$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a1a66748-21e2-464b-a541-0617f6e00c5a.roa File: a1a66748-21e2-464b-a541-0617f6e00c5a.roa (raw, json) Hash identifier: /WjQzgVgcAoAbdZSesSF9LQRPEOndMJLYxc5sYCfmEU= Subject key identifier: 6C:AA:E2:56:12:8B:98:5E:4D:6E:70:D0:12:E4:CF:E4:7E:57:EC:EB Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 49EB640E5A9BB0BE0DE6BFE492AA855C1D66D3EA Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a1a66748-21e2-464b-a541-0617f6e00c5a.roa Signing time: Sun 19 Oct 2025 18:00:14 +0000 ROA not before: Sun 19 Oct 2025 18:00:14 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.65.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:eb:64:0e:5a:9b:b0:be:0d:e6:bf:e4:92:aa:85:5c:1d:66:d3:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 18:00:14 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=c720d099154189874720291426a263cd2d712d6fa7d34c9252456db6f9256875, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:9c:6a:54:1d:45:b4:90:66:78:35:f6:15:7b: 91:fc:00:6e:32:3c:b6:2f:14:c8:66:4d:9c:69:03: 10:0d:30:0a:8a:8e:6e:17:c5:ec:14:9f:8d:f7:65: 16:be:87:3d:e8:13:64:38:b5:cb:97:71:c3:c4:ce: b1:93:f4:73:8e:aa:39:c2:ed:75:8e:15:9b:37:38: 61:73:a7:92:88:93:4f:de:70:26:a6:a9:ed:43:ed: 2c:e6:eb:c0:09:13:cc:25:7c:fc:26:e2:fe:a8:49: f4:0b:46:d3:5d:56:47:6b:05:ed:1b:2c:fb:8d:35: a1:56:9b:33:2d:42:ba:4b:92:bc:77:24:9e:98:e9: 3e:1b:40:6b:ca:d9:8d:8b:eb:df:e5:c6:38:2b:ef: 4d:2d:d1:80:5f:91:e4:f4:c3:13:16:86:df:02:26: 4b:e8:45:1d:38:1a:bd:68:87:76:e7:07:92:86:3e: b1:aa:03:df:c9:0f:a4:3c:d0:4f:27:b1:48:0c:69: d6:24:07:94:13:c1:98:4b:f2:48:15:07:d2:f9:9f: 8b:05:83:52:41:7e:a9:45:9e:ac:90:c3:27:d3:ef: 16:af:6c:67:c9:f0:1d:de:20:20:77:ae:d2:e2:8d: 4a:8e:69:b3:85:ef:51:0f:d4:2b:c7:ee:af:b4:47: 54:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:AA:E2:56:12:8B:98:5E:4D:6E:70:D0:12:E4:CF:E4:7E:57:EC:EB X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a1a66748-21e2-464b-a541-0617f6e00c5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.65.232.0/22 Signature Algorithm: sha256WithRSAEncryption 38:40:17:34:f5:b4:ae:c1:68:2e:cd:84:34:dc:30:73:be:fb: dc:0b:c2:86:b3:ae:84:07:44:50:9f:57:03:73:0a:c5:50:06: 9d:3c:e0:8a:1f:80:bc:cc:38:d5:14:a5:49:a6:02:17:15:23: 2d:1f:4d:68:0c:2b:4b:dc:d5:6f:61:3f:af:5a:17:4c:2f:5a: a9:6e:3e:f9:5f:a6:ce:01:b8:86:73:06:a2:39:db:d2:fd:7a: b8:df:7a:d5:df:b8:d5:7c:be:59:83:68:bf:f4:95:a1:5e:b5: 91:47:c5:93:b7:7a:d1:6d:cf:b1:be:55:e6:db:9e:1c:0a:5b: 18:2d:e1:ce:ce:08:21:19:dd:80:d4:5d:59:e2:60:60:35:4b: 05:13:5d:7e:3f:87:8e:c1:b6:ee:2a:56:62:e0:21:35:7c:60: 28:6d:17:c9:33:8f:55:dc:6f:4a:ef:4f:10:3e:50:05:a8:e4: f8:56:70:35:ed:40:4b:40:ea:38:d2:d5:4d:fd:c6:fc:d2:92: 7d:26:5b:78:13:99:95:62:e3:e4:f2:af:3a:c5:1f:ea:78:c8: 4c:49:42:fe:e4:48:fe:a1:0c:20:7e:5c:c0:2f:46:92:7c:53: 0c:df:1c:a2:2c:87:f3:29:02:11:9b:0c:70:97:c0:1a:43:97: bc:ab:bf:23 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSetkDlqbsL4N5r/kkqqFXB1m0+owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTgwMDE0WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BjNzIwZDA5OTE1NDE4OTg3NDcyMDI5MTQyNmEyNjNjZDJk NzEyZDZmYTdkMzRjOTI1MjQ1NmRiNmY5MjU2ODc1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDRnGpUHUW0kGZ4NfYVe5H8AG4yPLYvFMhmTZxpAxANMAqK jm4XxewUn433ZRa+hz3oE2Q4tcuXccPEzrGT9HOOqjnC7XWOFZs3OGFzp5KIk0/e cCamqe1D7Szm68AJE8wlfPwm4v6oSfQLRtNdVkdrBe0bLPuNNaFWmzMtQrpLkrx3 JJ6Y6T4bQGvK2Y2L69/lxjgr700t0YBfkeT0wxMWht8CJkvoRR04Gr1oh3bnB5KG PrGqA9/JD6Q80E8nsUgMadYkB5QTwZhL8kgVB9L5n4sFg1JBfqlFnqyQwyfT7xav bGfJ8B3eICB3rtLijUqOabOF71EP1CvH7q+0R1T9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUbKriVhKLmF5NbnDQEuTP5H5X7OswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2ExYTY2NzQ4LTIxZTItNDY0Yi1hNTQxLTA2MTdmNmUwMGM1YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAISQegwDQYJKoZIhvcNAQELBQADggEBADhAFzT1tK7BaC7NhDTcMHO++9wL woazroQHRFCfVwNzCsVQBp084IofgLzMONUUpUmmAhcVIy0fTWgMK0vc1W9hP69a F0wvWqluPvlfps4BuIZzBqI529L9erjfetXfuNV8vlmDaL/0laFetZFHxZO3etFt z7G+VebbnhwKWxgt4c7OCCEZ3YDUXVniYGA1SwUTXX4/h47Btu4qVmLgITV8YCht F8kzj1Xcb0rvTxA+UAWo5PhWcDXtQEtA6jjS1U39xvzSkn0mW3gTmZVi4+TyrzrF H+p4yExJQv7kSP6hDCB+XMAvRpJ8UwzfHKIsh/MpAhGbDHCXwBpDl7yrvyM= -----END CERTIFICATE-----Generated at Mon Oct 20 02:57:51 2025 by rpki-client