$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2d1b72f9-5160-403a-96f9-dc77c91619dc.roa File: 2d1b72f9-5160-403a-96f9-dc77c91619dc.roa (raw, json) Hash identifier: UfdSi1CrXcCvSkQLVyLUfkys9ZzxcJhp41nnmSEvqfk= Subject key identifier: 86:95:67:2C:69:7D:CA:02:D2:47:B6:8D:4A:77:D2:A1:CC:14:76:3A Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 731ADED896FE78232005EAC032F91396A01D82CB Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2d1b72f9-5160-403a-96f9-dc77c91619dc.roa Signing time: Sat 18 Oct 2025 20:40:06 +0000 ROA not before: Sat 18 Oct 2025 20:40:06 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.154.82.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:1a:de:d8:96:fe:78:23:20:05:ea:c0:32:f9:13:96:a0:1d:82:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 20:40:06 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=d03d746e281b939eeacfaf841fed56c0044a0e2ebeaa32bca6f7cf405452f1bb, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:88:77:e0:a0:27:3a:96:0b:54:fd:a1:eb:19: 69:c8:78:67:02:04:a0:47:8e:aa:d6:56:63:df:1c: 06:f2:3a:5b:3c:22:67:aa:49:7b:60:30:1e:ce:2e: a9:50:e9:57:cb:07:5f:67:50:a2:cc:6a:b8:09:98: eb:00:76:2c:e3:01:8b:0b:7c:01:cf:72:fd:70:f1: 93:2d:1d:2e:53:56:e1:9a:f1:1d:82:eb:ee:61:88: df:f5:74:3a:ae:4c:04:c6:9f:87:27:b6:47:70:93: 62:12:96:87:b1:65:66:c6:41:c3:b5:74:63:c0:c1: fb:64:6c:32:1e:44:d3:21:71:00:a8:7e:92:29:b5: e3:c2:6d:a2:79:2c:ef:ae:34:c0:31:15:a2:eb:69: cf:00:a0:67:e7:6c:2e:b5:e9:63:1a:41:3a:bc:aa: 17:71:6d:50:1e:8b:f1:9d:1f:65:80:3e:91:71:62: 9e:d5:d6:90:41:b7:00:20:e0:ea:7f:77:26:83:e2: b8:44:24:d1:54:3c:f8:b3:81:3e:70:9f:52:33:6a: da:b3:53:6d:ff:80:4d:c1:19:bf:e8:8c:87:6b:85: 4c:5c:8b:6f:29:13:93:c2:1a:d8:cd:dd:c5:a5:f6: 37:34:a9:8d:82:1f:b3:c6:c0:c5:75:f8:ee:77:fe: df:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:95:67:2C:69:7D:CA:02:D2:47:B6:8D:4A:77:D2:A1:CC:14:76:3A X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2d1b72f9-5160-403a-96f9-dc77c91619dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.154.82.0/23 Signature Algorithm: sha256WithRSAEncryption 66:15:e1:3b:ff:46:c4:0c:a7:ab:78:8d:0d:3e:be:99:9c:1c: 41:ff:59:ab:1f:47:1d:dc:fc:fa:33:3b:48:9c:2d:e5:f7:9c: a9:e2:0d:71:ba:0c:46:9d:dc:d8:92:23:ba:c8:40:53:f3:5c: 60:39:a5:62:c9:e1:ef:d2:0a:fc:b9:e9:6f:42:e6:75:7f:db: 98:49:e5:ab:26:d3:ee:73:e5:fb:31:f0:35:cb:eb:71:2c:9d: 08:96:43:65:2a:a9:ff:e5:1b:df:cd:a1:57:6b:fa:53:1e:aa: 8e:e5:ad:57:b5:b7:7a:5f:51:16:0d:54:31:ad:52:22:14:65: 7c:68:ae:de:2a:b9:46:1b:1f:43:b4:1c:8e:be:b5:3d:42:da: 87:fa:f2:9d:43:8d:df:bf:7c:19:2f:3c:83:84:03:03:e6:54: 66:4f:42:f1:12:c8:2c:cc:c3:1f:fb:14:dd:01:bc:4e:8b:45: ff:38:7e:e2:45:87:16:61:f8:74:5f:5d:fe:74:59:59:7c:b9: 0a:ac:f3:8c:89:63:da:a8:eb:97:a3:d8:50:e9:4e:b4:67:30: ca:20:45:47:0c:36:fa:54:49:76:b8:c3:e6:e0:84:e6:4f:cb: d0:da:34:27:ce:ad:27:72:11:70:30:c0:c7:e6:22:b1:09:fd: eb:c2:da:49 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcxre2Jb+eCMgBerAMvkTlqAdgsswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MjA0MDA2WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BkMDNkNzQ2ZTI4MWI5MzllZWFjZmFmODQxZmVkNTZjMDA0 NGEwZTJlYmVhYTMyYmNhNmY3Y2Y0MDU0NTJmMWJiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDiHfgoCc6lgtU/aHrGWnIeGcCBKBHjqrWVmPfHAbyOls8 ImeqSXtgMB7OLqlQ6VfLB19nUKLMargJmOsAdizjAYsLfAHPcv1w8ZMtHS5TVuGa 8R2C6+5hiN/1dDquTATGn4cntkdwk2ISloexZWbGQcO1dGPAwftkbDIeRNMhcQCo fpIptePCbaJ5LO+uNMAxFaLrac8AoGfnbC616WMaQTq8qhdxbVAei/GdH2WAPpFx Yp7V1pBBtwAg4Op/dyaD4rhEJNFUPPizgT5wn1IzatqzU23/gE3BGb/ojIdrhUxc i28pE5PCGtjN3cWl9jc0qY2CH7PGwMV1+O53/t9lAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUhpVnLGl9ygLSR7aNSnfSocwUdjowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzJkMWI3MmY5LTUxNjAtNDAzYS05NmY5LWRjNzdjOTE2MTlkYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESmlIwDQYJKoZIhvcNAQELBQADggEBAGYV4Tv/RsQMp6t4jQ0+vpmcHEH/ WasfRx3c/PozO0icLeX3nKniDXG6DEad3NiSI7rIQFPzXGA5pWLJ4e/SCvy56W9C 5nV/25hJ5asm0+5z5fsx8DXL63EsnQiWQ2Uqqf/lG9/NoVdr+lMeqo7lrVe1t3pf URYNVDGtUiIUZXxort4quUYbH0O0HI6+tT1C2of68p1Djd+/fBkvPIOEAwPmVGZP QvESyCzMwx/7FN0BvE6LRf84fuJFhxZh+HRfXf50WVl8uQqs84yJY9qo65ej2FDp TrRnMMogRUcMNvpUSXa4w+bghOZPy9DaNCfOrSdyEXAwwMfmIrEJ/evC2kk= -----END CERTIFICATE-----Generated at Mon Oct 20 06:09:24 2025 by rpki-client