$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d01ba9e1-32fc-4bde-b73e-92118e5b16f8.roa File: d01ba9e1-32fc-4bde-b73e-92118e5b16f8.roa (raw, json) Hash identifier: 4OES3RRxTNbyeg27V1yL3BPfKbVssctJO+YtG9g7RjI= Subject key identifier: 28:48:4C:27:83:2A:26:AF:43:70:D6:55:47:78:6F:91:3C:D3:E2:1F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 47212A995ABD6E868C908ECDBDC5CF5B7A0C6DB4 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d01ba9e1-32fc-4bde-b73e-92118e5b16f8.roa Signing time: Sat 18 Oct 2025 12:00:15 +0000 ROA not before: Sat 18 Oct 2025 12:00:15 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.238.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:21:2a:99:5a:bd:6e:86:8c:90:8e:cd:bd:c5:cf:5b:7a:0c:6d:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 12:00:15 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=866cf891f1712fcccba84a6f8f249693e984f18b7605eda006b51d3be31f7cbe, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:aa:cd:61:5c:1c:e4:f7:6b:ac:03:25:7d:c8: 96:14:43:b3:5e:c3:9f:40:15:2f:ee:f4:bc:6c:22: 5c:de:77:26:5f:16:36:e4:6d:51:22:a2:9d:3a:5b: a0:64:bb:f1:91:2f:ab:8b:89:2e:92:b5:10:e9:65: aa:a6:aa:6f:18:fe:60:43:13:48:57:75:d7:de:fb: 6c:27:fc:9f:4a:18:e1:5a:08:d1:2f:40:5d:ee:21: d2:2c:c4:54:7c:14:e2:17:ce:5a:39:8f:57:e4:8b: 6f:b2:47:fd:2c:f8:40:bd:9c:f7:7c:bd:7d:7d:df: 0a:63:f6:24:11:96:7a:f5:56:0c:a2:f4:72:b9:75: 3d:eb:fd:ad:4d:d3:49:b0:45:80:41:3e:9a:83:be: 14:e0:e0:ef:b3:80:e6:84:c3:8b:15:68:35:b1:58: 23:3b:2d:b2:3d:67:fc:d0:8c:20:59:66:ec:7e:a9: 55:0f:55:38:ee:70:05:88:a5:71:7d:d3:b2:ed:93: 50:21:b3:14:df:09:ac:5f:41:02:1a:2c:dd:e0:a3: 5e:2b:2e:cc:9b:a7:e4:73:5f:a3:49:e2:be:3f:df: 04:1a:47:dd:60:3a:c0:79:d6:ec:3f:29:c3:c3:5e: 70:b8:9f:49:cf:57:ca:65:6a:6b:78:b2:10:c7:32: b8:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:48:4C:27:83:2A:26:AF:43:70:D6:55:47:78:6F:91:3C:D3:E2:1F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d01ba9e1-32fc-4bde-b73e-92118e5b16f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.238.32.0/22 Signature Algorithm: sha256WithRSAEncryption 21:d3:30:e8:91:90:5b:18:3b:89:ee:f0:72:a7:c7:57:b6:e9: 5c:ec:ee:9c:dd:c9:55:d3:7a:ad:9a:54:c2:a4:c9:c6:3c:37: e0:f0:97:7b:f0:42:74:04:d6:2c:93:da:9e:06:60:b6:0a:c4: b3:fc:50:c0:5c:0f:ea:5b:4c:c1:60:b8:47:b2:9b:2b:a9:82: 55:07:6a:10:de:5e:f8:32:07:e0:ec:65:90:f1:be:05:ff:aa: 42:6c:e7:c0:0e:5e:56:4f:f7:78:92:bb:7e:3c:6f:ba:c1:8a: 12:be:cc:36:08:1c:e9:ab:bb:f1:63:0e:4b:16:ab:1d:9a:29: 91:d1:2e:11:54:1e:49:fe:99:10:a1:9d:1c:6a:70:9c:df:6e: 9b:ca:01:6a:13:71:6b:ab:36:5e:7a:af:1d:3d:bf:9c:4d:cd: 16:5b:2e:02:b2:82:4c:e6:5e:03:d7:80:7e:fc:30:84:72:ab: 44:8a:59:91:de:a7:2d:3a:ca:4f:46:34:4b:e9:5a:63:3b:5b: 75:47:6c:d0:fe:af:48:9a:e7:50:83:54:3b:24:e4:61:14:25: bd:6a:24:1c:4a:51:73:57:41:44:fc:22:5a:38:c1:38:b1:71: 09:27:c4:79:c7:10:0d:a7:ff:59:22:59:b6:93:09:a8:ce:b5: fb:31:7f:1a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURyEqmVq9boaMkI7NvcXPW3oMbbQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTIwMDE1WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A4NjZjZjg5MWYxNzEyZmNjY2JhODRhNmY4ZjI0OTY5M2U5 ODRmMThiNzYwNWVkYTAwNmI1MWQzYmUzMWY3Y2JlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBqs1hXBzk92usAyV9yJYUQ7New59AFS/u9LxsIlzedyZf FjbkbVEiop06W6Bku/GRL6uLiS6StRDpZaqmqm8Y/mBDE0hXddfe+2wn/J9KGOFa CNEvQF3uIdIsxFR8FOIXzlo5j1fki2+yR/0s+EC9nPd8vX193wpj9iQRlnr1Vgyi 9HK5dT3r/a1N00mwRYBBPpqDvhTg4O+zgOaEw4sVaDWxWCM7LbI9Z/zQjCBZZux+ qVUPVTjucAWIpXF907Ltk1AhsxTfCaxfQQIaLN3go14rLsybp+RzX6NJ4r4/3wQa R91gOsB51uw/KcPDXnC4n0nPV8plamt4shDHMrhDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUKEhMJ4MqJq9DcNZVR3hvkTzT4h8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2QwMWJhOWUxLTMyZmMtNGJkZS1iNzNlLTkyMTE4ZTViMTZmOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIS7iAwDQYJKoZIhvcNAQELBQADggEBACHTMOiRkFsYO4nu8HKnx1e26Vzs 7pzdyVXTeq2aVMKkycY8N+Dwl3vwQnQE1iyT2p4GYLYKxLP8UMBcD+pbTMFguEey myupglUHahDeXvgyB+DsZZDxvgX/qkJs58AOXlZP93iSu348b7rBihK+zDYIHOmr u/FjDksWqx2aKZHRLhFUHkn+mRChnRxqcJzfbpvKAWoTcWurNl56rx09v5xNzRZb LgKygkzmXgPXgH78MIRyq0SKWZHepy06yk9GNEvpWmM7W3VHbND+r0ia51CDVDsk 5GEUJb1qJBxKUXNXQUT8Ilo4wTixcQknxHnHEA2n/1kiWbaTCajOtfsxfxo= -----END CERTIFICATE-----Generated at Mon Oct 20 13:17:09 2025 by rpki-client