$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/643bb549-24fc-4069-90c5-f5c516de19f6.roa File: 643bb549-24fc-4069-90c5-f5c516de19f6.roa (raw, json) Hash identifier: zUdHGDr8cnI2rr60mt5UEqOU21IMxJL8N2cgZ6xWGyk= Subject key identifier: 60:D4:EE:2D:DF:90:06:64:91:7A:A9:E7:EC:38:DB:9A:44:C2:B1:7A Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 238C8004E0C8234D605CAD8FD00FE34D76017AC0 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/643bb549-24fc-4069-90c5-f5c516de19f6.roa Signing time: Fri 19 Sep 2025 00:23:59 +0000 ROA not before: Fri 19 Sep 2025 00:23:59 +0000 ROA not after: Fri 24 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.68.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:8c:80:04:e0:c8:23:4d:60:5c:ad:8f:d0:0f:e3:4d:76:01:7a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 19 00:23:59 2025 GMT Not After : Oct 24 23:59:59 2025 GMT Subject: serialNumber=4a67e8d3d5d237120219bc0854e701b134cefdcd4b6f7450d146640a79cefc1a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:fe:44:b3:d4:d4:f1:52:71:12:d5:98:8a:eb: e2:f4:b4:aa:f3:9c:0c:ca:a0:47:c2:f9:f8:84:14: 24:ce:bf:4e:bb:ac:2d:a0:2e:75:5a:d5:e7:1a:34: c2:21:e5:44:78:38:f3:d0:29:23:37:e0:1c:c8:86: 1c:71:45:bd:f6:e0:c6:de:33:6f:8d:04:1b:da:57: c7:03:e9:cb:fb:f6:f9:e1:e2:98:10:3d:3a:bd:2e: e1:9f:ba:0a:9c:1e:90:7b:b2:73:59:bb:d9:7d:42: 9a:be:63:74:b4:f6:7a:cc:f4:9a:98:1b:ae:9e:d8: 8d:aa:f4:7d:0a:73:6e:54:4d:49:f3:03:7c:68:0b: 82:a7:23:7f:b5:fa:cc:de:c7:aa:c5:7d:1e:01:de: 5b:26:ba:fe:5b:3b:b9:73:b0:e7:ea:cf:77:af:58: 7c:20:53:1f:5d:16:5a:51:9e:e5:89:12:9d:56:3f: 76:45:ce:44:8b:76:5a:3c:d1:6b:b7:cf:79:8c:87: cd:57:ca:69:de:bc:60:9b:73:3b:fa:f0:57:91:2e: a0:80:ee:3f:f1:c5:32:44:4f:f4:c4:08:1e:ba:ed: 80:9d:57:dd:69:ef:71:1d:bc:32:ae:b9:07:6c:ce: 64:91:f2:9e:d1:e8:b7:97:02:01:2b:aa:a9:3d:ea: 13:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:D4:EE:2D:DF:90:06:64:91:7A:A9:E7:EC:38:DB:9A:44:C2:B1:7A X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/643bb549-24fc-4069-90c5-f5c516de19f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.68.132.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:f6:c9:1a:21:78:0e:17:92:e6:8c:e3:43:20:cb:65:59:04: 1e:61:bd:06:d7:e3:44:8c:f1:9e:ec:cd:68:5f:4b:99:2f:56: 2d:34:fa:f2:d6:fd:e6:2c:9b:b2:a3:f4:7f:9d:cd:70:38:0f: 20:f4:8a:03:c2:41:57:cb:43:bb:42:45:02:b5:0f:8f:5c:a9: 37:c4:f9:4d:9f:64:bd:b9:a0:71:fd:b3:03:e8:68:fb:61:84: 7f:1c:55:c8:29:c9:96:e5:05:0f:d9:38:05:4f:e6:41:0b:02: 2c:29:00:7e:ea:bd:4b:54:0a:38:ee:b7:b0:ac:49:17:c6:bc: 81:ae:99:9b:79:67:05:d8:65:67:8c:52:31:cb:cd:5a:94:a8: b5:53:e9:cd:58:88:3b:2d:a3:3e:8e:f1:40:d6:02:5b:93:c6: eb:6a:28:7b:bb:cf:47:ec:71:4e:7e:5b:ff:6e:a4:b0:60:a5: 16:0e:e1:b4:e0:29:b8:06:cb:84:77:29:73:34:b0:71:71:30: 40:9a:28:55:85:e7:86:30:ab:61:4f:10:f2:bf:34:85:0b:42: 09:fb:67:06:3b:8b:8a:00:99:13:cd:0e:a1:3f:63:30:31:d0: 02:5b:c4:ed:f5:d9:2b:8d:02:8b:bd:2d:f9:68:68:37:b7:b0: 6d:14:39:d8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUI4yABODII01gXK2P0A/jTXYBesAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTE5MDAyMzU5WhcNMjUxMDI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A0YTY3ZThkM2Q1ZDIzNzEyMDIxOWJjMDg1NGU3MDFiMTM0 Y2VmZGNkNGI2Zjc0NTBkMTQ2NjQwYTc5Y2VmYzFhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCd/kSz1NTxUnES1ZiK6+L0tKrznAzKoEfC+fiEFCTOv067 rC2gLnVa1ecaNMIh5UR4OPPQKSM34BzIhhxxRb324MbeM2+NBBvaV8cD6cv79vnh 4pgQPTq9LuGfugqcHpB7snNZu9l9Qpq+Y3S09nrM9JqYG66e2I2q9H0Kc25UTUnz A3xoC4KnI3+1+szex6rFfR4B3lsmuv5bO7lzsOfqz3evWHwgUx9dFlpRnuWJEp1W P3ZFzkSLdlo80Wu3z3mMh81XymnevGCbczv68FeRLqCA7j/xxTJET/TECB667YCd V91p73EdvDKuuQdszmSR8p7R6LeXAgErqqk96hPTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUYNTuLd+QBmSReqnn7DjbmkTCsXowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzY0M2JiNTQ5LTI0ZmMtNDA2OS05MGM1LWY1YzUxNmRlMTlmNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASRIQwDQYJKoZIhvcNAQELBQADggEBACz2yRoheA4XkuaM40Mgy2VZBB5h vQbX40SM8Z7szWhfS5kvVi00+vLW/eYsm7Kj9H+dzXA4DyD0igPCQVfLQ7tCRQK1 D49cqTfE+U2fZL25oHH9swPoaPthhH8cVcgpyZblBQ/ZOAVP5kELAiwpAH7qvUtU Cjjut7CsSRfGvIGumZt5ZwXYZWeMUjHLzVqUqLVT6c1YiDstoz6O8UDWAluTxutq KHu7z0fscU5+W/9upLBgpRYO4bTgKbgGy4R3KXM0sHFxMECaKFWF54Ywq2FPEPK/ NIULQgn7ZwY7i4oAmRPNDqE/YzAx0AJbxO312SuNAou9LfloaDe3sG0UOdg= -----END CERTIFICATE-----Generated at Fri Sep 19 04:35:23 2025 by rpki-client