$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/81dab2dd-062f-43ff-a7f9-3a9db15d7cd9.roa File: 81dab2dd-062f-43ff-a7f9-3a9db15d7cd9.roa (raw, json) Hash identifier: fozxFZ0iohJlaCr2a0moA4GO7Yz/SgBaTlAf9tvQpog= Subject key identifier: 37:77:E1:F7:E4:96:9D:8C:74:0F:D6:A3:CD:0F:B6:CC:3D:15:CE:2A Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4FB82FD21A42A213BFCBFCDE1A286F5AEE01F93F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/81dab2dd-062f-43ff-a7f9-3a9db15d7cd9.roa Signing time: Sat 18 Oct 2025 08:02:30 +0000 ROA not before: Sat 18 Oct 2025 08:02:30 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.173.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:b8:2f:d2:1a:42:a2:13:bf:cb:fc:de:1a:28:6f:5a:ee:01:f9:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 08:02:30 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=2ccbc5af254cd53bf3577d3eec94035e27d63224e42f1078f14b4a892648a891, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5c:1f:61:d5:af:19:7b:f1:96:87:30:d8:36: ca:fa:60:ea:86:6a:06:6d:1b:82:d1:cb:e2:d6:f7: 3d:43:40:f0:3d:78:ae:8c:bf:2e:ea:0c:82:6f:cd: 33:25:e0:7e:46:8c:a5:10:dc:fb:2e:dd:bc:9d:38: 52:de:38:08:70:98:ef:18:78:1f:af:f5:f5:99:56: 4a:01:fb:ea:8e:e6:e6:56:8e:8a:96:fe:d2:77:20: e8:b8:4a:d4:12:82:7f:2a:61:25:7e:3c:47:a8:d5: e4:aa:36:09:71:f7:d3:fe:16:4b:85:57:2c:a6:d3: 2c:ea:25:40:bf:25:0c:1c:4f:3e:f9:18:6d:e8:ad: e1:3c:49:78:f4:93:9b:a7:7c:c1:73:b6:2b:c5:4b: 05:a6:e6:b7:b6:f1:38:b0:56:b0:eb:b7:24:1c:37: 1e:b7:1c:5a:5b:c9:bc:8e:c8:29:d7:8f:86:5a:ca: ed:24:13:fb:1a:c7:31:4e:8b:59:9c:1b:12:c9:aa: d9:90:85:1e:f1:08:64:6e:73:d3:8a:69:7a:85:86: 39:af:9a:0e:7b:ee:45:f3:a4:4c:04:ff:fa:34:71: bc:a6:71:bd:26:ff:c4:74:b3:9c:fb:f3:4c:54:1c: b6:43:67:4e:b0:96:25:58:14:28:e6:7a:9a:90:2a: ef:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:77:E1:F7:E4:96:9D:8C:74:0F:D6:A3:CD:0F:B6:CC:3D:15:CE:2A X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/81dab2dd-062f-43ff-a7f9-3a9db15d7cd9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.173.164.0/24 Signature Algorithm: sha256WithRSAEncryption 89:a7:55:05:f5:ac:6d:d6:2a:c6:25:88:f3:eb:30:aa:ef:ac: ad:67:6b:aa:dd:a7:4f:a7:c6:17:c5:ca:2b:43:9b:ed:18:29: 2d:a7:9c:b3:79:43:01:c2:52:24:df:48:da:6b:9c:0e:e2:ef: 77:cb:50:93:6e:89:35:a4:75:eb:d9:ee:12:26:a0:fa:96:37: 14:d8:af:fa:86:75:d2:21:fc:91:33:54:9b:fa:d2:c7:a8:d4: 63:03:c6:a4:c9:80:27:78:95:3a:55:a8:48:6b:b4:f8:59:7b: e5:b8:ab:88:2b:90:52:9a:43:64:79:1c:47:78:86:cb:07:d2: 0b:ce:30:1f:0d:af:78:34:63:bc:2e:e0:2a:83:40:17:0b:73: cf:71:a5:08:3f:02:8d:4a:be:f8:65:75:1d:e0:0b:2a:31:c4: 50:5b:ef:0e:d9:44:2d:38:ef:1f:9a:ef:80:f1:31:01:1b:0a: fe:4f:8f:ca:cf:5b:22:86:99:27:2c:b3:51:1c:2f:6a:93:6e: 51:ea:16:95:2e:83:a5:f7:23:f4:13:72:b0:ca:c6:4b:2f:f6: e2:40:24:93:ef:ad:8e:c2:92:aa:42:d2:18:e8:12:55:66:4a: 1d:4e:1e:9b:e1:d4:c8:01:45:72:f2:87:fe:6d:de:30:9e:1b: 5e:f7:b8:7f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUT7gv0hpCohO/y/zeGihvWu4B+T8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MDgwMjMwWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AyY2NiYzVhZjI1NGNkNTNiZjM1NzdkM2VlYzk0MDM1ZTI3 ZDYzMjI0ZTQyZjEwNzhmMTRiNGE4OTI2NDhhODkxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDXB9h1a8Ze/GWhzDYNsr6YOqGagZtG4LRy+LW9z1DQPA9 eK6Mvy7qDIJvzTMl4H5GjKUQ3Psu3bydOFLeOAhwmO8YeB+v9fWZVkoB++qO5uZW joqW/tJ3IOi4StQSgn8qYSV+PEeo1eSqNglx99P+FkuFVyym0yzqJUC/JQwcTz75 GG3oreE8SXj0k5unfMFztivFSwWm5re28TiwVrDrtyQcNx63HFpbybyOyCnXj4Za yu0kE/saxzFOi1mcGxLJqtmQhR7xCGRuc9OKaXqFhjmvmg577kXzpEwE//o0cbym cb0m/8R0s5z780xUHLZDZ06wliVYFCjmepqQKu9rAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUN3fh9+SWnYx0D9ajzQ+2zD0VziowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzgxZGFiMmRkLTA2MmYtNDNmZi1hN2Y5LTNhOWRiMTVkN2NkOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASraQwDQYJKoZIhvcNAQELBQADggEBAImnVQX1rG3WKsYliPPrMKrvrK1n a6rdp0+nxhfFyitDm+0YKS2nnLN5QwHCUiTfSNprnA7i73fLUJNuiTWkdevZ7hIm oPqWNxTYr/qGddIh/JEzVJv60seo1GMDxqTJgCd4lTpVqEhrtPhZe+W4q4grkFKa Q2R5HEd4hssH0gvOMB8Nr3g0Y7wu4CqDQBcLc89xpQg/Ao1KvvhldR3gCyoxxFBb 7w7ZRC047x+a74DxMQEbCv5Pj8rPWyKGmScss1EcL2qTblHqFpUug6X3I/QTcrDK xksv9uJAJJPvrY7CkqpC0hjoElVmSh1OHpvh1MgBRXLyh/5t3jCeG173uH8= -----END CERTIFICATE-----Generated at Mon Oct 20 09:49:19 2025 by rpki-client