$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cd5c23bb-bdb4-4f66-9045-fc52e890be18.roa File: cd5c23bb-bdb4-4f66-9045-fc52e890be18.roa (raw, json) Hash identifier: IBJ51Swz/lmp6WlwD3F3BBm4KN0fRWsZFk6Ti9gNM+I= Subject key identifier: 3B:0D:92:C9:32:03:7C:B1:CA:9C:DE:D5:D1:8D:A5:44:D9:20:D5:86 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 231D8F882259A743F04B00D35151D83190FD85C0 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cd5c23bb-bdb4-4f66-9045-fc52e890be18.roa Signing time: Sat 18 Oct 2025 15:20:10 +0000 ROA not before: Sat 18 Oct 2025 15:20:10 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.165.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:1d:8f:88:22:59:a7:43:f0:4b:00:d3:51:51:d8:31:90:fd:85:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 15:20:10 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=d9cf1ab5a02c7725d7ee05f39904c1bb1b58c0f434a3378a446cc76009cdc637, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:76:70:5b:9f:bd:c4:09:3c:ec:51:fa:71:de: dd:ec:f4:12:2b:b4:d3:67:25:e5:34:b7:4c:9b:a5: e6:63:53:ee:8e:a0:12:a1:49:be:2e:1b:f0:84:bb: c8:03:5b:7a:b7:a2:eb:43:9e:6e:03:f9:00:9d:c4: 3b:d3:3e:4d:bd:70:25:2a:fd:25:93:3f:f9:22:34: 33:5a:70:0d:fe:eb:c0:0f:fd:af:5f:c2:1c:bc:44: 56:f6:3c:8e:ca:4e:8f:d0:8a:5a:fd:7c:47:18:4c: 37:ed:bc:ad:51:43:24:b3:c7:0e:34:a1:16:d6:ad: 7b:11:2a:89:2a:b0:7a:e8:83:a2:2f:57:23:9d:9d: 4d:20:11:c9:5c:9b:d4:58:f4:53:36:10:8c:61:9d: 50:07:a4:fb:c7:7e:25:7b:28:5a:f2:fb:4a:7f:b8: db:6d:88:0d:28:f3:2e:84:42:59:ad:ee:9b:02:22: 9b:14:6e:91:0b:ba:0e:ca:7e:10:71:2a:34:27:93: fd:41:35:92:9e:65:18:17:72:ef:ac:01:88:66:97: 41:0e:50:a8:ec:9f:5c:d8:e9:95:1b:14:54:d9:54: e9:ac:81:50:9d:f0:e5:61:4a:f7:12:7d:28:08:ab: 54:af:2a:ed:81:d2:e7:b4:40:bc:5a:78:74:9e:26: a5:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:0D:92:C9:32:03:7C:B1:CA:9C:DE:D5:D1:8D:A5:44:D9:20:D5:86 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cd5c23bb-bdb4-4f66-9045-fc52e890be18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.165.236.0/24 Signature Algorithm: sha256WithRSAEncryption 74:55:4a:d5:d2:cf:b9:80:22:93:7e:15:ce:92:d8:91:b7:08: c0:1e:c5:2d:cc:a5:e5:6e:89:66:2d:7d:62:f2:77:c7:87:7a: 80:35:87:98:e3:02:0a:10:09:9f:a8:d7:62:1c:56:31:b6:c6: 42:c2:1a:e7:64:4e:45:91:b3:87:0a:22:ce:62:ca:60:50:9e: 78:62:92:ab:bd:c8:4c:76:a5:92:75:d0:56:ba:fa:ac:85:e1: d7:04:45:28:62:df:1e:18:34:dc:30:96:5e:4f:cf:ce:a6:2d: e7:8d:23:cb:b5:40:66:c7:1e:4a:04:9c:94:1d:0b:61:d2:d0: 7e:9c:62:bc:97:83:20:ab:76:a9:56:06:6a:e2:17:75:62:c0: e6:59:23:db:ce:03:a6:74:1d:7f:b3:01:23:c9:21:50:06:fe: ca:f7:5a:31:cb:3f:dc:66:76:48:35:d3:b7:3b:66:00:90:48: 16:52:06:36:49:47:80:43:3e:ac:34:a8:a1:8a:17:c2:44:8d: dc:f6:ae:60:98:b9:5a:51:4c:b1:9f:0d:8b:2b:7c:30:26:98: aa:a4:25:f1:38:27:0e:53:55:dd:89:ec:e2:08:f7:61:77:2c: af:bf:f4:2b:86:bc:3b:d9:23:3c:16:e1:4e:d1:92:f7:d0:fa: 46:13:02:8f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIx2PiCJZp0PwSwDTUVHYMZD9hcAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTUyMDEwWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BkOWNmMWFiNWEwMmM3NzI1ZDdlZTA1ZjM5OTA0YzFiYjFi NThjMGY0MzRhMzM3OGE0NDZjYzc2MDA5Y2RjNjM3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLdnBbn73ECTzsUfpx3t3s9BIrtNNnJeU0t0ybpeZjU+6O oBKhSb4uG/CEu8gDW3q3outDnm4D+QCdxDvTPk29cCUq/SWTP/kiNDNacA3+68AP /a9fwhy8RFb2PI7KTo/Qilr9fEcYTDftvK1RQySzxw40oRbWrXsRKokqsHrog6Iv VyOdnU0gEclcm9RY9FM2EIxhnVAHpPvHfiV7KFry+0p/uNttiA0o8y6EQlmt7psC IpsUbpELug7KfhBxKjQnk/1BNZKeZRgXcu+sAYhml0EOUKjsn1zY6ZUbFFTZVOms gVCd8OVhSvcSfSgIq1SvKu2B0ue0QLxaeHSeJqVzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUOw2SyTIDfLHKnN7V0Y2lRNkg1YYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2NkNWMyM2JiLWJkYjQtNGY2Ni05MDQ1LWZjNTJlODkwYmUxOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASpewwDQYJKoZIhvcNAQELBQADggEBAHRVStXSz7mAIpN+Fc6S2JG3CMAe xS3MpeVuiWYtfWLyd8eHeoA1h5jjAgoQCZ+o12IcVjG2xkLCGudkTkWRs4cKIs5i ymBQnnhikqu9yEx2pZJ10Fa6+qyF4dcERShi3x4YNNwwll5Pz86mLeeNI8u1QGbH HkoEnJQdC2HS0H6cYryXgyCrdqlWBmriF3ViwOZZI9vOA6Z0HX+zASPJIVAG/sr3 WjHLP9xmdkg107c7ZgCQSBZSBjZJR4BDPqw0qKGKF8JEjdz2rmCYuVpRTLGfDYsr fDAmmKqkJfE4Jw5TVd2J7OII92F3LK+/9CuGvDvZIzwW4U7RkvfQ+kYTAo8= -----END CERTIFICATE-----Generated at Mon Oct 20 03:08:22 2025 by rpki-client