$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c0641c5f-0030-464b-a9b6-7696f8d00532.roa File: c0641c5f-0030-464b-a9b6-7696f8d00532.roa (raw, json) Hash identifier: 8HQFcMRwiODqXebslCFyO9IkGsw+zD7jQjYts1PM5d4= Subject key identifier: 52:8B:12:15:5B:F6:A4:79:2A:E2:11:79:94:5B:D7:63:6D:1B:69:AC Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2265DF2D504834756A87A5344E32AE19F39E378A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c0641c5f-0030-464b-a9b6-7696f8d00532.roa Signing time: Sat 18 Oct 2025 18:53:29 +0000 ROA not before: Sat 18 Oct 2025 18:53:29 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.155.66.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:65:df:2d:50:48:34:75:6a:87:a5:34:4e:32:ae:19:f3:9e:37:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 18:53:29 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=acf906875dd497ca0b452bae1a5a603a3e434622de7643d96fb2f9991c4e1de6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:99:52:17:85:31:fc:f7:79:ba:ea:2c:f6:3d: b6:bb:29:6a:18:15:4c:72:43:f5:af:10:e6:c4:c0: ca:08:0f:80:98:d7:74:73:cf:9d:ad:88:f6:3b:83: 39:b2:a8:75:50:bc:c6:20:aa:d7:2c:b9:8f:af:fa: bb:02:bc:66:68:94:d1:47:dc:91:4c:af:4a:ea:f6: b2:2c:60:6b:c5:bf:c0:88:48:25:43:29:f3:07:02: 80:e9:b4:ec:27:df:f2:17:53:bf:00:b8:ed:04:41: 4e:55:85:0c:cc:af:21:7f:9d:99:ad:2d:65:d8:b1: 81:6d:30:f3:11:9f:f0:26:00:53:72:33:b6:1a:0c: 2b:42:d9:b9:07:33:a7:c3:35:06:f5:23:e5:20:b3: 8a:83:f5:14:e2:f6:10:61:7b:96:1a:4a:02:11:de: 45:45:a9:55:fa:dd:e9:5a:af:d3:79:10:79:28:5f: 3c:bf:71:66:3f:b8:d9:8f:cd:9d:9f:f4:7d:06:09: 0c:4c:2b:4c:55:b1:97:dc:fa:a9:1a:7e:3a:c7:e0: df:8f:8f:57:91:0a:b9:61:75:e6:91:a8:9a:b9:05: 21:81:49:92:bc:7c:e2:d1:cf:07:3b:15:01:2d:d0: 14:04:d4:a8:f9:1e:29:25:cc:52:6d:c3:bc:e7:0b: 41:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:8B:12:15:5B:F6:A4:79:2A:E2:11:79:94:5B:D7:63:6D:1B:69:AC X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c0641c5f-0030-464b-a9b6-7696f8d00532.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.155.66.0/23 Signature Algorithm: sha256WithRSAEncryption 02:a3:23:01:9f:6f:1e:13:bc:28:45:25:28:2e:d6:ae:51:96: 92:bd:93:56:aa:12:80:c3:f6:78:a3:18:63:fd:bc:cb:a3:aa: fc:b3:09:2f:6a:83:69:7c:7f:01:c1:16:99:98:22:6e:39:5c: 4c:0e:12:49:b9:16:2a:30:e7:19:d1:77:15:98:ee:05:44:7c: ad:b0:ea:20:de:6b:ee:41:83:73:f6:8d:76:15:2d:a7:8b:cb: 75:cd:23:52:e6:68:96:06:ac:ea:3b:41:05:26:4b:4c:cd:91: c8:5c:2b:fa:60:01:31:fb:0d:7d:08:1d:19:fc:94:5a:ac:bb: d0:47:8d:3b:2e:27:d6:25:cd:11:ec:23:c0:19:d2:71:e9:8c: 08:04:d3:0a:79:eb:b3:45:69:2b:60:e6:49:f0:2b:fe:3e:80: 5a:55:c8:3a:a9:48:14:14:40:f9:86:59:1b:aa:ee:07:65:90: 3c:8d:a1:7c:36:6a:a0:02:a2:82:c7:a0:cb:5b:1d:0a:26:13: cb:9a:84:73:7d:4c:ba:8f:9c:88:20:c5:a8:9e:e0:71:44:47: 58:03:8b:31:7e:20:8e:c3:db:03:cf:6b:8d:81:25:66:8b:6a: f2:e2:8a:1c:ce:af:fe:06:c0:ba:07:5f:66:ab:9a:52:be:be: 99:18:17:86 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUImXfLVBINHVqh6U0TjKuGfOeN4owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTg1MzI5WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BhY2Y5MDY4NzVkZDQ5N2NhMGI0NTJiYWUxYTVhNjAzYTNl NDM0NjIyZGU3NjQzZDk2ZmIyZjk5OTFjNGUxZGU2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2mVIXhTH893m66iz2Pba7KWoYFUxyQ/WvEObEwMoID4CY 13Rzz52tiPY7gzmyqHVQvMYgqtcsuY+v+rsCvGZolNFH3JFMr0rq9rIsYGvFv8CI SCVDKfMHAoDptOwn3/IXU78AuO0EQU5VhQzMryF/nZmtLWXYsYFtMPMRn/AmAFNy M7YaDCtC2bkHM6fDNQb1I+Ugs4qD9RTi9hBhe5YaSgIR3kVFqVX63elar9N5EHko Xzy/cWY/uNmPzZ2f9H0GCQxMK0xVsZfc+qkafjrH4N+Pj1eRCrlhdeaRqJq5BSGB SZK8fOLRzwc7FQEt0BQE1Kj5HiklzFJtw7znC0GRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUUosSFVv2pHkq4hF5lFvXY20baawwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2MwNjQxYzVmLTAwMzAtNDY0Yi1hOWI2LTc2OTZmOGQwMDUzMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESm0IwDQYJKoZIhvcNAQELBQADggEBAAKjIwGfbx4TvChFJSgu1q5RlpK9 k1aqEoDD9nijGGP9vMujqvyzCS9qg2l8fwHBFpmYIm45XEwOEkm5Fiow5xnRdxWY 7gVEfK2w6iDea+5Bg3P2jXYVLaeLy3XNI1LmaJYGrOo7QQUmS0zNkchcK/pgATH7 DX0IHRn8lFqsu9BHjTsuJ9YlzRHsI8AZ0nHpjAgE0wp567NFaStg5knwK/4+gFpV yDqpSBQUQPmGWRuq7gdlkDyNoXw2aqACooLHoMtbHQomE8uahHN9TLqPnIggxaie 4HFER1gDizF+II7D2wPPa42BJWaLavLiihzOr/4GwLoHX2armlK+vpkYF4Y= -----END CERTIFICATE-----Generated at Mon Oct 20 11:10:07 2025 by rpki-client