$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/08f45842-958a-4dc3-961b-4d0d1e1db902.roa File: 08f45842-958a-4dc3-961b-4d0d1e1db902.roa (raw, json) Hash identifier: DFsruZqOm/nQJjt8L0COt0hlhucIuPN2ihK8p1PV0qE= Subject key identifier: 0A:76:37:C5:9D:62:6B:98:80:45:E0:0A:92:E2:B0:89:56:25:EE:32 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1749DF24C3BCC1C73F53FACAEE4F3C521C7CDABB Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/08f45842-958a-4dc3-961b-4d0d1e1db902.roa Signing time: Sun 19 Oct 2025 17:21:27 +0000 ROA not before: Sun 19 Oct 2025 17:21:27 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.66.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:49:df:24:c3:bc:c1:c7:3f:53:fa:ca:ee:4f:3c:52:1c:7c:da:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 17:21:27 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=7d70f8fcf577a15d3e0f5b63dfef3efa9049b9126032218a0e4cce3e978e7c03, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:0f:33:db:ec:d0:73:0c:6a:b1:86:32:fa:ec: ed:48:ad:d8:c2:ed:f7:ed:d6:b4:08:26:23:b7:be: 30:9f:2c:f6:7e:0d:df:dd:b2:0b:1a:e4:ae:1d:5d: 29:82:8e:ca:12:1b:7d:a5:ae:fd:05:32:b5:f1:da: 81:ee:ad:bc:aa:58:1a:5e:a1:2b:7b:36:0c:fd:45: 0e:69:98:c2:dc:39:97:84:f2:49:d6:9a:c6:6a:3d: 84:ae:99:1b:65:e7:00:5d:79:b1:a1:05:47:85:bc: 52:5f:c5:13:fd:0c:03:f3:11:95:b6:4f:8f:33:2e: 5e:0d:8d:8b:58:1d:e7:8a:63:d8:9e:41:7b:de:1c: 9a:c7:f8:cb:91:1c:75:b4:9b:8c:d8:1c:b5:3e:d7: 75:e9:fc:9d:a1:84:bf:57:14:c5:7c:c3:0f:c1:c3: ba:be:5f:6b:0e:c1:62:39:0a:3f:a0:bb:73:01:3e: f9:63:46:cf:ea:51:ab:2e:47:49:fe:af:a0:1a:77: f9:18:0d:c5:48:32:af:b5:fa:67:2d:b3:7a:61:de: 53:c9:e3:e4:c4:7b:7e:6b:0a:10:49:54:66:f9:4a: 39:90:8e:06:48:59:07:65:ac:f9:55:58:ea:53:76: 8d:82:fd:8b:f2:f5:bc:d2:a8:c5:aa:42:15:b4:df: 9e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:76:37:C5:9D:62:6B:98:80:45:E0:0A:92:E2:B0:89:56:25:EE:32 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/08f45842-958a-4dc3-961b-4d0d1e1db902.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.66.239.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:bd:a2:24:5a:87:54:71:08:af:8a:a9:a6:0b:74:0c:3a:45: df:7a:e8:c1:5b:7b:7a:2e:ed:49:78:a1:58:1e:58:5a:20:37: 66:43:c1:b8:c9:2b:cb:57:6c:d3:33:86:93:7e:f5:f0:e9:b1: ff:77:97:9e:ce:e1:32:5b:38:e0:63:3e:25:8c:4e:b2:85:87: 2d:86:57:90:6e:21:32:88:c3:e7:b3:19:5e:0a:26:53:36:b5: cf:33:4f:ea:16:f1:18:e3:c3:2d:62:b1:dc:4a:82:78:b2:7e: d0:4c:4a:95:00:18:c0:6b:0b:c1:f4:03:f0:da:46:13:42:e7: d9:5a:60:55:1e:ac:1d:a7:89:4e:a1:9f:2f:21:19:6a:a6:0c: 10:9b:cc:1c:a4:cd:45:8f:ec:79:a6:f4:51:c5:91:35:61:a3: 9a:5a:00:e6:7e:dc:b4:82:16:28:76:0e:33:d5:1a:bb:07:be: 9d:28:c9:c6:9a:0d:50:63:b1:78:41:ff:1d:99:7b:2b:f5:14: 0a:e6:de:9b:70:a1:b6:36:65:43:87:0b:54:ae:09:f5:54:32: 51:b8:56:b7:21:bc:ec:34:d1:24:c3:af:fc:1b:ce:63:5c:c4: 8f:c0:12:8b:61:be:8c:93:d3:b7:4d:78:18:be:81:01:06:22: a9:f8:34:02 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUF0nfJMO8wcc/U/rK7k88Uhx82rswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTcyMTI3WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZDcwZjhmY2Y1NzdhMTVkM2UwZjViNjNkZmVmM2VmYTkw NDliOTEyNjAzMjIxOGEwZTRjY2UzZTk3OGU3YzAzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCJDzPb7NBzDGqxhjL67O1IrdjC7fft1rQIJiO3vjCfLPZ+ Dd/dsgsa5K4dXSmCjsoSG32lrv0FMrXx2oHurbyqWBpeoSt7Ngz9RQ5pmMLcOZeE 8knWmsZqPYSumRtl5wBdebGhBUeFvFJfxRP9DAPzEZW2T48zLl4NjYtYHeeKY9ie QXveHJrH+MuRHHW0m4zYHLU+13Xp/J2hhL9XFMV8ww/Bw7q+X2sOwWI5Cj+gu3MB PvljRs/qUasuR0n+r6Aad/kYDcVIMq+1+mcts3ph3lPJ4+TEe35rChBJVGb5SjmQ jgZIWQdlrPlVWOpTdo2C/Yvy9bzSqMWqQhW0357HAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUCnY3xZ1ia5iAReAKkuKwiVYl7jIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzA4ZjQ1ODQyLTk1OGEtNGRjMy05NjFiLTRkMGQxZTFkYjkwMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASQu8wDQYJKoZIhvcNAQELBQADggEBAG+9oiRah1RxCK+KqaYLdAw6Rd96 6MFbe3ou7Ul4oVgeWFogN2ZDwbjJK8tXbNMzhpN+9fDpsf93l57O4TJbOOBjPiWM TrKFhy2GV5BuITKIw+ezGV4KJlM2tc8zT+oW8Rjjwy1isdxKgniyftBMSpUAGMBr C8H0A/DaRhNC59laYFUerB2niU6hny8hGWqmDBCbzBykzUWP7Hmm9FHFkTVho5pa AOZ+3LSCFih2DjPVGrsHvp0oycaaDVBjsXhB/x2Zeyv1FArm3ptwobY2ZUOHC1Su CfVUMlG4VrchvOw00STDr/wbzmNcxI/AEothvoyT07dNeBi+gQEGIqn4NAI= -----END CERTIFICATE-----Generated at Mon Oct 20 06:11:23 2025 by rpki-client