$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/614ad9f2-4b14-4bba-8f4a-5ebdad59715a.roa File: 614ad9f2-4b14-4bba-8f4a-5ebdad59715a.roa (raw, json) Hash identifier: 6vlsK8AKGc3F9iepoSU9MgLuA0UITx083144AdNfMD4= Subject key identifier: D7:21:D1:C3:6A:FA:C1:1B:88:3D:61:AA:B2:6A:51:DE:0E:05:0C:00 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 161BAAA667C48D38E07D02D3A347E0DBFCC08561 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/614ad9f2-4b14-4bba-8f4a-5ebdad59715a.roa Signing time: Sat 18 Oct 2025 18:52:26 +0000 ROA not before: Sat 18 Oct 2025 18:52:26 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.238.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:1b:aa:a6:67:c4:8d:38:e0:7d:02:d3:a3:47:e0:db:fc:c0:85:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 18:52:26 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=4a788d9c3f1a613ea0e73846693c4dcbc6eb2496a96114f7d0377e10cc88c632, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f4:55:c8:ac:45:90:a2:ba:c3:05:00:e0:31: b3:30:35:19:0a:ea:4e:28:3c:dd:f8:a5:7c:12:8a: 74:71:dd:d0:c0:3e:61:b4:05:b3:fc:9e:8f:ad:ff: ec:6a:f9:b5:20:81:54:ed:98:61:1b:f5:78:46:8e: c9:6e:6d:a4:fe:57:ab:a8:93:cc:5b:12:fc:76:49: 1a:aa:ea:0c:37:67:ba:e7:fd:18:c8:f3:1e:58:2b: 53:ab:f6:30:d0:58:27:81:f5:fc:86:cb:47:3b:d9: bf:40:0b:25:28:e6:16:18:fc:52:64:14:d9:c9:51: 72:4c:63:aa:dd:c8:32:b1:86:54:d1:50:05:91:49: 04:ca:43:df:fb:8e:6f:2c:4d:ad:d2:60:71:ac:19: 11:de:c1:41:23:6f:b2:e6:9f:31:12:fc:86:10:1c: 25:ed:c0:ff:ff:b6:29:ac:ff:67:60:a4:75:9c:11: a2:52:db:59:a3:f1:ea:18:fa:7e:86:c2:c0:70:66: 4c:69:3b:e9:7f:d3:4e:54:fc:81:42:90:a9:fb:af: db:d5:75:e5:3e:b3:e0:cc:b6:56:c7:3a:22:75:a0: 88:8d:6c:c4:34:d7:03:4d:b7:af:f1:09:0f:94:be: 69:3f:b2:09:a9:37:69:87:22:7b:f7:d8:71:e6:4c: da:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:21:D1:C3:6A:FA:C1:1B:88:3D:61:AA:B2:6A:51:DE:0E:05:0C:00 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/614ad9f2-4b14-4bba-8f4a-5ebdad59715a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.238.248.0/22 Signature Algorithm: sha256WithRSAEncryption a1:bf:0d:fe:95:51:16:b9:07:e3:e6:3a:48:c6:15:bc:f2:df: 8e:db:9a:5e:3d:7f:f7:17:ca:2a:4d:f5:3b:8b:33:c4:db:ac: 65:60:bb:fd:10:06:d9:07:93:df:a0:91:a5:5d:0a:09:4e:5f: 64:c9:4d:ed:02:c3:14:c6:4c:04:cc:23:ce:ce:83:f1:8d:fe: f5:c1:11:f8:6e:ab:78:87:8b:4c:d7:32:87:0b:3f:36:31:0b: e8:91:96:73:61:7c:b0:41:6c:25:3a:d1:a3:81:aa:d5:c2:75: d2:aa:53:57:30:f8:19:8e:a4:a9:48:ca:79:70:a3:06:f3:e1: fd:18:58:ef:0b:17:a1:c9:f5:fe:d0:a8:8b:2b:60:2d:18:d5: d8:8f:7f:b4:f2:63:b8:21:eb:31:a5:65:34:25:ee:83:4d:0e: ff:73:f3:23:61:62:4a:a4:f9:59:7f:2f:57:cf:8c:34:ce:2b: cd:a5:91:73:56:7e:25:a3:b7:89:f4:6f:01:ff:83:65:60:2f: f3:63:a8:3e:6f:47:e4:ce:d2:7f:40:71:1a:19:ba:87:94:d0: f1:3f:77:dd:6a:86:0c:c4:b3:98:14:c8:5f:bf:a6:1c:07:c2: 2d:29:37:79:3a:62:91:0b:c1:11:89:ca:21:78:d4:2d:2f:0c: 66:7a:70:a6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFhuqpmfEjTjgfQLTo0fg2/zAhWEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTg1MjI2WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A0YTc4OGQ5YzNmMWE2MTNlYTBlNzM4NDY2OTNjNGRjYmM2 ZWIyNDk2YTk2MTE0ZjdkMDM3N2UxMGNjODhjNjMyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDP9FXIrEWQorrDBQDgMbMwNRkK6k4oPN34pXwSinRx3dDA PmG0BbP8no+t/+xq+bUggVTtmGEb9XhGjslubaT+V6uok8xbEvx2SRqq6gw3Z7rn /RjI8x5YK1Or9jDQWCeB9fyGy0c72b9ACyUo5hYY/FJkFNnJUXJMY6rdyDKxhlTR UAWRSQTKQ9/7jm8sTa3SYHGsGRHewUEjb7LmnzES/IYQHCXtwP//tims/2dgpHWc EaJS21mj8eoY+n6GwsBwZkxpO+l/005U/IFCkKn7r9vVdeU+s+DMtlbHOiJ1oIiN bMQ01wNNt6/xCQ+Uvmk/sgmpN2mHInv32HHmTNqjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU1yHRw2r6wRuIPWGqsmpR3g4FDAAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzYxNGFkOWYyLTRiMTQtNGJiYS04ZjRhLTVlYmRhZDU5NzE1YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIS7vgwDQYJKoZIhvcNAQELBQADggEBAKG/Df6VURa5B+PmOkjGFbzy347b ml49f/cXyipN9TuLM8TbrGVgu/0QBtkHk9+gkaVdCglOX2TJTe0CwxTGTATMI87O g/GN/vXBEfhuq3iHi0zXMocLPzYxC+iRlnNhfLBBbCU60aOBqtXCddKqU1cw+BmO pKlIynlwowbz4f0YWO8LF6HJ9f7QqIsrYC0Y1diPf7TyY7gh6zGlZTQl7oNNDv9z 8yNhYkqk+Vl/L1fPjDTOK82lkXNWfiWjt4n0bwH/g2VgL/NjqD5vR+TO0n9AcRoZ uoeU0PE/d91qhgzEs5gUyF+/phwHwi0pN3k6YpELwRGJyiF41C0vDGZ6cKY= -----END CERTIFICATE-----Generated at Mon Oct 20 06:09:27 2025 by rpki-client