$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4583ee26-e466-4efb-b97e-aea902ed944f.roa File: 4583ee26-e466-4efb-b97e-aea902ed944f.roa (raw, json) Hash identifier: HweJxkwazdabiXLZz6e6yRpTj8Jy/b6GFpdkR4MtCFI= Subject key identifier: 97:81:A0:9D:56:B0:0C:D7:EF:C3:DF:54:C7:74:D8:E6:02:71:85:A1 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2389A70A03300D3C7F4297C46C9185C06752225E Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4583ee26-e466-4efb-b97e-aea902ed944f.roa Signing time: Sat 18 Oct 2025 18:34:00 +0000 ROA not before: Sat 18 Oct 2025 18:34:00 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.238.64.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:89:a7:0a:03:30:0d:3c:7f:42:97:c4:6c:91:85:c0:67:52:22:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 18:34:00 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=262e6e390d604fac8336016a335aad29f84549ef2458e67b581a819c432e6d1d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:72:81:c7:6b:00:9b:d5:2b:c9:e0:ad:dc:0e: fd:f4:9d:52:60:fd:ac:14:93:37:45:d9:18:ec:30: a3:45:69:2e:aa:07:9e:64:f6:5b:96:5e:1e:a9:fd: cb:ad:97:d0:e8:9c:41:ac:6d:32:15:bc:f4:a8:cc: 4c:4f:e0:97:a5:e9:19:32:cc:ad:6d:91:13:0e:35: d3:29:73:a1:9d:e4:b5:38:b6:f7:f7:8b:32:c6:96: 2e:27:9d:3d:12:64:15:3b:ed:a5:df:24:1b:9b:da: c1:f6:29:9f:eb:00:fe:d6:0d:ad:2d:03:d2:d7:91: 36:a7:eb:35:1a:6e:fe:83:e0:5e:32:48:e8:9d:6f: 77:7e:c8:49:4e:c6:4e:cd:44:e3:d2:32:68:f1:78: bd:55:78:38:80:ea:f2:fd:f3:a5:99:90:4b:03:06: be:d9:eb:44:b7:0f:4c:c8:05:1a:fb:46:2c:f3:c0: 15:b3:bb:6a:92:60:79:e8:73:07:13:c0:b6:d8:45: 43:ae:76:0c:41:f8:c5:5c:56:a8:13:ab:90:ea:26: c9:c1:f9:be:4b:99:31:58:56:3d:02:62:b2:84:79: 63:3b:5c:6e:bc:fc:52:77:93:21:51:31:dc:50:5b: 31:2c:0c:f5:8a:12:05:31:36:32:f4:19:6f:94:d0: 1c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:81:A0:9D:56:B0:0C:D7:EF:C3:DF:54:C7:74:D8:E6:02:71:85:A1 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4583ee26-e466-4efb-b97e-aea902ed944f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.238.64.0/23 Signature Algorithm: sha256WithRSAEncryption b4:eb:75:88:55:aa:cb:33:de:46:b1:9f:88:66:8a:05:36:7a: 1d:73:b0:11:1c:10:0c:91:1b:ca:62:9f:e5:64:43:5a:b6:a7: a6:23:c9:d3:b2:a1:df:ab:2c:9d:02:4a:0a:0e:4c:6e:69:f9: a7:9e:ff:8f:e1:36:1f:45:73:a6:fc:b3:28:d2:84:4a:e6:c1: c5:7a:12:e2:75:58:a1:e6:66:cd:64:7f:99:7b:a2:0e:96:31: 15:91:d9:35:a8:c6:d2:e3:aa:4d:e2:5c:e5:24:f3:20:26:e5: da:59:de:36:cd:11:79:29:17:54:4f:ed:e4:48:09:93:49:86: e8:a0:38:ce:ff:a2:42:da:d8:44:03:73:3f:ef:03:72:49:1f: 89:03:24:fc:41:44:b9:7f:bf:cd:d5:d5:b9:36:08:ce:50:46: 66:83:09:24:dc:9a:c9:7e:27:d9:f4:0e:d6:56:2c:28:1c:48: 07:8f:aa:e4:0b:00:f8:bc:f1:5e:80:4e:80:ff:72:4f:5b:b4: 22:d8:d9:08:9a:ee:c7:ee:e7:20:3a:1e:37:2a:85:89:78:35: 9a:fe:72:91:9c:78:c4:84:5f:91:53:d1:70:0f:ac:15:9f:22: d5:d2:b0:4e:34:6c:aa:2b:62:c0:35:14:0e:60:a1:60:15:b1: 49:78:a7:e7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUI4mnCgMwDTx/QpfEbJGFwGdSIl4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTgzNDAwWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AyNjJlNmUzOTBkNjA0ZmFjODMzNjAxNmEzMzVhYWQyOWY4 NDU0OWVmMjQ1OGU2N2I1ODFhODE5YzQzMmU2ZDFkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCicoHHawCb1SvJ4K3cDv30nVJg/awUkzdF2RjsMKNFaS6q B55k9luWXh6p/cutl9DonEGsbTIVvPSozExP4Jel6RkyzK1tkRMONdMpc6Gd5LU4 tvf3izLGli4nnT0SZBU77aXfJBub2sH2KZ/rAP7WDa0tA9LXkTan6zUabv6D4F4y SOidb3d+yElOxk7NROPSMmjxeL1VeDiA6vL986WZkEsDBr7Z60S3D0zIBRr7Rizz wBWzu2qSYHnocwcTwLbYRUOudgxB+MVcVqgTq5DqJsnB+b5LmTFYVj0CYrKEeWM7 XG68/FJ3kyFRMdxQWzEsDPWKEgUxNjL0GW+U0BxfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUl4GgnVawDNfvw99Ux3TY5gJxhaEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQ1ODNlZTI2LWU0NjYtNGVmYi1iOTdlLWFlYTkwMmVkOTQ0Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAES7kAwDQYJKoZIhvcNAQELBQADggEBALTrdYhVqssz3kaxn4hmigU2eh1z sBEcEAyRG8pin+VkQ1q2p6YjydOyod+rLJ0CSgoOTG5p+aee/4/hNh9Fc6b8syjS hErmwcV6EuJ1WKHmZs1kf5l7og6WMRWR2TWoxtLjqk3iXOUk8yAm5dpZ3jbNEXkp F1RP7eRICZNJhuigOM7/okLa2EQDcz/vA3JJH4kDJPxBRLl/v83V1bk2CM5QRmaD CSTcmsl+J9n0DtZWLCgcSAePquQLAPi88V6AToD/ck9btCLY2Qia7sfu5yA6Hjcq hYl4NZr+cpGceMSEX5FT0XAPrBWfItXSsE40bKorYsA1FA5goWAVsUl4p+c= -----END CERTIFICATE-----Generated at Mon Oct 20 02:58:03 2025 by rpki-client