$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/32730c5b-1f7a-4ea0-af34-5d6f6278655c.roa File: 32730c5b-1f7a-4ea0-af34-5d6f6278655c.roa (raw, json) Hash identifier: QPyod0Tm6tdnpQ4R+g/wIFz7PFouftyZo7jKZMeLdEA= Subject key identifier: 12:0F:89:A5:45:51:25:A7:87:7B:43:FE:7A:35:E1:3E:15:C3:DF:B3 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3D0B5A87F757F55EF92BA9B413998E4C566B97A5 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/32730c5b-1f7a-4ea0-af34-5d6f6278655c.roa Signing time: Sat 18 Oct 2025 18:10:09 +0000 ROA not before: Sat 18 Oct 2025 18:10:09 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.154.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:0b:5a:87:f7:57:f5:5e:f9:2b:a9:b4:13:99:8e:4c:56:6b:97:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 18:10:09 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=c13f1cac3f574fbdeb183d490375127b18834c59465caa77263a8d223d333999, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8e:ad:d7:af:b5:86:e2:ca:e4:18:98:cb:c0: 35:84:4b:2d:96:3a:a2:cf:3c:7c:74:0b:d2:53:38: ad:5d:69:a0:82:af:92:ec:2f:32:b9:e1:ea:d7:03: bc:b2:f1:5b:06:17:2b:c8:27:8f:2b:a9:6a:4b:72: 2a:fb:1a:ec:5f:92:92:29:fb:c6:26:8d:2d:db:ac: 81:77:12:cd:87:0e:d4:88:c2:fa:76:a0:f0:35:58: 3b:44:3c:18:e2:4b:5e:41:a5:99:bc:4e:22:37:7d: 03:40:a9:f3:5b:a8:18:5f:86:1e:55:a4:34:3a:ed: 6b:f4:0c:95:de:f9:ce:9e:2e:7c:54:f4:4b:71:44: 99:dd:e3:c2:35:da:ff:bd:cb:c8:b3:1f:a7:72:d9: 7f:72:05:da:eb:22:a6:21:48:91:c1:fa:c7:e2:17: 91:99:08:7e:8a:27:24:5f:a5:63:b6:5f:f2:99:2d: e3:26:12:99:46:0c:5e:cd:dd:17:b0:cb:f0:39:14: 3f:8e:f8:4b:dd:17:eb:0f:0d:5a:c5:21:4d:0f:13: 50:96:cb:50:40:bd:fc:6e:cf:af:d9:bc:a6:97:59: a3:43:82:b2:67:e7:b3:85:05:bc:fe:6a:73:3e:ad: f5:62:cf:85:a7:f3:09:7b:c6:3e:4c:3d:31:87:88: 98:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:0F:89:A5:45:51:25:A7:87:7B:43:FE:7A:35:E1:3E:15:C3:DF:B3 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/32730c5b-1f7a-4ea0-af34-5d6f6278655c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.154.152.0/22 Signature Algorithm: sha256WithRSAEncryption 0e:ad:a3:6c:5f:40:62:ea:dc:25:63:56:c6:85:d1:84:f1:a0: 84:fa:65:6d:d9:c5:d1:42:0d:b8:33:b6:b6:ed:5b:c4:80:d2: 82:c0:52:4f:6c:df:7a:15:22:bd:e3:15:71:8f:1f:ad:54:0a: e6:b8:21:d9:4e:9b:21:4a:88:53:14:e6:6f:42:d3:d6:58:d2: c2:2c:b3:c6:16:2c:7f:0b:da:8e:73:b6:e3:54:6b:53:46:de: c4:24:a9:34:92:af:9f:2e:c4:d9:e3:a1:94:ed:7c:cf:60:33: 24:dc:89:c4:0c:31:c0:1e:fd:03:e5:79:bd:7b:cc:04:8e:b4: 87:1b:35:00:85:9c:ae:85:0f:f1:5a:69:c0:2c:86:7f:49:d2: c9:02:cf:8f:a1:e5:2b:c5:1a:84:e2:79:65:12:92:3b:9a:69: b1:09:b3:7d:9d:c7:9c:c4:ac:16:cb:a5:53:65:cf:fd:89:20: 40:4b:39:50:61:cc:7f:d7:12:07:16:0e:b2:ce:28:4e:9d:a5: 2d:61:b8:cc:c9:fe:2d:90:95:33:54:b0:f7:8b:23:4d:3e:27: 93:11:f9:8c:15:dd:37:91:15:9c:47:b8:9a:38:b8:6d:c8:1e: d9:68:85:53:32:67:93:9f:86:b9:4d:dc:ce:63:2b:a4:d7:e9: 45:ed:52:75 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPQtah/dX9V75K6m0E5mOTFZrl6UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTgxMDA5WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BjMTNmMWNhYzNmNTc0ZmJkZWIxODNkNDkwMzc1MTI3YjE4 ODM0YzU5NDY1Y2FhNzcyNjNhOGQyMjNkMzMzOTk5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCojq3Xr7WG4srkGJjLwDWESy2WOqLPPHx0C9JTOK1daaCC r5LsLzK54erXA7yy8VsGFyvIJ48rqWpLcir7GuxfkpIp+8YmjS3brIF3Es2HDtSI wvp2oPA1WDtEPBjiS15BpZm8TiI3fQNAqfNbqBhfhh5VpDQ67Wv0DJXe+c6eLnxU 9EtxRJnd48I12v+9y8izH6dy2X9yBdrrIqYhSJHB+sfiF5GZCH6KJyRfpWO2X/KZ LeMmEplGDF7N3Rewy/A5FD+O+EvdF+sPDVrFIU0PE1CWy1BAvfxuz6/ZvKaXWaND grJn57OFBbz+anM+rfViz4Wn8wl7xj5MPTGHiJjxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUEg+JpUVRJaeHe0P+ejXhPhXD37MwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzMyNzMwYzViLTFmN2EtNGVhMC1hZjM0LTVkNmY2Mjc4NjU1Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAISmpgwDQYJKoZIhvcNAQELBQADggEBAA6to2xfQGLq3CVjVsaF0YTxoIT6 ZW3ZxdFCDbgztrbtW8SA0oLAUk9s33oVIr3jFXGPH61UCua4IdlOmyFKiFMU5m9C 09ZY0sIss8YWLH8L2o5ztuNUa1NG3sQkqTSSr58uxNnjoZTtfM9gMyTcicQMMcAe /QPleb17zASOtIcbNQCFnK6FD/FaacAshn9J0skCz4+h5SvFGoTieWUSkjuaabEJ s32dx5zErBbLpVNlz/2JIEBLOVBhzH/XEgcWDrLOKE6dpS1huMzJ/i2QlTNUsPeL I00+J5MR+YwV3TeRFZxHuJo4uG3IHtlohVMyZ5OfhrlN3M5jK6TX6UXtUnU= -----END CERTIFICATE-----Generated at Mon Oct 20 21:11:42 2025 by rpki-client