$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9624832e-44cc-4f36-979d-df93c2d83bda.roa File: 9624832e-44cc-4f36-979d-df93c2d83bda.roa (raw, json) Hash identifier: zGzTFmqqBY7qrK4Dk5IPje7oTvgVCAgMIBvSkkeLSvc= Subject key identifier: 02:77:FE:1C:98:2B:5E:9F:52:FA:94:B4:26:66:71:4A:F9:2E:F4:71 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 33A7F284E7B192B37A77845718301A177CA3A444 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9624832e-44cc-4f36-979d-df93c2d83bda.roa Signing time: Sat 18 Oct 2025 07:52:47 +0000 ROA not before: Sat 18 Oct 2025 07:52:47 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.245.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:a7:f2:84:e7:b1:92:b3:7a:77:84:57:18:30:1a:17:7c:a3:a4:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 07:52:47 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=ce9cd6c9a5eeae5e3157d705142ce5d63afab5586f29beae6c5419ab75b5e6d6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:2a:31:1b:b0:59:1a:29:0c:3e:41:15:d8:cb: f9:d2:32:e2:d9:9d:88:50:2c:55:fa:08:c1:41:d1: 85:cb:7f:f3:3b:8c:e9:9f:d6:4f:b9:0f:87:cd:24: ce:94:a0:91:ea:c0:98:43:aa:86:68:7d:e5:ea:bb: a2:d6:a5:6f:00:ff:73:df:1c:ce:40:d6:90:89:e0: b3:92:6d:ee:cf:9c:36:64:2c:ac:58:87:ae:3b:7d: 2b:09:3b:64:ce:b4:ec:9a:1c:6b:f6:ea:ef:cd:44: 4c:75:90:d8:37:ff:51:23:f0:18:c0:3a:01:aa:1b: ff:ef:08:30:34:b8:e1:bc:71:12:44:96:28:5a:f5: 30:bc:2b:fe:da:93:76:93:1a:b0:cd:59:79:46:74: bd:9a:60:2c:7a:83:10:b8:ef:f6:d4:f2:4b:9d:15: e1:62:53:2b:44:61:c9:8a:e0:4c:67:e8:af:3c:ab: 55:c1:00:1f:f7:79:5f:d8:43:3a:b0:0c:f9:ec:f8: ab:e7:6d:ec:ce:b7:24:41:51:01:79:da:d3:9c:79: 9a:34:2d:b4:9c:54:a9:c0:c0:27:60:eb:18:f8:6c: 9d:9c:6f:91:62:32:b0:72:f0:48:ed:76:17:96:6f: a4:4f:ed:3e:e3:8d:dd:2e:cd:c3:84:b6:5a:06:7c: de:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:77:FE:1C:98:2B:5E:9F:52:FA:94:B4:26:66:71:4A:F9:2E:F4:71 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9624832e-44cc-4f36-979d-df93c2d83bda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.245.130.0/24 Signature Algorithm: sha256WithRSAEncryption 52:0c:f6:ed:b7:ca:da:2a:48:67:b5:b0:13:e6:8b:61:d7:cb: 55:1a:e1:ad:4f:13:26:d4:02:ff:12:e9:63:8f:08:0f:96:5d: 9f:b7:78:77:75:f0:e7:bf:41:87:fc:db:f8:ca:0e:84:ba:01: 4f:93:41:7f:1b:0e:b1:18:90:ca:e6:ab:e7:4b:29:b3:a8:ce: 3f:9c:a3:16:69:83:57:fd:56:84:14:b1:7d:9f:fd:bb:ef:60: 92:c3:d1:1f:2d:20:90:38:3a:f9:17:b6:b4:04:78:00:74:7d: a3:af:6d:e9:e3:9b:b7:eb:35:e4:ca:ff:96:9b:55:04:a1:a9: b9:8e:bb:83:e3:00:9a:7d:97:0f:88:fc:06:74:48:2b:78:d2: 24:ca:30:73:08:5a:1e:67:fd:6e:f0:08:bc:e7:1b:5c:be:c5: 5f:db:13:e1:52:8e:d5:3d:bb:92:10:ab:32:b0:04:79:98:80: 3f:db:bb:a8:ff:d1:0f:c9:3d:ec:46:fc:4d:26:9c:35:e6:8e: 48:ec:ea:5f:d0:66:45:e6:8d:da:59:7c:1c:c2:d9:c8:5a:fb: 18:d7:04:87:af:b3:8c:85:6b:b2:aa:d6:eb:75:64:d3:22:d0: 28:92:94:0b:85:7e:b0:c1:75:09:c4:a8:72:99:f3:cf:92:40: bb:6f:c1:3d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUM6fyhOexkrN6d4RXGDAaF3yjpEQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MDc1MjQ3WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BjZTljZDZjOWE1ZWVhZTVlMzE1N2Q3MDUxNDJjZTVkNjNh ZmFiNTU4NmYyOWJlYWU2YzU0MTlhYjc1YjVlNmQ2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDPKjEbsFkaKQw+QRXYy/nSMuLZnYhQLFX6CMFB0YXLf/M7 jOmf1k+5D4fNJM6UoJHqwJhDqoZofeXqu6LWpW8A/3PfHM5A1pCJ4LOSbe7PnDZk LKxYh647fSsJO2TOtOyaHGv26u/NREx1kNg3/1Ej8BjAOgGqG//vCDA0uOG8cRJE liha9TC8K/7ak3aTGrDNWXlGdL2aYCx6gxC47/bU8kudFeFiUytEYcmK4Exn6K88 q1XBAB/3eV/YQzqwDPns+KvnbezOtyRBUQF52tOceZo0LbScVKnAwCdg6xj4bJ2c b5FiMrBy8EjtdheWb6RP7T7jjd0uzcOEtloGfN4JAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUAnf+HJgrXp9S+pS0JmZxSvku9HEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzk2MjQ4MzJlLTQ0Y2MtNGYzNi05NzlkLWRmOTNjMmQ4M2JkYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAS9YIwDQYJKoZIhvcNAQELBQADggEBAFIM9u23ytoqSGe1sBPmi2HXy1Ua 4a1PEybUAv8S6WOPCA+WXZ+3eHd18Oe/QYf82/jKDoS6AU+TQX8bDrEYkMrmq+dL KbOozj+coxZpg1f9VoQUsX2f/bvvYJLD0R8tIJA4OvkXtrQEeAB0faOvbenjm7fr NeTK/5abVQShqbmOu4PjAJp9lw+I/AZ0SCt40iTKMHMIWh5n/W7wCLznG1y+xV/b E+FSjtU9u5IQqzKwBHmYgD/bu6j/0Q/JPexG/E0mnDXmjkjs6l/QZkXmjdpZfBzC 2cha+xjXBIevs4yFa7Kq1ut1ZNMi0CiSlAuFfrDBdQnEqHKZ88+SQLtvwT0= -----END CERTIFICATE-----Generated at Mon Oct 20 02:59:34 2025 by rpki-client