$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a3c324f8-6596-44b5-87b2-27d5793501fc.roa File: a3c324f8-6596-44b5-87b2-27d5793501fc.roa (raw, json) Hash identifier: hHD5hcbQWddLCJicUhg+qCZ0dwYyD5aLKXYd+tPhyog= Subject key identifier: FD:EF:AB:3F:E9:BD:BB:D3:74:B7:CE:C4:93:93:C3:07:8A:D5:EC:DD Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 072D42961CBE62A640BDCC9F79CC85ACFCD61541 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a3c324f8-6596-44b5-87b2-27d5793501fc.roa Signing time: Sat 18 Oct 2025 19:50:12 +0000 ROA not before: Sat 18 Oct 2025 19:50:12 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.244.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:2d:42:96:1c:be:62:a6:40:bd:cc:9f:79:cc:85:ac:fc:d6:15:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 19:50:12 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=7543471b32b0524cf98066b95b9f611331791e3e2b5576c7e00b53c6b1fb1276, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:df:2d:91:ff:20:60:47:a9:4e:ca:4c:46:60: 7c:1e:4e:02:7a:ba:91:57:48:86:71:da:8f:c6:b0: 89:f5:14:35:18:cd:e3:7b:3a:f4:e4:14:a7:3f:72: e4:28:f3:ba:fe:4c:78:41:c8:de:22:8d:ed:9e:99: 6d:3b:d8:c8:9f:af:c7:33:b6:61:b8:88:76:4a:8b: 37:f5:b9:73:7d:a3:f8:dc:71:fa:56:11:ed:a3:f7: d3:07:da:8a:5b:56:0b:e6:20:8b:89:61:48:da:03: fa:dd:80:47:c8:f6:8b:8e:bb:08:07:16:09:0a:48: 77:82:ff:14:48:5c:4f:7d:4d:53:6e:fa:db:3a:aa: 7e:b2:cd:c5:63:69:78:e4:c6:f5:c1:88:a7:59:ff: b8:03:c8:7e:11:b1:61:16:ed:79:aa:b9:2b:ec:9d: 67:97:e6:37:cb:f9:01:df:46:d5:0c:ab:69:b7:7b: 0f:57:16:26:9a:e8:e0:aa:73:a6:83:01:8f:be:4a: b5:7d:36:78:71:47:22:db:e9:d4:80:d4:ff:ea:cb: 65:d5:87:2a:57:4c:17:3c:44:25:50:c3:8d:1f:8a: 62:15:63:eb:6f:a4:21:71:be:6d:bf:98:9d:71:6c: 2c:61:21:d5:9b:49:f7:84:a4:84:42:c1:8a:98:98: 6d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:EF:AB:3F:E9:BD:BB:D3:74:B7:CE:C4:93:93:C3:07:8A:D5:EC:DD X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a3c324f8-6596-44b5-87b2-27d5793501fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.244.6.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:eb:8f:5e:be:9e:8d:b3:25:b7:bf:2c:f0:55:84:1e:ad:aa: 8a:d2:aa:85:87:83:5b:64:90:2e:64:2f:e6:ea:12:59:0e:03: 00:a8:76:90:ef:34:2e:08:bf:87:4b:36:71:1e:3b:3f:f6:f3: 93:67:7c:46:6a:84:58:a1:df:8a:fe:68:b3:af:67:3b:7a:bd: 2c:ee:34:bb:ae:0a:dc:dc:fd:8a:d3:79:4a:b1:e5:c2:98:a0: 09:9a:61:e5:8f:18:a7:9a:8d:4d:1b:e6:2f:ce:9e:67:d5:9b: 85:6b:81:e9:bd:9f:96:92:88:dc:38:f7:ba:31:89:0f:65:5c: 1d:bb:7c:f9:c0:9a:b1:1a:dc:5e:2e:65:fb:43:bb:d1:0b:27: a5:4d:ed:d8:06:1a:f6:90:4f:87:7a:6a:e4:bd:ca:27:35:b6: 91:1d:8d:c8:e7:3f:98:1d:6d:bf:d6:e3:0d:83:e7:ab:fe:ab: 37:85:15:dc:0b:b6:fd:27:22:68:38:91:75:cb:52:84:da:67: 01:3f:b4:5d:79:a0:f5:d4:4d:20:d1:22:c2:d4:59:fa:26:68: 7e:de:fa:3c:f1:b1:74:83:41:d4:52:4a:dd:b5:9c:24:2a:20: 99:1f:1b:f0:c8:22:0c:e6:57:18:22:a9:9e:21:6f:f3:6b:7d: df:35:a4:d7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBy1Clhy+YqZAvcyfecyFrPzWFUEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTk1MDEyWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A3NTQzNDcxYjMyYjA1MjRjZjk4MDY2Yjk1YjlmNjExMzMx NzkxZTNlMmI1NTc2YzdlMDBiNTNjNmIxZmIxMjc2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC23y2R/yBgR6lOykxGYHweTgJ6upFXSIZx2o/GsIn1FDUY zeN7OvTkFKc/cuQo87r+THhByN4ije2emW072Mifr8cztmG4iHZKizf1uXN9o/jc cfpWEe2j99MH2opbVgvmIIuJYUjaA/rdgEfI9ouOuwgHFgkKSHeC/xRIXE99TVNu +ts6qn6yzcVjaXjkxvXBiKdZ/7gDyH4RsWEW7XmquSvsnWeX5jfL+QHfRtUMq2m3 ew9XFiaa6OCqc6aDAY++SrV9NnhxRyLb6dSA1P/qy2XVhypXTBc8RCVQw40fimIV Y+tvpCFxvm2/mJ1xbCxhIdWbSfeEpIRCwYqYmG3JAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU/e+rP+m9u9N0t87Ek5PDB4rV7N0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2EzYzMyNGY4LTY1OTYtNDRiNS04N2IyLTI3ZDU3OTM1MDFmYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAS9AYwDQYJKoZIhvcNAQELBQADggEBAJvrj16+no2zJbe/LPBVhB6tqorS qoWHg1tkkC5kL+bqElkOAwCodpDvNC4Iv4dLNnEeOz/285NnfEZqhFih34r+aLOv Zzt6vSzuNLuuCtzc/YrTeUqx5cKYoAmaYeWPGKeajU0b5i/OnmfVm4Vrgem9n5aS iNw497oxiQ9lXB27fPnAmrEa3F4uZftDu9ELJ6VN7dgGGvaQT4d6auS9yic1tpEd jcjnP5gdbb/W4w2D56v+qzeFFdwLtv0nImg4kXXLUoTaZwE/tF15oPXUTSDRIsLU WfomaH7e+jzxsXSDQdRSSt21nCQqIJkfG/DIIgzmVxgiqZ4hb/Nrfd81pNc= -----END CERTIFICATE-----Generated at Mon Oct 20 11:56:08 2025 by rpki-client