$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f1bdeea2-48ed-4d06-8d79-6618ec73c830.roa File: f1bdeea2-48ed-4d06-8d79-6618ec73c830.roa (raw, json) Hash identifier: 5rSBCcYfQ/UwktzxJcgmxnD0xjaqspGogR8Zgu1nmGk= Subject key identifier: 69:0C:E1:67:B3:71:5F:21:92:37:35:94:B1:AF:BB:EC:B1:34:1F:2A Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 661DC6EAE693B72381BB58FA96E1CE79C4D0F678 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f1bdeea2-48ed-4d06-8d79-6618ec73c830.roa Signing time: Sat 18 Oct 2025 17:42:24 +0000 ROA not before: Sat 18 Oct 2025 17:42:24 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.238.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:1d:c6:ea:e6:93:b7:23:81:bb:58:fa:96:e1:ce:79:c4:d0:f6:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 17:42:24 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=1dc784ca364e713704ad3552e9abe6cdc0e56c0ad5cf84d376f04c3850a68a0c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:9e:54:eb:4f:bc:32:c5:47:fe:f3:12:53:76: 90:4b:4b:f5:ab:8e:26:08:15:7c:a7:eb:11:9e:af: 05:18:f5:4f:da:f5:69:c7:df:53:1f:32:23:08:d2: 27:82:b0:47:f0:ae:12:ad:e2:27:03:dc:6f:87:ef: 6e:c9:75:d3:19:f5:89:a7:b3:85:41:d9:95:ed:02: e9:ba:bd:9f:9a:d0:57:11:34:ed:3b:81:e0:2b:bc: a7:93:2f:13:fa:55:4b:6b:2e:31:44:43:74:e1:23: 97:d1:ea:85:a8:d3:93:ca:36:28:00:be:de:81:b5: 8f:e1:a0:6f:48:46:ba:0d:96:cf:2f:72:f0:a7:4e: 8a:81:40:16:8c:c3:96:8b:43:9f:25:d8:3f:45:3d: 13:89:16:84:54:b8:d5:e5:7a:5d:f8:f5:53:a2:e9: c5:bf:c6:7d:81:14:3a:49:b2:bd:a6:75:7c:78:5d: 6c:d5:c6:b9:d3:99:1e:87:3d:49:47:0f:23:e3:84: 75:3e:35:4e:32:42:5c:78:4e:71:73:91:0c:49:65: 61:12:38:73:59:fb:6d:90:1e:e9:50:01:7f:e3:77: e7:b0:06:a3:2b:08:c9:bf:d4:90:cb:bc:0d:22:b1: 57:b9:9c:3a:f2:69:34:5c:5e:4b:e3:64:8a:d7:11: 96:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:0C:E1:67:B3:71:5F:21:92:37:35:94:B1:AF:BB:EC:B1:34:1F:2A X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f1bdeea2-48ed-4d06-8d79-6618ec73c830.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.238.158.0/24 Signature Algorithm: sha256WithRSAEncryption 01:9a:e2:f9:1c:63:50:34:25:84:d2:a2:97:3e:c1:aa:1a:72: d8:67:5b:c6:62:c7:ec:55:01:ed:ec:45:75:46:42:1c:27:aa: 69:8f:9c:6c:78:cb:3d:db:1c:b0:ac:14:b3:2c:fe:4b:d1:2e: 75:0f:21:71:9e:8b:58:5a:6d:1d:c1:df:08:c4:0d:01:b3:68: a9:80:5d:83:1d:94:12:63:cf:c5:6c:74:bc:a2:d1:bc:ba:18: 36:e5:ce:4e:24:e3:e8:ff:83:60:8d:69:a9:bb:96:d6:1d:58: 41:1a:37:8d:ac:87:83:51:9b:83:df:91:a3:ac:50:9b:3b:5f: b3:ab:c1:c5:64:b8:87:eb:3f:23:49:12:05:b7:26:88:d5:eb: f0:93:52:8b:5c:67:94:76:62:cc:eb:aa:17:b9:14:ad:c8:9c: c0:d9:10:82:0b:92:e5:6e:a3:3a:fb:ee:8c:cb:be:6e:eb:f1: 7d:26:ad:20:45:19:ad:64:e0:e7:5f:56:98:63:d3:de:d4:0d: 8e:05:2d:e5:88:2b:c5:56:c8:6c:1e:db:6a:24:b2:4a:ae:24: 96:f7:34:6a:d7:d4:a7:b2:2e:76:45:d9:c1:1a:e1:13:24:1a: 32:e2:a6:c9:32:31:86:a9:97:fb:c9:a2:cd:a7:7c:3f:aa:d1: 61:af:13:58 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZh3G6uaTtyOBu1j6luHOecTQ9ngwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTc0MjI0WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AxZGM3ODRjYTM2NGU3MTM3MDRhZDM1NTJlOWFiZTZjZGMw ZTU2YzBhZDVjZjg0ZDM3NmYwNGMzODUwYTY4YTBjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDinlTrT7wyxUf+8xJTdpBLS/WrjiYIFXyn6xGerwUY9U/a 9WnH31MfMiMI0ieCsEfwrhKt4icD3G+H727JddMZ9Ymns4VB2ZXtAum6vZ+a0FcR NO07geArvKeTLxP6VUtrLjFEQ3ThI5fR6oWo05PKNigAvt6BtY/hoG9IRroNls8v cvCnToqBQBaMw5aLQ58l2D9FPROJFoRUuNXlel349VOi6cW/xn2BFDpJsr2mdXx4 XWzVxrnTmR6HPUlHDyPjhHU+NU4yQlx4TnFzkQxJZWESOHNZ+22QHulQAX/jd+ew BqMrCMm/1JDLvA0isVe5nDryaTRcXkvjZIrXEZaLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUaQzhZ7NxXyGSNzWUsa+77LE0HyowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2YxYmRlZWEyLTQ4ZWQtNGQwNi04ZDc5LTY2MThlYzczYzgzMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAS7p4wDQYJKoZIhvcNAQELBQADggEBAAGa4vkcY1A0JYTSopc+waoacthn W8Zix+xVAe3sRXVGQhwnqmmPnGx4yz3bHLCsFLMs/kvRLnUPIXGei1habR3B3wjE DQGzaKmAXYMdlBJjz8VsdLyi0by6GDblzk4k4+j/g2CNaam7ltYdWEEaN42sh4NR m4PfkaOsUJs7X7OrwcVkuIfrPyNJEgW3JojV6/CTUotcZ5R2Yszrqhe5FK3InMDZ EIILkuVuozr77ozLvm7r8X0mrSBFGa1k4OdfVphj097UDY4FLeWIK8VWyGwe22ok skquJJb3NGrX1KeyLnZF2cEa4RMkGjLipskyMYapl/vJos2nfD+q0WGvE1g= -----END CERTIFICATE-----Generated at Mon Oct 20 03:02:57 2025 by rpki-client