$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/883f74c2-e0e8-437c-ba50-a52566d6bb46.roa File: 883f74c2-e0e8-437c-ba50-a52566d6bb46.roa (raw, json) Hash identifier: gLyz/yCEUXJJDQjh01IoG/69l0ciYFz5xqnEPNBfSAA= Subject key identifier: 2F:3C:27:9D:72:9A:02:43:7C:D0:A6:49:CC:44:6D:49:35:E0:6C:80 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0A7EDD4A85FF0C1747A3BB79FB5B195DD0499FBE Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/883f74c2-e0e8-437c-ba50-a52566d6bb46.roa Signing time: Sat 18 Oct 2025 22:42:32 +0000 ROA not before: Sat 18 Oct 2025 22:42:32 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.164.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:7e:dd:4a:85:ff:0c:17:47:a3:bb:79:fb:5b:19:5d:d0:49:9f:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 22:42:32 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=50e3e868397945a93e1c6741d31b4835adcc0679b1e6de3934061fe7ba0921c6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:1d:41:d8:cf:c5:d4:d3:78:3c:2b:6f:ca:4f: 70:38:83:e1:d2:22:c4:6b:0e:57:67:ae:25:ae:f6: 40:12:ab:0c:12:60:d0:ae:90:3c:1f:66:2f:7b:f4: 76:a2:32:47:4d:2d:d3:2d:3c:f5:68:5b:d1:ec:b7: d1:0a:4b:26:29:b4:f0:51:a7:2f:01:d1:56:36:6f: 7e:84:84:f2:4b:af:24:9d:13:b9:0a:14:25:d5:52: 12:61:99:dc:86:f4:18:d6:22:1b:0b:43:66:ec:fd: 74:d7:8a:17:18:0f:f5:9d:22:c7:13:a0:28:c0:65: 52:83:0e:ae:ef:76:d8:78:c5:ed:5d:33:bc:ba:54: 62:88:2c:79:78:57:a7:4c:17:95:a1:7c:73:63:fa: cf:c2:05:22:36:d0:31:88:6a:08:35:0e:7e:18:2c: b2:db:d3:67:17:65:9c:c7:f8:a5:d1:36:d6:f4:d6: 26:1f:ff:d3:9e:04:d4:6d:34:ca:85:fe:2b:42:49: c1:a9:88:06:a8:86:b8:b4:86:81:b1:5f:7d:a3:59: b5:df:3d:a6:91:bc:31:04:2c:b2:e0:f0:f1:c4:b4: 67:85:7e:63:85:43:7e:d8:0c:09:ee:c1:40:47:74: 9f:40:c4:91:db:31:a1:44:a4:51:b6:39:49:4f:ee: 8d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:3C:27:9D:72:9A:02:43:7C:D0:A6:49:CC:44:6D:49:35:E0:6C:80 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/883f74c2-e0e8-437c-ba50-a52566d6bb46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.164.15.0/24 Signature Algorithm: sha256WithRSAEncryption 43:91:34:60:fb:ee:d1:2f:2c:9f:c1:bf:d9:d8:10:6f:87:90: 4f:c6:71:a8:56:34:8f:d5:be:77:78:5f:d4:18:cf:42:55:9d: ee:18:54:f0:d3:d5:71:13:5e:dc:58:35:76:9d:a9:19:12:fd: 40:17:39:11:27:00:79:50:a2:14:b0:fa:63:32:63:cd:32:91: 32:9b:5b:0a:8f:a9:3c:9e:1f:be:e7:79:73:42:7e:8e:c4:b1: 2e:e8:40:1c:24:ec:8a:03:97:0b:c4:d6:2d:bc:66:30:69:f1: 80:98:7b:04:26:77:71:ff:a6:e2:c5:64:c2:78:27:e0:53:73: 4a:cd:97:b1:6b:57:35:5e:63:8e:e6:89:96:4b:a7:c0:01:1c: cd:1a:f4:f3:36:c2:c0:ec:50:87:d3:24:cf:d5:c4:aa:f1:09: ff:b6:06:3a:82:7a:cd:26:92:79:98:01:61:b7:36:2c:4e:15: bd:ee:fc:70:18:c5:69:0c:23:ca:d1:60:a9:4c:f7:7e:c1:85: 5f:62:7d:9e:0d:e4:ba:9e:88:1e:96:cf:18:c0:3f:cb:be:12: 00:63:5b:d2:7e:9f:bd:93:fb:df:4e:2e:15:00:52:db:39:71: cf:ee:f4:65:12:5d:0c:39:da:ca:20:5e:6d:4b:e0:38:ab:9a: eb:d1:e2:c0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCn7dSoX/DBdHo7t5+1sZXdBJn74wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MjI0MjMyWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A1MGUzZTg2ODM5Nzk0NWE5M2UxYzY3NDFkMzFiNDgzNWFk Y2MwNjc5YjFlNmRlMzkzNDA2MWZlN2JhMDkyMWM2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDZHUHYz8XU03g8K2/KT3A4g+HSIsRrDldnriWu9kASqwwS YNCukDwfZi979HaiMkdNLdMtPPVoW9Hst9EKSyYptPBRpy8B0VY2b36EhPJLrySd E7kKFCXVUhJhmdyG9BjWIhsLQ2bs/XTXihcYD/WdIscToCjAZVKDDq7vdth4xe1d M7y6VGKILHl4V6dMF5WhfHNj+s/CBSI20DGIagg1Dn4YLLLb02cXZZzH+KXRNtb0 1iYf/9OeBNRtNMqF/itCScGpiAaohri0hoGxX32jWbXfPaaRvDEELLLg8PHEtGeF fmOFQ37YDAnuwUBHdJ9AxJHbMaFEpFG2OUlP7o3DAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQULzwnnXKaAkN80KZJzERtSTXgbIAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzg4M2Y3NGMyLWUwZTgtNDM3Yy1iYTUwLWE1MjU2NmQ2YmI0Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASpA8wDQYJKoZIhvcNAQELBQADggEBAEORNGD77tEvLJ/Bv9nYEG+HkE/G cahWNI/Vvnd4X9QYz0JVne4YVPDT1XETXtxYNXadqRkS/UAXOREnAHlQohSw+mMy Y80ykTKbWwqPqTyeH77neXNCfo7EsS7oQBwk7IoDlwvE1i28ZjBp8YCYewQmd3H/ puLFZMJ4J+BTc0rNl7FrVzVeY47miZZLp8ABHM0a9PM2wsDsUIfTJM/VxKrxCf+2 BjqCes0mknmYAWG3NixOFb3u/HAYxWkMI8rRYKlM937BhV9ifZ4N5LqeiB6WzxjA P8u+EgBjW9J+n72T+99OLhUAUts5cc/u9GUSXQw52sogXm1L4DirmuvR4sA= -----END CERTIFICATE-----Generated at Mon Oct 20 11:10:37 2025 by rpki-client