$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a2dda199-17be-4993-b7c2-3dbe19561a00.roa File: a2dda199-17be-4993-b7c2-3dbe19561a00.roa (raw, json) Hash identifier: whe/1Qs2gKpTdtluiq/cNuYBb+eFDkjAs/Xa97PQ8Oo= Subject key identifier: 94:83:4A:23:42:79:ED:83:13:23:8A:D3:40:0A:76:5E:CE:58:C1:2A Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 49BE86CFEB482377BD472DAD63389EFDE856E405 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a2dda199-17be-4993-b7c2-3dbe19561a00.roa Signing time: Sun 19 Oct 2025 18:31:37 +0000 ROA not before: Sun 19 Oct 2025 18:31:37 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.67.180.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:be:86:cf:eb:48:23:77:bd:47:2d:ad:63:38:9e:fd:e8:56:e4:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 18:31:37 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=e3294f526fd68391d589ec5349c5ebc55d1b34b4ff9443f81bd4a52e0565b59e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:db:33:6b:d2:a6:40:5f:ee:05:47:09:4c:ab: 36:96:63:9b:d4:01:e8:b3:0b:b8:e9:82:ac:b2:b1: e5:3d:57:66:77:3f:a6:6d:33:1e:4f:c2:31:8a:a3: 76:e4:7a:08:f2:2c:b0:4b:a5:66:9e:2f:88:c0:c8: 44:ad:07:fc:4e:2c:77:10:fd:44:54:88:31:f7:29: 42:3b:0c:67:23:1d:8a:3a:2c:2e:89:1f:f3:29:2e: 33:01:9c:82:b6:67:90:fe:c5:c3:a3:17:4d:38:b4: c3:c3:30:f4:37:9f:66:69:8f:47:00:e8:00:01:9f: 0c:59:df:99:7c:2c:3b:b3:58:57:c0:c4:08:5a:e6: ff:c0:eb:e2:3b:f1:b3:f9:76:13:68:29:f1:be:f2: d6:03:c6:1b:9e:d9:b5:18:00:79:f3:9b:86:1c:3d: c4:04:11:84:7b:62:f8:29:e3:27:db:f0:7c:e9:91: 63:df:29:c8:b1:42:84:b6:0c:1d:07:d3:be:5c:49: 63:13:bd:e2:16:40:7a:3a:02:22:dd:c0:99:28:ee: 97:ac:4e:9a:a9:f1:46:86:e2:ae:bc:0c:46:68:c7: ea:b2:44:7b:c9:b0:be:d5:1c:bc:35:27:a6:f5:41: 1e:8a:c0:dd:8c:ea:fe:a0:b4:3e:cd:a3:ca:1a:8e: fa:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:83:4A:23:42:79:ED:83:13:23:8A:D3:40:0A:76:5E:CE:58:C1:2A X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a2dda199-17be-4993-b7c2-3dbe19561a00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.67.180.0/22 Signature Algorithm: sha256WithRSAEncryption 4b:4d:93:0a:24:a7:2c:03:87:44:71:f4:82:69:20:1f:66:25: 28:19:ab:85:38:1a:2b:97:9f:26:aa:89:05:a9:ce:8c:18:4d: 0d:7a:c2:e7:0a:a6:db:9b:de:35:3a:98:3a:0f:ff:ff:51:4a: 1e:70:7e:3a:c2:08:a4:1a:68:fe:12:d3:38:f4:7e:d2:af:18: 7f:8a:99:83:2d:25:56:20:40:bb:9f:2b:de:1d:29:6a:91:82: f7:20:20:10:46:7e:2a:bd:6e:61:09:d7:71:d6:7d:d8:24:59: 2b:6b:ee:2c:f0:56:7c:c9:ae:92:6b:50:92:c9:c1:59:03:77: 3d:97:26:8b:ac:17:b1:87:69:63:64:9a:98:ea:ca:9a:c3:2e: 57:6b:bb:63:d0:68:0b:56:db:4f:b6:16:fb:c0:12:e3:04:45: 0a:68:b3:67:b9:41:7f:46:6e:fb:5d:83:67:39:9f:55:10:b5: 1d:9a:32:3b:da:19:76:85:c5:df:d6:e0:0f:5d:5a:65:d2:f7: b8:c0:b4:83:bd:4a:38:a3:bc:a6:0c:61:b1:68:94:87:5c:a5: 6d:c1:70:18:5d:73:5f:a5:66:9a:d8:81:90:90:e6:24:d8:fa: 3f:ae:64:a0:29:67:4c:47:62:0d:01:b5:4b:33:b3:69:26:7d: ff:a2:99:ae -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSb6Gz+tII3e9Ry2tYzie/ehW5AUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTgzMTM3WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BlMzI5NGY1MjZmZDY4MzkxZDU4OWVjNTM0OWM1ZWJjNTVk MWIzNGI0ZmY5NDQzZjgxYmQ0YTUyZTA1NjViNTllMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCy2zNr0qZAX+4FRwlMqzaWY5vUAeizC7jpgqyyseU9V2Z3 P6ZtMx5PwjGKo3bkegjyLLBLpWaeL4jAyEStB/xOLHcQ/URUiDH3KUI7DGcjHYo6 LC6JH/MpLjMBnIK2Z5D+xcOjF004tMPDMPQ3n2Zpj0cA6AABnwxZ35l8LDuzWFfA xAha5v/A6+I78bP5dhNoKfG+8tYDxhue2bUYAHnzm4YcPcQEEYR7Yvgp4yfb8Hzp kWPfKcixQoS2DB0H075cSWMTveIWQHo6AiLdwJko7pesTpqp8UaG4q68DEZox+qy RHvJsL7VHLw1J6b1QR6KwN2M6v6gtD7No8oajvqNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUlINKI0J57YMTI4rTQAp2Xs5YwSowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2EyZGRhMTk5LTE3YmUtNDk5My1iN2MyLTNkYmUxOTU2MWEwMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAISQ7QwDQYJKoZIhvcNAQELBQADggEBAEtNkwokpywDh0Rx9IJpIB9mJSgZ q4U4GiuXnyaqiQWpzowYTQ16wucKptub3jU6mDoP//9RSh5wfjrCCKQaaP4S0zj0 ftKvGH+KmYMtJVYgQLufK94dKWqRgvcgIBBGfiq9bmEJ13HWfdgkWStr7izwVnzJ rpJrUJLJwVkDdz2XJousF7GHaWNkmpjqyprDLldru2PQaAtW20+2FvvAEuMERQpo s2e5QX9Gbvtdg2c5n1UQtR2aMjvaGXaFxd/W4A9dWmXS97jAtIO9SjijvKYMYbFo lIdcpW3BcBhdc1+lZprYgZCQ5iTY+j+uZKApZ0xHYg0BtUszs2kmff+ima4= -----END CERTIFICATE-----Generated at Mon Oct 20 03:06:41 2025 by rpki-client