$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/43db8e44-3028-489d-8fcc-7861577b45ea.roa File: 43db8e44-3028-489d-8fcc-7861577b45ea.roa (raw, json) Hash identifier: vxfwH2ghZJ2LcHiJMOsTl/DXdXMidvGVhBBcT61BXSY= Subject key identifier: 19:5D:1A:62:C5:D6:6A:EE:0C:37:12:C3:77:FF:C6:99:1F:1D:E7:64 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 72F58B620C9BAEE98E95742AD46502310F1A3776 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/43db8e44-3028-489d-8fcc-7861577b45ea.roa Signing time: Sat 18 Oct 2025 17:35:02 +0000 ROA not before: Sat 18 Oct 2025 17:35:02 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.154.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:f5:8b:62:0c:9b:ae:e9:8e:95:74:2a:d4:65:02:31:0f:1a:37:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 17:35:02 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=ba0a7376a5dae648a2b941c34db07a305a55dffb35a0479f7793377d6654db0a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:50:3b:c1:35:03:87:cc:66:9a:af:06:58:36: 02:40:a8:70:2c:4e:13:6d:fa:fd:49:de:a8:4d:90: a1:0f:07:b1:4f:a0:d4:35:9e:37:c0:ab:4f:02:12: ac:fb:25:79:a8:47:c8:dc:9b:6a:53:38:27:c9:cd: 1e:d5:27:48:a8:a6:7c:b6:ed:70:7b:3d:be:70:4e: c2:00:7e:dc:27:c1:be:4f:11:83:54:06:2c:a3:49: 01:5a:8b:59:19:94:92:23:cf:2a:08:43:ea:20:be: 46:10:e0:88:5a:c9:00:98:c7:b9:8b:0c:63:c3:6b: 2c:55:40:6d:c2:bc:9f:ea:4c:47:b0:23:be:48:f0: b1:f5:99:a8:a8:48:a3:e8:04:0a:81:92:6f:ce:64: 1d:8d:3e:e3:6f:b0:c1:73:17:f7:da:3e:58:07:5a: 6a:a3:f7:38:69:f3:52:b2:e6:93:1f:73:6d:ba:09: fc:a3:ba:6d:f4:76:b2:27:d1:70:72:ed:7b:c0:e1: c3:4f:2d:0f:14:67:78:18:aa:83:5a:61:d0:aa:65: a4:54:25:0c:a9:8b:cb:2b:d7:3a:e4:e0:84:c8:34: 85:57:b9:68:b5:02:68:28:d8:bb:45:1e:c8:14:0f: e6:ff:e4:8f:12:9c:90:5e:e3:3e:c3:a2:19:2d:57: 54:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:5D:1A:62:C5:D6:6A:EE:0C:37:12:C3:77:FF:C6:99:1F:1D:E7:64 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/43db8e44-3028-489d-8fcc-7861577b45ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.154.204.0/24 Signature Algorithm: sha256WithRSAEncryption ab:e0:12:3c:ac:eb:dc:0f:c4:56:ac:0d:07:b7:f8:d5:55:88: c6:21:c2:bb:b3:42:98:cb:c2:d1:5e:33:1d:74:4b:bf:bc:d8: c4:1a:06:48:21:c5:76:a2:76:51:d5:ae:a2:0b:70:ea:ee:1c: 5e:dc:b8:3d:09:01:f1:fe:76:42:1d:31:6c:d1:b5:18:32:25: 45:a2:b2:bb:59:2d:46:47:d8:e6:5d:00:eb:9e:21:92:a0:3e: 8b:ca:69:42:b7:44:4e:42:cf:e5:ce:3c:2c:b8:2b:d6:43:cb: ea:34:3d:e9:75:22:d4:5d:ee:2e:57:e9:b0:1a:8f:b0:f6:6d: a8:59:94:e5:0d:f2:1f:f7:54:fe:e0:16:69:3d:c9:d3:8c:e0: 95:4b:db:d8:cb:ab:5c:ea:1a:da:b0:32:39:ff:59:3f:fe:c3: a6:05:46:67:e7:25:83:00:bc:98:47:a7:ff:ce:2a:49:77:fb: 3c:d8:54:db:2d:a5:37:07:73:0b:a0:40:3b:77:d1:f0:fa:84: 5c:84:90:b1:c7:48:a5:4c:04:c6:d8:c5:cd:2d:d0:fb:37:ff: a5:6e:34:84:dd:3b:03:5a:d6:bc:0f:2a:9d:a7:fb:96:9c:9e: 9b:13:16:bd:47:84:a8:e2:99:11:d2:1f:0a:42:8c:44:96:87: 3f:f5:dc:37 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcvWLYgybrumOlXQq1GUCMQ8aN3YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTczNTAyWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BiYTBhNzM3NmE1ZGFlNjQ4YTJiOTQxYzM0ZGIwN2EzMDVh NTVkZmZiMzVhMDQ3OWY3NzkzMzc3ZDY2NTRkYjBhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDbUDvBNQOHzGaarwZYNgJAqHAsThNt+v1J3qhNkKEPB7FP oNQ1njfAq08CEqz7JXmoR8jcm2pTOCfJzR7VJ0iopny27XB7Pb5wTsIAftwnwb5P EYNUBiyjSQFai1kZlJIjzyoIQ+ogvkYQ4IhayQCYx7mLDGPDayxVQG3CvJ/qTEew I75I8LH1maioSKPoBAqBkm/OZB2NPuNvsMFzF/faPlgHWmqj9zhp81Ky5pMfc226 Cfyjum30drIn0XBy7XvA4cNPLQ8UZ3gYqoNaYdCqZaRUJQypi8sr1zrk4ITINIVX uWi1Amgo2LtFHsgUD+b/5I8SnJBe4z7DohktV1TVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUGV0aYsXWau4MNxLDd//GmR8d52QwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQzZGI4ZTQ0LTMwMjgtNDg5ZC04ZmNjLTc4NjE1NzdiNDVlYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASmswwDQYJKoZIhvcNAQELBQADggEBAKvgEjys69wPxFasDQe3+NVViMYh wruzQpjLwtFeMx10S7+82MQaBkghxXaidlHVrqILcOruHF7cuD0JAfH+dkIdMWzR tRgyJUWisrtZLUZH2OZdAOueIZKgPovKaUK3RE5Cz+XOPCy4K9ZDy+o0Pel1ItRd 7i5X6bAaj7D2bahZlOUN8h/3VP7gFmk9ydOM4JVL29jLq1zqGtqwMjn/WT/+w6YF RmfnJYMAvJhHp//OKkl3+zzYVNstpTcHcwugQDt30fD6hFyEkLHHSKVMBMbYxc0t 0Ps3/6VuNITdOwNa1rwPKp2n+5acnpsTFr1HhKjimRHSHwpCjESWhz/13Dc= -----END CERTIFICATE-----Generated at Mon Oct 20 06:11:20 2025 by rpki-client