$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/09040758-8225-4721-811c-9fff14930506.roa File: 09040758-8225-4721-811c-9fff14930506.roa (raw, json) Hash identifier: MReLEp6UhN9NyoqfMiNaMsXrLhYDQ4azmEmMUvMz0rQ= Subject key identifier: 72:EA:E3:DD:BA:D9:50:8D:F5:75:AE:A7:7E:82:78:39:79:7C:C1:E6 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4AD957E949425681F7A59DC21F7A79CDA5E2D8F4 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/09040758-8225-4721-811c-9fff14930506.roa Signing time: Sat 18 Oct 2025 17:42:21 +0000 ROA not before: Sat 18 Oct 2025 17:42:21 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.160.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:d9:57:e9:49:42:56:81:f7:a5:9d:c2:1f:7a:79:cd:a5:e2:d8:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 17:42:21 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=d80d8358bb8d8fdb44a95b462b0dfe0d8170d78a5933686828bbd968eb23e7ea, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f9:ab:5d:71:4a:77:96:67:1c:66:6f:f7:38: f2:81:a9:35:bb:98:65:77:6a:96:69:90:bf:12:1e: a2:45:d1:6b:c9:37:85:51:ab:a9:ae:44:4c:5e:55: 54:14:09:e8:32:cb:b0:23:53:a0:1d:bb:dc:c3:6c: 5d:84:37:6f:a8:38:9d:40:63:f7:66:2e:11:16:05: e8:e5:a6:ba:88:01:b2:f0:87:65:b8:60:fd:41:e9: 6f:11:0b:77:b3:43:9a:c4:70:8c:4e:cc:d2:51:0c: 7d:f3:79:72:ed:de:e1:a3:59:5a:5e:d7:ab:ec:10: 47:05:77:6b:9b:d3:49:44:79:9c:3c:99:dc:b3:a1: b3:d0:f5:ac:e6:19:92:8d:65:97:6d:e6:b8:86:e8: 18:f8:a2:dc:22:ee:d2:a2:1c:df:bb:d9:5b:f8:42: ce:cf:34:7f:5c:46:78:d7:0e:d4:f2:c4:c8:87:0b: 5b:f5:23:77:e8:82:b7:af:d9:b5:a4:d8:b5:46:5a: d0:96:54:83:29:4b:6d:55:f4:20:eb:fd:80:e3:fd: eb:df:c8:7a:2e:f0:14:28:df:f7:f5:9f:a9:5d:5f: aa:fb:12:a5:19:6f:5e:5e:07:e1:36:b5:5d:3d:ae: 26:63:91:96:fe:30:2e:70:b2:14:02:90:de:84:44: 37:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:EA:E3:DD:BA:D9:50:8D:F5:75:AE:A7:7E:82:78:39:79:7C:C1:E6 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/09040758-8225-4721-811c-9fff14930506.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.160.236.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:23:1c:a7:89:df:4e:a8:d3:8f:23:97:52:f1:b6:c2:6d:a0: 81:84:73:3d:70:7c:0f:cc:21:c6:69:c5:d6:58:a5:a9:50:4b: eb:d3:cf:27:68:dc:4f:bc:8c:64:17:37:13:de:80:df:a1:89: c3:ad:c4:c3:eb:f5:28:56:24:4a:53:68:be:bb:e4:e9:0b:42: 62:0b:a7:63:0d:6a:6c:9d:ba:b7:71:1b:6c:ca:93:8b:23:45: f7:8f:c1:16:ca:29:e6:d2:ad:da:68:aa:0c:c4:35:dc:6d:76: cb:37:59:14:99:3b:bd:ab:bb:b4:36:a6:3b:18:13:55:ce:d4: f6:dd:33:5c:9e:a3:26:63:6f:67:22:34:51:e6:c3:1f:36:2f: 82:a5:50:cd:e2:fd:6a:c2:12:49:8b:92:80:67:df:fc:52:d2: e4:44:28:5c:95:c9:b4:d9:6c:d3:58:91:71:02:7f:d7:e7:2c: 12:31:83:6b:a9:68:74:62:a6:14:e6:40:37:83:bf:a5:f6:3a: bd:ba:b1:16:9c:c8:a8:5f:af:2e:50:51:04:2d:15:7e:25:18: a1:e2:47:b7:18:4d:e4:67:e6:87:cb:a3:9f:6f:1f:ab:49:df: da:67:f5:f9:f7:21:fd:41:3a:ca:2b:18:2a:20:ea:e1:dc:33: 02:e1:34:2c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUStlX6UlCVoH3pZ3CH3p5zaXi2PQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTc0MjIxWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BkODBkODM1OGJiOGQ4ZmRiNDRhOTViNDYyYjBkZmUwZDgx NzBkNzhhNTkzMzY4NjgyOGJiZDk2OGViMjNlN2VhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCf+atdcUp3lmccZm/3OPKBqTW7mGV3apZpkL8SHqJF0WvJ N4VRq6muRExeVVQUCegyy7AjU6Adu9zDbF2EN2+oOJ1AY/dmLhEWBejlprqIAbLw h2W4YP1B6W8RC3ezQ5rEcIxOzNJRDH3zeXLt3uGjWVpe16vsEEcFd2ub00lEeZw8 mdyzobPQ9azmGZKNZZdt5riG6Bj4otwi7tKiHN+72Vv4Qs7PNH9cRnjXDtTyxMiH C1v1I3fogrev2bWk2LVGWtCWVIMpS21V9CDr/YDj/evfyHou8BQo3/f1n6ldX6r7 EqUZb15eB+E2tV09riZjkZb+MC5wshQCkN6ERDcnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUcurj3brZUI31da6nfoJ4OXl8weYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzA5MDQwNzU4LTgyMjUtNDcyMS04MTFjLTlmZmYxNDkzMDUwNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASoOwwDQYJKoZIhvcNAQELBQADggEBAA8jHKeJ306o048jl1LxtsJtoIGE cz1wfA/MIcZpxdZYpalQS+vTzydo3E+8jGQXNxPegN+hicOtxMPr9ShWJEpTaL67 5OkLQmILp2MNamydurdxG2zKk4sjRfePwRbKKebSrdpoqgzENdxtdss3WRSZO72r u7Q2pjsYE1XO1PbdM1yeoyZjb2ciNFHmwx82L4KlUM3i/WrCEkmLkoBn3/xS0uRE KFyVybTZbNNYkXECf9fnLBIxg2upaHRiphTmQDeDv6X2Or26sRacyKhfry5QUQQt FX4lGKHiR7cYTeRn5ofLo59vH6tJ39pn9fn3If1BOsorGCog6uHcMwLhNCw= -----END CERTIFICATE-----Generated at Mon Oct 20 03:15:54 2025 by rpki-client