$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a51c1a77-58be-47cd-a732-682fd6042807.roa File: a51c1a77-58be-47cd-a732-682fd6042807.roa (raw, json) Hash identifier: QQU5zu2JR+QTsOfprH4XNrW551LfBnTyLekomNupJMM= Subject key identifier: 6D:1A:58:44:4B:E1:F4:05:10:BA:65:EF:84:F5:AA:61:8A:CF:BA:F8 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 20A2D51A10EF62F4C2D6B9A3BCF6E3696D75F1AA Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a51c1a77-58be-47cd-a732-682fd6042807.roa Signing time: Sun 19 Oct 2025 11:51:17 +0000 ROA not before: Sun 19 Oct 2025 11:51:17 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.64.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:a2:d5:1a:10:ef:62:f4:c2:d6:b9:a3:bc:f6:e3:69:6d:75:f1:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 11:51:17 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=a009d61d03c8777043d8b8d7dbdaee5b6ccd33972cc5a33f6d1b7b13cc822d33, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6e:57:d0:a8:3d:a8:3e:d4:dc:94:12:1b:8f: b1:7e:8e:c5:f2:1a:cc:22:43:86:86:cd:ae:25:77: 95:4d:f6:d7:75:b6:55:2d:dc:5b:67:8f:33:b5:05: 0f:34:89:a0:52:ed:a6:75:41:4e:63:c1:fb:f8:bc: 46:ac:8c:d0:02:f5:58:84:1c:f3:a4:37:b4:95:ed: a2:dd:09:60:0e:4e:34:dc:1d:88:4d:2a:a4:6c:11: f0:9f:5f:81:7b:9a:a6:ac:04:fb:b1:e9:4e:83:6d: 6d:ae:45:06:3a:86:29:c1:e2:37:bc:a5:13:f6:24: b1:a7:ca:1f:75:49:a7:e5:15:ab:03:08:fb:13:e8: e5:6a:03:96:61:87:fb:e0:e6:e8:e2:62:26:15:e8: ff:bd:01:7c:e0:ca:91:dd:27:59:85:fb:b6:e5:4b: 0a:9d:67:12:55:48:bc:b7:38:fa:1d:7a:3d:6d:34: 56:77:17:58:0f:9b:d0:6b:f0:da:aa:65:7b:76:3e: 31:44:64:23:fe:94:9d:af:6d:d6:57:e6:04:30:5d: 65:90:b7:ba:a0:ea:62:1f:92:45:cf:c8:bc:aa:7a: cb:d5:39:f1:99:91:e3:61:5b:8c:bb:5f:37:d2:65: 11:ba:5d:c8:59:c0:04:4f:06:45:1f:fd:65:2a:95: 80:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:1A:58:44:4B:E1:F4:05:10:BA:65:EF:84:F5:AA:61:8A:CF:BA:F8 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a51c1a77-58be-47cd-a732-682fd6042807.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.64.223.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:e4:be:9d:8f:3f:c4:48:f5:06:17:55:9c:9b:0a:37:b6:57: 24:c4:7b:fb:b9:88:39:e8:d5:50:46:af:85:89:3e:b1:08:a5: 38:4b:e4:76:47:75:63:70:04:70:d2:d7:b0:ae:8f:48:31:54: a6:91:f4:05:91:8d:df:74:b2:74:3e:41:3b:c8:a9:c6:fb:e8: 74:58:04:df:75:1c:6f:c9:4d:3e:43:2f:ee:4d:4b:5c:77:c7: 88:26:37:eb:89:15:01:35:8a:02:95:8c:e3:87:cb:fd:22:a7: 17:fa:d5:8e:ac:69:db:49:96:cf:be:93:1b:2a:b6:2b:be:cb: 1c:b8:cc:85:9b:28:27:4e:0d:0a:d2:11:91:e8:25:3f:16:1a: b4:1b:28:a5:e4:88:5c:b0:24:33:8b:04:10:65:3b:8b:f2:25: 17:68:33:95:8e:69:bd:d0:97:2f:ea:35:15:2e:49:22:a6:c7: 0b:c8:1f:7b:65:90:4d:4f:08:ac:9b:e3:1c:9b:35:3a:49:aa: 48:0d:be:5b:79:02:69:ab:65:11:d9:0d:87:2d:be:f9:d6:78: 81:fd:01:d5:4a:9e:6f:99:ed:13:8b:70:80:d3:63:7e:71:b6: 3c:35:2a:01:c9:83:73:4d:92:9a:68:1d:b4:1a:c5:35:30:ec: 99:58:9a:ad -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIKLVGhDvYvTC1rmjvPbjaW118aowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTE1MTE3WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BhMDA5ZDYxZDAzYzg3NzcwNDNkOGI4ZDdkYmRhZWU1YjZj Y2QzMzk3MmNjNWEzM2Y2ZDFiN2IxM2NjODIyZDMzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDAblfQqD2oPtTclBIbj7F+jsXyGswiQ4aGza4ld5VN9td1 tlUt3FtnjzO1BQ80iaBS7aZ1QU5jwfv4vEasjNAC9ViEHPOkN7SV7aLdCWAOTjTc HYhNKqRsEfCfX4F7mqasBPux6U6DbW2uRQY6hinB4je8pRP2JLGnyh91SaflFasD CPsT6OVqA5Zhh/vg5ujiYiYV6P+9AXzgypHdJ1mF+7blSwqdZxJVSLy3OPodej1t NFZ3F1gPm9Br8NqqZXt2PjFEZCP+lJ2vbdZX5gQwXWWQt7qg6mIfkkXPyLyqesvV OfGZkeNhW4y7XzfSZRG6XchZwARPBkUf/WUqlYAvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUbRpYREvh9AUQumXvhPWqYYrPuvgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2E1MWMxYTc3LTU4YmUtNDdjZC1hNzMyLTY4MmZkNjA0MjgwNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASQN8wDQYJKoZIhvcNAQELBQADggEBAC3kvp2PP8RI9QYXVZybCje2VyTE e/u5iDno1VBGr4WJPrEIpThL5HZHdWNwBHDS17Cuj0gxVKaR9AWRjd90snQ+QTvI qcb76HRYBN91HG/JTT5DL+5NS1x3x4gmN+uJFQE1igKVjOOHy/0ipxf61Y6sadtJ ls++kxsqtiu+yxy4zIWbKCdODQrSEZHoJT8WGrQbKKXkiFywJDOLBBBlO4vyJRdo M5WOab3Qly/qNRUuSSKmxwvIH3tlkE1PCKyb4xybNTpJqkgNvlt5AmmrZRHZDYct vvnWeIH9AdVKnm+Z7ROLcIDTY35xtjw1KgHJg3NNkppoHbQaxTUw7JlYmq0= -----END CERTIFICATE-----Generated at Mon Oct 20 06:11:29 2025 by rpki-client