$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4876872c-8d00-4623-8832-ed71016f8583.roa File: 4876872c-8d00-4623-8832-ed71016f8583.roa (raw, json) Hash identifier: XwkjF++E4TELKKgEzRheoEywTH7+8z45H8d7kiSHAb8= Subject key identifier: C4:13:E6:EA:9B:76:65:83:5C:6F:AA:1A:67:01:5C:DD:71:95:D7:85 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 31D61146CFB55B0E28D16FAD79C4FFFBDCBA28F8 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4876872c-8d00-4623-8832-ed71016f8583.roa Signing time: Sun 19 Oct 2025 22:43:30 +0000 ROA not before: Sun 19 Oct 2025 22:43:30 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.65.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:d6:11:46:cf:b5:5b:0e:28:d1:6f:ad:79:c4:ff:fb:dc:ba:28:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 22:43:30 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=55b97807b62f7a5857598153e27881038b48c837a08666295f6deb106d4a7dea, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c4:34:18:25:c2:18:1e:a9:a7:fe:2b:35:61: 65:de:7f:68:94:33:1b:df:29:6e:38:fd:14:c1:71: 43:ac:af:05:71:8b:e5:87:36:5b:1b:7c:0e:91:74: 39:a6:a7:b0:1b:a8:48:1c:1f:e9:d5:28:a6:14:98: 93:54:94:ae:03:17:2f:e1:2e:0c:49:1c:58:d3:ad: 21:4e:1d:c7:ba:52:ec:e5:f6:7a:a5:58:c8:7c:eb: 5d:71:66:bc:81:cd:1f:08:e8:03:70:92:3d:e0:45: 5f:11:76:43:67:04:46:ad:25:02:69:a0:37:58:dc: 60:cf:0e:82:22:35:f6:b7:82:d4:97:6e:0f:e3:bd: 47:ee:d2:cb:47:29:09:a3:77:b8:51:76:a4:2f:b7: 4e:a8:82:23:32:43:a6:b8:73:22:59:4a:c6:1b:09: d0:4d:cf:17:0d:4b:1f:49:de:05:47:7f:9e:64:e1: b5:3f:5d:32:62:fa:5e:aa:c3:ec:70:b6:f9:75:8a: 0f:30:4f:e8:01:59:8b:49:e1:06:16:7c:26:6b:0b: 99:43:1a:bd:78:16:fb:06:34:a1:03:f8:e7:7e:54: b1:c1:70:d1:1d:5d:22:3b:d6:54:61:9b:37:d0:1f: 00:14:c1:00:26:ad:66:c7:13:c0:4a:ed:77:62:4b: 56:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:13:E6:EA:9B:76:65:83:5C:6F:AA:1A:67:01:5C:DD:71:95:D7:85 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4876872c-8d00-4623-8832-ed71016f8583.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.65.177.0/24 Signature Algorithm: sha256WithRSAEncryption 54:ee:22:7b:02:aa:c4:3c:19:33:ef:2c:2d:1c:4c:71:7e:6e: ce:a0:48:07:11:b5:ee:46:0d:fa:ba:e2:72:f9:09:d7:ef:3b: 65:db:0e:b7:25:00:9e:85:86:66:d0:d6:1a:00:1d:3b:bc:a0: 0d:35:58:7e:dd:e2:57:03:70:80:e0:52:b7:6c:d1:e6:d5:32: 46:65:58:6d:59:a0:8a:90:49:6b:7d:d8:b0:03:84:79:38:24: f4:ed:67:45:7b:0f:f7:2a:8a:33:55:14:d2:b4:e3:a4:b0:5f: a2:80:c2:62:5c:a5:29:a1:a1:88:61:ca:3f:88:f7:60:98:0d: 7a:54:44:12:35:d7:dd:f0:46:c4:5a:4f:8a:8f:4c:a8:5e:c0: db:6d:61:c5:22:81:ad:3a:57:1d:03:07:0c:ab:46:1f:c7:08: f7:c8:c2:a6:07:0f:18:6a:be:53:9b:2f:50:db:49:b5:a0:36: fa:c0:a7:89:21:43:be:71:6f:c4:f3:d4:6d:b1:ec:3d:04:2d: e1:0a:10:85:53:0a:ea:60:12:e2:9c:1a:65:b9:04:fa:d2:c6: ac:a0:a7:97:10:00:24:ee:82:3d:0c:a5:43:f1:6a:fc:ae:ca: 0b:1d:95:40:f0:ec:01:dc:9f:91:00:64:06:5d:61:97:52:05: 3b:06:9c:59 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMdYRRs+1Ww4o0W+tecT/+9y6KPgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MjI0MzMwWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A1NWI5NzgwN2I2MmY3YTU4NTc1OTgxNTNlMjc4ODEwMzhi NDhjODM3YTA4NjY2Mjk1ZjZkZWIxMDZkNGE3ZGVhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCbxDQYJcIYHqmn/is1YWXef2iUMxvfKW44/RTBcUOsrwVx i+WHNlsbfA6RdDmmp7AbqEgcH+nVKKYUmJNUlK4DFy/hLgxJHFjTrSFOHce6Uuzl 9nqlWMh8611xZryBzR8I6ANwkj3gRV8RdkNnBEatJQJpoDdY3GDPDoIiNfa3gtSX bg/jvUfu0stHKQmjd7hRdqQvt06ogiMyQ6a4cyJZSsYbCdBNzxcNSx9J3gVHf55k 4bU/XTJi+l6qw+xwtvl1ig8wT+gBWYtJ4QYWfCZrC5lDGr14FvsGNKED+Od+VLHB cNEdXSI71lRhmzfQHwAUwQAmrWbHE8BK7XdiS1YDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUxBPm6pt2ZYNcb6oaZwFc3XGV14UwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQ4NzY4NzJjLThkMDAtNDYyMy04ODMyLWVkNzEwMTZmODU4My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASQbEwDQYJKoZIhvcNAQELBQADggEBAFTuInsCqsQ8GTPvLC0cTHF+bs6g SAcRte5GDfq64nL5CdfvO2XbDrclAJ6FhmbQ1hoAHTu8oA01WH7d4lcDcIDgUrds 0ebVMkZlWG1ZoIqQSWt92LADhHk4JPTtZ0V7D/cqijNVFNK046SwX6KAwmJcpSmh oYhhyj+I92CYDXpURBI1193wRsRaT4qPTKhewNttYcUiga06Vx0DBwyrRh/HCPfI wqYHDxhqvlObL1DbSbWgNvrAp4khQ75xb8Tz1G2x7D0ELeEKEIVTCupgEuKcGmW5 BPrSxqygp5cQACTugj0MpUPxavyuygsdlUDw7AHcn5EAZAZdYZdSBTsGnFk= -----END CERTIFICATE-----Generated at Mon Oct 20 06:06:36 2025 by rpki-client