$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ce04ef3e-dbf1-4754-84bb-e2f79ee41cab.roa File: ce04ef3e-dbf1-4754-84bb-e2f79ee41cab.roa (raw, json) Hash identifier: F7VeK/si6T/8OjF8HPlW6lNcdIyYdW8Q/9/mS4ROl6M= Subject key identifier: 10:72:92:39:AF:E8:2A:6F:5E:93:25:65:9B:53:4C:A3:75:4A:18:E6 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2CCFB3ACF7FD212CEEF4311465B9C577FD6BE4CD Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ce04ef3e-dbf1-4754-84bb-e2f79ee41cab.roa Signing time: Sat 18 Oct 2025 11:02:30 +0000 ROA not before: Sat 18 Oct 2025 11:02:30 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.238.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:cf:b3:ac:f7:fd:21:2c:ee:f4:31:14:65:b9:c5:77:fd:6b:e4:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 11:02:30 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=27d94eb2b6fa9c3b3bbaf0781d528080cbb7dc005ab8e3b5d24f8fd2d0e62e39, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:85:6c:8a:56:02:94:a2:19:02:4e:5b:c2:f0: e1:5b:0e:93:13:25:15:f1:58:6b:8a:0d:67:db:a3: 08:fa:7b:1c:52:9b:6e:b6:56:a5:b0:25:65:a4:f9: 32:82:66:10:d2:c3:8f:76:10:8e:27:d0:02:91:75: 00:24:0c:c6:a7:be:b0:9f:4d:26:fd:1b:bb:b0:c1: 5b:49:12:83:23:c7:98:6d:ae:23:77:3c:c8:3e:8d: c1:d7:65:89:bb:c1:8d:d1:58:06:4e:33:f5:3a:8c: eb:99:8b:09:72:c9:07:aa:f0:78:36:c7:c3:ea:a6: dc:2c:6c:e5:c6:1a:c5:46:90:37:3e:1a:a8:1c:0d: d7:34:0d:08:a0:da:3d:fa:8e:40:b2:f7:3d:eb:7a: 2b:f0:bb:c2:60:04:36:85:1a:53:35:01:ad:df:92: 8c:22:52:c6:b7:55:dc:2f:61:a7:1c:eb:7a:02:74: 6c:1a:25:d6:c9:93:57:e0:71:9a:c7:fe:af:e2:49: bd:df:35:c7:59:96:a4:c2:96:54:ed:4e:72:ce:00: da:e3:05:a8:1f:fe:4b:40:f4:ed:23:56:a6:ab:79: fd:6d:79:d7:4e:c9:64:91:8d:95:5a:11:d9:a7:9a: 94:ad:15:9e:6c:42:54:e2:ff:75:1a:24:5d:e2:c2: c2:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:72:92:39:AF:E8:2A:6F:5E:93:25:65:9B:53:4C:A3:75:4A:18:E6 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ce04ef3e-dbf1-4754-84bb-e2f79ee41cab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.238.144.0/20 Signature Algorithm: sha256WithRSAEncryption 02:7e:51:ec:5e:9d:9e:4b:16:80:3e:31:23:3f:09:92:23:55: 3f:7a:56:3a:0c:c7:7a:e5:14:9e:86:46:e7:5d:7a:ac:6a:66: 1f:68:19:b6:8a:5d:f7:ab:d4:16:67:f0:c5:c1:f0:18:74:c3: 78:b4:86:19:61:8d:1b:4d:06:fb:39:64:c3:45:99:4d:42:e5: d5:1e:63:eb:b1:a1:54:d0:f1:b9:a9:ac:f7:68:9a:7f:93:da: f9:c5:c5:e0:40:e7:a7:40:88:d1:45:74:cf:1f:25:23:a9:dd: fd:52:73:45:69:69:8f:de:32:3d:e9:da:f5:b1:ed:20:77:96: 1c:f9:ba:9b:95:b4:38:5d:f8:1d:e1:17:e7:8e:4a:07:57:aa: 8d:a9:36:92:ed:b0:04:3c:15:59:1f:6c:35:3b:07:7d:86:49: ee:09:0e:ac:cc:e2:06:36:2b:33:7a:b6:05:d9:ff:77:71:af: 53:5b:99:e6:f1:40:d4:6a:19:a6:46:ba:da:3a:7a:31:6f:61: 4f:b7:3f:7f:61:64:36:f3:83:fd:7a:13:8d:5c:69:af:24:92: d0:aa:60:ad:40:8c:a2:fc:d1:6b:fc:50:d4:eb:8d:0b:a4:7f: 29:89:31:44:a6:83:3f:ca:d4:df:d0:47:e8:52:82:67:16:cf: e6:4c:c9:1a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULM+zrPf9ISzu9DEUZbnFd/1r5M0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTEwMjMwWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AyN2Q5NGViMmI2ZmE5YzNiM2JiYWYwNzgxZDUyODA4MGNi YjdkYzAwNWFiOGUzYjVkMjRmOGZkMmQwZTYyZTM5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNhWyKVgKUohkCTlvC8OFbDpMTJRXxWGuKDWfbowj6exxS m262VqWwJWWk+TKCZhDSw492EI4n0AKRdQAkDManvrCfTSb9G7uwwVtJEoMjx5ht riN3PMg+jcHXZYm7wY3RWAZOM/U6jOuZiwlyyQeq8Hg2x8PqptwsbOXGGsVGkDc+ GqgcDdc0DQig2j36jkCy9z3reivwu8JgBDaFGlM1Aa3fkowiUsa3VdwvYacc63oC dGwaJdbJk1fgcZrH/q/iSb3fNcdZlqTCllTtTnLOANrjBagf/ktA9O0jVqaref1t eddOyWSRjZVaEdmnmpStFZ5sQlTi/3UaJF3iwsIHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUEHKSOa/oKm9ekyVlm1NMo3VKGOYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2NlMDRlZjNlLWRiZjEtNDc1NC04NGJiLWUyZjc5ZWU0MWNhYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQS7pAwDQYJKoZIhvcNAQELBQADggEBAAJ+UexenZ5LFoA+MSM/CZIjVT96 VjoMx3rlFJ6GRuddeqxqZh9oGbaKXfer1BZn8MXB8Bh0w3i0hhlhjRtNBvs5ZMNF mU1C5dUeY+uxoVTQ8bmprPdomn+T2vnFxeBA56dAiNFFdM8fJSOp3f1Sc0VpaY/e Mj3p2vWx7SB3lhz5upuVtDhd+B3hF+eOSgdXqo2pNpLtsAQ8FVkfbDU7B32GSe4J DqzM4gY2KzN6tgXZ/3dxr1NbmebxQNRqGaZGuto6ejFvYU+3P39hZDbzg/16E41c aa8kktCqYK1AjKL80Wv8UNTrjQukfymJMUSmgz/K1N/QR+hSgmcWz+ZMyRo= -----END CERTIFICATE-----Generated at Mon Oct 20 12:20:58 2025 by rpki-client