$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bf7440d3-e58e-4c35-99fd-314cd5f8d2e0.roa File: bf7440d3-e58e-4c35-99fd-314cd5f8d2e0.roa (raw, json) Hash identifier: 0oDRfiXw6jcTYCisaAwOxuUB1vd4+TBAGhgA6d0DnYs= Subject key identifier: 3B:E2:38:4B:77:8C:11:D2:B1:C1:35:1E:D0:A9:75:14:78:E6:5D:91 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0D8F174353CAC1524501785687F228A14763BF00 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bf7440d3-e58e-4c35-99fd-314cd5f8d2e0.roa Signing time: Sat 18 Oct 2025 14:30:14 +0000 ROA not before: Sat 18 Oct 2025 14:30:14 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.160.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:8f:17:43:53:ca:c1:52:45:01:78:56:87:f2:28:a1:47:63:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 14:30:14 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=b758715aa41559ac2ed664efef0123dadf91beccfe06e7a049208722795a4efb, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b7:a6:a2:ee:82:f9:f2:d8:3e:9c:7e:3a:ba: 5d:13:1b:51:e5:46:20:9f:55:3a:ce:eb:61:be:1f: 09:5f:aa:7c:fd:4c:0f:0c:e5:19:95:15:e2:36:1e: c0:6f:51:ad:47:1d:db:80:84:45:eb:74:77:ec:be: 43:2b:95:0a:46:a9:27:6b:e2:fe:6a:3b:cc:0a:38: a5:3c:a9:86:08:06:66:db:b5:c8:1d:c5:5f:75:5e: 3c:82:66:07:9c:2e:b9:a5:6c:c4:42:52:15:f8:0d: 33:9b:16:e3:d6:76:9f:a3:08:c9:2b:b7:49:bc:86: 3e:b2:48:11:60:44:8e:67:b2:88:3b:37:5c:e3:22: 4c:fc:ba:cb:5d:6a:1d:4f:92:5f:ed:11:e0:5a:8f: 05:81:89:cf:76:38:88:3a:0a:f1:66:26:50:44:7a: e3:9e:9c:f1:a2:56:23:a8:d9:94:02:03:d5:d9:6b: fc:c2:14:7f:8b:f9:e5:22:77:20:0b:9c:57:b9:79: df:8a:65:e4:91:8d:18:14:49:ab:44:e7:a0:dc:0d: 11:90:6c:ff:8f:76:f1:53:03:45:1a:2f:32:4c:09: eb:18:62:c6:99:8d:3c:88:cb:83:f0:e2:10:47:2e: 45:49:1f:f9:9f:84:a5:68:bc:7d:39:4e:59:df:0d: 1b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:E2:38:4B:77:8C:11:D2:B1:C1:35:1E:D0:A9:75:14:78:E6:5D:91 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bf7440d3-e58e-4c35-99fd-314cd5f8d2e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.160.192.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:19:8d:ea:b1:c5:54:2b:08:dc:53:4f:9b:20:88:d5:d5:9d: 8d:a4:00:81:38:2f:16:ba:ff:96:ec:c7:45:4e:92:19:10:85: f0:54:1f:6d:9e:e6:4c:c1:0b:79:f2:65:ce:d2:77:52:54:5a: e5:86:5e:85:81:a3:9a:d4:f6:a1:47:31:41:04:7f:20:b4:f9: 13:e9:eb:4c:75:3e:1c:88:1e:35:10:97:dc:c6:55:5f:32:eb: 51:36:b8:35:03:87:1c:89:9c:84:05:78:03:5e:a6:10:0a:42: 7f:74:86:bc:93:91:07:2e:fe:21:da:5d:4e:50:75:80:6a:67: 6d:8f:ba:1d:9a:c7:92:e8:80:7e:cf:a2:a1:9a:49:46:5c:e7: b1:58:6c:0f:21:de:54:46:02:62:ea:37:c2:b7:69:90:7e:b7: ab:af:d0:67:c5:2b:99:13:3c:9f:3b:de:49:c1:2d:2c:7e:95: 39:28:80:ce:0e:5f:d2:40:70:7f:84:db:e4:26:2c:1e:d0:f7: d5:92:e3:de:b7:99:27:d0:e0:78:3f:e8:44:df:0f:bd:a9:86: 77:c7:4b:fa:3d:42:cc:c4:bd:16:63:e9:8a:bc:33:df:ac:a1: 46:7f:4c:15:e2:31:e0:1b:c0:d4:e9:73:cd:7e:13:4e:17:5b: 8c:5c:56:1a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDY8XQ1PKwVJFAXhWh/IooUdjvwAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTQzMDE0WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BiNzU4NzE1YWE0MTU1OWFjMmVkNjY0ZWZlZjAxMjNkYWRm OTFiZWNjZmUwNmU3YTA0OTIwODcyMjc5NWE0ZWZiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4t6ai7oL58tg+nH46ul0TG1HlRiCfVTrO62G+Hwlfqnz9 TA8M5RmVFeI2HsBvUa1HHduAhEXrdHfsvkMrlQpGqSdr4v5qO8wKOKU8qYYIBmbb tcgdxV91XjyCZgecLrmlbMRCUhX4DTObFuPWdp+jCMkrt0m8hj6ySBFgRI5nsog7 N1zjIkz8ustdah1Pkl/tEeBajwWBic92OIg6CvFmJlBEeuOenPGiViOo2ZQCA9XZ a/zCFH+L+eUidyALnFe5ed+KZeSRjRgUSatE56DcDRGQbP+PdvFTA0UaLzJMCesY YsaZjTyIy4Pw4hBHLkVJH/mfhKVovH05TlnfDRvlAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUO+I4S3eMEdKxwTUe0Kl1FHjmXZEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2JmNzQ0MGQzLWU1OGUtNGMzNS05OWZkLTMxNGNkNWY4ZDJlMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASoMAwDQYJKoZIhvcNAQELBQADggEBABoZjeqxxVQrCNxTT5sgiNXVnY2k AIE4Lxa6/5bsx0VOkhkQhfBUH22e5kzBC3nyZc7Sd1JUWuWGXoWBo5rU9qFHMUEE fyC0+RPp60x1PhyIHjUQl9zGVV8y61E2uDUDhxyJnIQFeANephAKQn90hryTkQcu /iHaXU5QdYBqZ22Puh2ax5LogH7PoqGaSUZc57FYbA8h3lRGAmLqN8K3aZB+t6uv 0GfFK5kTPJ873knBLSx+lTkogM4OX9JAcH+E2+QmLB7Q99WS4963mSfQ4Hg/6ETf D72phnfHS/o9QszEvRZj6Yq8M9+soUZ/TBXiMeAbwNTpc81+E04XW4xcVho= -----END CERTIFICATE-----Generated at Mon Oct 20 06:04:29 2025 by rpki-client