$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/208d6e05-2e16-4780-858c-a97a396ab30a.roa File: 208d6e05-2e16-4780-858c-a97a396ab30a.roa (raw, json) Hash identifier: G8uoRKY4h6oF5svfXAUDgbKyViy6sxFZ751P9UBKqKk= Subject key identifier: 4D:BE:7C:4E:9C:D6:BB:3A:B0:E0:E3:E5:CF:00:82:0C:E6:EE:18:CA Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 19242CF59B71EB88FF094631B6FB088A6CA09F92 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/208d6e05-2e16-4780-858c-a97a396ab30a.roa Signing time: Sat 18 Oct 2025 09:52:30 +0000 ROA not before: Sat 18 Oct 2025 09:52:30 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.160.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:24:2c:f5:9b:71:eb:88:ff:09:46:31:b6:fb:08:8a:6c:a0:9f:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 09:52:30 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=dd59693b6f0047644e4f11d3754b649c29951ff7f874ed9d1080fb325749449a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9c:01:32:77:cb:a7:8f:e2:f0:64:e1:2a:1c: 3e:ea:e4:e6:f9:39:84:a9:88:ba:32:62:b3:22:7d: 6a:3d:4b:92:ff:b3:58:7d:3c:82:83:fc:e1:9e:0b: 2a:ad:9b:61:97:e3:a5:b8:9e:18:c1:fd:f7:47:88: f8:53:ee:7f:fd:8d:ac:6a:a4:32:b8:64:88:9a:36: 97:c4:d2:6c:89:a4:9d:60:9a:00:b6:60:cf:55:95: 4e:ce:15:78:94:22:8d:ed:30:4e:a8:94:4f:f6:9d: 9f:be:71:67:08:7f:af:0e:51:4b:0a:9d:f1:c8:14: e7:55:68:24:05:c4:89:e0:f0:ef:24:00:eb:a6:27: 6f:bb:da:89:34:94:9c:f1:0b:b9:35:4b:bc:ed:5f: 34:96:23:39:cc:43:74:20:1a:b0:eb:a5:1f:8e:e6: 70:c6:75:09:ec:2b:3e:90:c7:12:c4:86:08:c4:0b: 51:3b:27:ff:23:69:76:d3:23:a2:1e:1d:48:bc:63: 7c:3b:b0:43:82:01:1f:36:b8:af:43:85:2e:fc:80: 61:1f:cd:21:21:18:9e:f1:0a:82:db:ee:f9:92:c1: 4b:03:9d:47:cc:a7:10:7f:41:e8:1b:5e:8a:46:a9: 99:cd:e0:54:3f:58:8b:01:03:68:31:0e:c6:30:db: 2c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:BE:7C:4E:9C:D6:BB:3A:B0:E0:E3:E5:CF:00:82:0C:E6:EE:18:CA X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/208d6e05-2e16-4780-858c-a97a396ab30a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.160.195.0/24 Signature Algorithm: sha256WithRSAEncryption 05:69:49:17:5b:e3:9b:4c:d2:3c:b2:d0:ed:33:f4:43:72:31: 63:c0:0e:23:44:b6:53:8a:ed:4c:7f:61:4c:70:d9:e8:57:3c: 2d:b3:8f:05:0f:5b:c6:07:bb:a4:52:d9:ad:cb:2d:a3:b2:bd: 56:f6:17:8d:c5:c3:6a:59:79:9d:c0:58:48:37:80:53:11:ac: c2:f7:fd:90:d9:21:75:d1:87:03:aa:14:77:6f:80:69:e0:f8: d1:9f:13:f0:c4:15:2f:1b:3a:8b:09:89:c2:fd:af:37:27:8a: 1c:d3:a6:8b:78:00:60:de:b3:4e:53:74:5a:56:53:cd:b7:5a: 2c:8a:e9:96:94:ba:74:11:03:be:aa:c3:5b:6a:bf:ca:37:47: f8:39:f9:ab:34:a3:24:50:e5:56:99:02:01:3c:de:0c:80:cb: 49:d6:32:68:34:6e:da:eb:b4:3e:ea:3f:86:09:dc:fa:48:57: 95:9e:99:de:dc:a7:8f:f5:4b:93:c4:39:cf:55:a3:59:d1:b4: d4:ee:f5:ec:9c:15:22:bc:b0:30:22:8f:93:0a:3a:dd:c1:03: 96:a9:bf:88:5b:64:d2:77:79:df:9a:b5:21:68:83:d0:97:06: 3c:e1:cd:47:4d:27:5c:3f:ea:c2:f5:85:d4:4a:b0:71:e3:78: 10:8b:80:69 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGSQs9Ztx64j/CUYxtvsIimygn5IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MDk1MjMwWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BkZDU5NjkzYjZmMDA0NzY0NGU0ZjExZDM3NTRiNjQ5YzI5 OTUxZmY3Zjg3NGVkOWQxMDgwZmIzMjU3NDk0NDlhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7nAEyd8unj+LwZOEqHD7q5Ob5OYSpiLoyYrMifWo9S5L/ s1h9PIKD/OGeCyqtm2GX46W4nhjB/fdHiPhT7n/9jaxqpDK4ZIiaNpfE0myJpJ1g mgC2YM9VlU7OFXiUIo3tME6olE/2nZ++cWcIf68OUUsKnfHIFOdVaCQFxIng8O8k AOumJ2+72ok0lJzxC7k1S7ztXzSWIznMQ3QgGrDrpR+O5nDGdQnsKz6QxxLEhgjE C1E7J/8jaXbTI6IeHUi8Y3w7sEOCAR82uK9DhS78gGEfzSEhGJ7xCoLb7vmSwUsD nUfMpxB/QegbXopGqZnN4FQ/WIsBA2gxDsYw2ywrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUTb58TpzWuzqw4OPlzwCCDObuGMowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzIwOGQ2ZTA1LTJlMTYtNDc4MC04NThjLWE5N2EzOTZhYjMwYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASoMMwDQYJKoZIhvcNAQELBQADggEBAAVpSRdb45tM0jyy0O0z9ENyMWPA DiNEtlOK7Ux/YUxw2ehXPC2zjwUPW8YHu6RS2a3LLaOyvVb2F43Fw2pZeZ3AWEg3 gFMRrML3/ZDZIXXRhwOqFHdvgGng+NGfE/DEFS8bOosJicL9rzcnihzTpot4AGDe s05TdFpWU823WiyK6ZaUunQRA76qw1tqv8o3R/g5+as0oyRQ5VaZAgE83gyAy0nW Mmg0btrrtD7qP4YJ3PpIV5Wemd7cp4/1S5PEOc9Vo1nRtNTu9eycFSK8sDAij5MK Ot3BA5apv4hbZNJ3ed+atSFog9CXBjzhzUdNJ1w/6sL1hdRKsHHjeBCLgGk= -----END CERTIFICATE-----Generated at Mon Oct 20 17:28:54 2025 by rpki-client