$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0c1e4cb8-9d7c-4013-8731-176522e52327.roa File: 0c1e4cb8-9d7c-4013-8731-176522e52327.roa (raw, json) Hash identifier: kwUEBLImr7dPuKeeORYInd1JtKZpAqklohjETgY0c4w= Subject key identifier: 94:DE:C4:56:D9:00:7E:23:2F:95:96:FB:06:27:5A:F0:58:54:3A:2E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4C2295D49AF1146CC827387CF496A10374DAD201 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0c1e4cb8-9d7c-4013-8731-176522e52327.roa Signing time: Sat 18 Oct 2025 06:33:17 +0000 ROA not before: Sat 18 Oct 2025 06:33:17 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.244.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:22:95:d4:9a:f1:14:6c:c8:27:38:7c:f4:96:a1:03:74:da:d2:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 06:33:17 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=f80ca4c63bfe889cf8049533c9259430c3f67f1e86a08f92517e156d0f2e8468, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:3c:8d:5f:cd:52:9c:8b:b1:18:cb:9d:26:63: 3d:4b:75:cf:fb:70:75:9d:84:c8:0f:58:39:6d:ca: cb:81:f8:b0:fc:4d:2a:e2:b2:fa:21:18:c5:81:e1: 51:87:3b:4d:de:6c:1c:e2:97:eb:79:91:2b:cf:c5: 98:d0:77:e9:d6:e8:d0:83:64:08:d3:f3:2e:44:70: f6:80:80:c1:c4:07:e8:23:0b:12:32:e1:bc:9b:13: d0:2d:af:14:78:78:4e:56:1c:a2:38:bc:20:6f:5d: 1c:a5:f8:59:3f:ed:e4:75:6e:f4:bd:9f:67:a3:b2: 57:4f:34:ca:e0:b7:98:a8:d2:f7:8d:35:50:44:7e: 9e:a7:73:d8:3d:54:c4:46:1a:57:c3:5d:10:ad:80: 6d:53:e6:78:a2:50:70:cf:59:d5:bf:9e:ad:bb:a3: 8d:57:bc:1d:0c:a0:3d:1b:36:7a:1d:10:24:ab:66: 4e:40:f2:28:d2:81:b1:ce:f5:19:ec:d4:36:b3:6a: f9:5a:58:eb:8a:2b:41:1f:5c:35:f8:e0:bb:73:d7: 8f:84:86:58:b8:be:f1:08:0a:ba:f1:93:cb:54:54: 72:90:6a:0f:c8:db:20:c7:ff:c8:e5:ed:d9:7c:79: 76:90:4b:32:ed:58:cf:ed:4b:8a:fd:0a:f0:79:9c: 46:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:DE:C4:56:D9:00:7E:23:2F:95:96:FB:06:27:5A:F0:58:54:3A:2E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0c1e4cb8-9d7c-4013-8731-176522e52327.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.244.32.0/20 Signature Algorithm: sha256WithRSAEncryption 6d:95:ed:14:f2:a5:ea:3b:7a:fc:5a:c8:b7:26:94:dc:d9:09: 5d:5d:97:83:d6:10:eb:38:ae:e8:01:12:e9:f1:11:a5:dc:16: 99:7c:79:9c:8a:23:56:8c:9b:8c:de:c0:b2:6b:74:50:fa:c3: 8d:ee:c0:c3:10:81:05:13:20:4e:cc:ad:36:dc:53:fa:7e:87: b8:67:08:59:20:be:a4:61:53:ac:72:fd:f6:db:cb:7d:66:d2: c1:0f:46:fb:07:9c:7b:7f:d0:b3:ff:3c:a9:0c:11:f2:2f:7c: 68:20:87:bd:03:13:91:3f:9d:8f:61:ee:fa:a7:62:b1:48:26: 5f:68:19:fd:0f:d6:ee:91:e6:97:59:22:3c:5a:bb:81:17:e4: 13:c9:11:e6:98:b8:4c:6b:df:2d:92:e9:b8:33:cf:5f:95:ec: b3:5c:7e:43:04:91:2f:f8:0a:da:2d:16:8b:70:00:77:81:1d: 02:e6:bd:1a:35:6b:a0:7c:43:3b:88:a9:6c:6e:43:dd:d3:b9: d3:c3:fc:ca:5a:91:6f:73:e7:51:bf:a5:d0:1d:44:4a:37:82: 66:ea:4c:8d:3f:66:4f:c5:4c:d1:25:4c:19:c0:a6:99:d1:a8: 54:2d:45:87:84:a0:9a:10:c9:92:a6:75:47:39:ae:cb:4c:da: 67:07:b7:a9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTCKV1JrxFGzIJzh89JahA3Ta0gEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MDYzMzE3WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BmODBjYTRjNjNiZmU4ODljZjgwNDk1MzNjOTI1OTQzMGMz ZjY3ZjFlODZhMDhmOTI1MTdlMTU2ZDBmMmU4NDY4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCMPI1fzVKci7EYy50mYz1Ldc/7cHWdhMgPWDltysuB+LD8 TSrisvohGMWB4VGHO03ebBzil+t5kSvPxZjQd+nW6NCDZAjT8y5EcPaAgMHEB+gj CxIy4bybE9AtrxR4eE5WHKI4vCBvXRyl+Fk/7eR1bvS9n2ejsldPNMrgt5io0veN NVBEfp6nc9g9VMRGGlfDXRCtgG1T5niiUHDPWdW/nq27o41XvB0MoD0bNnodECSr Zk5A8ijSgbHO9Rns1DazavlaWOuKK0EfXDX44Ltz14+Ehli4vvEICrrxk8tUVHKQ ag/I2yDH/8jl7dl8eXaQSzLtWM/tS4r9CvB5nEadAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUlN7EVtkAfiMvlZb7Bida8FhUOi4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzBjMWU0Y2I4LTlkN2MtNDAxMy04NzMxLTE3NjUyMmU1MjMyNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQS9CAwDQYJKoZIhvcNAQELBQADggEBAG2V7RTypeo7evxayLcmlNzZCV1d l4PWEOs4rugBEunxEaXcFpl8eZyKI1aMm4zewLJrdFD6w43uwMMQgQUTIE7MrTbc U/p+h7hnCFkgvqRhU6xy/fbby31m0sEPRvsHnHt/0LP/PKkMEfIvfGggh70DE5E/ nY9h7vqnYrFIJl9oGf0P1u6R5pdZIjxau4EX5BPJEeaYuExr3y2S6bgzz1+V7LNc fkMEkS/4CtotFotwAHeBHQLmvRo1a6B8QzuIqWxuQ93TudPD/MpakW9z51G/pdAd REo3gmbqTI0/Zk/FTNElTBnAppnRqFQtRYeEoJoQyZKmdUc5rstM2mcHt6k= -----END CERTIFICATE-----Generated at Mon Oct 20 03:06:56 2025 by rpki-client