/02791f4b-f691-441a-a98c-14b99db55306.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.155.128.0/17 Signature Algorithm: sha256WithRSAEncryption 5c:b6:61:09:3a:99:67:8f:f7:72:d4:df:32:d0:2e:1b:59:3c: 83:39:c4:b9:5c:b5:a8:41:fb:f7:0e:71:ad:18:92:a1:70:1f: 88:86:05:99:2d:c2:c5:27:fa:f8:6d:74:29:31:b1:71:eb:7b: 9e:cd:fd:6e:ee:25:b6:cc:6b:e7:ee:2e:31:be:02:73:c7:a7: ac:a1:83:64:da:da:64:0b:07:21:fa:92:63:16:e0:1e:c3:4b: 8e:2a:59:f3:aa:34:25:3e:69:8d:5a:b5:d7:f6:bd:dc:19:97: 24:14:a8:97:99:07:4c:02:28:e3:af:eb:c0:5f:ff:1d:81:7c: ce:fb:74:f0:1b:9e:00:5c:a9:57:22:ba:7b:5c:be:41:98:db: cb:b9:7b:f2:0c:ff:81:4f:d4:de:5d:6f:5d:8e:94:21:70:9b: e8:c4:5e:aa:71:b0:73:a6:c9:30:ec:6d:e5:d3:a1:ed:43:f3: 4a:c2:ef:bf:02:fa:58:5b:97:5e:5f:66:ec:b9:52:31:a5:69: cf:6d:dc:82:60:63:da:1b:ca:6a:66:31:d6:a0:83:46:3f:37: 24:8a:9d:c9:6f:44:42:5d:56:3c:2e:dc:04:ad:c5:fc:d7:17: 86:2b:da:d3:fd:26:46:40:97:ac:8a:0f:14:23:73:4b:63:f3: 70:0f:5a:2e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZKTP0UNJkT5gcJX4L/+CPvGIm44wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTU1MDA3WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AzOWI2YTNjMTRiMDA2ZDk5MTdjYjRmYTQ0MjgwMDg4OTQ2 YjcyY2FjYmMwYmMzMmY0Y2Y4MGVmMTZlYWNkNmM3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDnJDwoIO9M97TyL/8Wqg58eh0tkfiAjzCT6TMY4xhFLch9 1Qrg1WOhTjtSAYEyCWlRQVv9i253sTLndXr+04+zD4FOTwrILiXa7CJ/l7AuoaN7 ugWqUoJzkBwDfEjdfA1ilTRxCNZhCK7uirSWZ45M4IP+84h8HERVtgm89aqVX7Iv f1+PBWaf6InxieFHrJC7UgafMLgrwmQXAMjJeYkyJE1QjquviQcQorM3D+kJOma8 0Xuc5htCqsw5lLan/134GuV2o4MZE4MixP5HO3dQAshVaCYFlti7NSJGwmLTgMKr fhI/LHEcAWmXWbI6xr1QQbQvSh7TDfq+Zw4yrvWZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUxlog4oTRKWf0fcN0dlOtNggxzZEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzAyNzkxZjRiLWY2OTEtNDQxYS1hOThjLTE0Yjk5ZGI1NTMwNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcSm4AwDQYJKoZIhvcNAQELBQADggEBAFy2YQk6mWeP93LU3zLQLhtZPIM5 xLlctahB+/cOca0YkqFwH4iGBZktwsUn+vhtdCkxsXHre57N/W7uJbbMa+fuLjG+ AnPHp6yhg2Ta2mQLByH6kmMW4B7DS44qWfOqNCU+aY1atdf2vdwZlyQUqJeZB0wC KOOv68Bf/x2BfM77dPAbngBcqVciuntcvkGY28u5e/IM/4FP1N5db12OlCFwm+jE XqpxsHOmyTDsbeXToe1D80rC778C+lhbl15fZuy5UjGlac9t3IJgY9obympmMdag g0Y/NySKnclvREJdVjwu3AStxfzXF4Yr2tP9JkZAl6yKDxQjc0tj83APWi4= -----END CERTIFICATE-----Generated at Mon Oct 20 08:30:02 2025 by rpki-client