$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/89336341-a772-4bd3-8192-7f1d63f38aef.roa File: 89336341-a772-4bd3-8192-7f1d63f38aef.roa (raw, json) Hash identifier: 6mF3OO0cbBmURHlzLjcGx+yi7WRudchDA16kDhbuitM= Subject key identifier: 39:DD:F7:4A:A7:76:E8:5A:D9:4F:29:BC:2D:FE:79:1B:EC:C4:42:05 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3954F9DC9F21457FB174CBC85EDD50FCA5B749D7 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/89336341-a772-4bd3-8192-7f1d63f38aef.roa Signing time: Sat 18 Oct 2025 16:12:33 +0000 ROA not before: Sat 18 Oct 2025 16:12:33 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.239.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:54:f9:dc:9f:21:45:7f:b1:74:cb:c8:5e:dd:50:fc:a5:b7:49:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 16:12:33 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=7f87e1866f6ab05f0e910f80c42d85f8c0e48170020f84135c1e83020fd2d019, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d1:85:21:8f:05:88:7e:3d:11:a1:b4:00:ca: 09:2d:ac:ef:0b:62:9c:61:85:be:1e:8f:e8:78:68: 1c:2d:ad:0a:ed:f2:72:25:a6:63:28:de:a1:6c:f8: 9e:8e:d9:0f:ef:f9:a5:53:ce:1e:96:c4:ca:ae:41: 21:1c:35:7b:4f:bc:d9:1e:0d:9d:c1:f2:f7:3a:79: ca:56:05:4c:44:e5:11:20:84:bb:55:b4:88:20:67: 30:86:ed:33:a4:e5:24:5c:5b:2c:7a:fb:91:63:d6: a7:3a:ea:0e:57:19:7f:da:ff:a4:d1:97:af:dd:7a: f0:f4:8b:62:f9:f6:d0:9f:d3:a4:d2:12:1f:81:52: 45:23:9a:2e:86:01:6f:a2:fa:94:26:f5:87:f4:d9: 69:e8:24:72:6c:1f:f6:41:93:20:31:98:1c:40:0f: 5e:22:2b:49:52:dc:24:a3:d5:15:d5:2b:6a:ed:1f: 8c:84:55:d1:19:a8:0a:13:21:a8:c9:3a:6e:dd:e0: 36:f9:d5:29:1e:c7:db:5b:6c:ea:ae:c2:15:fa:12: e1:22:80:89:dc:8b:f0:73:32:66:ce:85:b9:24:e4: e2:92:59:cc:5b:a2:af:2d:6f:78:91:63:b3:ca:01: 57:4e:ad:0c:de:72:46:1f:b8:6c:5b:81:c5:66:9e: d4:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:DD:F7:4A:A7:76:E8:5A:D9:4F:29:BC:2D:FE:79:1B:EC:C4:42:05 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/89336341-a772-4bd3-8192-7f1d63f38aef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.239.36.0/22 Signature Algorithm: sha256WithRSAEncryption 9a:3b:54:ec:d4:55:16:31:52:5f:da:9a:99:de:b3:47:b5:ad: 0c:de:cc:f4:90:37:3c:ea:c8:62:d6:97:2d:f7:dd:38:b4:3e: 87:3f:44:f4:9b:0c:a9:3d:c2:7c:75:fa:8f:90:4f:ec:59:26: 3a:85:7f:9d:31:e0:b3:3b:92:d4:91:d5:fb:d6:44:81:96:ec: 39:14:f1:6c:7d:c3:b0:3e:92:c1:1d:bd:20:50:7c:9c:73:a4: e4:7e:6b:12:3d:63:42:fb:02:55:eb:90:ab:ec:92:61:24:22: 34:dc:95:ea:5a:6c:a6:a4:cd:15:98:ac:c7:9f:80:1a:1b:22: f4:f0:7d:5d:81:46:d3:2d:71:4c:4c:d7:1b:39:70:23:b5:6a: 33:1b:db:20:cd:72:2c:ce:b2:79:83:fc:78:d6:cc:4e:21:ce: 3c:5a:8f:d6:55:3a:c5:16:5d:e8:d5:94:74:fc:da:94:7e:50: 3f:8c:c4:ba:86:1e:0c:92:f0:12:15:60:61:6c:ac:47:d0:93: bf:5e:73:09:8f:eb:4f:67:07:3a:ff:b9:0d:1b:d2:dd:6d:9c: a1:bb:c6:21:45:21:0a:97:e1:04:4a:d7:53:80:4c:1d:92:52: 8f:d1:e9:10:d1:31:e9:7c:b7:75:a9:41:44:27:f1:e6:e0:b4: 9b:15:b5:2b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOVT53J8hRX+xdMvIXt1Q/KW3SdcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTYxMjMzWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A3Zjg3ZTE4NjZmNmFiMDVmMGU5MTBmODBjNDJkODVmOGMw ZTQ4MTcwMDIwZjg0MTM1YzFlODMwMjBmZDJkMDE5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC50YUhjwWIfj0RobQAygktrO8LYpxhhb4ej+h4aBwtrQrt 8nIlpmMo3qFs+J6O2Q/v+aVTzh6WxMquQSEcNXtPvNkeDZ3B8vc6ecpWBUxE5REg hLtVtIggZzCG7TOk5SRcWyx6+5Fj1qc66g5XGX/a/6TRl6/devD0i2L59tCf06TS Eh+BUkUjmi6GAW+i+pQm9Yf02WnoJHJsH/ZBkyAxmBxAD14iK0lS3CSj1RXVK2rt H4yEVdEZqAoTIajJOm7d4Db51Skex9tbbOquwhX6EuEigInci/BzMmbOhbkk5OKS Wcxboq8tb3iRY7PKAVdOrQzeckYfuGxbgcVmntSnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUOd33Sqd26FrZTym8Lf55G+zEQgUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzg5MzM2MzQxLWE3NzItNGJkMy04MTkyLTdmMWQ2M2YzOGFlZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIS7yQwDQYJKoZIhvcNAQELBQADggEBAJo7VOzUVRYxUl/ampnes0e1rQze zPSQNzzqyGLWly333Ti0Poc/RPSbDKk9wnx1+o+QT+xZJjqFf50x4LM7ktSR1fvW RIGW7DkU8Wx9w7A+ksEdvSBQfJxzpOR+axI9Y0L7AlXrkKvskmEkIjTclepabKak zRWYrMefgBobIvTwfV2BRtMtcUxM1xs5cCO1ajMb2yDNcizOsnmD/HjWzE4hzjxa j9ZVOsUWXejVlHT82pR+UD+MxLqGHgyS8BIVYGFsrEfQk79ecwmP609nBzr/uQ0b 0t1tnKG7xiFFIQqX4QRK11OATB2SUo/R6RDRMel8t3WpQUQn8ebgtJsVtSs= -----END CERTIFICATE-----Generated at Mon Oct 20 11:55:47 2025 by rpki-client