$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/85e14f1f-0169-46f5-b042-a08bb5dff768.roa File: 85e14f1f-0169-46f5-b042-a08bb5dff768.roa (raw, json) Hash identifier: bBRUiEF7wbBDLSxuMPahFSZBiI34bwF+hrHF1OU/fsQ= Subject key identifier: E1:A7:18:51:71:68:EF:E4:D3:5F:5E:32:F1:D9:18:27:CB:22:F0:D0 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 52B66BF31727A0C0735708FCA76FC6A030CEED88 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/85e14f1f-0169-46f5-b042-a08bb5dff768.roa Signing time: Sat 18 Oct 2025 15:53:51 +0000 ROA not before: Sat 18 Oct 2025 15:53:51 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.172.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:b6:6b:f3:17:27:a0:c0:73:57:08:fc:a7:6f:c6:a0:30:ce:ed:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 15:53:51 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=ef6c6b87d0f2e9a511b6d7589b6261d045c867ac7de7720587b147a43434cd45, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:2b:e3:f0:21:79:84:d6:97:24:ab:3d:55:55: f6:44:2e:42:b8:20:e9:fd:d0:a3:73:c7:28:40:29: 17:e8:39:37:60:82:6b:e8:f1:4d:31:54:63:4e:59: 9f:f8:91:ac:9e:6a:f8:e7:e5:eb:31:5c:12:c0:04: 95:d2:6d:a7:43:23:4c:77:c2:80:b2:6e:d0:fb:57: e0:96:36:f6:bd:f6:65:c9:ec:d3:8b:4c:df:ab:54: 17:e5:8e:03:f8:94:ee:46:dd:4e:7b:12:68:33:17: c6:ee:b4:ef:37:31:81:ca:a8:5b:f9:eb:1a:16:55: 30:62:6c:7d:ba:1e:7c:23:00:d5:80:75:2c:b4:79: e2:1e:2b:ca:88:c7:bd:c3:3d:2e:39:dc:1e:9a:ed: ec:a9:73:d8:cc:06:db:4a:13:05:f1:bc:ec:99:eb: 8a:e3:68:20:81:20:16:d2:0c:fe:d1:ba:d1:d0:66: e3:10:fd:96:27:c4:4d:cc:ce:4f:cc:80:a8:1d:18: bc:c0:ef:a0:5b:07:58:2b:08:a1:b8:55:d9:c9:9f: cc:f6:54:6a:cc:fb:08:81:aa:be:e0:8c:ae:0d:50: ef:cd:59:2f:ec:15:34:94:60:8a:e7:79:64:c3:c7: 9c:dc:6c:c5:91:f9:e0:1d:36:48:dd:e0:63:bb:43: 71:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:A7:18:51:71:68:EF:E4:D3:5F:5E:32:F1:D9:18:27:CB:22:F0:D0 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/85e14f1f-0169-46f5-b042-a08bb5dff768.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.172.64.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:be:a4:a7:7e:96:e4:94:ec:e3:33:34:65:dd:a7:50:22:a7: 00:8f:9f:d5:7b:20:12:89:e9:81:d9:d0:ce:ec:78:75:c5:22: 6f:12:40:5c:f7:32:5a:6b:ae:46:da:16:0d:da:cd:45:1c:fc: d0:20:6f:31:fd:27:2b:16:b4:95:dc:1c:bc:04:2a:17:df:90: 0a:1f:2c:00:8e:5f:20:9c:c2:22:ca:9b:3d:f5:f4:f2:f8:a3: 80:fb:17:7b:c8:52:9d:ad:ce:9a:ea:e3:7d:1a:de:3a:82:d3: b0:49:6b:ca:3e:b7:18:03:c1:42:77:08:05:4f:87:d2:3a:c0: 2c:5f:bb:c9:19:55:12:69:9d:7f:21:36:34:df:1b:24:13:ef: 9d:36:ec:c5:d6:80:cc:87:2a:19:fb:46:3b:56:32:7f:c6:7c: ed:c1:34:5a:85:a6:12:f8:07:d7:08:05:bd:2c:d0:49:7e:69: 37:5c:2d:53:6b:61:e9:ba:85:bd:d1:65:52:03:a9:c0:d0:1b: ef:4b:1b:4d:7d:95:16:b8:68:47:de:08:37:20:7b:d9:1c:0c: 2f:89:61:7e:6b:aa:2b:1c:5b:7f:e0:27:47:80:38:a1:29:e3: fd:a2:a1:61:a9:89:0c:e7:4f:3b:63:ac:eb:24:63:2c:6c:64: cf:6a:6d:ef -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUrZr8xcnoMBzVwj8p2/GoDDO7YgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTU1MzUxWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BlZjZjNmI4N2QwZjJlOWE1MTFiNmQ3NTg5YjYyNjFkMDQ1 Yzg2N2FjN2RlNzcyMDU4N2IxNDdhNDM0MzRjZDQ1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDPK+PwIXmE1pckqz1VVfZELkK4IOn90KNzxyhAKRfoOTdg gmvo8U0xVGNOWZ/4kayeavjn5esxXBLABJXSbadDI0x3woCybtD7V+CWNva99mXJ 7NOLTN+rVBfljgP4lO5G3U57EmgzF8butO83MYHKqFv56xoWVTBibH26HnwjANWA dSy0eeIeK8qIx73DPS453B6a7eypc9jMBttKEwXxvOyZ64rjaCCBIBbSDP7RutHQ ZuMQ/ZYnxE3Mzk/MgKgdGLzA76BbB1grCKG4VdnJn8z2VGrM+wiBqr7gjK4NUO/N WS/sFTSUYIrneWTDx5zcbMWR+eAdNkjd4GO7Q3G1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU4acYUXFo7+TTX14y8dkYJ8si8NAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzg1ZTE0ZjFmLTAxNjktNDZmNS1iMDQyLWEwOGJiNWRmZjc2OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASrEAwDQYJKoZIhvcNAQELBQADggEBAHu+pKd+luSU7OMzNGXdp1AipwCP n9V7IBKJ6YHZ0M7seHXFIm8SQFz3MlprrkbaFg3azUUc/NAgbzH9JysWtJXcHLwE KhffkAofLACOXyCcwiLKmz319PL4o4D7F3vIUp2tzprq430a3jqC07BJa8o+txgD wUJ3CAVPh9I6wCxfu8kZVRJpnX8hNjTfGyQT75027MXWgMyHKhn7RjtWMn/GfO3B NFqFphL4B9cIBb0s0El+aTdcLVNrYem6hb3RZVIDqcDQG+9LG019lRa4aEfeCDcg e9kcDC+JYX5rqiscW3/gJ0eAOKEp4/2ioWGpiQznTztjrOskYyxsZM9qbe8= -----END CERTIFICATE-----Generated at Mon Oct 20 17:29:01 2025 by rpki-client