$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7205a059-e3c3-4877-9de2-a24dd0620a94.roa File: 7205a059-e3c3-4877-9de2-a24dd0620a94.roa (raw, json) Hash identifier: 7doQwRk3q+6M2eRys95gtk0sp0ipJrSeD9P4P5YNjuE= Subject key identifier: D2:9E:73:A1:5A:A1:FC:82:96:BC:7C:03:CF:CD:9F:9D:42:58:AB:90 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 44DF7C13EB7063B81F4972560772A81085C1D32A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7205a059-e3c3-4877-9de2-a24dd0620a94.roa Signing time: Sat 18 Oct 2025 23:52:31 +0000 ROA not before: Sat 18 Oct 2025 23:52:31 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.160.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:df:7c:13:eb:70:63:b8:1f:49:72:56:07:72:a8:10:85:c1:d3:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 23:52:31 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=254435c7c8261507d8fb7ed33438b33a605081c7ccbdc6eff5d635449d74fc52, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b6:54:ea:54:1e:b1:8e:2c:ee:23:e1:5f:0b: 8e:20:14:52:7a:6d:d5:34:82:4e:5b:ce:82:62:3e: c0:f8:36:3d:95:5e:f1:8d:7a:97:64:84:e8:53:73: 14:3f:93:60:a6:48:b5:db:d4:43:70:5c:97:92:85: 90:79:09:4a:d1:df:65:fe:28:9b:09:ff:8f:b2:b4: e4:a6:b3:12:5e:dc:52:96:fc:f5:e8:37:e5:4f:d8: 1f:a9:3d:ca:c8:29:5a:e4:98:68:76:fa:34:1b:27: 97:3c:e2:38:5f:56:c9:b3:35:3a:db:0c:30:7c:57: f6:a8:7b:08:64:4a:81:8d:53:ed:5f:e6:c3:f9:ec: bd:77:1a:5d:5e:22:7d:9c:6c:ed:94:9f:a9:6f:31: ef:ef:45:a8:1c:6b:e3:c9:b9:5a:84:91:d9:0c:e8: 45:3d:ce:c3:dc:90:5d:98:53:c3:3c:5c:a9:a6:28: 9d:70:f7:2e:2a:26:ba:e0:83:77:92:26:43:3e:18: 30:34:af:76:87:bf:23:65:21:40:26:51:06:a1:81: 95:34:3c:11:80:4d:ad:26:82:16:7a:de:57:c2:b2: ec:83:dc:2e:76:97:39:50:e2:7e:3e:19:e7:0a:c2: bf:c9:58:6b:8c:00:a9:70:47:c6:b7:99:58:a1:9e: ce:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:9E:73:A1:5A:A1:FC:82:96:BC:7C:03:CF:CD:9F:9D:42:58:AB:90 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7205a059-e3c3-4877-9de2-a24dd0620a94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.160.130.0/24 Signature Algorithm: sha256WithRSAEncryption 55:28:bc:5d:af:3f:82:40:94:15:1f:b6:4b:43:1c:11:2a:34: c3:80:3f:ac:7e:34:8c:68:92:91:a1:68:02:40:83:57:d1:b5: 41:2c:9e:e1:26:5a:6d:90:f1:33:79:23:56:11:4a:57:00:03: 79:42:f8:58:75:ff:69:0d:a2:e3:d5:dd:bf:2d:a5:69:75:e1: 21:bb:09:7a:f5:45:9f:d8:c9:c7:16:34:0e:de:2f:31:15:0d: 1a:3c:65:47:f8:55:93:c3:3d:3d:d3:ba:14:61:de:50:ff:c0: 7b:1b:cf:4b:c1:aa:81:79:f8:85:1b:58:e0:e0:82:61:f6:67: 71:29:48:9c:c3:0e:41:57:24:a5:b9:77:48:8a:b4:eb:d4:fe: 2b:5a:d0:38:6f:29:79:0d:43:04:11:fc:fd:54:31:d1:7c:3b: 57:e0:8b:f0:ac:69:e7:cd:a4:d2:23:55:73:98:b3:0a:2c:0d: 8a:6a:72:33:ea:41:71:71:ae:52:fd:e0:a9:bf:9f:df:7d:f7: 32:cb:08:12:f7:ec:27:1b:e2:29:a2:f2:24:85:3d:d4:5d:ea: c1:9d:29:14:d2:09:ba:24:b2:a3:2d:53:f6:cf:d6:49:35:52: 1f:0e:f8:7f:2c:c7:66:9d:50:9a:cc:f5:98:1d:22:2d:9a:4b: 82:f5:02:db -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURN98E+twY7gfSXJWB3KoEIXB0yowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MjM1MjMxWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AyNTQ0MzVjN2M4MjYxNTA3ZDhmYjdlZDMzNDM4YjMzYTYw NTA4MWM3Y2NiZGM2ZWZmNWQ2MzU0NDlkNzRmYzUyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCbtlTqVB6xjizuI+FfC44gFFJ6bdU0gk5bzoJiPsD4Nj2V XvGNepdkhOhTcxQ/k2CmSLXb1ENwXJeShZB5CUrR32X+KJsJ/4+ytOSmsxJe3FKW /PXoN+VP2B+pPcrIKVrkmGh2+jQbJ5c84jhfVsmzNTrbDDB8V/aoewhkSoGNU+1f 5sP57L13Gl1eIn2cbO2Un6lvMe/vRagca+PJuVqEkdkM6EU9zsPckF2YU8M8XKmm KJ1w9y4qJrrgg3eSJkM+GDA0r3aHvyNlIUAmUQahgZU0PBGATa0mghZ63lfCsuyD 3C52lzlQ4n4+GecKwr/JWGuMAKlwR8a3mVihns4XAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU0p5zoVqh/IKWvHwDz82fnUJYq5AwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzcyMDVhMDU5LWUzYzMtNDg3Ny05ZGUyLWEyNGRkMDYyMGE5NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASoIIwDQYJKoZIhvcNAQELBQADggEBAFUovF2vP4JAlBUftktDHBEqNMOA P6x+NIxokpGhaAJAg1fRtUEsnuEmWm2Q8TN5I1YRSlcAA3lC+Fh1/2kNouPV3b8t pWl14SG7CXr1RZ/YyccWNA7eLzEVDRo8ZUf4VZPDPT3TuhRh3lD/wHsbz0vBqoF5 +IUbWODggmH2Z3EpSJzDDkFXJKW5d0iKtOvU/ita0DhvKXkNQwQR/P1UMdF8O1fg i/CsaefNpNIjVXOYswosDYpqcjPqQXFxrlL94Km/n9999zLLCBL37Ccb4imi8iSF PdRd6sGdKRTSCboksqMtU/bP1kk1Uh8O+H8sx2adUJrM9ZgdIi2aS4L1Ats= -----END CERTIFICATE-----Generated at Mon Oct 20 11:08:31 2025 by rpki-client