$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f7b4d364-879a-41d2-9dc3-91d0ba21587b.roa File: f7b4d364-879a-41d2-9dc3-91d0ba21587b.roa (raw, json) Hash identifier: azL/bttgSdqdJRJINuTSlugwNtPStNuOuk0B185rzzI= Subject key identifier: 85:AA:DF:54:C5:54:E4:D3:12:FE:44:3B:22:5F:89:4B:7E:5D:26:86 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 23E0A7FD981E209A58480CDCBC29ADF69A26CF56 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f7b4d364-879a-41d2-9dc3-91d0ba21587b.roa Signing time: Sat 18 Oct 2025 07:03:10 +0000 ROA not before: Sat 18 Oct 2025 07:03:10 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.239.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:e0:a7:fd:98:1e:20:9a:58:48:0c:dc:bc:29:ad:f6:9a:26:cf:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 07:03:10 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=dd26b80b911b57f323f6cf9bcfbcb942ec5f13c06a7a275dcb0c0b63c217a4f1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e4:04:ff:7a:8f:52:9c:08:33:2e:4e:ae:86: 7f:fe:08:0d:98:cf:03:8c:9c:09:bd:14:40:3d:4c: af:50:ba:97:0f:59:36:74:f1:f2:3a:96:56:3a:28: 99:12:26:21:86:3a:f0:1d:4f:45:b6:6a:eb:77:3c: b7:36:e6:60:da:3c:d5:d1:4f:a1:ec:64:89:10:b2: 01:8f:92:33:1a:d3:ff:44:a1:0f:2a:6e:6c:af:fb: 93:66:28:49:66:d4:05:0c:c5:6b:a7:d2:22:0f:9f: b7:58:e6:21:da:da:a9:5b:38:86:d2:55:bb:a3:06: d8:1d:85:aa:c2:c3:c1:b3:cf:5a:ef:e5:65:6e:b0: ff:6c:9e:55:8d:30:d5:97:3e:7b:fe:e6:40:d4:2c: 85:60:a5:d6:71:31:7e:d8:73:3c:c1:92:59:36:69: b1:5b:d4:9d:04:54:03:d0:b7:ec:2b:61:03:80:04: f6:f3:60:32:2b:53:fb:ae:03:1b:9c:5f:58:28:cc: a1:35:4c:1a:88:ee:06:71:dc:3a:b3:89:78:b1:cb: 7b:f4:91:e0:4b:db:e6:27:89:b2:83:f3:fb:de:d3: 62:0a:49:2a:59:3e:48:d7:9d:98:da:4a:1a:23:1e: 50:90:2f:fe:ce:1f:42:d0:13:2b:e9:8f:44:74:53: c8:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:AA:DF:54:C5:54:E4:D3:12:FE:44:3B:22:5F:89:4B:7E:5D:26:86 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f7b4d364-879a-41d2-9dc3-91d0ba21587b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.239.73.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:84:6d:5c:74:7b:ad:77:ad:87:0d:da:cb:24:e0:8e:94:5f: 41:ce:78:5a:43:f7:9b:9a:97:b6:40:46:a2:d5:44:71:fe:84: 02:17:e1:53:f3:d0:7f:7c:15:e9:89:12:22:cd:10:95:9b:8e: b7:65:77:bf:1c:4b:42:07:96:0c:3d:93:8d:91:c5:2f:7d:5b: 6e:7d:31:1e:28:ca:03:0e:ba:8e:9b:3e:87:f4:f2:ab:45:ce: 84:42:f2:f5:76:91:d3:21:2f:16:36:37:a2:72:b3:ca:d2:5d: 30:a9:b5:28:26:2b:23:6e:8a:c7:75:a5:66:95:d2:6a:09:6c: 3a:8e:5d:b5:b8:50:d9:b8:9c:6c:f9:cd:05:01:39:3c:06:80: c8:a0:93:3f:85:fe:d1:9f:45:f6:e1:19:95:17:22:73:a8:36: 30:2f:52:54:a7:89:d5:cd:18:20:e0:95:87:7e:e1:b1:da:9d: ce:1b:76:de:ea:c2:d9:53:c6:be:b9:48:d6:26:33:df:3a:dc: 19:90:a6:65:34:50:6f:42:9b:5d:7c:3c:21:81:de:bc:b1:be: f2:d7:40:55:af:b2:98:9f:ab:93:76:e4:2d:07:de:3e:09:bf: 37:d3:63:63:36:95:96:b5:43:9c:d6:4e:cb:db:3d:5b:88:71: 59:0e:0e:65 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUI+Cn/ZgeIJpYSAzcvCmt9pomz1YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MDcwMzEwWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BkZDI2YjgwYjkxMWI1N2YzMjNmNmNmOWJjZmJjYjk0MmVj NWYxM2MwNmE3YTI3NWRjYjBjMGI2M2MyMTdhNGYxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC55AT/eo9SnAgzLk6uhn/+CA2YzwOMnAm9FEA9TK9QupcP WTZ08fI6llY6KJkSJiGGOvAdT0W2aut3PLc25mDaPNXRT6HsZIkQsgGPkjMa0/9E oQ8qbmyv+5NmKElm1AUMxWun0iIPn7dY5iHa2qlbOIbSVbujBtgdharCw8Gzz1rv 5WVusP9snlWNMNWXPnv+5kDULIVgpdZxMX7YczzBklk2abFb1J0EVAPQt+wrYQOA BPbzYDIrU/uuAxucX1gozKE1TBqI7gZx3DqziXixy3v0keBL2+YnibKD8/ve02IK SSpZPkjXnZjaShojHlCQL/7OH0LQEyvpj0R0U8gXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUharfVMVU5NMS/kQ7Il+JS35dJoYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2Y3YjRkMzY0LTg3OWEtNDFkMi05ZGMzLTkxZDBiYTIxNTg3Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAS70kwDQYJKoZIhvcNAQELBQADggEBAGyEbVx0e613rYcN2ssk4I6UX0HO eFpD95ual7ZARqLVRHH+hAIX4VPz0H98FemJEiLNEJWbjrdld78cS0IHlgw9k42R xS99W259MR4oygMOuo6bPof08qtFzoRC8vV2kdMhLxY2N6Jys8rSXTCptSgmKyNu isd1pWaV0moJbDqOXbW4UNm4nGz5zQUBOTwGgMigkz+F/tGfRfbhGZUXInOoNjAv UlSnidXNGCDglYd+4bHanc4bdt7qwtlTxr65SNYmM9863BmQpmU0UG9Cm118PCGB 3ryxvvLXQFWvspifq5N25C0H3j4JvzfTY2M2lZa1Q5zWTsvbPVuIcVkODmU= -----END CERTIFICATE-----Generated at Mon Oct 20 19:16:39 2025 by rpki-client