$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d79b728b-21dd-4d9c-977d-32edf24014fe.roa File: d79b728b-21dd-4d9c-977d-32edf24014fe.roa (raw, json) Hash identifier: r37R+RBCnboJXGkKmqodoeKywjJCGtMsRxNrgeJRU8Y= Subject key identifier: 8E:B4:07:6D:FB:7B:97:23:5F:0F:A8:20:14:44:6C:F5:F9:8B:34:61 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1E85C12D8C48534E67C3F2A2CAF5CC3848C3B6DD Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d79b728b-21dd-4d9c-977d-32edf24014fe.roa Signing time: Thu 16 Oct 2025 16:00:34 +0000 ROA not before: Thu 16 Oct 2025 16:00:34 +0000 ROA not after: Thu 20 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.68.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:85:c1:2d:8c:48:53:4e:67:c3:f2:a2:ca:f5:cc:38:48:c3:b6:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 16 16:00:34 2025 GMT Not After : Nov 20 23:59:59 2025 GMT Subject: serialNumber=a19aeee613187bf364aa8ee4955988f36c75749a33e08bbd375c091a7f88e86e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ca:15:4d:98:cf:31:9e:cf:3c:72:c0:2a:e5: 84:4a:4b:97:c6:8e:8d:79:f8:79:aa:23:d0:5b:05: d0:89:a9:db:cd:49:1b:cc:24:99:e4:6a:62:c0:92: 76:e2:29:6f:62:e8:86:64:4e:7e:a8:78:15:ee:45: 78:98:6d:e4:77:47:d8:d7:40:1b:2b:f5:b3:d6:e2: 4a:b7:4a:af:11:02:76:39:08:20:0c:8f:b9:aa:90: 02:f3:a3:b4:f0:64:08:62:e9:bf:df:6f:40:a1:10: 30:15:10:20:b9:c3:3f:d5:f3:0c:b4:3d:a1:bc:8b: d7:9e:cf:f3:d4:1f:5d:df:97:4a:9b:fe:5e:4d:01: f7:a5:01:26:99:62:1c:d8:9b:10:73:c8:f5:40:bc: 35:46:d8:58:c1:e0:eb:6f:4d:7d:6d:bb:5d:97:ff: e1:54:e9:be:39:e9:9b:d2:67:8b:d7:aa:b6:3c:f2: 59:9a:50:62:7d:a0:01:10:63:07:30:4f:67:a9:11: 87:e2:93:57:a0:6e:a8:61:d3:fe:a2:2a:da:7b:7b: ab:10:51:90:72:bf:fe:75:50:bf:e3:35:78:55:5a: e3:fe:5b:2f:a6:b3:b0:da:d5:53:70:51:20:ee:37: c7:10:6f:86:4b:5d:3e:9f:40:61:69:30:93:06:6a: 64:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:B4:07:6D:FB:7B:97:23:5F:0F:A8:20:14:44:6C:F5:F9:8B:34:61 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d79b728b-21dd-4d9c-977d-32edf24014fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.68.200.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:5d:da:89:21:05:15:9f:3c:c0:f2:e7:98:81:cc:48:8f:36: b7:a6:1c:e9:94:8b:5e:59:01:69:b5:01:1b:7b:3b:03:a1:c7: b7:2f:f7:27:5f:80:48:af:aa:50:bf:97:41:ff:de:55:47:75: f8:06:8e:39:53:52:74:ae:77:78:8d:7a:30:62:72:2a:ac:96: e1:63:06:78:00:ec:e1:e1:62:9e:b5:55:e2:40:f0:1b:3c:bf: 53:16:48:85:9d:43:cb:fd:60:d8:32:8e:cd:02:59:09:54:8b: a8:18:0c:ab:06:1b:62:c3:bc:00:89:35:85:fd:22:ee:b1:1b: 9a:8d:67:17:be:c2:3d:b6:68:73:85:0d:55:9a:ba:d5:79:13: fd:87:c2:8d:51:52:a5:66:b1:30:ff:39:ab:3f:0b:96:9e:f0: 5a:9d:74:a6:c5:39:ca:7b:7d:d7:5c:d3:b8:f2:9a:70:cb:25: 1b:fc:0d:1a:6f:d6:a7:45:0c:89:c5:d6:2e:a2:c6:6d:70:5b: 11:d4:b6:42:86:2b:e6:b2:c3:ae:c1:b3:cd:92:aa:ab:db:20: a7:4b:6f:42:86:17:6f:64:1b:a3:9e:2a:ba:9c:a4:9d:b2:18: 57:f4:f6:70:6b:e3:5d:ce:64:74:74:0b:03:4c:1e:38:1e:32: 1c:40:d1:4c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHoXBLYxIU05nw/KiyvXMOEjDtt0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE2MTYwMDM0WhcNMjUxMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BhMTlhZWVlNjEzMTg3YmYzNjRhYThlZTQ5NTU5ODhmMzZj NzU3NDlhMzNlMDhiYmQzNzVjMDkxYTdmODhlODZlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGyhVNmM8xns88csAq5YRKS5fGjo15+HmqI9BbBdCJqdvN SRvMJJnkamLAknbiKW9i6IZkTn6oeBXuRXiYbeR3R9jXQBsr9bPW4kq3Sq8RAnY5 CCAMj7mqkALzo7TwZAhi6b/fb0ChEDAVECC5wz/V8wy0PaG8i9eez/PUH13fl0qb /l5NAfelASaZYhzYmxBzyPVAvDVG2FjB4OtvTX1tu12X/+FU6b456ZvSZ4vXqrY8 8lmaUGJ9oAEQYwcwT2epEYfik1egbqhh0/6iKtp7e6sQUZByv/51UL/jNXhVWuP+ Wy+ms7Da1VNwUSDuN8cQb4ZLXT6fQGFpMJMGamRRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUjrQHbft7lyNfD6ggFERs9fmLNGEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2Q3OWI3MjhiLTIxZGQtNGQ5Yy05NzdkLTMyZWRmMjQwMTRmZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASRMgwDQYJKoZIhvcNAQELBQADggEBAJ9d2okhBRWfPMDy55iBzEiPNrem HOmUi15ZAWm1ARt7OwOhx7cv9ydfgEivqlC/l0H/3lVHdfgGjjlTUnSud3iNejBi ciqsluFjBngA7OHhYp61VeJA8Bs8v1MWSIWdQ8v9YNgyjs0CWQlUi6gYDKsGG2LD vACJNYX9Iu6xG5qNZxe+wj22aHOFDVWautV5E/2Hwo1RUqVmsTD/Oas/C5ae8Fqd dKbFOcp7fddc07jymnDLJRv8DRpv1qdFDInF1i6ixm1wWxHUtkKGK+ayw67Bs82S qqvbIKdLb0KGF29kG6OeKrqcpJ2yGFf09nBr413OZHR0CwNMHjgeMhxA0Uw= -----END CERTIFICATE-----Generated at Mon Oct 20 08:29:52 2025 by rpki-client