$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aa68bd3e-762f-4da3-8510-72586f94577a.roa File: aa68bd3e-762f-4da3-8510-72586f94577a.roa (raw, json) Hash identifier: sf+Smy0fWlIgxo+wdq2tOhTn/hlTp0GXFSCfr/Rm60Y= Subject key identifier: 5B:6E:1B:3B:DC:8F:AE:17:DE:13:4C:6F:AF:86:8F:A1:B6:D0:36:4D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5D998A5CCC5A968D08E5AE8B5B9EDF128DA49038 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aa68bd3e-762f-4da3-8510-72586f94577a.roa Signing time: Sat 18 Oct 2025 08:20:11 +0000 ROA not before: Sat 18 Oct 2025 08:20:11 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.155.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:99:8a:5c:cc:5a:96:8d:08:e5:ae:8b:5b:9e:df:12:8d:a4:90:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 08:20:11 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=c6421e5f4a4a362e5a62e1904d88f1ed002875d120e8772317f629c4c936258b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2e:7f:a2:2f:c4:9e:1e:b5:1c:5c:0f:43:f0: b4:d8:b3:40:b1:df:0e:46:f3:63:56:db:0e:2e:76: ac:ff:c8:c1:a5:39:c0:4b:e1:f7:e1:0f:0d:75:70: d4:9e:33:44:28:98:1f:74:ed:6a:03:51:91:4c:ad: 66:8c:cd:93:f8:f6:3d:64:f1:f5:f1:21:07:fe:05: d1:e5:dd:29:6c:70:3b:99:2d:1e:22:f1:a5:81:00: a1:40:7a:1d:97:7c:82:ef:c5:1a:6b:7d:01:23:3d: 98:36:ab:9d:7b:99:16:b2:0c:4a:50:44:ed:87:be: 27:6a:b5:c0:09:03:35:e1:bb:32:e4:23:c9:77:c4: a6:ab:36:c6:dc:32:68:fd:ba:17:8b:cb:65:a4:af: 01:e2:83:59:66:d2:dd:86:cf:b0:5c:a4:71:6d:66: f8:04:11:86:76:4d:d6:a7:84:d0:28:4b:fe:4b:f4: 24:5e:2b:51:e0:37:d0:b2:33:75:a0:f3:4a:9b:16: 5b:0b:57:a7:b5:fb:52:db:62:4e:a4:01:54:f7:ad: 5f:65:9f:88:94:70:4e:cc:33:c4:35:2f:d0:45:cc: f8:54:2a:b6:60:ea:4e:51:29:a9:13:d0:e5:c0:fa: fe:79:96:75:83:7b:b4:82:5f:9c:8e:c0:97:c4:59: 62:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:6E:1B:3B:DC:8F:AE:17:DE:13:4C:6F:AF:86:8F:A1:B6:D0:36:4D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aa68bd3e-762f-4da3-8510-72586f94577a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.155.104.0/24 Signature Algorithm: sha256WithRSAEncryption 90:2d:13:43:13:b4:84:3e:24:72:dd:8f:be:57:43:58:74:79: e3:61:6e:96:cf:29:f1:77:97:87:a2:99:2b:15:0d:f7:4e:96: 89:08:7e:43:8f:77:22:fe:6b:8b:91:64:a0:2f:77:d5:ad:ec: 56:fd:56:d9:2c:71:c1:69:5b:6c:ca:b7:e4:1d:a4:1e:8e:cc: 77:2d:ba:15:44:03:17:74:e2:28:1c:79:39:4b:0f:0c:45:30: ab:ff:b3:88:b7:44:1d:08:13:53:60:17:c4:3c:a7:b3:94:ac: 59:a7:5b:1e:b4:7b:1b:2d:03:1b:50:ee:7d:0a:c3:4f:99:20: 34:6a:67:7c:a9:74:9a:43:d5:e5:8d:2e:c4:c1:14:8b:91:dc: f6:e6:11:e5:86:91:f7:28:65:70:44:fa:2c:6b:2d:59:a9:86: 7a:4e:df:52:a8:c6:7b:ba:0e:b6:55:7e:79:0d:30:66:a8:fc: f6:5f:47:c6:13:98:a5:61:1d:7b:66:00:35:b2:83:c2:76:b3: 3e:2c:e1:05:6f:ac:dd:f9:2a:e8:b6:c9:cb:05:b8:b0:44:7e: a9:37:4d:30:5a:ae:5a:d5:c4:7b:31:62:9e:2b:7c:b8:ba:a8: 86:ba:c3:73:ac:2b:56:a0:8b:20:9b:33:e9:d2:53:83:2b:e8: 40:b2:69:0d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXZmKXMxalo0I5a6LW57fEo2kkDgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MDgyMDExWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BjNjQyMWU1ZjRhNGEzNjJlNWE2MmUxOTA0ZDg4ZjFlZDAw Mjg3NWQxMjBlODc3MjMxN2Y2MjljNGM5MzYyNThiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDMLn+iL8SeHrUcXA9D8LTYs0Cx3w5G82NW2w4udqz/yMGl OcBL4ffhDw11cNSeM0QomB907WoDUZFMrWaMzZP49j1k8fXxIQf+BdHl3SlscDuZ LR4i8aWBAKFAeh2XfILvxRprfQEjPZg2q517mRayDEpQRO2HvidqtcAJAzXhuzLk I8l3xKarNsbcMmj9uheLy2WkrwHig1lm0t2Gz7BcpHFtZvgEEYZ2TdanhNAoS/5L 9CReK1HgN9CyM3Wg80qbFlsLV6e1+1LbYk6kAVT3rV9ln4iUcE7MM8Q1L9BFzPhU KrZg6k5RKakT0OXA+v55lnWDe7SCX5yOwJfEWWLzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUW24bO9yPrhfeE0xvr4aPobbQNk0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2FhNjhiZDNlLTc2MmYtNGRhMy04NTEwLTcyNTg2Zjk0NTc3YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASm2gwDQYJKoZIhvcNAQELBQADggEBAJAtE0MTtIQ+JHLdj75XQ1h0eeNh bpbPKfF3l4eimSsVDfdOlokIfkOPdyL+a4uRZKAvd9Wt7Fb9VtksccFpW2zKt+Qd pB6OzHctuhVEAxd04igceTlLDwxFMKv/s4i3RB0IE1NgF8Q8p7OUrFmnWx60exst AxtQ7n0Kw0+ZIDRqZ3ypdJpD1eWNLsTBFIuR3PbmEeWGkfcoZXBE+ixrLVmphnpO 31Koxnu6DrZVfnkNMGao/PZfR8YTmKVhHXtmADWyg8J2sz4s4QVvrN35Kui2ycsF uLBEfqk3TTBarlrVxHsxYp4rfLi6qIa6w3OsK1agiyCbM+nSU4Mr6ECyaQ0= -----END CERTIFICATE-----Generated at Mon Oct 20 15:44:45 2025 by rpki-client