$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/75419034-ac85-4875-901e-a37dc2439223.roa File: 75419034-ac85-4875-901e-a37dc2439223.roa (raw, json) Hash identifier: SK56mE47xotrFp/cLj1/KkueKVsmKSszoarwLI1AfKk= Subject key identifier: B0:E2:27:E5:AB:48:5B:7B:CC:29:A8:BA:AF:E6:1F:88:4C:A0:98:C4 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 74C7176569A7C4E951E8837E63EFCE4529174D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/75419034-ac85-4875-901e-a37dc2439223.roa Signing time: Sat 18 Oct 2025 06:21:22 +0000 ROA not before: Sat 18 Oct 2025 06:21:22 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.154.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:c7:17:65:69:a7:c4:e9:51:e8:83:7e:63:ef:ce:45:29:17:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 06:21:22 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=06311a4687bea3361b917d6747f814d1e42eb427241ab963728137a86b211996, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c7:c2:5a:97:75:ed:9e:d8:3a:1a:69:ce:83: ef:08:0a:83:ae:0a:a0:25:85:eb:03:96:db:ed:9c: b5:f8:8b:97:e3:bd:37:a1:11:0f:d5:46:e9:60:b4: 0e:95:48:d3:8b:87:bf:a3:a3:3b:ca:b7:73:d9:49: f6:87:55:72:bb:e4:c4:6f:1d:ec:c5:61:53:db:ef: 29:c1:31:9c:1c:3b:13:6f:b5:e6:41:a3:95:a6:b8: 50:6d:04:be:4f:0c:41:78:4d:dd:02:ed:12:2c:a5: 5e:86:53:73:f0:c4:4f:6c:ce:43:3c:59:53:e9:bd: f6:a4:cb:06:36:45:ac:a5:70:b5:31:96:80:3e:3a: 42:22:70:b9:65:a0:72:fd:9e:0a:b4:01:29:ad:c8: 0e:a8:75:f3:3d:57:40:b7:40:92:f2:69:cc:3f:fb: d8:10:24:78:62:6c:c9:4f:f6:bb:68:b4:ec:77:38: ad:06:87:5d:e1:d1:9b:57:3a:9a:18:d6:93:cd:3c: 52:19:ce:4b:34:9a:b6:32:91:6e:d4:4a:85:81:88: e0:3f:97:2a:6f:35:43:21:04:ef:08:1a:d8:cc:af: ec:08:80:8d:7d:3d:2d:32:c8:16:27:81:a5:af:90: 72:e2:ca:4c:0d:83:5e:b6:63:8e:f1:d2:19:c7:08: 56:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:E2:27:E5:AB:48:5B:7B:CC:29:A8:BA:AF:E6:1F:88:4C:A0:98:C4 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/75419034-ac85-4875-901e-a37dc2439223.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.154.152.0/24 Signature Algorithm: sha256WithRSAEncryption 13:57:31:df:64:de:a0:f8:c5:29:71:6d:2a:0e:21:5f:52:24: bf:7a:10:7f:da:1d:b2:4d:1f:49:1b:02:4b:1d:d8:c5:8e:50: bd:df:87:86:a0:fd:06:e3:1a:9d:53:8a:75:fb:f9:ac:0c:91: b9:50:03:f3:2b:e3:84:c8:71:49:dc:e6:ca:43:a9:48:8d:16: a2:17:af:15:5e:3b:b4:33:3e:ed:91:03:90:44:ed:4f:78:7d: 