$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2c69aecc-2f3e-4890-aa5d-16d169f7ad21.roa File: 2c69aecc-2f3e-4890-aa5d-16d169f7ad21.roa (raw, json) Hash identifier: g5CKOoKxCZ8CWbXhp9d1xEe1CWwCver5WSlW0V5ullU= Subject key identifier: 5B:1C:4A:E5:1A:39:97:6F:F8:9F:9F:F0:72:54:12:AD:22:39:A0:1B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 603386EC07412A17B45EAAF986CE8CDF0F793073 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2c69aecc-2f3e-4890-aa5d-16d169f7ad21.roa Signing time: Sat 18 Oct 2025 09:32:36 +0000 ROA not before: Sat 18 Oct 2025 09:32:36 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.172.150.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:33:86:ec:07:41:2a:17:b4:5e:aa:f9:86:ce:8c:df:0f:79:30:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 09:32:36 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=8c46b30bbbf35a90003c9dc7b8800a850e510ca12af7078a6fe2c0bfcea3a5ed, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:51:22:d9:ec:33:65:1f:ea:d5:0b:e9:3f:59: df:04:76:49:eb:4a:80:7e:47:0a:b5:a9:4c:80:5e: 26:91:a9:83:a1:bc:0f:86:fc:05:eb:67:ab:da:e0: 43:02:30:a4:af:47:79:73:de:f2:40:e5:53:c9:b0: 11:2c:83:52:0a:84:b6:50:b2:94:e5:6f:dc:b7:ba: 3d:39:1d:e1:b4:57:b1:cb:ab:46:9b:2f:f3:2e:0e: e1:d7:01:35:55:59:ad:5f:19:cf:9f:01:4f:23:eb: 35:b8:29:57:8b:85:80:96:f8:5a:46:df:c0:c6:cd: 91:bf:69:2b:62:bc:e5:6d:e1:23:73:a7:7f:1a:6d: 26:33:fa:51:c5:b2:63:4d:17:da:4b:ce:79:80:24: b7:f0:c7:ec:55:8a:c9:bc:19:e7:ad:18:ee:59:d6: 9b:a7:f6:b6:cb:6f:03:5c:6f:dd:97:c9:21:69:9c: 63:8a:36:db:86:b5:f3:18:b7:71:21:84:04:2c:15: 03:83:5b:e8:3c:b0:35:93:99:3b:39:ef:a0:36:d7: 7c:9b:9f:df:d5:77:08:64:67:cd:01:98:dd:32:d6: f3:dc:52:3c:b3:ae:5c:47:04:c8:a9:61:f1:4c:cc: 43:d1:43:c6:34:7f:a5:14:62:1b:a4:4f:74:92:98: 07:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:1C:4A:E5:1A:39:97:6F:F8:9F:9F:F0:72:54:12:AD:22:39:A0:1B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2c69aecc-2f3e-4890-aa5d-16d169f7ad21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.172.150.0/23 Signature Algorithm: sha256WithRSAEncryption 43:38:0a:e3:53:ea:b2:dd:85:e6:c4:a7:88:51:f6:52:8f:1c: 5f:c6:16:8d:f5:2f:32:82:29:70:33:78:f4:d1:30:34:23:e5: 08:81:fc:8e:f4:ed:50:34:74:e0:b7:09:57:e1:51:96:37:4d: d0:d6:61:78:88:24:de:3a:d5:47:d8:4f:75:13:ba:f0:48:48: dc:73:e7:d4:68:6a:e7:37:17:e3:20:94:ba:1a:b7:6b:ec:8f: 7d:0f:33:87:f3:18:5e:fc:a5:86:16:12:ab:1d:67:e0:4e:fa: 0e:3d:7e:2d:9a:1e:eb:f9:3d:6d:b1:15:b1:f9:a0:c2:db:40: 59:88:ce:9f:f1:ea:37:4a:1f:f8:1b:ec:61:d7:55:e2:2a:81: fe:9d:0d:42:9f:55:0b:be:c0:57:4b:f4:b9:c0:65:98:fe:3b: 98:b2:c6:a8:e6:f3:15:87:73:19:85:90:e1:63:11:cf:01:9f: 34:53:3b:a4:95:e4:38:32:01:85:59:b8:cd:d6:b5:ad:32:86: 7e:4c:c2:d7:81:4e:62:3e:ca:d5:64:d8:af:02:d7:26:4b:8a: f7:81:26:5b:80:e3:87:9d:54:c5:79:91:b7:34:12:7b:70:57: d5:09:3b:59:6d:a8:ee:6b:63:42:1b:2d:cb:06:87:0b:07:45: f2:82:a5:7e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYDOG7AdBKhe0Xqr5hs6M3w95MHMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MDkzMjM2WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A4YzQ2YjMwYmJiZjM1YTkwMDAzYzlkYzdiODgwMGE4NTBl NTEwY2ExMmFmNzA3OGE2ZmUyYzBiZmNlYTNhNWVkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwUSLZ7DNlH+rVC+k/Wd8EdknrSoB+Rwq1qUyAXiaRqYOh vA+G/AXrZ6va4EMCMKSvR3lz3vJA5VPJsBEsg1IKhLZQspTlb9y3uj05HeG0V7HL q0abL/MuDuHXATVVWa1fGc+fAU8j6zW4KVeLhYCW+FpG38DGzZG/aStivOVt4SNz p38abSYz+lHFsmNNF9pLznmAJLfwx+xVism8GeetGO5Z1pun9rbLbwNcb92XySFp nGOKNtuGtfMYt3EhhAQsFQODW+g8sDWTmTs576A213ybn9/VdwhkZ80BmN0y1vPc UjyzrlxHBMipYfFMzEPRQ8Y0f6UUYhukT3SSmAevAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUWxxK5Ro5l2/4n5/wclQSrSI5oBswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzJjNjlhZWNjLTJmM2UtNDg5MC1hYTVkLTE2ZDE2OWY3YWQyMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESrJYwDQYJKoZIhvcNAQELBQADggEBAEM4CuNT6rLdhebEp4hR9lKPHF/G Fo31LzKCKXAzePTRMDQj5QiB/I707VA0dOC3CVfhUZY3TdDWYXiIJN461UfYT3UT uvBISNxz59Roauc3F+MglLoat2vsj30PM4fzGF78pYYWEqsdZ+BO+g49fi2aHuv5 PW2xFbH5oMLbQFmIzp/x6jdKH/gb7GHXVeIqgf6dDUKfVQu+wFdL9LnAZZj+O5iy xqjm8xWHcxmFkOFjEc8BnzRTO6SV5DgyAYVZuM3Wta0yhn5MwteBTmI+ytVk2K8C 1yZLiveBJluA44edVMV5kbc0EntwV9UJO1ltqO5rY0IbLcsGhwsHRfKCpX4= -----END CERTIFICATE-----Generated at Mon Oct 20 05:17:41 2025 by rpki-client