$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fc0f7afc-d911-418e-af60-d3402c064506.roa File: fc0f7afc-d911-418e-af60-d3402c064506.roa (raw, json) Hash identifier: HLizz2G6p8RJrzRtjWKuUPv4cvNXGgS9FUWMBN7QweM= Subject key identifier: E7:B8:00:7E:88:3B:34:F3:8B:C2:45:02:60:F9:30:5A:85:A2:6F:0A Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 373134E4F13A55D92682E79CA1C2ECB06DA36405 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fc0f7afc-d911-418e-af60-d3402c064506.roa Signing time: Sun 19 Oct 2025 13:30:23 +0000 ROA not before: Sun 19 Oct 2025 13:30:23 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.66.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:31:34:e4:f1:3a:55:d9:26:82:e7:9c:a1:c2:ec:b0:6d:a3:64:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 13:30:23 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=2ff3814a4095b5463c2f7836de994e1e62b507e2c3ab10468856aa9b796be751, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c4:65:47:13:d7:73:e0:c6:52:9f:30:17:a1: ba:96:96:f8:37:c9:93:ef:d4:59:5c:81:c7:d4:0e: 8d:19:9c:7f:a2:fd:a2:18:12:e3:54:1d:cb:e1:c3: 4f:f3:91:80:66:a4:2e:03:e0:e1:56:c9:64:17:af: da:69:46:06:7a:bb:3b:d1:10:39:74:be:72:bf:6f: 2f:c7:98:69:45:67:d6:f0:15:fc:af:40:5a:a9:ee: 88:e8:c0:c7:32:41:89:f8:45:b1:aa:04:b4:3a:a0: ea:da:e5:88:73:bc:db:1b:81:6e:56:ce:48:ba:df: 83:29:64:a5:b0:c4:79:97:89:f0:a3:ea:20:f1:8a: 87:c6:12:bb:d9:39:d8:f9:37:03:4a:e0:b4:84:49: 7d:d8:48:58:15:1b:4e:bc:c4:f4:d5:a7:f8:62:2a: 06:d5:71:9f:c9:1a:f3:56:6d:84:3b:22:88:38:67: 21:98:65:0d:56:e1:72:08:87:01:7f:93:b6:8d:cf: b5:bd:12:23:d6:28:12:5d:02:18:2a:a4:42:ba:e3: 94:11:8c:3d:6e:06:dc:1f:22:51:6c:84:f8:1b:30: 94:5d:95:86:bc:f6:ce:8a:b6:c2:35:91:ed:bc:1c: 60:b5:ee:d4:6e:74:e1:53:dc:db:c7:46:78:c7:80: 92:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:B8:00:7E:88:3B:34:F3:8B:C2:45:02:60:F9:30:5A:85:A2:6F:0A X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fc0f7afc-d911-418e-af60-d3402c064506.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.66.129.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:51:1a:a3:7c:95:cb:be:1b:fe:e2:9e:da:4e:f2:dd:85:62: 91:ad:35:25:db:70:a9:b6:55:68:ac:70:e2:2c:94:25:23:2f: 21:03:ee:79:fe:22:3e:b4:29:8a:22:7a:43:92:c0:db:91:2a: 73:53:66:75:5e:39:df:f3:d0:de:f4:68:ae:d5:81:64:9c:e3: 0c:18:d0:c5:3e:e9:80:b2:cf:3c:1f:89:aa:fa:ba:35:23:19: 97:0e:6e:54:66:d8:b1:44:e7:ab:9d:65:11:d5:8b:96:72:1b: 67:af:c2:b3:a7:8a:a1:3c:59:fa:ca:85:e8:f2:bc:1a:91:16: fe:b6:f1:1a:00:9a:92:a8:0d:ea:00:3d:27:3e:dc:fa:67:74: 9d:93:8e:e5:35:85:42:32:06:25:d6:48:c1:9f:bf:cb:4d:fc: a0:2e:d2:1a:62:2a:40:f6:ef:3f:9c:be:5c:f4:fa:9d:19:06: 8c:e0:6e:18:de:56:84:09:f8:ad:cb:fb:47:d9:ee:07:b8:8a: f0:1f:51:0a:b7:91:48:02:6b:84:14:fa:2c:73:d0:fe:ed:bc: ee:32:50:41:90:2b:e7:95:bf:c4:76:36:d5:7d:e8:a7:27:05: fb:b2:be:0e:f5:5d:e3:94:6e:d5:75:90:71:ff:8a:40:82:33: 8b:2b:24:75 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNzE05PE6VdkmguecocLssG2jZAUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTMzMDIzWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AyZmYzODE0YTQwOTViNTQ2M2MyZjc4MzZkZTk5NGUxZTYy YjUwN2UyYzNhYjEwNDY4ODU2YWE5Yjc5NmJlNzUxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDRxGVHE9dz4MZSnzAXobqWlvg3yZPv1FlcgcfUDo0ZnH+i /aIYEuNUHcvhw0/zkYBmpC4D4OFWyWQXr9ppRgZ6uzvREDl0vnK/by/HmGlFZ9bw FfyvQFqp7ojowMcyQYn4RbGqBLQ6oOra5YhzvNsbgW5Wzki634MpZKWwxHmXifCj 6iDxiofGErvZOdj5NwNK4LSESX3YSFgVG068xPTVp/hiKgbVcZ/JGvNWbYQ7Iog4 ZyGYZQ1W4XIIhwF/k7aNz7W9EiPWKBJdAhgqpEK645QRjD1uBtwfIlFshPgbMJRd lYa89s6KtsI1ke28HGC17tRudOFT3NvHRnjHgJLXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU57gAfog7NPOLwkUCYPkwWoWibwowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2ZjMGY3YWZjLWQ5MTEtNDE4ZS1hZjYwLWQzNDAyYzA2NDUwNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASQoEwDQYJKoZIhvcNAQELBQADggEBAE5RGqN8lcu+G/7intpO8t2FYpGt NSXbcKm2VWiscOIslCUjLyED7nn+Ij60KYoiekOSwNuRKnNTZnVeOd/z0N70aK7V gWSc4wwY0MU+6YCyzzwfiar6ujUjGZcOblRm2LFE56udZRHVi5ZyG2evwrOniqE8 WfrKhejyvBqRFv628RoAmpKoDeoAPSc+3PpndJ2TjuU1hUIyBiXWSMGfv8tN/KAu 0hpiKkD27z+cvlz0+p0ZBozgbhjeVoQJ+K3L+0fZ7ge4ivAfUQq3kUgCa4QU+ixz 0P7tvO4yUEGQK+eVv8R2NtV96KcnBfuyvg71XeOUbtV1kHH/ikCCM4srJHU= -----END CERTIFICATE-----Generated at Mon Oct 20 02:58:52 2025 by rpki-client