$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/972ae378-bb2b-4317-97ed-bb206f560970.roa File: 972ae378-bb2b-4317-97ed-bb206f560970.roa (raw, json) Hash identifier: x9sAQVt4x776QXWUx2/Gtps3OzK6sv9pFx5PvJGZKDk= Subject key identifier: B8:EA:32:30:35:04:DE:B1:5A:B5:C8:34:23:98:D6:DB:C1:B9:CE:97 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 507E6206D5463CD74CFA2C1F51248D90D53D899F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/972ae378-bb2b-4317-97ed-bb206f560970.roa Signing time: Sat 18 Oct 2025 11:42:20 +0000 ROA not before: Sat 18 Oct 2025 11:42:20 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.244.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:7e:62:06:d5:46:3c:d7:4c:fa:2c:1f:51:24:8d:90:d5:3d:89:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 11:42:20 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=513d3a05b1b1f356c73c4314ecd83116e035e85aa7526dc85d147951d4b8fda9, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:47:20:ba:08:a5:de:86:96:d8:75:8a:32:02: 80:8e:a6:5b:cc:4d:0b:71:70:d3:ec:46:23:a6:0a: 8c:0c:cb:e9:d3:95:27:12:54:5f:05:b5:35:75:71: 91:a4:f2:e5:ff:36:28:8c:cc:eb:86:17:4e:32:50: ac:cc:41:8c:15:9f:35:85:e2:07:00:39:71:70:89: 7d:53:9a:f3:4d:02:34:54:16:65:3d:cd:5c:17:88: 3d:09:21:59:2f:01:db:39:d7:db:08:d8:3e:7d:dd: 23:d5:3b:b1:90:f4:31:3d:65:26:dd:25:1a:57:96: 02:31:40:4c:e7:3d:1a:56:14:c8:30:6e:b9:c8:4e: f1:f4:14:a4:19:80:42:8a:0c:29:9c:00:9d:7a:f2: 9c:2b:f1:e1:6d:91:a5:a1:14:10:ba:e5:35:a1:83: 2b:c2:66:f4:c4:62:ec:03:97:c1:5d:d3:d4:f1:dc: c9:a8:bb:2d:7f:0c:ea:1f:a3:2e:64:db:71:a9:85: fe:ab:1a:eb:d3:42:97:e4:5e:26:15:3e:47:ee:9a: 24:7f:ba:e9:b6:71:90:80:42:e6:13:fe:69:78:d8: 61:d6:2a:f1:1a:67:9d:23:aa:83:ee:4f:81:ba:7f: 1b:aa:78:15:0f:f5:5e:c2:27:1f:7a:c8:d4:93:67: df:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:EA:32:30:35:04:DE:B1:5A:B5:C8:34:23:98:D6:DB:C1:B9:CE:97 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/972ae378-bb2b-4317-97ed-bb206f560970.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.244.115.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:b6:0c:b5:b2:d9:c9:b0:85:9e:e8:22:b0:91:aa:97:ab:e1: 22:7c:9d:fa:ea:d3:0a:dd:f0:9a:29:be:90:8a:77:7d:ef:cd: 8d:b2:12:31:fc:6e:00:c1:6c:b3:af:b9:8f:51:0e:23:99:e4: 3b:fb:e3:3b:c4:db:6f:9e:c4:e8:9d:36:a9:61:a4:ed:ae:af: 13:03:14:ce:3b:4c:04:e0:b0:ca:43:d9:09:b1:ea:ea:02:5e: 8f:91:db:c3:f1:ba:28:e7:11:08:dc:19:1d:c2:b2:58:92:65: e6:cf:7d:35:50:52:90:b7:1a:ee:3c:53:f8:3b:bc:cc:39:dc: 0a:fa:a8:c0:4e:ea:8b:4a:9a:2c:7b:ac:60:a8:1a:c6:75:56: 4e:c3:53:ef:80:3c:17:67:8c:09:73:14:cc:ff:6d:4c:7c:14: 44:8e:1f:bb:df:d6:3b:51:2c:3c:03:fb:ef:db:79:f3:99:1f: d9:6b:de:10:5d:87:8e:2f:12:e5:d4:67:92:b2:21:ea:49:24: 29:60:19:45:ae:11:8d:7f:7f:c5:98:37:a4:b1:ba:db:45:f6: 9a:db:e5:03:fc:16:2b:23:a8:86:4a:d0:a3:fa:4f:34:5c:09: 02:6b:e6:64:88:51:ee:16:10:42:9a:42:0b:ed:64:62:84:af: f7:8c:ab:68 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUH5iBtVGPNdM+iwfUSSNkNU9iZ8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTE0MjIwWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A1MTNkM2EwNWIxYjFmMzU2YzczYzQzMTRlY2Q4MzExNmUw MzVlODVhYTc1MjZkYzg1ZDE0Nzk1MWQ0YjhmZGE5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCPRyC6CKXehpbYdYoyAoCOplvMTQtxcNPsRiOmCowMy+nT lScSVF8FtTV1cZGk8uX/NiiMzOuGF04yUKzMQYwVnzWF4gcAOXFwiX1TmvNNAjRU FmU9zVwXiD0JIVkvAds519sI2D593SPVO7GQ9DE9ZSbdJRpXlgIxQEznPRpWFMgw brnITvH0FKQZgEKKDCmcAJ168pwr8eFtkaWhFBC65TWhgyvCZvTEYuwDl8Fd09Tx 3Mmouy1/DOofoy5k23Gphf6rGuvTQpfkXiYVPkfumiR/uum2cZCAQuYT/ml42GHW KvEaZ50jqoPuT4G6fxuqeBUP9V7CJx96yNSTZ99nAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUuOoyMDUE3rFatcg0I5jW28G5zpcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzk3MmFlMzc4LWJiMmItNDMxNy05N2VkLWJiMjA2ZjU2MDk3MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAS9HMwDQYJKoZIhvcNAQELBQADggEBAFu2DLWy2cmwhZ7oIrCRqper4SJ8 nfrq0wrd8JopvpCKd33vzY2yEjH8bgDBbLOvuY9RDiOZ5Dv74zvE22+exOidNqlh pO2urxMDFM47TATgsMpD2Qmx6uoCXo+R28PxuijnEQjcGR3CsliSZebPfTVQUpC3 Gu48U/g7vMw53Ar6qMBO6otKmix7rGCoGsZ1Vk7DU++APBdnjAlzFMz/bUx8FESO H7vf1jtRLDwD++/befOZH9lr3hBdh44vEuXUZ5KyIepJJClgGUWuEY1/f8WYN6Sx uttF9prb5QP8FisjqIZK0KP6TzRcCQJr5mSIUe4WEEKaQgvtZGKEr/eMq2g= -----END CERTIFICATE-----Generated at Mon Oct 20 03:10:38 2025 by rpki-client