$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/08536801-3772-4a4b-ae6a-362cccd0ba36.roa File: 08536801-3772-4a4b-ae6a-362cccd0ba36.roa (raw, json) Hash identifier: VlKPQ5w5/vfBgkOvlsU2WQCMiINrW1mReGBrU7dATUQ= Subject key identifier: 6A:42:9C:12:25:28:ED:42:2E:71:53:B7:CA:E5:9C:89:EF:E4:EF:E6 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 41CED45C078AE7097326431807604C2055287668 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/08536801-3772-4a4b-ae6a-362cccd0ba36.roa Signing time: Sat 18 Oct 2025 15:13:34 +0000 ROA not before: Sat 18 Oct 2025 15:13:34 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.173.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:ce:d4:5c:07:8a:e7:09:73:26:43:18:07:60:4c:20:55:28:76:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 15:13:34 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=807850ba27b38af294abce0f201fc0a9f49b864ce8d3de3fbd761efd186a4445, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f5:4f:41:67:2a:bb:49:5f:fb:40:ae:2b:25: 39:98:08:34:b9:77:cc:3e:2e:82:d8:53:29:21:bc: 03:1f:e1:74:6d:86:67:b2:b3:a0:04:cd:58:a9:59: 30:43:83:d4:9a:f3:e0:9e:f6:47:e7:87:37:e1:e2: c3:8a:79:38:b9:99:71:e3:22:6f:86:f2:22:d5:ac: 12:ce:42:ac:e4:21:c8:cc:7f:f7:bc:45:42:a4:9b: a9:7d:0c:a8:ee:de:60:39:83:5f:b0:6f:36:fd:0a: 2d:53:6f:0f:6b:60:fb:86:b9:1f:cf:c7:23:42:61: 76:45:bb:7f:3f:80:46:66:89:0e:f2:cc:01:80:0e: ea:3f:67:c0:a5:dd:40:b6:43:03:74:a0:e5:73:b6: 00:01:48:81:79:a2:22:83:ec:b4:18:09:62:af:fd: be:4b:a0:94:e3:1a:e3:1e:8e:b1:0f:ea:8a:06:dc: a7:56:54:71:0d:8c:7c:cf:77:4c:55:63:69:d2:1a: ca:86:19:a9:2a:57:af:b4:ef:9e:57:f5:d7:37:bd: c7:a6:89:e7:8d:c0:51:ad:c1:bc:a8:d1:4c:2d:1d: 6b:14:88:7c:b3:c4:32:3f:82:4a:93:a1:37:1c:b7: 65:ae:4d:e7:78:c6:cc:bd:aa:4b:0b:40:24:e8:af: 59:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:42:9C:12:25:28:ED:42:2E:71:53:B7:CA:E5:9C:89:EF:E4:EF:E6 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/08536801-3772-4a4b-ae6a-362cccd0ba36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.173.100.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:4b:80:fe:72:a3:1c:e9:e9:1f:7c:f1:9e:8d:14:3b:b7:eb: 70:b3:0d:87:2c:5a:71:9b:a1:35:71:0b:24:7e:a3:f8:f1:2d: e3:30:bf:17:16:20:50:0f:b0:54:1d:5f:1a:e2:97:89:f0:f7: fd:42:d6:bf:6d:05:25:7d:a3:48:8e:41:08:89:69:88:84:5c: 55:ee:87:3c:48:ef:38:ce:31:fc:1e:e4:99:4a:26:51:fa:7b: 1f:f3:79:d0:a8:4f:41:fd:b4:5e:6f:84:57:5d:f2:5d:9d:6a: 35:15:d8:9b:8c:2f:0b:3b:fc:8e:29:77:2b:f9:14:ce:2a:44: 69:8b:27:a3:f7:c2:0f:4c:ba:80:58:bd:41:20:9d:30:a6:85: 69:3f:42:e7:62:6c:fd:fd:4a:64:48:1e:ac:31:21:2e:54:0e: fc:65:ae:e8:dc:f8:65:2e:0b:ff:11:4d:0e:6f:e3:05:32:e3: 3a:a6:76:34:03:ca:83:4c:d2:6f:01:6a:63:bd:4b:04:5b:98: 92:4b:e9:ad:f0:e5:95:f6:3b:33:ce:6d:24:b7:5b:14:0c:94: 6b:05:5a:38:5c:c9:24:9a:80:6f:0d:aa:b9:e5:ab:ad:14:19: 4f:6d:bb:a6:26:b5:6d:42:ad:76:3f:d6:66:b8:a9:9a:eb:96: 7a:f1:aa:b3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQc7UXAeK5wlzJkMYB2BMIFUodmgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTUxMzM0WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A4MDc4NTBiYTI3YjM4YWYyOTRhYmNlMGYyMDFmYzBhOWY0 OWI4NjRjZThkM2RlM2ZiZDc2MWVmZDE4NmE0NDQ1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDR9U9BZyq7SV/7QK4rJTmYCDS5d8w+LoLYUykhvAMf4XRt hmeys6AEzVipWTBDg9Sa8+Ce9kfnhzfh4sOKeTi5mXHjIm+G8iLVrBLOQqzkIcjM f/e8RUKkm6l9DKju3mA5g1+wbzb9Ci1Tbw9rYPuGuR/PxyNCYXZFu38/gEZmiQ7y zAGADuo/Z8Cl3UC2QwN0oOVztgABSIF5oiKD7LQYCWKv/b5LoJTjGuMejrEP6ooG 3KdWVHENjHzPd0xVY2nSGsqGGakqV6+0755X9dc3vcemieeNwFGtwbyo0UwtHWsU iHyzxDI/gkqToTcct2WuTed4xsy9qksLQCTor1mjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUakKcEiUo7UIucVO3yuWcie/k7+YwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzA4NTM2ODAxLTM3NzItNGE0Yi1hZTZhLTM2MmNjY2QwYmEzNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASrWQwDQYJKoZIhvcNAQELBQADggEBAItLgP5yoxzp6R988Z6NFDu363Cz DYcsWnGboTVxCyR+o/jxLeMwvxcWIFAPsFQdXxril4nw9/1C1r9tBSV9o0iOQQiJ aYiEXFXuhzxI7zjOMfwe5JlKJlH6ex/zedCoT0H9tF5vhFdd8l2dajUV2JuMLws7 /I4pdyv5FM4qRGmLJ6P3wg9MuoBYvUEgnTCmhWk/QudibP39SmRIHqwxIS5UDvxl rujc+GUuC/8RTQ5v4wUy4zqmdjQDyoNM0m8BamO9SwRbmJJL6a3w5ZX2OzPObSS3 WxQMlGsFWjhcySSagG8Nqrnlq60UGU9tu6YmtW1CrXY/1ma4qZrrlnrxqrM= -----END CERTIFICATE-----Generated at Mon Oct 20 03:07:40 2025 by rpki-client