$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/355bea23-903c-4ca5-bcc2-714a61125a85.roa File: 355bea23-903c-4ca5-bcc2-714a61125a85.roa (raw, json) Hash identifier: ylB26wZlaa7+hHn/I8QRcOl/Vx8rRgSnE/Pu+P1LHvs= Subject key identifier: 79:5C:EC:86:92:CC:87:00:43:0B:74:68:B8:04:87:A1:CD:7A:54:2C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 018074729303F6F1029E5BACA7C9641002E9290C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/355bea23-903c-4ca5-bcc2-714a61125a85.roa Signing time: Sat 18 Oct 2025 06:41:06 +0000 ROA not before: Sat 18 Oct 2025 06:41:06 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.161.18.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:80:74:72:93:03:f6:f1:02:9e:5b:ac:a7:c9:64:10:02:e9:29:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 06:41:06 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=45188e3b5c4e380896d350b73ffc8b9ea378c4d81adac61b873676683f559ea7, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:6c:57:26:2b:2e:d4:98:4b:2f:71:d0:11:33: 2c:1f:13:9f:b2:c5:03:df:57:fa:dc:6e:a3:eb:16: bc:6c:f0:2a:7a:50:76:a6:f7:8a:fa:77:a0:c1:f5: 9d:31:9e:11:97:6e:ea:b9:ec:80:fb:91:4f:3c:60: 60:19:d5:9a:fc:31:0e:32:c2:43:83:6d:8d:6d:5e: 16:db:a3:e1:63:d3:3a:b9:40:c1:8b:0f:94:97:1b: 79:e1:a9:b1:76:a9:cd:5e:11:74:54:d7:73:a9:88: 2c:01:09:23:69:3a:0e:0c:20:13:83:9b:e8:17:d5: b5:ce:05:74:72:97:a9:72:ff:70:2d:c6:bd:1c:6f: a1:4d:8f:78:a1:10:a8:70:52:ef:00:9c:a2:34:7f: 03:ee:6b:d8:ba:6d:e2:78:4d:1b:36:5d:f0:63:71: f4:6f:0d:2e:43:7c:1a:ab:ef:10:74:6e:dc:1e:f3: 5f:b3:f0:30:bf:d2:26:50:ed:a3:09:d8:14:fd:b0: fd:e2:4f:16:13:7a:2a:be:5e:eb:36:8b:e8:4c:8b: 51:a2:cc:c8:f7:37:c2:f0:cc:ec:29:2c:8e:ba:e5: 91:4f:f4:3d:ae:80:05:1d:e5:83:b2:54:d5:a3:c1: c5:64:c5:a7:c2:12:cd:b3:89:59:0a:3e:bd:3b:a7: b6:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:5C:EC:86:92:CC:87:00:43:0B:74:68:B8:04:87:A1:CD:7A:54:2C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/355bea23-903c-4ca5-bcc2-714a61125a85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.161.18.0/23 Signature Algorithm: sha256WithRSAEncryption 5f:d2:d5:6c:70:c2:b9:1a:c1:da:e7:42:88:04:7c:89:17:97: ca:f0:36:4a:7f:5b:1e:a6:c7:ba:59:99:38:ed:62:04:af:05: 4a:cf:25:0d:93:fd:1c:96:3c:f3:25:43:3a:72:ed:09:9f:bc: c2:b5:8b:87:93:c3:5c:94:c6:74:cc:b1:74:0a:42:a0:a8:34: 75:51:d7:78:37:20:4a:01:82:c5:fb:28:ca:29:ca:a4:af:13: f4:b6:fa:c8:21:7f:30:89:b1:0e:dc:55:10:9b:19:c6:23:7d: 29:a5:dc:c4:e7:cc:b4:41:f8:7a:c4:67:53:7b:b1:03:f8:7c: 58:38:75:e6:f8:59:57:61:4e:51:6c:03:0d:74:3f:7b:2d:2a: 7b:ba:d7:d5:6c:3e:68:b4:e8:bb:88:9f:0b:ba:84:bd:15:db: 8b:eb:85:c1:11:8f:b1:f7:3b:87:7f:e8:0e:01:98:7e:62:fe: 39:2e:e8:18:3e:70:f7:16:ce:36:05:e4:f9:a8:8a:d3:6a:ad: be:a5:20:e6:90:ec:34:bf:48:2a:23:2d:de:83:d6:c8:d8:d5: 0c:ef:44:cc:c9:14:93:30:65:c3:ac:c2:c6:3f:bc:a1:d0:0e: 6c:f3:04:48:de:e8:c8:d2:8f:e8:ce:12:59:cc:de:38:47:ca: ab:ea:d8:59 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAYB0cpMD9vECnlusp8lkEALpKQwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MDY0MTA2WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A0NTE4OGUzYjVjNGUzODA4OTZkMzUwYjczZmZjOGI5ZWEz NzhjNGQ4MWFkYWM2MWI4NzM2NzY2ODNmNTU5ZWE3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDcbFcmKy7UmEsvcdARMywfE5+yxQPfV/rcbqPrFrxs8Cp6 UHam94r6d6DB9Z0xnhGXbuq57ID7kU88YGAZ1Zr8MQ4ywkODbY1tXhbbo+Fj0zq5 QMGLD5SXG3nhqbF2qc1eEXRU13OpiCwBCSNpOg4MIBODm+gX1bXOBXRyl6ly/3At xr0cb6FNj3ihEKhwUu8AnKI0fwPua9i6beJ4TRs2XfBjcfRvDS5DfBqr7xB0btwe 81+z8DC/0iZQ7aMJ2BT9sP3iTxYTeiq+Xus2i+hMi1GizMj3N8LwzOwpLI665ZFP 9D2ugAUd5YOyVNWjwcVkxafCEs2ziVkKPr07p7Y/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUeVzshpLMhwBDC3RouASHoc16VCwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzM1NWJlYTIzLTkwM2MtNGNhNS1iY2MyLTcxNGE2MTEyNWE4NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESoRIwDQYJKoZIhvcNAQELBQADggEBAF/S1WxwwrkawdrnQogEfIkXl8rw Nkp/Wx6mx7pZmTjtYgSvBUrPJQ2T/RyWPPMlQzpy7QmfvMK1i4eTw1yUxnTMsXQK QqCoNHVR13g3IEoBgsX7KMopyqSvE/S2+sghfzCJsQ7cVRCbGcYjfSml3MTnzLRB +HrEZ1N7sQP4fFg4deb4WVdhTlFsAw10P3stKnu619VsPmi06LuInwu6hL0V24vr hcERj7H3O4d/6A4BmH5i/jku6Bg+cPcWzjYF5PmoitNqrb6lIOaQ7DS/SCojLd6D 1sjY1QzvRMzJFJMwZcOswsY/vKHQDmzzBEje6MjSj+jOElnM3jhHyqvq2Fk= -----END CERTIFICATE-----Generated at Mon Oct 20 02:58:02 2025 by rpki-client