$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/14451925-f6e9-4908-9830-ab9671ac86d3.roa File: 14451925-f6e9-4908-9830-ab9671ac86d3.roa (raw, json) Hash identifier: hkZBFsyIFh9kyVhGBKAyhytlD+LZgRLEvVERgwvXGDs= Subject key identifier: 71:20:C8:26:0D:74:58:09:43:C0:F1:AD:2C:3F:74:60:06:40:DA:F8 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 64A63C5F1E7F79009294E8F4A1CC0180096EAE97 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/14451925-f6e9-4908-9830-ab9671ac86d3.roa Signing time: Sun 19 Oct 2025 19:20:12 +0000 ROA not before: Sun 19 Oct 2025 19:20:12 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.64.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:a6:3c:5f:1e:7f:79:00:92:94:e8:f4:a1:cc:01:80:09:6e:ae:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 19:20:12 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=6b02c6f28d095d1a5754b33006967bf0c01f897ec5fb1865676f6e0796792ae1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7e:2e:24:b5:a9:a6:ad:cb:e5:bf:d9:1c:07: 7a:50:00:5c:42:b4:72:9e:5d:88:bd:d9:29:b0:11: a9:e2:42:0e:6d:83:fb:45:19:93:a3:10:09:c7:e9: cc:82:dc:d1:99:9a:0c:7a:c1:ad:6f:be:82:bb:02: 48:e2:a7:b5:cc:c2:57:44:6b:c9:bf:1d:06:e2:ca: 10:d8:db:d7:6c:be:5d:18:ea:8b:15:9e:40:aa:e5: 08:6a:d0:33:41:00:9f:90:fb:37:6e:a9:ef:8a:0c: 1a:84:60:a0:de:b0:0a:1f:23:8c:99:ec:90:7a:0c: 00:cc:16:ed:b6:80:8d:41:75:a4:57:03:0f:32:06: 18:1b:76:33:ef:d5:95:94:49:24:b5:a4:39:f9:2a: 9b:57:67:12:ff:84:d2:ce:68:3e:c2:20:22:2b:ec: 0c:99:f7:3c:b4:88:4c:6b:be:c9:7f:6d:79:b2:5a: cb:56:da:a8:b4:88:84:0b:5f:8b:1c:98:0a:e2:1f: db:94:96:68:8a:fa:f2:5f:92:c6:44:6c:9c:4e:27: 47:bf:f6:3e:ec:42:6f:e8:98:5a:aa:c4:41:e4:56: c5:17:06:69:50:6b:4d:eb:e3:92:8d:96:53:e1:33: d5:8b:b2:b3:2f:21:e4:87:c7:99:ce:f8:94:b3:aa: d9:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:20:C8:26:0D:74:58:09:43:C0:F1:AD:2C:3F:74:60:06:40:DA:F8 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/14451925-f6e9-4908-9830-ab9671ac86d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.64.64.0/18 Signature Algorithm: sha256WithRSAEncryption 2b:ad:03:be:de:72:c0:f3:ef:0a:b6:5a:01:02:e6:7e:8a:9f: 7d:26:87:19:19:43:50:ab:62:58:d7:4a:bf:e9:35:2b:11:d3: 4b:aa:79:5d:61:e8:8a:8f:97:b7:8a:7e:b7:e2:9e:36:9d:ea: a3:44:9d:07:34:e0:8d:3d:94:8e:9f:e0:c8:f5:ec:b1:c5:e0: 96:60:3a:cf:fa:f4:d6:0d:c3:76:ba:78:d9:75:ea:48:99:a7: dd:68:32:8b:fb:84:b7:98:c9:c6:59:67:b8:b3:b0:57:7b:f7: ca:b4:b6:d0:c7:e2:dd:47:64:8e:cb:16:05:30:49:61:41:5e: 2f:47:73:4b:a5:26:6c:e3:63:38:53:2d:f1:e5:12:14:b9:6a: 74:82:b2:dd:1f:71:af:02:97:3a:6d:22:3b:c6:64:fd:6b:5f: 86:2e:d5:41:93:55:b0:17:85:1d:e1:3a:bb:10:9b:c0:c1:0e: e4:44:e4:38:e8:7a:c5:91:e6:74:f4:70:bf:8a:5a:c1:b5:0f: cd:20:ab:cf:2b:ff:4a:52:a4:2a:db:6a:6b:8b:df:62:02:fc: b9:fc:4a:10:97:70:ee:e5:89:c1:3b:eb:5c:e7:15:01:67:e1: 2b:0e:f6:ce:de:ee:70:c2:90:5a:14:58:cc:d8:35:13:d0:bf: 44:09:e1:57 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZKY8Xx5/eQCSlOj0ocwBgAlurpcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTkyMDEyWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A2YjAyYzZmMjhkMDk1ZDFhNTc1NGIzMzAwNjk2N2JmMGMw MWY4OTdlYzVmYjE4NjU2NzZmNmUwNzk2NzkyYWUxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwfi4ktammrcvlv9kcB3pQAFxCtHKeXYi92SmwEaniQg5t g/tFGZOjEAnH6cyC3NGZmgx6wa1vvoK7Akjip7XMwldEa8m/HQbiyhDY29dsvl0Y 6osVnkCq5Qhq0DNBAJ+Q+zduqe+KDBqEYKDesAofI4yZ7JB6DADMFu22gI1BdaRX Aw8yBhgbdjPv1ZWUSSS1pDn5KptXZxL/hNLOaD7CICIr7AyZ9zy0iExrvsl/bXmy WstW2qi0iIQLX4scmAriH9uUlmiK+vJfksZEbJxOJ0e/9j7sQm/omFqqxEHkVsUX BmlQa03r45KNllPhM9WLsrMvIeSHx5nO+JSzqtmZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUcSDIJg10WAlDwPGtLD90YAZA2vgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzE0NDUxOTI1LWY2ZTktNDkwOC05ODMwLWFiOTY3MWFjODZkMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYSQEAwDQYJKoZIhvcNAQELBQADggEBACutA77ecsDz7wq2WgEC5n6Kn30m hxkZQ1CrYljXSr/pNSsR00uqeV1h6IqPl7eKfrfinjad6qNEnQc04I09lI6f4Mj1 7LHF4JZgOs/69NYNw3a6eNl16kiZp91oMov7hLeYycZZZ7izsFd798q0ttDH4t1H ZI7LFgUwSWFBXi9Hc0ulJmzjYzhTLfHlEhS5anSCst0fca8ClzptIjvGZP1rX4Yu 1UGTVbAXhR3hOrsQm8DBDuRE5DjoesWR5nT0cL+KWsG1D80gq88r/0pSpCrbamuL 32IC/Ln8ShCXcO7licE761znFQFn4SsO9s7e7nDCkFoUWMzYNRPQv0QJ4Vc= -----END CERTIFICATE-----Generated at Mon Oct 20 03:08:39 2025 by rpki-client