$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/17fd9d15-e996-4c69-9aee-05a3fbc22edc.roa File: 17fd9d15-e996-4c69-9aee-05a3fbc22edc.roa (raw, json) Hash identifier: YyjptTfqfiXr/fKBHx37plkzTcb4IQW06BYAnQmnBdQ= Subject key identifier: 4C:53:40:FF:A6:BC:20:EB:7E:50:88:30:E2:0E:05:5B:8E:3A:0A:28 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0CC65AE40EAD5E260EE2CA856FD1AD1390BB1250 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/17fd9d15-e996-4c69-9aee-05a3fbc22edc.roa Signing time: Sat 18 Oct 2025 18:21:25 +0000 ROA not before: Sat 18 Oct 2025 18:21:25 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.161.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:c6:5a:e4:0e:ad:5e:26:0e:e2:ca:85:6f:d1:ad:13:90:bb:12:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 18:21:25 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=b562dc354bf317f2f56c0e87b5009b9f5c1ef8893de6d3d2ad6ca4ed58ef2c6a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7a:b8:41:ca:53:9b:60:4c:27:34:c7:5b:28: 67:43:9c:62:08:c4:2d:36:91:8e:60:96:f1:0e:98: 1a:32:f8:b1:09:45:cc:18:6f:b4:87:c4:6a:e7:b6: 60:ac:6b:8e:8d:89:aa:78:8d:ca:bf:a5:4a:5b:48: 68:af:c3:0d:2c:b8:c6:bf:76:12:08:17:a1:b0:21: e9:40:32:7b:88:6b:ce:f9:de:1e:29:22:7e:67:2b: 5c:b5:94:61:9f:64:eb:b5:64:47:d9:b2:e9:27:d2: 3e:13:2e:ed:6c:b1:e7:a8:3a:3a:b5:6c:74:43:d0: 4d:09:5c:0f:ca:17:27:92:70:c3:21:a4:9e:55:e5: 95:d3:b0:6e:86:d3:b3:3a:91:1c:5d:dd:d5:82:b6: a9:19:5e:eb:ff:cd:85:1c:60:c5:a5:a4:dd:27:c5: ec:88:09:65:34:b6:83:55:42:85:06:e1:94:9e:5a: 91:30:d9:47:1c:34:92:00:53:e2:b9:d7:fb:93:67: d3:95:d1:17:03:79:9b:d3:06:f1:c3:8b:fe:0b:e0: a1:8a:8e:3c:c2:5b:7c:48:af:6a:d3:47:f4:03:08: 81:8c:f8:89:e4:03:a4:83:a9:fe:bc:6f:cf:a3:0b: 62:90:db:5a:e4:13:3a:c8:b5:07:f9:5e:b2:65:76: 31:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:53:40:FF:A6:BC:20:EB:7E:50:88:30:E2:0E:05:5B:8E:3A:0A:28 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/17fd9d15-e996-4c69-9aee-05a3fbc22edc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.161.153.0/24 Signature Algorithm: sha256WithRSAEncryption 36:e0:50:c2:8d:09:b8:59:10:98:7b:42:91:c2:40:53:93:1f: ba:50:1b:06:2d:4f:12:7b:f6:99:11:e7:d8:5f:f8:7d:b1:13: b4:36:73:2b:56:92:d8:09:ca:5d:ae:16:96:81:bc:93:55:04: 04:34:92:bb:66:c1:82:ca:35:54:aa:a8:bf:4a:fc:32:a5:f5: e9:23:9c:88:2e:7c:1a:60:1e:d5:95:2c:8b:6c:d0:9b:a4:3f: b3:b7:00:2e:52:34:44:b8:56:43:2c:32:5d:08:f8:af:d0:a2: 14:19:16:17:49:62:13:79:d6:10:2a:4b:b9:54:cf:ba:b7:ee: c1:f6:1d:f7:d8:85:ee:3a:92:d1:44:ec:a7:83:96:71:8f:e0: 5b:cb:c0:11:1b:6a:45:92:d3:d1:0d:6c:8d:0f:2d:d9:10:fb: b5:83:5f:67:c5:8e:7a:f0:95:c6:bd:1e:1b:b0:cf:4d:27:f8: e3:4a:25:15:4e:ec:a9:02:de:13:5d:ff:d7:8c:00:df:12:1b: f9:5e:6f:42:fa:77:f9:c9:c6:97:2d:7d:bf:f2:ab:84:ac:f5: 92:be:73:a5:f8:6d:51:d8:83:fb:0c:97:9b:42:ad:4b:f9:1a: 64:76:9b:36:68:15:8b:ef:47:06:ae:58:dc:54:e2:d4:28:fe: a4:ac:c1:94 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDMZa5A6tXiYO4sqFb9GtE5C7ElAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTgyMTI1WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BiNTYyZGMzNTRiZjMxN2YyZjU2YzBlODdiNTAwOWI5ZjVj MWVmODg5M2RlNmQzZDJhZDZjYTRlZDU4ZWYyYzZhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2erhBylObYEwnNMdbKGdDnGIIxC02kY5glvEOmBoy+LEJ RcwYb7SHxGrntmCsa46Niap4jcq/pUpbSGivww0suMa/dhIIF6GwIelAMnuIa875 3h4pIn5nK1y1lGGfZOu1ZEfZsukn0j4TLu1sseeoOjq1bHRD0E0JXA/KFyeScMMh pJ5V5ZXTsG6G07M6kRxd3dWCtqkZXuv/zYUcYMWlpN0nxeyICWU0toNVQoUG4ZSe WpEw2UccNJIAU+K51/uTZ9OV0RcDeZvTBvHDi/4L4KGKjjzCW3xIr2rTR/QDCIGM +InkA6SDqf68b8+jC2KQ21rkEzrItQf5XrJldjGVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUTFNA/6a8IOt+UIgw4g4FW446CigwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzE3ZmQ5ZDE1LWU5OTYtNGM2OS05YWVlLTA1YTNmYmMyMmVkYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASoZkwDQYJKoZIhvcNAQELBQADggEBADbgUMKNCbhZEJh7QpHCQFOTH7pQ GwYtTxJ79pkR59hf+H2xE7Q2cytWktgJyl2uFpaBvJNVBAQ0krtmwYLKNVSqqL9K /DKl9ekjnIgufBpgHtWVLIts0JukP7O3AC5SNES4VkMsMl0I+K/QohQZFhdJYhN5 1hAqS7lUz7q37sH2HffYhe46ktFE7KeDlnGP4FvLwBEbakWS09ENbI0PLdkQ+7WD X2fFjnrwlca9Hhuwz00n+ONKJRVO7KkC3hNd/9eMAN8SG/leb0L6d/nJxpctfb/y q4Ss9ZK+c6X4bVHYg/sMl5tCrUv5GmR2mzZoFYvvRwauWNxU4tQo/qSswZQ= -----END CERTIFICATE-----Generated at Mon Oct 20 15:44:58 2025 by rpki-client