$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4f056cd7-7e76-46be-86cb-626334272b04.roa File: 4f056cd7-7e76-46be-86cb-626334272b04.roa (raw, json) Hash identifier: JPR7CFTHqPpCZkzMfctqsm9unnVlw76ttn9y02s51gw= Subject key identifier: 65:1D:5B:D0:39:B6:11:8A:D3:47:12:39:81:70:81:69:D4:D5:68:8B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6CEA048B7D51BD84E29D3F5FE1BB6CACC34FDB80 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4f056cd7-7e76-46be-86cb-626334272b04.roa Signing time: Sun 19 Oct 2025 22:21:27 +0000 ROA not before: Sun 19 Oct 2025 22:21:27 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.64.214.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:ea:04:8b:7d:51:bd:84:e2:9d:3f:5f:e1:bb:6c:ac:c3:4f:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 22:21:27 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=8e375cc44ef0ce78526b8d0136b249ef505a846c0ab201b6f5ab6f06f4b38478, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a8:ea:6c:5f:bf:52:c6:88:ec:94:a0:9e:fd: 5b:41:3b:f3:c1:de:f9:02:27:8d:41:d2:78:6d:89: ed:41:69:61:b9:ce:a7:62:5c:71:d3:c9:83:07:7d: 26:48:42:57:60:e8:6f:78:ad:3c:fa:cf:93:5d:c3: e3:a4:a2:26:86:3b:78:49:06:7a:a5:5a:78:5a:ea: 14:07:81:f5:98:52:33:65:79:70:74:5f:35:c5:22: c2:f5:3f:90:a8:e2:0d:d9:e3:83:fb:fa:da:eb:2d: 6f:6a:4e:8b:3e:ac:cf:22:8d:85:e5:36:05:d4:85: b9:6a:1c:e3:be:35:ad:49:ff:44:a6:1d:0f:6a:bc: 77:df:67:39:60:59:7b:2f:6c:d7:57:17:c2:87:71: 6f:43:9d:35:a6:1d:50:d1:a9:72:06:64:b8:6a:52: 62:e9:6c:ea:43:ad:fd:51:cb:37:09:b4:ea:d9:82: 7c:89:de:6b:c4:a5:63:6d:23:e1:42:5b:66:c6:e5: 1f:53:fc:88:f6:85:0b:83:29:df:81:e3:eb:5b:db: 85:ae:a0:eb:28:c5:3d:b4:ca:f2:1a:98:06:15:a4: c0:7d:51:94:59:5b:92:d2:e3:57:b2:3a:b9:cc:f0: 9d:17:c7:ea:f4:68:0b:8a:aa:5b:07:04:fc:ef:0d: a5:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:1D:5B:D0:39:B6:11:8A:D3:47:12:39:81:70:81:69:D4:D5:68:8B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4f056cd7-7e76-46be-86cb-626334272b04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.64.214.0/23 Signature Algorithm: sha256WithRSAEncryption 07:11:f3:6a:34:23:47:ce:fe:83:47:b0:03:9f:ec:f1:2a:a7: 32:13:72:1b:a7:bc:e6:15:83:9b:31:f6:1e:7f:a1:92:40:38: a5:11:07:5d:97:78:77:3b:fd:b0:87:32:ba:ef:4a:74:af:85: d7:cb:ae:fa:76:dd:dc:f8:7e:35:c6:fd:27:03:90:cd:ea:40: 76:2d:cd:1b:ab:d6:0e:ca:78:c3:48:90:42:62:03:f7:62:d4: e8:3b:0e:66:93:62:61:50:ff:c6:70:61:a6:c4:a3:e0:22:97: 94:99:47:c3:98:e9:51:e1:f0:aa:45:21:55:5c:19:96:06:5d: 26:25:af:d6:c9:43:b1:9d:f2:0c:23:c7:ff:32:48:9f:96:60: 9b:36:37:72:a7:87:a3:fe:d0:dc:4b:69:4e:98:22:36:bc:03: cb:7b:91:d7:d4:7c:2f:db:c6:c6:9b:b7:1d:99:2c:05:b8:30: bc:b0:45:25:de:a2:80:fe:4f:3f:42:ab:7c:ac:5d:7a:16:ca: af:c4:6f:fd:05:8c:8f:58:cb:77:cf:8d:f0:71:5f:ca:b9:be: 69:6a:83:84:25:47:9f:1d:95:7e:fd:e2:c8:11:67:1f:ac:c5: 1c:7b:ef:2d:51:f1:cf:2e:fe:b1:1e:e4:b7:f0:2c:70:42:d0: f4:b4:fe:b1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbOoEi31RvYTinT9f4btsrMNP24AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MjIyMTI3WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZTM3NWNjNDRlZjBjZTc4NTI2YjhkMDEzNmIyNDllZjUw NWE4NDZjMGFiMjAxYjZmNWFiNmYwNmY0YjM4NDc4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8qOpsX79SxojslKCe/VtBO/PB3vkCJ41B0nhtie1BaWG5 zqdiXHHTyYMHfSZIQldg6G94rTz6z5Ndw+OkoiaGO3hJBnqlWnha6hQHgfWYUjNl eXB0XzXFIsL1P5Co4g3Z44P7+trrLW9qTos+rM8ijYXlNgXUhblqHOO+Na1J/0Sm HQ9qvHffZzlgWXsvbNdXF8KHcW9DnTWmHVDRqXIGZLhqUmLpbOpDrf1RyzcJtOrZ gnyJ3mvEpWNtI+FCW2bG5R9T/Ij2hQuDKd+B4+tb24WuoOsoxT20yvIamAYVpMB9 UZRZW5LS41eyOrnM8J0Xx+r0aAuKqlsHBPzvDaUNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZR1b0Dm2EYrTRxI5gXCBadTVaIswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzRmMDU2Y2Q3LTdlNzYtNDZiZS04NmNiLTYyNjMzNDI3MmIwNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESQNYwDQYJKoZIhvcNAQELBQADggEBAAcR82o0I0fO/oNHsAOf7PEqpzIT chunvOYVg5sx9h5/oZJAOKURB12XeHc7/bCHMrrvSnSvhdfLrvp23dz4fjXG/ScD kM3qQHYtzRur1g7KeMNIkEJiA/di1Og7DmaTYmFQ/8ZwYabEo+Ail5SZR8OY6VHh 8KpFIVVcGZYGXSYlr9bJQ7Gd8gwjx/8ySJ+WYJs2N3Knh6P+0NxLaU6YIja8A8t7 kdfUfC/bxsabtx2ZLAW4MLywRSXeooD+Tz9Cq3ysXXoWyq/Eb/0FjI9Yy3fPjfBx X8q5vmlqg4QlR58dlX794sgRZx+sxRx77y1R8c8u/rEe5LfwLHBC0PS0/rE= -----END CERTIFICATE-----Generated at Mon Oct 20 11:08:44 2025 by rpki-client