$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/87333a54-1b96-4f2a-b0ed-9ad95cc716e5.roa File: 87333a54-1b96-4f2a-b0ed-9ad95cc716e5.roa (raw, json) Hash identifier: m+LtRw62gXUVsLU1pfKeUrNSAhyGza9iXtRDSyHWfTg= Subject key identifier: D8:39:A6:A4:D2:54:5A:CE:52:0A:F5:3D:C3:32:DE:BB:6D:2D:49:F8 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6ECF1CF045E1D22F131DD2B8D26FC61E22CCACDF Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/87333a54-1b96-4f2a-b0ed-9ad95cc716e5.roa Signing time: Sat 18 Oct 2025 11:11:22 +0000 ROA not before: Sat 18 Oct 2025 11:11:22 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.161.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:cf:1c:f0:45:e1:d2:2f:13:1d:d2:b8:d2:6f:c6:1e:22:cc:ac:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 11:11:22 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=9cb92462f5e745569fccebecd3f04fa657a80471cc1ec7be4bab45b3883e7e78, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:f0:47:5d:b4:9b:fc:bd:72:95:33:a4:04:95: 94:91:3d:86:da:a1:3f:31:da:e1:69:ed:24:89:43: 30:93:9d:9f:81:42:fc:46:e0:5a:5c:e8:c8:ef:15: a8:13:e9:5a:78:18:d5:51:c6:64:6b:9f:f6:d7:16: 23:d8:9e:f5:ed:13:42:ab:2a:be:6d:2e:54:20:0f: 47:34:97:06:de:c2:5c:ba:e4:7f:7e:d6:49:9b:d7: 28:e3:ab:5b:b7:58:39:87:e0:8f:4b:1a:fe:7c:93: 33:90:fc:7e:64:f4:53:64:28:b6:35:7b:1a:de:f7: 54:3e:27:e6:3c:1d:e0:19:58:6e:ae:0b:87:7a:59: 94:1b:c6:6c:af:77:f9:d0:92:d5:b9:3a:00:d0:4d: 24:4d:14:48:56:af:c8:59:4a:79:18:b6:95:8f:9a: a4:35:3f:e3:5b:ec:87:e9:4d:f9:d0:3d:20:af:c4: 13:7b:a5:37:a8:98:bf:80:2e:49:cf:ad:ac:21:c0: 23:1a:3d:4d:aa:70:ef:a0:99:2d:0b:95:11:09:c6: fd:8f:eb:e0:57:27:95:14:96:3c:e3:c9:99:ce:1d: 60:d8:41:b9:2c:a1:47:5d:4c:19:0d:05:97:5d:91: cb:57:95:3f:02:8a:be:06:5f:0f:ed:02:ac:ae:b0: 81:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:39:A6:A4:D2:54:5A:CE:52:0A:F5:3D:C3:32:DE:BB:6D:2D:49:F8 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/87333a54-1b96-4f2a-b0ed-9ad95cc716e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.161.241.0/24 Signature Algorithm: sha256WithRSAEncryption 02:ee:7d:d7:59:21:64:1f:35:bd:f3:c4:d3:c9:70:b8:4e:4a: 72:37:47:13:e0:a3:47:ee:3c:b7:39:5e:ef:99:66:f4:f5:1e: 23:63:71:2e:dd:e9:b7:95:ef:95:a2:bf:81:33:15:8d:27:e1: 09:0c:a7:a3:09:63:85:42:30:91:85:fb:6d:30:0f:3c:22:79: 7e:d7:83:ed:1d:56:e1:23:11:0b:44:e5:9d:ca:e4:e8:6e:88: 5b:cd:fe:ef:5f:e7:a4:6b:cf:b5:a7:92:07:56:bd:e3:83:5b: f1:3c:b4:01:47:3e:7c:44:30:1b:50:29:b6:55:da:ad:ee:e3: 1b:c9:27:82:e1:cf:59:fb:db:b1:55:b5:88:66:aa:bb:69:53: 36:d0:8b:c2:f0:3d:62:0a:46:91:9a:37:6b:da:31:c6:08:12: bd:e7:c6:26:36:70:55:13:8a:2a:29:0f:22:12:ad:f7:c3:18: 0a:63:fb:2f:56:d8:7e:a2:d0:55:f9:88:21:b3:b5:5d:f7:09: de:7c:45:95:56:23:ba:64:4d:56:9d:02:96:d8:38:53:9f:38: 95:1f:fd:93:33:bf:46:59:05:e4:64:52:90:f6:12:11:6c:22: 56:91:cf:7f:9e:c5:cf:5c:d8:96:00:69:22:3d:fc:7a:83:50: ac:eb:e9:d2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbs8c8EXh0i8THdK40m/GHiLMrN8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTExMTIyWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A5Y2I5MjQ2MmY1ZTc0NTU2OWZjY2ViZWNkM2YwNGZhNjU3 YTgwNDcxY2MxZWM3YmU0YmFiNDViMzg4M2U3ZTc4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCG8EddtJv8vXKVM6QElZSRPYbaoT8x2uFp7SSJQzCTnZ+B QvxG4Fpc6MjvFagT6Vp4GNVRxmRrn/bXFiPYnvXtE0KrKr5tLlQgD0c0lwbewly6 5H9+1kmb1yjjq1u3WDmH4I9LGv58kzOQ/H5k9FNkKLY1exre91Q+J+Y8HeAZWG6u C4d6WZQbxmyvd/nQktW5OgDQTSRNFEhWr8hZSnkYtpWPmqQ1P+Nb7IfpTfnQPSCv xBN7pTeomL+ALknPrawhwCMaPU2qcO+gmS0LlREJxv2P6+BXJ5UUljzjyZnOHWDY QbksoUddTBkNBZddkctXlT8Cir4GXw/tAqyusIE1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU2DmmpNJUWs5SCvU9wzLeu20tSfgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzg3MzMzYTU0LTFiOTYtNGYyYS1iMGVkLTlhZDk1Y2M3MTZlNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASofEwDQYJKoZIhvcNAQELBQADggEBAALufddZIWQfNb3zxNPJcLhOSnI3 RxPgo0fuPLc5Xu+ZZvT1HiNjcS7d6beV75Wiv4EzFY0n4QkMp6MJY4VCMJGF+20w DzwieX7Xg+0dVuEjEQtE5Z3K5OhuiFvN/u9f56Rrz7WnkgdWveODW/E8tAFHPnxE MBtQKbZV2q3u4xvJJ4Lhz1n727FVtYhmqrtpUzbQi8LwPWIKRpGaN2vaMcYIEr3n xiY2cFUTiiopDyISrffDGApj+y9W2H6i0FX5iCGztV33Cd58RZVWI7pkTVadApbY OFOfOJUf/ZMzv0ZZBeRkUpD2EhFsIlaRz3+exc9c2JYAaSI9/HqDUKzr6dI= -----END CERTIFICATE-----Generated at Mon Oct 20 06:09:27 2025 by rpki-client