$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/13fbf8a7-e8a6-4b17-8f89-7e371ba7dac3.roa File: 13fbf8a7-e8a6-4b17-8f89-7e371ba7dac3.roa (raw, json) Hash identifier: lXQlBDT7jInLQ64VheIGpM+O2kSSdPKhw3xZnwWI9y0= Subject key identifier: 76:82:4F:BA:EF:9A:83:B0:A8:A5:DF:8F:4D:75:D5:22:D8:5B:0E:7E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 43645C2CB2A7A9CBE89AEC4539FB6B81A75AF0CC Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/13fbf8a7-e8a6-4b17-8f89-7e371ba7dac3.roa Signing time: Sat 18 Oct 2025 13:41:19 +0000 ROA not before: Sat 18 Oct 2025 13:41:19 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.172.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:64:5c:2c:b2:a7:a9:cb:e8:9a:ec:45:39:fb:6b:81:a7:5a:f0:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 13:41:19 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=0cecf51ca9f5105a4631a3d0ea9d5a5be0fb5c546acca98fe9bd9d9f3784fc3d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bf:6b:30:ec:96:d5:0f:97:04:91:a7:e9:4f: da:fa:fd:91:d7:d9:70:bd:73:22:03:1d:8b:1c:33: ee:d6:ca:cb:7b:51:1c:28:75:17:40:aa:06:b9:fb: 0a:10:c1:72:56:91:3b:14:d0:ca:23:84:08:4b:89: 0f:e0:16:59:d7:cb:7e:93:92:b1:70:ee:ef:45:a3: e7:7c:8a:7b:86:16:d6:b5:bb:ea:fa:ce:ae:d0:aa: 2c:a1:8c:27:b0:e1:43:c7:47:e5:0c:53:ed:9c:75: 77:15:0a:85:f2:1e:44:9d:72:73:d9:6e:49:ea:d7: 40:a4:77:3d:a6:00:7f:7f:f4:c8:43:86:c8:ec:48: ac:ce:db:05:68:d2:46:bf:a9:e3:c1:cf:2b:f1:76: 90:43:18:f1:7c:e8:29:6d:54:25:74:dd:c3:37:6d: 2d:60:58:86:9a:a4:97:ff:df:eb:e7:08:79:cb:fb: 62:a9:21:fc:59:08:c5:f0:2b:4c:0a:1c:39:9e:56: 1e:1c:a0:9d:cb:03:fd:65:50:12:66:57:cc:61:79: ff:cd:f8:fc:02:4f:a1:17:28:4d:1a:34:21:1e:11: 6c:8c:db:a6:0c:73:46:2c:85:02:4e:f3:80:5c:44: 59:89:00:d9:89:8b:d4:11:49:ba:1d:b8:ec:b2:e7: 78:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:82:4F:BA:EF:9A:83:B0:A8:A5:DF:8F:4D:75:D5:22:D8:5B:0E:7E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/13fbf8a7-e8a6-4b17-8f89-7e371ba7dac3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.172.6.0/24 Signature Algorithm: sha256WithRSAEncryption 85:81:59:24:fb:35:a3:2b:c0:0e:d1:e5:6f:8a:6c:5d:1e:4f: cb:e5:02:ac:89:73:db:8e:d8:a4:d9:64:24:29:5f:09:0c:b2: bf:e1:a4:ce:b1:6a:62:52:38:61:b5:e5:0d:b2:4f:62:8a:fc: 81:c6:a3:9e:d4:12:87:2b:0f:c8:d0:64:2a:2e:3b:7b:d0:06: 0c:07:ef:57:3c:65:da:7f:1b:3d:51:20:5f:64:23:cf:75:3e: a0:6c:2d:51:64:a8:79:7b:86:4a:bf:71:5f:39:1c:7f:04:8e: 10:d2:bb:81:33:26:bf:b9:60:ed:7c:2b:9c:52:cf:e4:f4:8a: dc:3d:1e:e8:de:b1:c1:ea:e7:92:8c:69:c8:d1:0b:20:54:ec: 76:04:6e:49:18:71:5d:d5:74:ec:8b:8b:a5:91:4c:37:34:5c: 80:ce:41:21:f3:a1:03:1c:70:22:3e:27:f6:00:dc:44:61:97: 11:95:23:2c:cb:59:4d:2e:54:87:3e:74:0d:13:c7:af:4b:79: 47:ed:15:cf:0d:5d:88:6f:12:6d:69:d1:0f:41:c9:4e:c8:0b: b9:4f:64:12:e4:2f:cd:8e:de:5b:54:c3:6a:c5:ef:e9:7d:6e: 80:5d:d4:de:45:ba:35:d5:30:a9:6a:f2:fe:12:7b:fb:fe:cc: 12:b9:55:16 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQ2RcLLKnqcvomuxFOftrgada8MwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTM0MTE5WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AwY2VjZjUxY2E5ZjUxMDVhNDYzMWEzZDBlYTlkNWE1YmUw ZmI1YzU0NmFjY2E5OGZlOWJkOWQ5ZjM3ODRmYzNkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7v2sw7JbVD5cEkafpT9r6/ZHX2XC9cyIDHYscM+7Wyst7 URwodRdAqga5+woQwXJWkTsU0MojhAhLiQ/gFlnXy36TkrFw7u9Fo+d8inuGFta1 u+r6zq7QqiyhjCew4UPHR+UMU+2cdXcVCoXyHkSdcnPZbknq10Ckdz2mAH9/9MhD hsjsSKzO2wVo0ka/qePBzyvxdpBDGPF86CltVCV03cM3bS1gWIaapJf/3+vnCHnL +2KpIfxZCMXwK0wKHDmeVh4coJ3LA/1lUBJmV8xhef/N+PwCT6EXKE0aNCEeEWyM 26YMc0YshQJO84BcRFmJANmJi9QRSboduOyy53hjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUdoJPuu+ag7Copd+PTXXVIthbDn4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzEzZmJmOGE3LWU4YTYtNGIxNy04Zjg5LTdlMzcxYmE3ZGFjMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASrAYwDQYJKoZIhvcNAQELBQADggEBAIWBWST7NaMrwA7R5W+KbF0eT8vl AqyJc9uO2KTZZCQpXwkMsr/hpM6xamJSOGG15Q2yT2KK/IHGo57UEocrD8jQZCou O3vQBgwH71c8Zdp/Gz1RIF9kI891PqBsLVFkqHl7hkq/cV85HH8EjhDSu4EzJr+5 YO18K5xSz+T0itw9HujescHq55KMacjRCyBU7HYEbkkYcV3VdOyLi6WRTDc0XIDO QSHzoQMccCI+J/YA3ERhlxGVIyzLWU0uVIc+dA0Tx69LeUftFc8NXYhvEm1p0Q9B yU7IC7lPZBLkL82O3ltUw2rF7+l9boBd1N5FujXVMKlq8v4Se/v+zBK5VRY= -----END CERTIFICATE-----Generated at Mon Oct 20 06:04:59 2025 by rpki-client