$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/18333989-54e9-4998-8251-36129bb67fa2.roa File: 18333989-54e9-4998-8251-36129bb67fa2.roa (raw, json) Hash identifier: 8GdN7G9JCZksrxoLTd99+FPwnFtAqh744aiuvbq0ZsQ= Subject key identifier: 46:08:86:38:9C:D8:15:23:0D:DA:E2:04:15:33:7B:BB:B0:95:C8:31 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4943F0302A6A26FF28549CBAF517A2DE4EB977E9 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/18333989-54e9-4998-8251-36129bb67fa2.roa Signing time: Sat 18 Oct 2025 14:20:09 +0000 ROA not before: Sat 18 Oct 2025 14:20:09 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.244.234.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:43:f0:30:2a:6a:26:ff:28:54:9c:ba:f5:17:a2:de:4e:b9:77:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 14:20:09 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=d68fc2e4cb96833ae9f97b50aab0be6198e4ee04becdb4f47d50765240003541, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ae:4b:e3:b4:77:e9:3e:86:53:a6:bf:9e:7a: 40:f7:22:4e:e8:7c:cc:78:6c:eb:4b:b1:1a:ed:22: 0d:d9:f9:2e:cc:53:a9:ed:80:01:eb:15:42:3e:ac: 41:66:67:5b:ec:46:e9:c4:e0:70:f3:48:1c:aa:da: ab:f5:07:c3:32:38:94:23:3d:7f:c9:cc:8b:80:42: 50:a6:ea:7d:48:29:67:65:35:36:0b:b1:90:da:67: fd:04:63:e3:78:8d:20:7b:c7:80:f1:f7:4d:67:a8: cf:57:21:95:6e:48:e9:61:71:83:9f:31:da:81:9c: de:0b:62:75:37:1f:1b:69:34:b8:82:c4:4d:47:4d: c6:9d:a5:f6:76:f4:1a:cf:26:48:5f:63:08:85:c6: 2f:b3:53:75:e1:ec:24:4a:d1:d1:15:74:df:27:9c: 4b:3d:aa:8b:e8:56:ea:b3:94:03:80:85:2e:6c:ef: 04:df:3a:f1:28:70:2e:56:3d:40:ee:6c:e8:b7:26: ff:44:08:48:2d:9a:b3:2a:bf:21:6e:59:1c:3a:4a: 4f:72:d4:72:97:6f:33:ae:11:78:0d:06:d5:b3:9c: f1:63:c7:5b:d6:b3:a3:0d:49:c0:d1:b0:2d:61:c8: 0d:10:20:0d:64:5c:fa:7a:cc:42:14:2b:74:ed:4b: 6f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:08:86:38:9C:D8:15:23:0D:DA:E2:04:15:33:7B:BB:B0:95:C8:31 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/18333989-54e9-4998-8251-36129bb67fa2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.244.234.0/23 Signature Algorithm: sha256WithRSAEncryption 98:90:b8:33:bf:85:ed:6e:b6:ff:72:42:87:e2:e2:01:bf:2e: 66:c8:88:7c:1d:22:1d:d7:18:73:3d:d8:ef:30:15:75:b3:17: f4:e7:6a:d0:03:c3:11:a6:d7:6d:28:92:8f:6d:03:b7:6b:dd: 54:4a:ea:8e:cd:ee:00:64:63:16:44:70:f6:9f:0f:0b:1f:e9: ee:e4:eb:e6:a3:48:94:a0:62:e9:82:1d:5c:51:3b:a5:4a:3d: cc:d7:e8:3c:53:92:73:40:85:a3:47:6f:8f:ef:35:73:b8:ea: 92:35:b1:90:67:f5:25:4a:8a:c6:05:69:fd:44:45:da:01:13: 9d:74:5c:f7:61:68:de:a1:46:e1:e9:70:d0:fa:76:c3:86:da: f1:f4:7b:c4:fd:8e:75:86:b9:8a:0e:7c:0f:3d:f3:f8:c6:db: d2:76:a2:cf:b3:08:5c:5a:b3:7d:08:80:ca:5c:ff:46:31:b2: 4c:72:10:b9:a0:de:51:a8:68:10:0e:3f:83:51:76:05:56:4f: 19:90:68:e6:e2:74:14:52:53:62:ff:82:07:bf:f0:ba:da:2c: 21:a9:38:fa:67:54:7d:2d:f6:22:9d:0a:33:a8:78:af:51:e7: 0d:cf:b0:ec:10:1a:a2:49:27:6f:d4:2b:64:68:34:1f:fe:ae: 49:1a:d8:0f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSUPwMCpqJv8oVJy69Rei3k65d+kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTQyMDA5WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BkNjhmYzJlNGNiOTY4MzNhZTlmOTdiNTBhYWIwYmU2MTk4 ZTRlZTA0YmVjZGI0ZjQ3ZDUwNzY1MjQwMDAzNTQxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCqrkvjtHfpPoZTpr+eekD3Ik7ofMx4bOtLsRrtIg3Z+S7M U6ntgAHrFUI+rEFmZ1vsRunE4HDzSByq2qv1B8MyOJQjPX/JzIuAQlCm6n1IKWdl NTYLsZDaZ/0EY+N4jSB7x4Dx901nqM9XIZVuSOlhcYOfMdqBnN4LYnU3HxtpNLiC xE1HTcadpfZ29BrPJkhfYwiFxi+zU3Xh7CRK0dEVdN8nnEs9qovoVuqzlAOAhS5s 7wTfOvEocC5WPUDubOi3Jv9ECEgtmrMqvyFuWRw6Sk9y1HKXbzOuEXgNBtWznPFj x1vWs6MNScDRsC1hyA0QIA1kXPp6zEIUK3TtS2/3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQURgiGOJzYFSMN2uIEFTN7u7CVyDEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzE4MzMzOTg5LTU0ZTktNDk5OC04MjUxLTM2MTI5YmI2N2ZhMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAES9OowDQYJKoZIhvcNAQELBQADggEBAJiQuDO/he1utv9yQofi4gG/LmbI iHwdIh3XGHM92O8wFXWzF/TnatADwxGm120oko9tA7dr3VRK6o7N7gBkYxZEcPaf Dwsf6e7k6+ajSJSgYumCHVxRO6VKPczX6DxTknNAhaNHb4/vNXO46pI1sZBn9SVK isYFaf1ERdoBE510XPdhaN6hRuHpcND6dsOG2vH0e8T9jnWGuYoOfA898/jG29J2 os+zCFxas30IgMpc/0YxskxyELmg3lGoaBAOP4NRdgVWTxmQaObidBRSU2L/gge/ 8LraLCGpOPpnVH0t9iKdCjOoeK9R5w3PsOwQGqJJJ2/UK2RoNB/+rkka2A8= -----END CERTIFICATE-----Generated at Mon Oct 20 03:13:58 2025 by rpki-client