$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8019147f-b736-46a5-84c2-b391f57fc4f1.roa File: 8019147f-b736-46a5-84c2-b391f57fc4f1.roa (raw, json) Hash identifier: CNv9ls+0FZMFb4L3dCUC9xXU3uzr260RuAJr6EVsWzU= Subject key identifier: 5B:D7:95:CF:CD:F4:B5:7A:60:EF:AA:20:27:27:C8:BA:B7:EA:5D:B5 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 31D03336952AA1A29F2CBCBEF692E7069E88F3D3 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8019147f-b736-46a5-84c2-b391f57fc4f1.roa Signing time: Sat 18 Oct 2025 22:11:29 +0000 ROA not before: Sat 18 Oct 2025 22:11:29 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.239.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:d0:33:36:95:2a:a1:a2:9f:2c:bc:be:f6:92:e7:06:9e:88:f3:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 22:11:29 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=1e51177b543e9efdba95c21466f11d3c937ba4d9234a45265c06aa8318f44f85, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:79:c3:50:12:2c:ce:9c:75:9c:03:5f:73:db: bc:91:3b:49:dd:c8:70:c0:7b:36:98:a1:37:5d:ab: 1d:53:ce:e1:9e:8c:3e:72:ba:ec:b6:ca:49:f5:c9: d2:00:c9:dc:80:8d:f9:89:da:97:79:91:c7:93:59: b3:28:56:0d:c9:dc:6b:2b:f9:c5:43:a3:4f:8e:95: 10:18:33:08:f7:d3:4b:5f:2c:13:c1:c0:db:5e:78: 62:fb:f8:60:b2:d5:a7:3d:03:17:81:50:fc:7a:c4: 3a:2f:14:75:fe:81:f5:1b:34:9d:ba:4d:a7:3d:57: 2c:37:00:8c:bb:8d:2b:43:58:29:bd:10:ff:db:4c: 17:16:15:78:1d:72:19:69:4e:66:cc:e2:1f:60:28: 6f:d1:f8:e6:7f:85:d6:77:80:f1:98:d9:a3:71:71: 46:40:34:bb:d3:73:c9:e9:0b:37:64:c3:64:1f:4f: 1e:0e:a5:50:d0:bc:18:89:34:80:f0:f8:f8:f0:0b: 9b:40:b6:53:31:9b:b4:45:d9:85:26:fc:8c:3c:c0: 6f:f3:0e:7f:5d:0d:3c:6f:78:58:db:6f:0d:50:2f: 48:ed:7f:89:35:24:61:cb:6f:47:7f:60:46:6c:99: bb:9e:a6:4e:72:24:3f:6c:26:2f:85:fa:9d:80:d5: 3b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:D7:95:CF:CD:F4:B5:7A:60:EF:AA:20:27:27:C8:BA:B7:EA:5D:B5 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8019147f-b736-46a5-84c2-b391f57fc4f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.239.232.0/24 Signature Algorithm: sha256WithRSAEncryption 17:eb:b0:f1:e1:9f:d1:ff:18:2b:9f:10:aa:51:9d:95:ea:c8: 6a:56:92:65:01:d4:e3:b4:6e:c1:9e:41:8e:cf:2c:32:e6:10: 74:4a:d2:0d:9c:04:f2:45:ad:7d:26:c5:2a:67:45:03:a9:1e: f2:ba:c0:16:a7:b7:f4:29:a4:c0:69:37:08:ad:48:1a:ab:94: ae:dc:aa:b2:64:71:ed:78:7b:8a:0e:a4:00:79:a1:1d:ba:d8: 05:89:23:05:97:fb:60:76:25:2f:8f:e9:f9:f1:6a:63:e5:42: b0:88:a8:b9:e9:e7:cc:96:f8:e1:64:d4:a8:17:db:a3:d1:ce: 70:88:16:12:3f:cc:2e:56:c5:72:0f:77:24:11:f6:6f:45:5f: fb:65:a1:85:66:f2:62:d0:be:82:7f:95:b9:5a:61:9b:b4:4c: f3:ce:5c:15:f1:9a:e8:5f:cb:e4:79:a0:3b:14:fa:f5:90:dc: 3b:ac:33:97:04:a7:f1:46:5d:b7:63:49:13:ea:75:af:33:16: 8a:4a:51:0e:81:de:66:0c:63:c2:b2:be:0a:58:3b:44:9f:17: 2e:eb:87:e5:c1:c0:13:2a:bf:40:a1:4a:03:35:4b:04:fc:59: a2:27:66:f3:a9:de:fa:e4:f6:db:db:0e:1a:02:b8:4f:a1:42: f6:31:f3:ad -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMdAzNpUqoaKfLLy+9pLnBp6I89MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MjIxMTI5WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AxZTUxMTc3YjU0M2U5ZWZkYmE5NWMyMTQ2NmYxMWQzYzkz N2JhNGQ5MjM0YTQ1MjY1YzA2YWE4MzE4ZjQ0Zjg1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCZecNQEizOnHWcA19z27yRO0ndyHDAezaYoTddqx1TzuGe jD5yuuy2ykn1ydIAydyAjfmJ2pd5kceTWbMoVg3J3Gsr+cVDo0+OlRAYMwj300tf LBPBwNteeGL7+GCy1ac9AxeBUPx6xDovFHX+gfUbNJ26Tac9Vyw3AIy7jStDWCm9 EP/bTBcWFXgdchlpTmbM4h9gKG/R+OZ/hdZ3gPGY2aNxcUZANLvTc8npCzdkw2Qf Tx4OpVDQvBiJNIDw+PjwC5tAtlMxm7RF2YUm/Iw8wG/zDn9dDTxveFjbbw1QL0jt f4k1JGHLb0d/YEZsmbuepk5yJD9sJi+F+p2A1TuLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUW9eVz830tXpg76ogJyfIurfqXbUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzgwMTkxNDdmLWI3MzYtNDZhNS04NGMyLWIzOTFmNTdmYzRmMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAS7+gwDQYJKoZIhvcNAQELBQADggEBABfrsPHhn9H/GCufEKpRnZXqyGpW kmUB1OO0bsGeQY7PLDLmEHRK0g2cBPJFrX0mxSpnRQOpHvK6wBant/QppMBpNwit SBqrlK7cqrJkce14e4oOpAB5oR262AWJIwWX+2B2JS+P6fnxamPlQrCIqLnp58yW +OFk1KgX26PRznCIFhI/zC5WxXIPdyQR9m9FX/tloYVm8mLQvoJ/lblaYZu0TPPO XBXxmuhfy+R5oDsU+vWQ3DusM5cEp/FGXbdjSRPqda8zFopKUQ6B3mYMY8KyvgpY O0SfFy7rh+XBwBMqv0ChSgM1SwT8WaInZvOp3vrk9tvbDhoCuE+hQvYx860= -----END CERTIFICATE-----Generated at Mon Oct 20 06:35:04 2025 by rpki-client