$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9b859256-9aa5-4612-9306-ea8dbc2d951b.roa File: 9b859256-9aa5-4612-9306-ea8dbc2d951b.roa (raw, json) Hash identifier: vybfRaef8j+oLjeLyW1NuE9gSBuCtY55s2hTx7OhmpE= Subject key identifier: 88:AA:94:6F:36:CC:7F:9B:0E:ED:94:81:6E:3C:89:CA:D2:73:7B:17 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3C621117D7ED2B262BDFA48E2BE0319A767EE809 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9b859256-9aa5-4612-9306-ea8dbc2d951b.roa Signing time: Sat 18 Oct 2025 16:20:07 +0000 ROA not before: Sat 18 Oct 2025 16:20:07 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.155.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:62:11:17:d7:ed:2b:26:2b:df:a4:8e:2b:e0:31:9a:76:7e:e8:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 16:20:07 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=f0d3c8a33caf3be58b1c28fc233c6914c107db3efc5ceb678059cd99a2c30085, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:84:80:ef:8f:4b:65:28:c2:3c:88:36:6c:5c: 50:7a:c3:39:49:13:bd:d3:e3:a3:9f:38:44:8e:7d: 9c:17:64:c9:58:5a:b2:96:1d:be:62:98:23:2f:a9: 60:40:ae:46:92:97:0c:f5:9a:86:f1:de:74:09:19: 4a:ee:09:5a:3f:5c:13:01:7c:66:ff:25:5a:5f:45: 3d:7e:53:dd:3d:0e:9a:1c:dd:2f:c0:97:1c:51:92: 21:90:c9:16:24:d0:b8:96:83:ca:c8:8d:e8:a4:ad: ee:b8:3e:f6:6a:96:4e:c0:19:f6:52:7e:11:53:ec: b8:50:f2:75:a2:9b:5f:ea:20:fb:c6:19:1e:5f:42: 30:02:34:a9:c0:ae:ee:57:dd:51:2e:f2:48:70:bf: d7:52:fd:bb:0c:ef:72:78:08:4e:03:27:8c:be:ff: b1:c2:b3:b7:69:a3:cc:1d:1a:33:62:b0:b4:55:7c: dc:0a:fe:c0:da:e1:78:a6:2c:0c:74:ed:d8:8a:30: 02:fa:27:2a:45:a4:4b:8a:d3:55:39:3b:36:03:c2: bb:a1:94:f4:3e:94:12:eb:ab:da:03:0c:11:14:d6: a0:2e:b6:44:b3:11:9a:3c:c0:88:c4:fe:4d:5d:f4: 15:51:fa:e3:7f:0e:4c:a8:73:98:5b:ec:c0:f4:01: 6b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:AA:94:6F:36:CC:7F:9B:0E:ED:94:81:6E:3C:89:CA:D2:73:7B:17 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9b859256-9aa5-4612-9306-ea8dbc2d951b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.155.197.0/24 Signature Algorithm: sha256WithRSAEncryption 08:4a:7a:d9:cf:97:96:f7:c5:95:db:af:91:7e:ef:ab:44:3c: 1d:8d:70:b5:be:34:b8:66:32:74:af:5a:67:b9:7a:29:84:55: 19:55:37:84:76:04:14:13:51:02:17:bb:8d:e9:dc:af:9a:d8: 8a:ce:e6:a3:15:7d:36:b6:95:66:85:9d:83:36:84:16:0b:6b: 21:08:03:a3:b7:02:d2:73:82:c2:d0:e1:f6:50:52:41:a7:10: 19:de:1c:a9:b1:0c:82:0e:e7:32:37:08:d9:87:62:87:05:81: 07:8f:6f:9f:47:18:af:47:fc:a4:cd:cb:94:c2:28:ae:f4:ee: 5f:2a:59:55:eb:ee:9e:f1:77:a8:13:96:9b:b7:e5:71:a1:79: 8d:05:16:85:11:7b:cf:19:1d:cb:dd:79:e5:77:7e:2a:5f:56: 6b:e6:4b:c1:42:28:7f:d6:77:f1:8d:f3:22:33:5a:5a:55:5d: 2e:1c:ed:f6:c3:c1:9c:49:9d:a2:d8:d5:50:1d:77:54:62:2e: 78:a1:3b:48:9b:27:4c:a6:88:66:87:e2:97:32:b7:f8:11:50: fd:7d:af:1d:07:66:cb:96:55:fc:41:7b:5f:01:6e:81:72:89: 41:20:da:a3:8a:6b:c6:d7:bd:95:35:d0:f6:73:e5:a0:f1:c0: 21:4c:bb:2e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPGIRF9ftKyYr36SOK+AxmnZ+6AkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTYyMDA3WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BmMGQzYzhhMzNjYWYzYmU1OGIxYzI4ZmMyMzNjNjkxNGMx MDdkYjNlZmM1Y2ViNjc4MDU5Y2Q5OWEyYzMwMDg1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDAhIDvj0tlKMI8iDZsXFB6wzlJE73T46OfOESOfZwXZMlY WrKWHb5imCMvqWBArkaSlwz1mobx3nQJGUruCVo/XBMBfGb/JVpfRT1+U909Dpoc 3S/AlxxRkiGQyRYk0LiWg8rIjeikre64PvZqlk7AGfZSfhFT7LhQ8nWim1/qIPvG GR5fQjACNKnAru5X3VEu8khwv9dS/bsM73J4CE4DJ4y+/7HCs7dpo8wdGjNisLRV fNwK/sDa4XimLAx07diKMAL6JypFpEuK01U5OzYDwruhlPQ+lBLrq9oDDBEU1qAu tkSzEZo8wIjE/k1d9BVR+uN/Dkyoc5hb7MD0AWslAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUiKqUbzbMf5sO7ZSBbjyJytJzexcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzliODU5MjU2LTlhYTUtNDYxMi05MzA2LWVhOGRiYzJkOTUxYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASm8UwDQYJKoZIhvcNAQELBQADggEBAAhKetnPl5b3xZXbr5F+76tEPB2N cLW+NLhmMnSvWme5eimEVRlVN4R2BBQTUQIXu43p3K+a2IrO5qMVfTa2lWaFnYM2 hBYLayEIA6O3AtJzgsLQ4fZQUkGnEBneHKmxDIIO5zI3CNmHYocFgQePb59HGK9H /KTNy5TCKK707l8qWVXr7p7xd6gTlpu35XGheY0FFoURe88ZHcvdeeV3fipfVmvm S8FCKH/Wd/GN8yIzWlpVXS4c7fbDwZxJnaLY1VAdd1RiLnihO0ibJ0ymiGaH4pcy t/gRUP19rx0HZsuWVfxBe18BboFyiUEg2qOKa8bXvZU10PZz5aDxwCFMuy4= -----END CERTIFICATE-----Generated at Mon Oct 20 06:09:54 2025 by rpki-client