$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2ca3a532-0729-45d3-ac04-8822b4e66ed2.roa File: 2ca3a532-0729-45d3-ac04-8822b4e66ed2.roa (raw, json) Hash identifier: CduscaJ+DRI5tsjJznhGOwke615gRdR24O9bcfO0yUk= Subject key identifier: 87:5C:49:C6:59:BD:E6:74:88:DC:EF:85:79:CF:98:09:BF:F4:38:D2 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 492C0D32BDEBB9D5B076D48E12C4EF48C1A9DB20 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2ca3a532-0729-45d3-ac04-8822b4e66ed2.roa Signing time: Sat 18 Oct 2025 12:02:22 +0000 ROA not before: Sat 18 Oct 2025 12:02:22 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.161.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:2c:0d:32:bd:eb:b9:d5:b0:76:d4:8e:12:c4:ef:48:c1:a9:db:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 12:02:22 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=0862d6d25cb1d373f19acc94abeaa6915bb3b0bd60744236b00a47d21dfe11a1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:03:5f:6c:f6:72:30:c8:20:c0:c4:6b:48:96: d6:b5:71:0f:ff:67:9d:65:71:4f:3e:02:c6:53:91: 19:e4:e9:d1:4c:eb:d6:1a:2b:47:90:a0:b9:a4:8e: f4:aa:c5:3e:3f:2f:19:a9:34:53:15:0b:df:ea:c3: ec:d8:4e:5e:c6:95:99:01:28:a6:54:d5:c1:49:1c: e4:8a:7b:af:93:ad:40:40:88:e9:d1:ef:86:2b:b7: cc:06:e9:8c:ab:d3:57:33:90:fc:f6:15:d9:ab:19: b6:e2:1c:75:f5:0a:8f:86:e5:e0:43:06:41:a8:22: f7:fd:0c:de:a9:be:c4:4c:2e:79:d4:ed:11:60:ec: 25:29:72:6c:56:4c:80:1f:3e:9d:0b:ae:6d:52:7b: 52:68:74:20:f5:8d:3d:0a:eb:cd:cc:31:ff:89:f7: cc:21:f0:2e:c8:c2:47:55:f8:c8:18:b7:b2:da:c6: d2:a0:83:37:89:fd:e4:78:81:e5:b7:af:a3:9c:40: 17:e9:a5:21:02:e7:87:bf:77:43:0e:59:76:6b:74: ee:c3:66:d7:8b:b2:a1:2b:ae:0e:6d:94:05:9a:ba: 46:5b:94:60:d2:e9:82:41:5b:3e:49:ae:4c:e7:a4: 8e:8d:d7:d6:83:57:98:7d:98:da:60:3c:d8:6d:e6: b8:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:5C:49:C6:59:BD:E6:74:88:DC:EF:85:79:CF:98:09:BF:F4:38:D2 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2ca3a532-0729-45d3-ac04-8822b4e66ed2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.161.16.0/20 Signature Algorithm: sha256WithRSAEncryption 6e:09:32:75:e8:66:5f:47:8c:1f:c4:f7:ea:19:98:13:79:ea: 28:90:04:63:0c:5b:84:2b:04:53:38:df:9b:87:19:6f:c4:0f: 85:74:81:a4:df:39:e4:79:a6:fd:a6:a1:26:4f:66:88:05:e7: 1b:59:05:2e:67:d5:31:a2:ad:50:9d:79:23:ee:31:77:ab:7c: 77:8f:49:72:00:26:3e:78:a9:21:1e:3b:6a:98:c5:60:73:74: 85:f5:d6:13:78:ef:2c:03:b6:c0:f2:b6:14:95:5b:18:2f:d4: 2b:fb:9e:dd:c7:be:29:65:0e:8d:f4:01:73:14:0f:4b:8f:55: 67:66:3a:20:65:12:1a:db:2a:48:81:1a:01:d2:13:6c:ba:60: 0c:6a:16:7a:f5:2a:23:33:1e:d2:2f:78:f9:f6:b8:09:97:1c: 6e:5c:98:5b:87:80:13:90:91:6c:ac:9d:c7:10:51:03:24:f3: 1a:b9:73:54:e5:0d:86:37:69:fc:ac:7c:ef:d6:9d:6c:7a:68: 34:29:a6:d8:b9:75:6b:9a:ca:56:20:0e:0a:fd:d2:25:7d:2e: 83:0c:88:5f:12:b8:e1:de:ad:36:d8:37:94:24:7b:66:c2:82: f9:26:2b:ff:64:d1:df:f6:cc:30:9f:ac:a1:90:ae:34:cb:bf: 92:14:41:4c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSSwNMr3rudWwdtSOEsTvSMGp2yAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTIwMjIyWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AwODYyZDZkMjVjYjFkMzczZjE5YWNjOTRhYmVhYTY5MTVi YjNiMGJkNjA3NDQyMzZiMDBhNDdkMjFkZmUxMWExMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3A19s9nIwyCDAxGtIlta1cQ//Z51lcU8+AsZTkRnk6dFM 69YaK0eQoLmkjvSqxT4/LxmpNFMVC9/qw+zYTl7GlZkBKKZU1cFJHOSKe6+TrUBA iOnR74Yrt8wG6Yyr01czkPz2FdmrGbbiHHX1Co+G5eBDBkGoIvf9DN6pvsRMLnnU 7RFg7CUpcmxWTIAfPp0Lrm1Se1JodCD1jT0K683MMf+J98wh8C7IwkdV+MgYt7La xtKggzeJ/eR4geW3r6OcQBfppSEC54e/d0MOWXZrdO7DZteLsqErrg5tlAWaukZb lGDS6YJBWz5JrkznpI6N19aDV5h9mNpgPNht5riDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUh1xJxlm95nSI3O+Fec+YCb/0ONIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzJjYTNhNTMyLTA3MjktNDVkMy1hYzA0LTg4MjJiNGU2NmVkMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQSoRAwDQYJKoZIhvcNAQELBQADggEBAG4JMnXoZl9HjB/E9+oZmBN56iiQ BGMMW4QrBFM435uHGW/ED4V0gaTfOeR5pv2moSZPZogF5xtZBS5n1TGirVCdeSPu MXerfHePSXIAJj54qSEeO2qYxWBzdIX11hN47ywDtsDythSVWxgv1Cv7nt3Hvill Do30AXMUD0uPVWdmOiBlEhrbKkiBGgHSE2y6YAxqFnr1KiMzHtIvePn2uAmXHG5c mFuHgBOQkWysnccQUQMk8xq5c1TlDYY3afysfO/WnWx6aDQppti5dWuaylYgDgr9 0iV9LoMMiF8SuOHerTbYN5Qke2bCgvkmK/9k0d/2zDCfrKGQrjTLv5IUQUw= -----END CERTIFICATE-----Generated at Mon Oct 20 06:04:49 2025 by rpki-client