$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bc9b082e-ccda-4114-a15b-f2c62a1ee9ae.roa File: bc9b082e-ccda-4114-a15b-f2c62a1ee9ae.roa (raw, json) Hash identifier: DJ9ZZIsbVVJQATq7/NaimtKpBIv4D22WtdAgOSbSs60= Subject key identifier: FB:84:7B:B1:A4:46:EB:BF:B4:E1:D7:9F:C3:DF:E8:0F:7B:60:91:58 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6C3EAE99B2AD2FFBCFB7BB8B8A0F6690E2172691 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bc9b082e-ccda-4114-a15b-f2c62a1ee9ae.roa Signing time: Sun 19 Oct 2025 15:20:14 +0000 ROA not before: Sun 19 Oct 2025 15:20:14 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.67.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:3e:ae:99:b2:ad:2f:fb:cf:b7:bb:8b:8a:0f:66:90:e2:17:26:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 15:20:14 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=ba8a6bec63cc60cde899712b968b3936370d53e282d4669bacf3e0fe7fc72a40, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:11:f2:e3:ec:f8:84:50:f1:89:b9:bc:9e:80: 96:54:d0:fd:64:3c:64:e4:e9:af:9f:78:fe:f4:92: 6b:cd:d3:1e:ce:e9:1c:ab:ef:9c:45:f3:c1:d6:bf: 2c:9c:3a:fa:c9:87:f9:fd:13:42:43:24:4e:c5:3b: f0:89:61:af:a5:ee:ac:b0:f9:25:fb:df:ee:fd:3e: 49:c2:01:7e:fc:37:ee:34:69:fc:51:ce:e2:78:0d: 4e:e9:14:11:df:6b:91:ea:ad:b4:f9:86:37:39:16: 2f:90:1a:db:31:0e:f2:ac:bc:aa:86:68:2e:8b:9e: 91:bd:28:27:09:fa:62:07:46:8b:cd:70:62:0f:6d: 1d:13:78:ba:46:fc:45:e7:14:a2:f4:cd:e9:d0:2c: b5:f8:e7:01:72:3f:a1:ab:8a:c6:01:4c:f0:23:d4: 85:f6:04:fa:da:62:1a:e3:a2:e1:5a:2f:b1:ed:3f: 44:ef:8a:48:f7:b9:63:db:7d:79:e7:d8:90:23:5e: c9:76:e0:26:6e:11:f1:f8:69:96:9d:3b:5e:91:8d: 65:b8:99:95:d1:88:c5:18:4f:ac:fa:af:55:3e:32: cf:a7:86:d3:a2:e5:c3:af:05:3b:61:1a:af:f7:b6: 26:6e:b2:c9:23:17:53:2f:28:ab:2a:77:32:1b:5c: 96:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:84:7B:B1:A4:46:EB:BF:B4:E1:D7:9F:C3:DF:E8:0F:7B:60:91:58 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bc9b082e-ccda-4114-a15b-f2c62a1ee9ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.67.17.0/24 Signature Algorithm: sha256WithRSAEncryption 20:6f:94:ee:3b:41:ee:5e:92:b1:4a:39:7e:a5:2f:b6:2a:f2: b8:c7:54:11:93:9c:e5:f8:7f:e7:3c:71:4e:c1:c2:d6:de:95: 86:a4:30:4f:4e:4f:19:c7:0c:c7:a4:38:2b:fc:c6:e1:e3:2d: 0b:36:4c:33:13:b1:da:df:22:18:03:b3:30:19:29:ac:17:e6: 61:68:22:3a:96:40:24:61:f2:92:cd:5c:5b:75:52:54:59:05: 19:d3:e4:d4:a3:97:05:3a:80:9f:69:2b:8d:d9:43:15:70:04: 25:f5:d7:16:2e:07:74:20:25:b1:cf:9c:69:06:4b:29:88:e0: 9b:7f:8c:2a:e9:ee:b5:e2:32:4b:db:96:35:ef:da:d3:44:34: ef:26:e5:4a:df:55:97:af:88:db:e9:14:69:17:55:6c:a3:42: a1:5c:55:dc:28:98:a2:79:ef:4a:18:f2:b0:06:8e:8f:c6:d1: 74:3e:db:0f:54:29:d2:ab:b1:d4:a5:0c:d6:3f:6c:5e:28:02: 35:ee:dc:0c:41:75:bd:24:ff:69:85:f1:76:1c:89:8d:f8:ae: d9:18:db:74:8b:5e:a9:7d:30:a5:ea:bd:72:5b:5a:8d:8b:97: 17:1c:3a:d1:8f:64:e4:d1:3b:eb:41:e1:46:a4:93:db:39:d3: e2:d4:68:9c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbD6umbKtL/vPt7uLig9mkOIXJpEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTUyMDE0WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BiYThhNmJlYzYzY2M2MGNkZTg5OTcxMmI5NjhiMzkzNjM3 MGQ1M2UyODJkNDY2OWJhY2YzZTBmZTdmYzcyYTQwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCZEfLj7PiEUPGJubyegJZU0P1kPGTk6a+feP70kmvN0x7O 6Ryr75xF88HWvyycOvrJh/n9E0JDJE7FO/CJYa+l7qyw+SX73+79PknCAX78N+40 afxRzuJ4DU7pFBHfa5HqrbT5hjc5Fi+QGtsxDvKsvKqGaC6LnpG9KCcJ+mIHRovN cGIPbR0TeLpG/EXnFKL0zenQLLX45wFyP6GrisYBTPAj1IX2BPraYhrjouFaL7Ht P0Tvikj3uWPbfXnn2JAjXsl24CZuEfH4aZadO16RjWW4mZXRiMUYT6z6r1U+Ms+n htOi5cOvBTthGq/3tiZusskjF1MvKKsqdzIbXJZDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU+4R7saRG67+04defw9/oD3tgkVgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2JjOWIwODJlLWNjZGEtNDExNC1hMTViLWYyYzYyYTFlZTlhZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASQxEwDQYJKoZIhvcNAQELBQADggEBACBvlO47Qe5ekrFKOX6lL7Yq8rjH VBGTnOX4f+c8cU7BwtbelYakME9OTxnHDMekOCv8xuHjLQs2TDMTsdrfIhgDszAZ KawX5mFoIjqWQCRh8pLNXFt1UlRZBRnT5NSjlwU6gJ9pK43ZQxVwBCX11xYuB3Qg JbHPnGkGSymI4Jt/jCrp7rXiMkvbljXv2tNENO8m5UrfVZeviNvpFGkXVWyjQqFc VdwomKJ570oY8rAGjo/G0XQ+2w9UKdKrsdSlDNY/bF4oAjXu3AxBdb0k/2mF8XYc iY34rtkY23SLXql9MKXqvXJbWo2LlxccOtGPZOTRO+tB4Uakk9s50+LUaJw= -----END CERTIFICATE-----Generated at Mon Oct 20 20:26:52 2025 by rpki-client