$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d8859749-d327-4aca-8b19-0847f82acff3.roa File: d8859749-d327-4aca-8b19-0847f82acff3.roa (raw, json) Hash identifier: qPSU4tulPQIJLRQ9qxIuNXPHmpFqSLwFcLy4gI6WHSw= Subject key identifier: BE:30:E6:B8:DE:58:82:7F:88:8C:6F:A9:C8:09:2D:E8:33:DC:B9:54 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7E220F08DB1D7679C4562AAD879D12B124B72A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d8859749-d327-4aca-8b19-0847f82acff3.roa Signing time: Sat 18 Oct 2025 18:31:40 +0000 ROA not before: Sat 18 Oct 2025 18:31:40 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.173.10.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:22:0f:08:db:1d:76:79:c4:56:2a:ad:87:9d:12:b1:24:b7:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 18:31:40 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=325166bb285a08b5c02210f3382452a2447de4b3578e96f2c2a5dfc5ef72a049, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:75:f7:24:b8:33:e7:9d:6a:10:dd:d0:68:a4: 3c:64:fc:c9:32:46:8d:3c:7a:26:05:88:ac:bc:a6: 56:de:63:ce:d7:a3:c2:ed:31:68:99:43:93:4e:ed: 82:1b:33:1c:1a:e6:ee:56:9a:f3:ff:78:3f:db:64: 5c:5a:25:43:23:38:9e:ae:db:89:75:43:6f:3f:30: ff:07:c1:7f:5f:2a:6d:a1:57:54:9c:53:1a:5f:15: ce:50:ca:ac:1e:ad:7a:85:01:25:b7:69:d1:ba:be: 0c:a7:da:41:dd:69:85:f4:3e:21:82:2c:fd:b6:30: 73:f6:f2:03:62:f4:68:a2:6b:1a:a9:62:dd:bc:d6: be:a5:d8:c7:a1:83:5d:c1:ed:70:b3:50:68:f2:45: 9e:32:9d:25:d3:c3:44:7b:cf:4c:69:79:4d:96:48: 6d:1a:4f:fe:ad:f7:89:45:f3:dd:a9:1a:37:8b:21: a6:b6:d4:9e:3d:23:8e:a3:43:cd:af:81:95:89:dc: 81:3f:dc:ca:7e:f9:70:72:cd:7c:ce:dc:4b:17:39: 71:86:6a:cd:0e:66:d6:d6:46:dc:9c:b5:6b:8f:77: 5e:b6:8f:8d:a4:6b:bd:01:86:08:34:be:db:d5:d8: 40:da:0e:2d:0a:fd:e5:00:6c:c6:95:e3:9a:6c:d9: 1a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:30:E6:B8:DE:58:82:7F:88:8C:6F:A9:C8:09:2D:E8:33:DC:B9:54 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d8859749-d327-4aca-8b19-0847f82acff3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.173.10.0/23 Signature Algorithm: sha256WithRSAEncryption 3a:49:fb:a7:4c:a5:36:b4:ff:40:d2:0e:09:25:3e:4f:f8:c2: 41:c0:a1:33:a4:64:47:9f:b1:7f:dc:58:13:bb:4a:00:55:ee: 84:e1:20:dd:ca:18:29:20:d0:05:17:8f:2e:1f:6d:ad:ce:a2: a0:e7:7a:52:e5:03:38:fc:d5:a5:be:f8:ec:48:b1:a8:86:3a: 6e:10:33:4a:13:8a:da:86:66:a6:84:08:47:b7:39:2e:39:1d: