$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8d664c61-0b89-4439-b728-cafbdd146802.roa File: 8d664c61-0b89-4439-b728-cafbdd146802.roa (raw, json) Hash identifier: iN7bqFLsdriJlLwLgRcn49JWLkT3Jp83OabVkXHOwvM= Subject key identifier: 02:08:6D:92:33:56:2B:66:68:E7:10:1F:2A:4B:61:8A:68:97:DE:11 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2A8D33782810E13D7B85B6178FC0E12871B4EBAB Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8d664c61-0b89-4439-b728-cafbdd146802.roa Signing time: Sat 18 Oct 2025 15:40:07 +0000 ROA not before: Sat 18 Oct 2025 15:40:07 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.154.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:8d:33:78:28:10:e1:3d:7b:85:b6:17:8f:c0:e1:28:71:b4:eb:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 15:40:07 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=30ae48469e82aabf1f1c3e1fb319a894c58f8c6fd41670430bb8411a28eb8d42, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:24:28:45:0e:54:d9:a2:ea:d6:c0:12:56:19: 5f:4c:d6:27:51:d7:f0:3b:7f:9a:08:c0:ed:66:08: 45:1d:0a:43:f6:38:00:b9:38:21:11:69:26:b0:e0: 67:22:2a:a0:07:ad:62:df:d9:ac:1c:63:aa:bb:fa: 01:f9:66:90:bf:28:1e:a0:85:53:3c:3e:cd:c3:9a: e6:96:03:ee:6b:a8:5e:65:3f:24:98:8f:34:61:b0: b4:a8:05:a3:fb:0c:01:fd:9b:0d:21:3c:02:83:fb: f8:e7:82:5c:7b:ec:bf:ae:29:41:6c:f4:b2:cc:36: 8a:be:a0:27:11:0f:da:fc:1c:f1:a3:9a:1a:23:c4: f2:37:a3:54:92:c4:c3:d3:fc:8d:76:fa:9b:7a:1e: ac:92:e8:a3:f0:ad:12:4f:53:4c:ef:15:37:2c:ce: 64:08:8d:71:cd:48:f5:cb:d8:b9:f6:fb:07:6c:ae: 48:45:5c:a7:d7:20:57:e5:46:17:0d:24:ca:32:c5: 4a:46:87:89:79:f1:99:9e:e3:03:b6:ba:da:b2:ee: 7c:a4:88:3e:d0:d9:b7:43:f1:a2:bb:4c:97:7f:39: 0a:17:11:d7:6d:2d:b7:02:3e:17:67:6d:ab:14:ad: 45:39:e3:5f:f1:7e:b9:8e:fd:2d:16:13:fe:8a:02: 88:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:08:6D:92:33:56:2B:66:68:E7:10:1F:2A:4B:61:8A:68:97:DE:11 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8d664c61-0b89-4439-b728-cafbdd146802.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.154.224.0/20 Signature Algorithm: sha256WithRSAEncryption 59:84:15:6c:f8:c8:35:97:af:77:76:b3:4d:44:8c:58:79:e3: 77:d7:ad:09:87:58:93:0b:30:51:6e:45:df:2e:00:b1:50:31: cf:45:c7:ec:c6:ba:43:4b:7f:68:f6:3a:51:d8:69:a5:33:ca: 18:ee:4b:34:cd:8e:2d:3c:81:f1:82:7b:4b:98:9f:a8:df:87: 4c:0a:6a:09:5f:61:6a:6e:34:d1:ef:71:6f:31:83:95:35:b0: bd:3d:29:c5:27:68:af:f1:e3:c9:71:3a:1e:b1:ad:86:7b:9f: 81:a6:85:86:43:ab:6c:79:36:8d:75:35:60:c4:16:2a:86:38: 6c:d9:80:65:e2:ca:da:3d:0c:c7:2f:3b:9f:0f:7d:01:bf:0c: 80:c3:cc:3d:64:63:64:9b:2e:47:5f:18:0f:4a:ae:b0:78:c6: e0:46:d2:b5:66:0e:13:56:41:77:f6:7a:71:ca:60:22:ff:8d: dd:95:3f:51:ce:7c:c6:16:fd:fc:2c:7b:94:8c:68:a7:0d:19: da:f4:2a:26:b8:f1:94:a3:52:1a:79:5c:78:9e:66:83:d6:a7: 66:39:7c:d2:32:11:3f:7a:20:3a:27:b6:1f:67:2a:8e:28:79: d7:7a:8e:81:6a:fc:6b:b7:e7:30:d7:1d:5c:ba:52:16:0e:de: cc:af:8c:cd -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKo0zeCgQ4T17hbYXj8DhKHG066swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTU0MDA3WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AzMGFlNDg0NjllODJhYWJmMWYxYzNlMWZiMzE5YTg5NGM1 OGY4YzZmZDQxNjcwNDMwYmI4NDExYTI4ZWI4ZDQyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzJChFDlTZourWwBJWGV9M1idR1/A7f5oIwO1mCEUdCkP2 OAC5OCERaSaw4GciKqAHrWLf2awcY6q7+gH5ZpC/KB6ghVM8Ps3DmuaWA+5rqF5l PySYjzRhsLSoBaP7DAH9mw0hPAKD+/jnglx77L+uKUFs9LLMNoq+oCcRD9r8HPGj mhojxPI3o1SSxMPT/I12+pt6HqyS6KPwrRJPU0zvFTcszmQIjXHNSPXL2Ln2+wds rkhFXKfXIFflRhcNJMoyxUpGh4l58Zme4wO2utqy7nykiD7Q2bdD8aK7TJd/OQoX EddtLbcCPhdnbasUrUU541/xfrmO/S0WE/6KAoj1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUAghtkjNWK2Zo5xAfKkthimiX3hEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzhkNjY0YzYxLTBiODktNDQzOS1iNzI4LWNhZmJkZDE0NjgwMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQSmuAwDQYJKoZIhvcNAQELBQADggEBAFmEFWz4yDWXr3d2s01EjFh543fX rQmHWJMLMFFuRd8uALFQMc9Fx+zGukNLf2j2OlHYaaUzyhjuSzTNji08gfGCe0uY n6jfh0wKaglfYWpuNNHvcW8xg5U1sL09KcUnaK/x48lxOh6xrYZ7n4GmhYZDq2x5 No11NWDEFiqGOGzZgGXiyto9DMcvO58PfQG/DIDDzD1kY2SbLkdfGA9KrrB4xuBG 0rVmDhNWQXf2enHKYCL/jd2VP1HOfMYW/fwse5SMaKcNGdr0Kia48ZSjUhp5XHie ZoPWp2Y5fNIyET96IDonth9nKo4oedd6joFq/Gu35zDXHVy6UhYO3syvjM0= -----END CERTIFICATE-----Generated at Mon Oct 20 03:10:51 2025 by rpki-client