$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1db595af-c504-429f-8220-ec604230852a.roa File: 1db595af-c504-429f-8220-ec604230852a.roa (raw, json) Hash identifier: hs/7wwCR/rDBef119OQXxXxyGlsW+0Fi01na+3RY/Ys= Subject key identifier: FA:C5:A4:FA:A7:97:FA:70:E6:FE:97:51:DE:EB:D5:1F:C7:EB:96:64 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2FBF14A1FD38981DEC5E226BC7A25DEDA5599F06 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1db595af-c504-429f-8220-ec604230852a.roa Signing time: Sun 19 Oct 2025 22:43:32 +0000 ROA not before: Sun 19 Oct 2025 22:43:32 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.67.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:bf:14:a1:fd:38:98:1d:ec:5e:22:6b:c7:a2:5d:ed:a5:59:9f:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 22:43:32 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=d0b3bd1783d2e0a1490344f79142f602ccd596f13d1ac47c1f924886fb4c9097, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f5:6f:38:9b:b6:37:30:b5:5c:7c:3a:56:c7: 03:4f:57:07:6b:68:f8:81:c2:21:8b:8a:fa:fd:a2: 98:27:f9:40:2e:bc:a4:41:e6:23:32:81:9c:c3:12: 08:09:de:d0:79:71:c0:79:06:1f:bb:46:50:b9:9e: cd:f3:3f:c0:fd:6e:ac:1e:f3:af:d7:3b:a9:81:e8: b0:9a:86:61:70:e8:05:ad:37:4d:98:e2:23:11:92: a9:5e:9a:ec:37:b8:e8:f2:8f:4d:ec:ff:1c:61:de: a9:d3:48:cd:73:3b:80:53:80:09:bd:30:ba:40:3d: a8:60:4a:4e:5a:c6:1f:c8:62:31:3b:1e:9d:7d:6f: 85:d8:2f:16:12:32:f1:7e:1e:5d:29:fa:43:68:9c: cd:40:11:7c:2e:0a:ed:92:4f:cb:4e:90:c1:4f:0c: c0:49:21:b7:93:27:2a:4a:60:5a:27:f7:2e:72:88: ee:1e:5a:77:10:ea:a3:d8:8b:b7:dc:e1:9f:e3:99: b2:9d:93:78:35:48:39:9b:38:04:06:6e:1b:9e:ac: b0:f0:2d:91:d5:e6:22:85:04:08:ca:69:bb:ca:89: 7c:1e:06:0d:cb:d7:38:9e:39:4a:4c:ab:6f:98:61: bc:07:95:43:04:1c:61:9a:83:33:2e:91:ee:93:2f: 52:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:C5:A4:FA:A7:97:FA:70:E6:FE:97:51:DE:EB:D5:1F:C7:EB:96:64 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1db595af-c504-429f-8220-ec604230852a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.67.21.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:b6:a2:7e:93:f0:85:9d:77:cc:4d:33:e1:eb:37:cb:3b:3f: 00:af:d5:96:18:44:bc:07:ac:ab:2f:ab:d1:64:5e:73:51:37: 56:6a:23:c4:73:1b:1f:82:20:37:a7:83:5d:b6:b1:ec:e4:b9: 7f:93:95:c2:ea:ce:94:8d:89:8e:9b:25:44:15:f8:86:1e:6b: 4a:39:10:33:c1:a1:bd:b3:26:05:06:ad:b0:cb:ee:00:6b:b4: fe:37:cd:11:46:21:7c:45:7f:6c:2a:6a:a2:bf:6a:d5:57:cd: af:76:94:f3:21:05:3b:21:07:77:ab:0b:c2:4c:6a:b5:ce:2b: fb:76:ab:3b:8c:47:31:cf:4d:e1:02:16:09:c0:93:fc:d7:32: 37:64:09:e4:07:30:f5:22:09:fe:82:8d:70:9a:dc:c5:79:1c: 6b:81:c9:0f:4e:35:c6:01:90:4b:c1:4e:b1:90:16:58:89:d2: 84:1a:2b:6e:c7:ed:c7:33:e9:06:06:9a:98:2b:bd:97:89:c6: 2b:15:4e:35:ca:b9:75:a6:83:b8:9d:12:71:97:a8:f0:36:09: 54:b4:c8:c6:32:03:fa:ab:f0:df:c9:90:93:55:f2:a6:77:bf: 29:29:fd:51:94:b3:d6:74:44:e7:0d:67:d9:b0:c6:c2:dc:2a: f9:d2:f0:90 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUL78Uof04mB3sXiJrx6Jd7aVZnwYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MjI0MzMyWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BkMGIzYmQxNzgzZDJlMGExNDkwMzQ0Zjc5MTQyZjYwMmNj ZDU5NmYxM2QxYWM0N2MxZjkyNDg4NmZiNGM5MDk3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDM9W84m7Y3MLVcfDpWxwNPVwdraPiBwiGLivr9opgn+UAu vKRB5iMygZzDEggJ3tB5ccB5Bh+7RlC5ns3zP8D9bqwe86/XO6mB6LCahmFw6AWt N02Y4iMRkqlemuw3uOjyj03s/xxh3qnTSM1zO4BTgAm9MLpAPahgSk5axh/IYjE7 Hp19b4XYLxYSMvF+Hl0p+kNonM1AEXwuCu2ST8tOkMFPDMBJIbeTJypKYFon9y5y iO4eWncQ6qPYi7fc4Z/jmbKdk3g1SDmbOAQGbhuerLDwLZHV5iKFBAjKabvKiXwe Bg3L1zieOUpMq2+YYbwHlUMEHGGagzMuke6TL1JpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU+sWk+qeX+nDm/pdR3uvVH8frlmQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzFkYjU5NWFmLWM1MDQtNDI5Zi04MjIwLWVjNjA0MjMwODUyYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASQxUwDQYJKoZIhvcNAQELBQADggEBADq2on6T8IWdd8xNM+HrN8s7PwCv 1ZYYRLwHrKsvq9FkXnNRN1ZqI8RzGx+CIDeng122sezkuX+TlcLqzpSNiY6bJUQV +IYea0o5EDPBob2zJgUGrbDL7gBrtP43zRFGIXxFf2wqaqK/atVXza92lPMhBTsh B3erC8JMarXOK/t2qzuMRzHPTeECFgnAk/zXMjdkCeQHMPUiCf6CjXCa3MV5HGuB yQ9ONcYBkEvBTrGQFliJ0oQaK27H7ccz6QYGmpgrvZeJxisVTjXKuXWmg7idEnGX qPA2CVS0yMYyA/qr8N/JkJNV8qZ3vykp/VGUs9Z0ROcNZ9mwxsLcKvnS8JA= -----END CERTIFICATE-----Generated at Mon Oct 20 08:41:27 2025 by rpki-client