f0:54:2f:c1:c8:fa:fe:2a:5b:25:b0:c0:e9:ab:50:00:85:bd: f6:d4:2f:5a:51:81:41:63:2c:aa:d9:70:73:66:18:b0:e2:ec: 28:a5:31:ab:ea:2b:bb:9d:85:25:90:ac:08:e5:28:ae:91:78: d9:0e:fb:49:fd:eb:ca:24:fb:b7:9f:63:5a:5e:1c:68:ad:b2: df:6a:dd:4a:58:a5:a4:af:d1:d2:f0:a1:ab:69:5a:a5:c4:f8: e5:d3:d9:c0:de:b4:87:50:1e:53:08:65:85:d5:a4:bf:e5:34: a2:35:b6:8e:b3:19:c3:d1:b6:18:61:a9:e7:52:59:73:f0:80: 74:d5:4d:7c:0a:91:a8:5f:57:f6:f0:75:4a:0b:8f:57:8d:55: 8b:13:88:f4:73:68:47:90:2d:13:6e:24:2a:3f:a6:fe:d7:8d: 40:71:42:8c -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITfiIPCNsddnnEViqth50SsSS3KjANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzJkZjZmM2IzYTM0YjYzODZkMWEzMmQ4ZjRmYTMxNzhlZjMx ODg3ZDhiNDI4ZGZhYTQ3NjAeFw0yNTEwMTgxODMxNDBaFw0yNTExMjIyMzU5NTla MHoxSTBHBgNVBAUTQDMyNTE2NmJiMjg1YTA4YjVjMDIyMTBmMzM4MjQ1MmEyNDQ3 ZGU0YjM1NzhlOTZmMmMyYTVkZmM1ZWY3MmEwNDkxLTArBgNVBAMTJDVmMjc2MDQ1 LTViOWYtNDVlZi05MjNkLWYzZmNlMjRhNjIyNTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAOF19yS4M+edahDd0GikPGT8yTJGjTx6JgWIrLymVt5jztej wu0xaJlDk07tghszHBrm7laa8/94P9tkXFolQyM4nq7biXVDbz8w/wfBf18qbaFX VJxTGl8VzlDKrB6teoUBJbdp0bq+DKfaQd1phfQ+IYIs/bYwc/byA2L0aKJrGqli 3bzWvqXYx6GDXcHtcLNQaPJFnjKdJdPDRHvPTGl5TZZIbRpP/q33iUXz3akaN4sh prbUnj0jjqNDza+BlYncgT/cyn75cHLNfM7cSxc5cYZqzQ5m1tZG3Jy1a493XraP jaRrvQGGCDS+29XYQNoOLQr95QBsxpXjmmzZGqcCAwEAAaOCArEwggKtMB0GA1Ud DgQWBBS+MOa43liCf4iMb6nICS3oM9y5VDAfBgNVHSMEGDAWgBQlrdNCsB63pY6t GZAmiLVLP4H0uDAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzg1MWNlZjE3LTEz MmEtNDMzNy1iN2QxLWJmMTZhNTJmZmQwMy9kZjZmM2IzYTM0YjYzODZkMWEzMmQ4 ZjRmYTMxNzhlZjMxODg3ZDhiNDI4ZGZhYTQ3Ni5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9mNzAzNjk2ZS1lNDdiLTRjMjAtYmQ5My02Zjgw OTA0ZTQyZDIvZDg4NTk3NDktZDMyNy00YWNhLThiMTktMDg0N2Y4MmFjZmYzLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMt NmY4MDkwNGU0MmQyL3RqaHRHakxZOVBveGVPOHhpSDJMUW8zNnBIWS5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEARKtCjANBgkqhkiG9w0BAQsFAAOCAQEAOkn7p0ylNrT/QNIOCSU+T/jCQcCh M6RkR5+xf9xYE7tKAFXuhOEg3coYKSDQBRePLh9trc6ioOd6UuUDOPzVpb747Eix qIY6bhAzShOK2oZmpoQIR7c5Ljkd8FQvwcj6/ipbJbDA6atQAIW99tQvWlGBQWMs qtlwc2YYsOLsKKUxq+oru52FJZCsCOUorpF42Q77Sf3ryiT7t59jWl4caK2y32rd SlilpK/R0vChq2lapcT45dPZwN60h1AeUwhlhdWkv+U0ojW2jrMZw9G2GGGp51JZ c/CAdNVNfAqRqF9X9vB1SguPV41VixOI9HNoR5AtE24kKj+m/teNQHFCjA== -----END CERTIFICATE-----Generated at Mon Oct 20 11:55:41 2025 by rpki-client