$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d319da81-8699-477a-85e0-37b7e5249733.roa File: d319da81-8699-477a-85e0-37b7e5249733.roa (raw, json) Hash identifier: ybtX8QnKAoqFxSCm8MJbCGDVLytHzJMjHTvBJeNn9Bw= Subject key identifier: 0B:9E:32:F0:A0:1E:BF:24:F1:1B:F4:AA:1A:F4:EC:C1:49:30:CA:9B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 368E57BAE6DB46B986DA70D6DED6909BEAB660AB Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d319da81-8699-477a-85e0-37b7e5249733.roa Signing time: Sat 18 Oct 2025 10:51:14 +0000 ROA not before: Sat 18 Oct 2025 10:51:14 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.164.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:8e:57:ba:e6:db:46:b9:86:da:70:d6:de:d6:90:9b:ea:b6:60:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 10:51:14 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=13868eb36bd81a471102174ed9a7133f8dda012ae5c13de2cb3cf6e12bdd35e5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:5f:35:cf:69:bb:c4:60:f0:f1:34:4f:f3:68: f2:1c:a8:1a:7e:f5:77:ec:fa:45:f1:ca:82:e0:ea: 7e:f5:52:11:eb:d1:92:58:49:35:c5:45:a1:66:39: e8:79:af:b9:b8:43:24:32:ec:ad:88:85:bc:7a:c1: 46:3a:73:98:94:07:fd:69:6f:eb:46:d2:e5:78:c6: 3e:00:e9:ee:c8:85:b7:0d:dc:a9:0a:71:59:32:dc: 55:10:e7:aa:d3:a9:a3:96:e2:cc:13:6c:b5:ad:36: 0d:56:e9:18:34:49:72:ed:c4:b5:f8:c5:90:ee:a6: 03:ab:c9:35:0e:08:97:1f:22:87:12:75:04:5e:37: c5:9c:46:1d:a9:43:6c:48:52:99:9d:1c:c7:11:4f: 2b:f4:38:66:4d:ad:35:cb:31:61:4a:79:0d:32:af: d9:ae:ca:2c:60:2c:a9:05:ba:98:4a:fa:83:04:4a: 09:88:a2:9f:58:34:bf:c9:06:bb:55:f2:b9:6e:2f: 70:9d:c3:ba:e1:68:cf:81:2a:b5:8f:8b:4e:3e:c5: a9:9d:12:f4:92:69:d4:3b:97:59:66:45:6f:fe:7a: 3e:e1:89:f4:05:f3:f4:f0:99:49:11:e5:30:bf:0a: b1:4e:80:d1:82:67:f3:39:b6:f8:7f:af:1d:a0:a4: 55:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:9E:32:F0:A0:1E:BF:24:F1:1B:F4:AA:1A:F4:EC:C1:49:30:CA:9B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d319da81-8699-477a-85e0-37b7e5249733.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.164.208.0/21 Signature Algorithm: sha256WithRSAEncryption 84:37:a8:66:a5:58:30:dc:03:b3:1f:d5:6c:e5:d5:fd:34:b6: a0:c6:d6:9d:ab:d0:7d:e8:08:63:06:63:4c:4c:cc:1c:f8:72: 7a:b1:b4:51:ca:20:6c:5c:3d:4c:17:59:5b:12:04:dc:19:e9: 27:3b:77:6e:3c:23:68:1f:b3:dd:3a:d3:fc:ad:6c:b7:00:6c: e3:a9:df:78:1c:80:1a:31:a8:cd:d7:a6:48:bf:0b:b1:1e:63: 4a:40:78:b0:d7:84:e1:cf:96:f2:93:ad:8f:bd:6a:f6:78:cf: 6b:e1:c2:af:6e:93:bb:09:77:d9:ba:69:17:5b:01:f9:bd:92: 19:e5:d6:c6:06:ad:9f:8c:2f:99:f3:a7:23:59:ad:68:c5:3f: 2a:f3:9b:6f:a9:d9:dd:10:fe:70:ac:cf:d3:41:9d:95:6b:bf: 51:db:bc:ad:89:38:3d:5f:47:1e:33:57:4a:08:b7:89:42:96: 77:b4:ec:5c:bd:0f:19:35:a9:e1:51:d3:1a:a9:0c:80:7c:1f: 05:32:d9:95:21:d4:66:3e:1b:e6:ba:2c:4f:e0:57:11:7c:e9: 61:72:1e:a6:15:96:cd:e7:d4:fa:b0:49:47:78:71:a8:b3:49: 94:2a:d7:78:53:47:34:c5:6f:ee:45:89:ac:fc:58:6d:12:b4: 90:9c:5b:e2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNo5XuubbRrmG2nDW3taQm+q2YKswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTA1MTE0WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AxMzg2OGViMzZiZDgxYTQ3MTEwMjE3NGVkOWE3MTMzZjhk ZGEwMTJhZTVjMTNkZTJjYjNjZjZlMTJiZGQzNWU1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCHXzXPabvEYPDxNE/zaPIcqBp+9Xfs+kXxyoLg6n71UhHr 0ZJYSTXFRaFmOeh5r7m4QyQy7K2Ihbx6wUY6c5iUB/1pb+tG0uV4xj4A6e7IhbcN 3KkKcVky3FUQ56rTqaOW4swTbLWtNg1W6Rg0SXLtxLX4xZDupgOryTUOCJcfIocS dQReN8WcRh2pQ2xIUpmdHMcRTyv0OGZNrTXLMWFKeQ0yr9muyixgLKkFuphK+oME SgmIop9YNL/JBrtV8rluL3Cdw7rhaM+BKrWPi04+xamdEvSSadQ7l1lmRW/+ej7h ifQF8/TwmUkR5TC/CrFOgNGCZ/M5tvh/rx2gpFXbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUC54y8KAevyTxG/SqGvTswUkwypswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2QzMTlkYTgxLTg2OTktNDc3YS04NWUwLTM3YjdlNTI0OTczMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMSpNAwDQYJKoZIhvcNAQELBQADggEBAIQ3qGalWDDcA7Mf1Wzl1f00tqDG 1p2r0H3oCGMGY0xMzBz4cnqxtFHKIGxcPUwXWVsSBNwZ6Sc7d248I2gfs9060/yt bLcAbOOp33gcgBoxqM3Xpki/C7EeY0pAeLDXhOHPlvKTrY+9avZ4z2vhwq9uk7sJ d9m6aRdbAfm9khnl1sYGrZ+ML5nzpyNZrWjFPyrzm2+p2d0Q/nCsz9NBnZVrv1Hb vK2JOD1fRx4zV0oIt4lClne07Fy9Dxk1qeFR0xqpDIB8HwUy2ZUh1GY+G+a6LE/g VxF86WFyHqYVls3n1PqwSUd4caizSZQq13hTRzTFb+5Fiaz8WG0StJCcW+I= -----END CERTIFICATE-----Generated at Mon Oct 20 03:11:02 2025 by rpki-client