$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9ec1c6a7-8ad4-4db3-b9da-d86e02cb3d23.roa File: 9ec1c6a7-8ad4-4db3-b9da-d86e02cb3d23.roa (raw, json) Hash identifier: RydLikD3lGF+OXhFlrf5MqOKwkuLAcrZdvfp6gpw+54= Subject key identifier: C5:54:5B:A3:BA:E3:5A:3B:7A:84:F9:59:B0:3E:B7:D7:7A:21:5A:82 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0310021E0F14155583E3CB411A165116E9BE5320 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9ec1c6a7-8ad4-4db3-b9da-d86e02cb3d23.roa Signing time: Sat 18 Oct 2025 19:00:14 +0000 ROA not before: Sat 18 Oct 2025 19:00:14 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.244.224.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:10:02:1e:0f:14:15:55:83:e3:cb:41:1a:16:51:16:e9:be:53:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 19:00:14 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=032b5063b1a755c506d68dde126aa5d500700bffd674eed0db6b9770e32db778, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:82:2e:92:2f:53:d2:5b:b6:94:92:6e:20:6f: ae:4d:bd:c6:65:62:a1:9d:aa:35:17:83:60:fc:ee: d9:6c:9b:aa:e0:97:0a:79:a4:f5:4e:d6:e7:8d:f0: db:47:96:fe:62:2a:2a:66:a2:d4:4b:f8:6e:6c:be: ef:a5:53:03:59:73:25:7a:e9:c8:ff:50:81:ee:65: 04:70:e5:06:6c:7b:e6:a7:5b:cc:7d:d7:12:f7:87: 0f:f2:ac:74:81:ec:6e:aa:16:9e:fe:87:4b:73:17: 1d:81:b3:12:a5:3d:d4:0f:6d:ee:62:8d:7c:bf:69: 3b:4f:4a:a9:1b:3d:f8:97:9b:df:7b:24:47:b7:7a: 59:90:45:55:fa:8e:0f:30:0b:1e:50:d4:19:d0:c1: e1:61:3d:8b:07:2e:1f:ba:17:cf:75:28:d7:14:ff: a2:09:51:f2:27:de:ce:4f:cc:bc:9f:aa:30:5a:1a: ee:d7:c7:8c:58:38:67:e4:85:5a:d0:b0:bb:76:98: 4b:72:48:ef:a0:ef:40:01:6a:71:d3:d0:3c:bd:4a: 09:f0:26:b8:0d:19:81:b8:b4:84:97:c1:10:2d:a1: ce:fc:fa:9e:cb:aa:5e:fc:51:ef:fb:01:af:72:d4: 5f:1f:18:76:d8:df:9d:a0:8b:5b:0e:b0:82:06:d2: 1c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:54:5B:A3:BA:E3:5A:3B:7A:84:F9:59:B0:3E:B7:D7:7A:21:5A:82 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9ec1c6a7-8ad4-4db3-b9da-d86e02cb3d23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.244.224.0/23 Signature Algorithm: sha256WithRSAEncryption 6f:90:b3:54:e4:e2:40:de:62:fb:02:5a:48:e1:25:61:33:e1: ad:99:09:b6:22:2e:d5:21:5d:8d:d4:f3:51:de:9e:55:c0:1e: 4c:64:9b:4a:0e:31:d5:7f:57:0a:c0:82:17:6f:8a:ca:a4:f5: 8d:8f:30:d1:90:dc:16:44:e5:41:d3:e3:d6:20:2f:df:fd:fa: 83:cd:ea:32:a7:8b:c1:f4:c9:4e:b5:63:6c:8b:d6:e4:79:e7: df:57:a1:85:98:dd:a3:fc:ef:c9:43:1b:a6:ff:61:13:31:31: da:98:79:bf:19:43:a7:af:69:98:21:84:5f:21:3c:87:df:07: 3c:2a:f9:fd:c1:a2:2b:ba:83:a4:ce:77:95:5f:d8:84:85:ee: 75:e7:5b:b9:41:62:98:c1:d4:b6:b2:12:fd:d0:8d:0a:41:dc: 73:b5:07:10:b8:1b:2d:01:7e:c2:7f:37:a9:da:3f:6d:05:26: 53:e8:78:83:70:f5:2e:18:4e:34:36:57:67:03:2f:ba:5f:74: 62:61:e8:e0:73:95:55:9b:fc:dc:a9:c1:88:6a:20:6b:e6:a2: c3:bc:49:20:83:5d:b8:cc:58:e0:47:c7:c7:4d:f9:92:f7:cc: 45:88:8e:78:8b:96:24:50:ad:e9:be:6b:af:c4:50:3a:f0:20: ce:0d:b7:c4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAxACHg8UFVWD48tBGhZRFum+UyAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTkwMDE0WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AwMzJiNTA2M2IxYTc1NWM1MDZkNjhkZGUxMjZhYTVkNTAw NzAwYmZmZDY3NGVlZDBkYjZiOTc3MGUzMmRiNzc4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDgi6SL1PSW7aUkm4gb65NvcZlYqGdqjUXg2D87tlsm6rg lwp5pPVO1ueN8NtHlv5iKipmotRL+G5svu+lUwNZcyV66cj/UIHuZQRw5QZse+an W8x91xL3hw/yrHSB7G6qFp7+h0tzFx2BsxKlPdQPbe5ijXy/aTtPSqkbPfiXm997 JEe3elmQRVX6jg8wCx5Q1BnQweFhPYsHLh+6F891KNcU/6IJUfIn3s5PzLyfqjBa Gu7Xx4xYOGfkhVrQsLt2mEtySO+g70ABanHT0Dy9SgnwJrgNGYG4tISXwRAtoc78 +p7Lql78Ue/7Aa9y1F8fGHbY352gi1sOsIIG0hxpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUxVRbo7rjWjt6hPlZsD6313ohWoIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzllYzFjNmE3LThhZDQtNGRiMy1iOWRhLWQ4NmUwMmNiM2QyMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAES9OAwDQYJKoZIhvcNAQELBQADggEBAG+Qs1Tk4kDeYvsCWkjhJWEz4a2Z CbYiLtUhXY3U81HenlXAHkxkm0oOMdV/VwrAghdvisqk9Y2PMNGQ3BZE5UHT49Yg L9/9+oPN6jKni8H0yU61Y2yL1uR5599XoYWY3aP878lDG6b/YRMxMdqYeb8ZQ6ev aZghhF8hPIffBzwq+f3Boiu6g6TOd5Vf2ISF7nXnW7lBYpjB1LayEv3QjQpB3HO1 BxC4Gy0BfsJ/N6naP20FJlPoeINw9S4YTjQ2V2cDL7pfdGJh6OBzlVWb/NypwYhq IGvmosO8SSCDXbjMWOBHx8dN+ZL3zEWIjniLliRQrem+a6/EUDrwIM4Nt8Q= -----END CERTIFICATE-----Generated at Mon Oct 20 02:55:35 2025 by rpki-client