$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9668a833-0ce7-40ae-8c62-237df671c166.roa File: 9668a833-0ce7-40ae-8c62-237df671c166.roa (raw, json) Hash identifier: /GVXE8PrFqadldF27bPXPPCVDPfZyXhyvjK0dD5iANU= Subject key identifier: F1:D5:76:CF:87:E4:CB:48:1F:8B:B0:58:5B:B2:EA:6A:81:BC:65:A5 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7A2CF90CC87555D222DD8ECF7D30F73D859C6D19 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9668a833-0ce7-40ae-8c62-237df671c166.roa Signing time: Sat 18 Oct 2025 22:53:32 +0000 ROA not before: Sat 18 Oct 2025 22:53:32 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.238.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:2c:f9:0c:c8:75:55:d2:22:dd:8e:cf:7d:30:f7:3d:85:9c:6d:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 22:53:32 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=235bd6e45f766b5eedf9e4dc73b7a7d80ccccc697a66f2288cdcdcb6ff958486, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:37:75:78:ed:71:a9:65:b1:dd:25:82:07:2a: 29:d4:09:63:df:d3:e5:a7:a4:7d:9f:77:60:1a:00: 87:f6:a8:35:9d:80:b0:29:9a:68:9d:b7:05:1d:78: cd:05:f3:65:3f:d9:84:34:5f:99:78:f2:fd:e4:bc: d6:02:c2:ba:6f:26:3f:e0:17:b5:8f:1d:0c:45:c3: 6b:0c:89:3b:c9:ba:96:ae:49:ca:00:e5:63:a9:a3: 8d:0a:58:d6:99:54:2c:15:bb:c4:bc:80:ea:85:87: f6:2a:d1:46:a3:da:1a:12:c5:9e:c1:7a:f6:9a:22: 8b:e2:b4:c1:8a:e6:7a:b5:fd:9e:e5:57:7c:a7:d2: 4f:3d:02:c4:ba:a4:e2:0c:a3:dc:42:d2:b6:a8:c8: a4:33:d3:c0:e8:9b:02:09:83:ae:85:0e:ac:60:de: be:af:5b:a6:b4:6a:af:fd:31:66:75:08:d7:6e:ae: b3:a1:9d:1f:3f:cc:88:60:9b:00:ea:ae:f9:ed:e2: 2a:ca:35:a6:fd:db:85:4f:6f:8a:46:0f:b8:e5:c7: 53:5a:3b:b9:b0:32:c2:07:e8:d5:d7:c6:68:01:d3: 7c:f8:36:72:02:c2:15:7c:30:2f:f0:27:41:ce:bd: 93:98:6f:70:bf:69:88:80:17:31:45:77:e6:20:88: 6b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:D5:76:CF:87:E4:CB:48:1F:8B:B0:58:5B:B2:EA:6A:81:BC:65:A5 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9668a833-0ce7-40ae-8c62-237df671c166.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.238.198.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:cf:1b:9c:bf:23:6c:a4:19:87:12:ec:88:b5:d4:7d:25:73: 24:be:77:fc:c3:c9:41:b4:91:af:c8:5e:c1:3f:e0:1f:74:ad: c7:ee:2b:85:d0:91:3c:b4:ff:53:fa:20:6f:fc:70:f0:73:1a: 9d:d7:fa:f2:10:ad:00:2c:9f:58:94:9f:ba:85:96:df:bb:e9: e2:4a:a2:7b:e7:f8:ca:36:24:c9:92:3d:97:b2:f0:3c:30:48: aa:23:6c:ba:83:c8:a1:3d:e1:ed:f6:e7:59:d6:1e:74:50:bf: d3:a0:2d:56:42:c6:86:2b:16:d0:ba:63:cc:95:c8:41:32:e8: 60:7d:50:c2:8b:21:87:02:49:cb:43:2c:bd:cc:be:73:9c:f8: 9f:f6:bd:8b:51:67:2a:76:d8:cd:86:37:b7:b3:ba:b0:96:fa: 92:fc:6a:4d:86:b5:4e:d7:3d:65:8c:ea:0b:25:5e:8d:b8:cb: 97:b7:2b:2c:d7:1f:d9:14:82:b0:63:d0:2e:9f:17:18:d2:f8: 21:d6:d0:bc:d3:2b:52:28:2e:ef:9c:6b:fa:78:f5:81:60:07: 45:a2:a2:4d:68:3d:01:d8:19:b5:ae:93:13:38:18:c2:c2:50: 7e:52:d4:d3:b4:e7:dc:fd:80:ab:9d:7f:43:73:ae:fb:7f:06: 31:d1:a3:fb -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUeiz5DMh1VdIi3Y7PfTD3PYWcbRkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MjI1MzMyWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AyMzViZDZlNDVmNzY2YjVlZWRmOWU0ZGM3M2I3YTdkODBj Y2NjYzY5N2E2NmYyMjg4Y2RjZGNiNmZmOTU4NDg2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1N3V47XGpZbHdJYIHKinUCWPf0+WnpH2fd2AaAIf2qDWd gLApmmidtwUdeM0F82U/2YQ0X5l48v3kvNYCwrpvJj/gF7WPHQxFw2sMiTvJupau ScoA5WOpo40KWNaZVCwVu8S8gOqFh/Yq0Uaj2hoSxZ7BevaaIovitMGK5nq1/Z7l V3yn0k89AsS6pOIMo9xC0raoyKQz08DomwIJg66FDqxg3r6vW6a0aq/9MWZ1CNdu rrOhnR8/zIhgmwDqrvnt4irKNab924VPb4pGD7jlx1NaO7mwMsIH6NXXxmgB03z4 NnICwhV8MC/wJ0HOvZOYb3C/aYiAFzFFd+YgiGsjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU8dV2z4fky0gfi7BYW7LqaoG8ZaUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzk2NjhhODMzLTBjZTctNDBhZS04YzYyLTIzN2RmNjcxYzE2Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAS7sYwDQYJKoZIhvcNAQELBQADggEBADvPG5y/I2ykGYcS7Ii11H0lcyS+ d/zDyUG0ka/IXsE/4B90rcfuK4XQkTy0/1P6IG/8cPBzGp3X+vIQrQAsn1iUn7qF lt+76eJKonvn+Mo2JMmSPZey8DwwSKojbLqDyKE94e3251nWHnRQv9OgLVZCxoYr FtC6Y8yVyEEy6GB9UMKLIYcCSctDLL3MvnOc+J/2vYtRZyp22M2GN7ezurCW+pL8 ak2GtU7XPWWM6gslXo24y5e3KyzXH9kUgrBj0C6fFxjS+CHW0LzTK1IoLu+ca/p4 9YFgB0Wiok1oPQHYGbWukxM4GMLCUH5S1NO059z9gKudf0Nzrvt/BjHRo/s= -----END CERTIFICATE-----Generated at Mon Oct 20 06:11:12 2025 by rpki-client