$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fd969d2a-2aee-4eb0-b4e6-04957fb75a91.roa File: fd969d2a-2aee-4eb0-b4e6-04957fb75a91.roa (raw, json) Hash identifier: ZJaCUbSPeC0TCBXGDz9Af+HndUP9VjcuztEAnGpVLDQ= Subject key identifier: A9:34:AC:55:88:47:63:70:FB:F5:47:00:EA:E2:67:34:11:47:E6:0D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2114ADAEA32434474BBFC8A4E977CB105EFBDFBB Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fd969d2a-2aee-4eb0-b4e6-04957fb75a91.roa Signing time: Sat 18 Oct 2025 07:53:44 +0000 ROA not before: Sat 18 Oct 2025 07:53:44 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.172.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:14:ad:ae:a3:24:34:47:4b:bf:c8:a4:e9:77:cb:10:5e:fb:df:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 07:53:44 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=a9c7ac1438f280e0a20475122c9b2cb6902b639d0d3ec3b0d005be59e7bc39ef, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:12:f1:cf:f5:1f:01:f1:b2:f7:f5:85:a4:67: 31:b1:af:bb:ec:42:46:97:9d:7e:98:59:4f:d3:fe: 5c:62:73:a0:4d:44:b0:b5:fc:e2:da:60:25:93:01: f6:95:8c:c9:48:53:a0:19:80:e2:e8:00:ed:c7:e9: 2a:b6:30:2d:d3:29:a5:b6:ab:06:b2:b7:9c:c6:43: 27:30:50:4e:d7:24:48:62:0f:9a:6b:a0:d0:ad:9f: 30:56:43:09:53:25:ac:f8:36:ef:b0:10:88:eb:ad: 65:49:8b:4d:71:89:99:e1:0b:f0:86:43:6c:5a:19: ce:95:d8:99:6b:be:e6:44:1c:19:55:1f:ec:22:48: 92:2c:1a:56:bc:7c:80:8e:f7:af:4c:64:63:44:12: e0:c0:4e:17:30:1f:68:60:4e:01:56:9e:65:04:88: 76:6b:84:cb:ad:5c:80:b5:70:0c:b9:99:a0:87:40: 81:58:e8:d5:3b:15:5b:4e:30:57:4d:fc:fe:2a:fa: e4:05:54:6a:62:a1:1a:86:29:8b:90:dd:6b:24:35: bb:3d:44:a1:92:c1:c7:0f:97:76:c9:25:23:80:22: e4:40:c8:01:a9:e0:17:2a:66:91:d6:0d:76:f6:bf: 94:f8:40:54:12:25:b7:3d:22:46:77:cb:73:e2:e7: 1b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:34:AC:55:88:47:63:70:FB:F5:47:00:EA:E2:67:34:11:47:E6:0D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fd969d2a-2aee-4eb0-b4e6-04957fb75a91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.172.35.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:6a:d0:f2:f4:9c:5b:e6:56:1c:00:14:20:37:77:29:0c:16: d7:6f:bd:77:a4:50:5b:f0:e0:18:da:a5:c5:17:c3:c5:18:45: ef:e7:5c:d5:8b:a3:74:d2:8c:c0:05:aa:90:49:42:9d:cb:c7: dd:99:ae:63:d7:18:85:b5:b4:58:4a:77:8f:94:64:5d:38:44: 10:0f:18:24:24:ab:8f:15:c4:46:36:38:9d:a3:c9:7e:6f:69: 1b:92:f4:7e:fb:37:41:a3:35:f7:15:4c:f9:88:76:65:b7:d7: b0:0d:66:57:52:33:4b:54:06:3b:0a:7a:dc:30:e0:21:1b:7c: 27:a1:cd:9a:03:4b:5f:4a:b1:1c:7c:86:bd:25:37:40:12:25: c6:4c:6f:a9:06:b2:67:a7:7c:f7:0c:8f:52:c6:77:4b:c5:4b: 52:75:f3:1b:de:91:0b:fd:92:cc:67:d4:6d:47:04:e9:ba:ec: c4:e5:74:02:18:1c:cb:a4:64:57:e0:c9:ee:87:af:34:47:b7: fc:fb:31:79:f2:08:a1:12:94:a5:13:38:a8:eb:fc:02:41:cd: 3e:12:10:2a:df:9f:f7:f5:eb:ce:f6:f0:eb:39:d8:1b:1f:39: 02:06:df:a4:28:c2:ef:a1:49:00:20:b4:63:d3:c3:6a:c5:35: 53:c0:03:06 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIRStrqMkNEdLv8ik6XfLEF7737swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MDc1MzQ0WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BhOWM3YWMxNDM4ZjI4MGUwYTIwNDc1MTIyYzliMmNiNjkw MmI2MzlkMGQzZWMzYjBkMDA1YmU1OWU3YmMzOWVmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDiEvHP9R8B8bL39YWkZzGxr7vsQkaXnX6YWU/T/lxic6BN RLC1/OLaYCWTAfaVjMlIU6AZgOLoAO3H6Sq2MC3TKaW2qwayt5zGQycwUE7XJEhi D5proNCtnzBWQwlTJaz4Nu+wEIjrrWVJi01xiZnhC/CGQ2xaGc6V2JlrvuZEHBlV H+wiSJIsGla8fICO969MZGNEEuDAThcwH2hgTgFWnmUEiHZrhMutXIC1cAy5maCH QIFY6NU7FVtOMFdN/P4q+uQFVGpioRqGKYuQ3WskNbs9RKGSwccPl3bJJSOAIuRA yAGp4BcqZpHWDXb2v5T4QFQSJbc9IkZ3y3Pi5xuTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUqTSsVYhHY3D79UcA6uJnNBFH5g0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2ZkOTY5ZDJhLTJhZWUtNGViMC1iNGU2LTA0OTU3ZmI3NWE5MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASrCMwDQYJKoZIhvcNAQELBQADggEBAB5q0PL0nFvmVhwAFCA3dykMFtdv vXekUFvw4BjapcUXw8UYRe/nXNWLo3TSjMAFqpBJQp3Lx92ZrmPXGIW1tFhKd4+U ZF04RBAPGCQkq48VxEY2OJ2jyX5vaRuS9H77N0GjNfcVTPmIdmW317ANZldSM0tU BjsKetww4CEbfCehzZoDS19KsRx8hr0lN0ASJcZMb6kGsmenfPcMj1LGd0vFS1J1 8xvekQv9ksxn1G1HBOm67MTldAIYHMukZFfgye6HrzRHt/z7MXnyCKESlKUTOKjr /AJBzT4SECrfn/f168728Os52BsfOQIG36Qowu+hSQAgtGPTw2rFNVPAAwY= -----END CERTIFICATE-----Generated at Mon Oct 20 11:11:15 2025 by rpki-client