4f:00:56:49:d4:f9:38:5c:54:90:5f:de:7f:d4:e3:e6:fb:9a: 5c:d2:be:d1:d3:2f:c2:11:61:e9:41:9b:95:b2:69:15:2f:7b: a8:90:14:39:a2:80:bd:2d:28:82:74:55:0c:5d:82:81:7e:c3: 46:41:65:6e:e0:1b:85:97:76:4a:eb:87:2a:a2:44:a4:dc:76: 21:24:1b:15:0e:24:e7:78:19:60:a8:07:3d:29:c3:08:6b:f0: 74:1c:93:76:25:de:68:d0:29:4f:2c:d4:9e:45:7b:36:8c:c0: b1:2e:25:5a:33:1a:49:66:00:fd:51:14:e3:34:ff:92:86:40: fd:0d:5e:03:d6:88:00:1b:f6:10:92:f4:81:d8:02:f7:cb:39: 8a:09:9a:1e:24:d4:65:13:39:2e:69:cd:3e:2f:8b:e2:21:07: 0c:fb:f5:a4 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITdMcXZWmnxOlR6IN+Y+/ORSkXTTANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzJkZjZmM2IzYTM0YjYzODZkMWEzMmQ4ZjRmYTMxNzhlZjMx ODg3ZDhiNDI4ZGZhYTQ3NjAeFw0yNTEwMTgwNjIxMjJaFw0yNTExMjIyMzU5NTla MHoxSTBHBgNVBAUTQDA2MzExYTQ2ODdiZWEzMzYxYjkxN2Q2NzQ3ZjgxNGQxZTQy ZWI0MjcyNDFhYjk2MzcyODEzN2E4NmIyMTE5OTYxLTArBgNVBAMTJDVmMjc2MDQ1 LTViOWYtNDVlZi05MjNkLWYzZmNlMjRhNjIyNTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBALXHwlqXde2e2Doaac6D7wgKg64KoCWF6wOW2+2ctfiLl+O9 N6ERD9VG6WC0DpVI04uHv6OjO8q3c9lJ9odVcrvkxG8d7MVhU9vvKcExnBw7E2+1 5kGjlaa4UG0Evk8MQXhN3QLtEiylXoZTc/DET2zOQzxZU+m99qTLBjZFrKVwtTGW gD46QiJwuWWgcv2eCrQBKa3IDqh18z1XQLdAkvJpzD/72BAkeGJsyU/2u2i07Hc4 rQaHXeHRm1c6mhjWk808UhnOSzSatjKRbtRKhYGI4D+XKm81QyEE7wga2Myv7AiA jX09LTLIFieBpa+QcuLKTA2DXrZjjvHSGccIVp0CAwEAAaOCArEwggKtMB0GA1Ud DgQWBBSw4iflq0hbe8wpqLqv5h+ITKCYxDAfBgNVHSMEGDAWgBQlrdNCsB63pY6t GZAmiLVLP4H0uDAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzg1MWNlZjE3LTEz MmEtNDMzNy1iN2QxLWJmMTZhNTJmZmQwMy9kZjZmM2IzYTM0YjYzODZkMWEzMmQ4 ZjRmYTMxNzhlZjMxODg3ZDhiNDI4ZGZhYTQ3Ni5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9mNzAzNjk2ZS1lNDdiLTRjMjAtYmQ5My02Zjgw OTA0ZTQyZDIvNzU0MTkwMzQtYWM4NS00ODc1LTkwMWUtYTM3ZGMyNDM5MjIzLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMt NmY4MDkwNGU0MmQyL3RqaHRHakxZOVBveGVPOHhpSDJMUW8zNnBIWS5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEABKamDANBgkqhkiG9w0BAQsFAAOCAQEAE1cx32TeoPjFKXFtKg4hX1Ikv3oQ f9odsk0fSRsCSx3YxY5Qvd+HhqD9BuManVOKdfv5rAyRuVAD8yvjhMhxSdzmykOp SI0WohevFV47tDM+7ZEDkETtT3h9TwBWSdT5OFxUkF/ef9Tj5vuaXNK+0dMvwhFh 6UGblbJpFS97qJAUOaKAvS0ognRVDF2CgX7DRkFlbuAbhZd2SuuHKqJEpNx2ISQb FQ4k53gZYKgHPSnDCGvwdByTdiXeaNApTyzUnkV7NozAsS4lWjMaSWYA/VEU4zT/ koZA/Q1eA9aIABv2EJL0gdgC98s5igmaHiTUZRM5LmnNPi+L4iEHDPv1pA== -----END CERTIFICATE-----Generated at Mon Oct 20 11:13:37 2025 by rpki-client