$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f88886ef-26f8-4893-b5f8-669f602c8955.roa File: f88886ef-26f8-4893-b5f8-669f602c8955.roa (raw, json) Hash identifier: B5VP0BbieTXp7EOvlB72VEF/j107XhH3ZGuKvLzt++E= Subject key identifier: FE:E3:3F:FB:2A:94:65:E2:A5:F6:CE:D1:D5:92:84:2F:7E:F3:47:AA Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 580BF372BF17778F70D1050D6C32B161158D2459 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f88886ef-26f8-4893-b5f8-669f602c8955.roa Signing time: Sun 19 Oct 2025 16:32:33 +0000 ROA not before: Sun 19 Oct 2025 16:32:33 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.65.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:0b:f3:72:bf:17:77:8f:70:d1:05:0d:6c:32:b1:61:15:8d:24:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 16:32:33 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=ef3cec96b010da27d32e3d2138408fe4c58498a3a53ee0737c63d08108547ca7, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:00:b6:82:4d:fe:b7:d8:6c:42:08:9d:a8:64: f2:8a:a6:ea:fb:60:95:7c:08:2a:02:09:3e:98:3b: 3b:15:1e:29:3a:70:57:94:84:4f:ac:cd:11:02:ff: 4f:ec:93:aa:7f:ae:13:02:97:79:26:aa:97:f2:89: f4:00:f2:17:ee:ae:22:dc:e9:ac:f5:0f:f3:92:7a: 6e:2b:d0:13:d9:4e:c5:27:a4:cb:8e:a5:6c:57:a2: e9:e3:e5:c6:30:d2:1b:84:31:37:4a:fa:3a:dc:fa: 15:62:07:5e:a0:c4:33:5b:0d:45:2d:80:41:93:f4: ce:0e:9b:d5:b5:1b:f8:62:24:59:e1:6d:d3:2a:54: d8:23:61:be:19:77:4a:9e:fb:f8:b9:1d:d6:bf:2e: 05:12:4f:f9:a1:e6:dc:77:a3:da:59:e9:48:dd:ec: 7c:1b:da:d3:dc:0a:cf:66:9d:72:c2:cd:43:8e:c5: ef:1a:e2:0d:75:23:ec:ca:80:5b:e6:70:13:ad:9d: 43:27:68:e3:1d:ab:90:a2:25:61:4a:d0:f3:42:3f: f5:99:66:76:24:a4:17:4e:77:53:ae:a6:34:3c:2d: 71:96:e9:9d:99:05:2b:ff:97:df:0a:46:c9:2a:00: fe:b6:cb:da:3f:71:f5:49:cf:8d:83:60:da:31:2a: 93:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:E3:3F:FB:2A:94:65:E2:A5:F6:CE:D1:D5:92:84:2F:7E:F3:47:AA X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f88886ef-26f8-4893-b5f8-669f602c8955.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.65.72.0/22 Signature Algorithm: sha256WithRSAEncryption b0:2e:c2:e4:cd:3e:93:d0:ed:a2:3b:4b:42:11:4c:6f:fa:ee: 92:e5:40:51:40:40:e4:d5:0b:f2:e4:a3:ac:f5:f1:d2:6a:d1: 22:2e:cf:98:e8:81:ae:74:ba:a3:0b:98:a5:94:1a:6b:e9:46: c8:30:41:10:c0:65:08:22:f9:41:88:c6:61:4f:be:7f:e3:e6: cc:54:3a:c3:2e:6a:02:85:98:8f:9a:de:23:1f:a3:36:50:45: 68:b6:21:fc:d2:d5:11:f0:3a:f0:3a:a5:a0:da:73:3f:0d:48: 41:cf:3e:58:3e:0d:20:c5:d5:3f:c1:ec:c9:f2:0c:4a:4f:3b: a1:56:a4:8c:73:f9:85:ee:57:2c:42:31:08:f7:e3:b8:81:af: 33:8d:2a:ca:fe:aa:4c:9c:bd:94:9f:c1:41:0c:ef:9f:cb:e6: 0f:45:29:03:ee:ca:47:08:96:bb:4d:07:58:53:4f:c9:3f:62: 62:38:e4:8e:69:ce:0f:06:09:00:b3:0c:0b:bc:26:c2:32:46: b6:22:f9:b5:3e:58:30:17:f0:2a:e5:7b:ec:5c:33:bd:06:a8: 66:bc:55:e4:4a:ec:f8:3d:29:ff:fc:f0:e1:d8:33:62:f5:bf: 66:72:e9:0c:d3:14:bf:03:12:93:7e:00:fb:b0:de:46:19:ad: 3d:e8:64:63 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWAvzcr8Xd49w0QUNbDKxYRWNJFkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTYzMjMzWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BlZjNjZWM5NmIwMTBkYTI3ZDMyZTNkMjEzODQwOGZlNGM1 ODQ5OGEzYTUzZWUwNzM3YzYzZDA4MTA4NTQ3Y2E3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQALaCTf632GxCCJ2oZPKKpur7YJV8CCoCCT6YOzsVHik6 cFeUhE+szREC/0/sk6p/rhMCl3kmqpfyifQA8hfuriLc6az1D/OSem4r0BPZTsUn pMuOpWxXounj5cYw0huEMTdK+jrc+hViB16gxDNbDUUtgEGT9M4Om9W1G/hiJFnh bdMqVNgjYb4Zd0qe+/i5Hda/LgUST/mh5tx3o9pZ6Ujd7Hwb2tPcCs9mnXLCzUOO xe8a4g11I+zKgFvmcBOtnUMnaOMdq5CiJWFK0PNCP/WZZnYkpBdOd1OupjQ8LXGW 6Z2ZBSv/l98KRskqAP62y9o/cfVJz42DYNoxKpOnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU/uM/+yqUZeKl9s7R1ZKEL37zR6owHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2Y4ODg4NmVmLTI2ZjgtNDg5My1iNWY4LTY2OWY2MDJjODk1NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAISQUgwDQYJKoZIhvcNAQELBQADggEBALAuwuTNPpPQ7aI7S0IRTG/67pLl QFFAQOTVC/Lko6z18dJq0SIuz5joga50uqMLmKWUGmvpRsgwQRDAZQgi+UGIxmFP vn/j5sxUOsMuagKFmI+a3iMfozZQRWi2IfzS1RHwOvA6paDacz8NSEHPPlg+DSDF 1T/B7MnyDEpPO6FWpIxz+YXuVyxCMQj347iBrzONKsr+qkycvZSfwUEM75/L5g9F KQPuykcIlrtNB1hTT8k/YmI45I5pzg8GCQCzDAu8JsIyRrYi+bU+WDAX8Crle+xc M70GqGa8VeRK7Pg9Kf/88OHYM2L1v2Zy6QzTFL8DEpN+APuw3kYZrT3oZGM= -----END CERTIFICATE-----Generated at Mon Oct 20 08:43:26 2025 by rpki-client