$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c501bd20-7510-4e13-a9e1-6aa02cdd0dbf.roa File: c501bd20-7510-4e13-a9e1-6aa02cdd0dbf.roa (raw, json) Hash identifier: iL+M3W/xCsctDAIzVblT1SOyeOj4i9dQ1f1hGiy2GhE= Subject key identifier: 36:66:77:90:49:D1:A5:4C:01:BE:BC:18:DD:DD:17:47:AB:5A:DE:71 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5638F342E78EC7B7F9A7CCA4E1365066B42F19F3 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c501bd20-7510-4e13-a9e1-6aa02cdd0dbf.roa Signing time: Sun 19 Oct 2025 15:52:28 +0000 ROA not before: Sun 19 Oct 2025 15:52:28 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.66.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:38:f3:42:e7:8e:c7:b7:f9:a7:cc:a4:e1:36:50:66:b4:2f:19:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 15:52:28 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=e8a91583f0d361c601c7424ae6238f0aa707ed7ae8b65431c6a6efcdb4640ed6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:75:d3:7d:53:5b:67:53:e3:87:3e:40:39:80: 63:b3:a8:58:62:82:6b:09:c3:9c:c4:77:68:ef:be: ff:34:0e:41:fc:85:2a:ec:50:92:01:e7:15:76:d2: dc:ed:29:2d:1c:50:2c:97:9c:f6:e6:26:1e:87:e7: e2:fa:cb:ea:1a:aa:8a:c6:e7:c2:54:ef:61:f6:0e: 02:32:bd:67:9a:ca:d8:22:8a:79:75:e1:d7:fc:c7: ba:5e:08:81:c5:86:6e:4f:62:f2:f7:64:cb:38:9a: 92:df:92:8a:8e:86:0b:5c:cd:5f:6c:af:8b:78:4a: 5c:77:20:84:5b:8c:f8:45:b7:0f:70:6b:8f:46:86: 65:c8:1e:d5:12:3e:98:b0:75:c7:5b:9f:14:72:ed: 7b:76:c4:1c:84:ef:7b:96:01:20:57:89:83:37:23: 34:f7:84:2f:07:e6:47:20:17:ed:46:1d:c6:a9:75: 6c:14:54:51:f5:80:48:f0:d3:5d:ca:6e:ba:1d:f9: aa:c4:64:2c:8f:d8:ec:12:27:fe:d5:6e:6f:96:e4: 8c:de:77:91:d2:72:af:33:bd:4d:f7:ca:e3:5f:52: e6:85:ff:1b:6d:5e:4f:0a:4c:b9:b0:d9:47:9d:08: df:d5:a3:d6:ba:a4:98:8e:cf:45:30:c7:91:26:07: 51:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:66:77:90:49:D1:A5:4C:01:BE:BC:18:DD:DD:17:47:AB:5A:DE:71 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c501bd20-7510-4e13-a9e1-6aa02cdd0dbf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.66.120.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:63:2c:83:12:30:02:a3:0d:af:55:72:bf:ac:16:ba:0c:1a: 84:1a:10:aa:07:9c:49:ed:95:a9:53:a6:6d:7c:70:c1:f5:91: 7e:f8:69:51:09:03:01:69:71:3a:55:3d:a4:3d:5b:db:b8:be: 51:28:4c:f0:b4:49:71:e9:4c:d5:8b:ac:e4:90:fd:58:45:3d: 67:8d:4d:9d:e6:ed:f9:62:9d:81:ac:65:d2:35:00:1d:cf:b6: 3b:62:5e:04:02:ab:9a:0c:bf:9c:ac:06:c5:c1:4a:61:e9:d5: 2d:9e:5f:17:e4:0a:6b:ca:d5:6a:92:e1:82:6e:84:46:06:d9: 87:48:2d:0a:bc:a5:3c:01:e0:a6:cb:d3:3a:3e:d2:46:47:59: 4f:03:9d:96:dc:71:7f:65:cb:d8:a0:62:0f:91:f1:4f:0b:e9: 4e:49:86:db:06:41:c2:90:dd:2e:26:86:67:d7:0f:f4:86:b4: 33:18:5e:db:ea:c4:05:fd:97:30:70:12:15:ae:f0:f7:df:1c: cd:0a:a7:39:39:f6:dd:7d:55:32:4d:75:ec:e9:2e:f4:b6:6f: ba:d7:1f:24:26:90:ba:41:ce:f1:45:2b:15:2a:b8:98:8b:7c: 6b:08:ff:df:e3:d4:f2:1c:87:41:19:ea:8c:43:c5:18:4a:38: bf:16:1f:c7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVjjzQueOx7f5p8yk4TZQZrQvGfMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTU1MjI4WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BlOGE5MTU4M2YwZDM2MWM2MDFjNzQyNGFlNjIzOGYwYWE3 MDdlZDdhZThiNjU0MzFjNmE2ZWZjZGI0NjQwZWQ2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFddN9U1tnU+OHPkA5gGOzqFhigmsJw5zEd2jvvv80DkH8 hSrsUJIB5xV20tztKS0cUCyXnPbmJh6H5+L6y+oaqorG58JU72H2DgIyvWeaytgi inl14df8x7peCIHFhm5PYvL3ZMs4mpLfkoqOhgtczV9sr4t4Slx3IIRbjPhFtw9w a49GhmXIHtUSPpiwdcdbnxRy7Xt2xByE73uWASBXiYM3IzT3hC8H5kcgF+1GHcap dWwUVFH1gEjw013Kbrod+arEZCyP2OwSJ/7Vbm+W5Ized5HScq8zvU33yuNfUuaF /xttXk8KTLmw2UedCN/Vo9a6pJiOz0Uwx5EmB1FPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUNmZ3kEnRpUwBvrwY3d0XR6ta3nEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2M1MDFiZDIwLTc1MTAtNGUxMy1hOWUxLTZhYTAyY2RkMGRiZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASQngwDQYJKoZIhvcNAQELBQADggEBABpjLIMSMAKjDa9Vcr+sFroMGoQa EKoHnEntlalTpm18cMH1kX74aVEJAwFpcTpVPaQ9W9u4vlEoTPC0SXHpTNWLrOSQ /VhFPWeNTZ3m7flinYGsZdI1AB3PtjtiXgQCq5oMv5ysBsXBSmHp1S2eXxfkCmvK 1WqS4YJuhEYG2YdILQq8pTwB4KbL0zo+0kZHWU8DnZbccX9ly9igYg+R8U8L6U5J htsGQcKQ3S4mhmfXD/SGtDMYXtvqxAX9lzBwEhWu8PffHM0Kpzk59t19VTJNdezp LvS2b7rXHyQmkLpBzvFFKxUquJiLfGsI/9/j1PIch0EZ6oxDxRhKOL8WH8c= -----END CERTIFICATE-----Generated at Mon Oct 20 11:10:40 2025 by rpki-client