$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/94af38fc-12b9-478f-a149-525c20838676.roa File: 94af38fc-12b9-478f-a149-525c20838676.roa (raw, json) Hash identifier: VQbg1pk4HFKsnvO+BRyXY3VmQu9e1yn67HcjcntG2F8= Subject key identifier: C0:0F:25:07:70:32:A6:39:5B:5D:02:01:F9:36:88:67:1B:D9:76:7F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2BBE034282370F65BD25EDBC41386F50A8A0DF43 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/94af38fc-12b9-478f-a149-525c20838676.roa Signing time: Fri 19 Sep 2025 00:25:52 +0000 ROA not before: Fri 19 Sep 2025 00:25:52 +0000 ROA not after: Fri 24 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.68.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:be:03:42:82:37:0f:65:bd:25:ed:bc:41:38:6f:50:a8:a0:df:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 19 00:25:52 2025 GMT Not After : Oct 24 23:59:59 2025 GMT Subject: serialNumber=9546bfb7643ab5448057455aab8684c83cba669df9ed32929afb50dbf115467a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cd:3f:6d:59:05:9c:9a:bd:ec:ab:14:19:cc: fd:77:d3:74:a2:24:3f:9e:ea:fb:ff:dc:f3:43:83: 91:42:ba:8f:02:6d:30:ad:05:05:d7:df:35:91:8c: bd:c5:7e:50:43:10:d2:20:78:f1:7c:f4:24:de:4f: 6d:35:47:1f:e0:4e:56:02:12:b1:37:9d:a1:17:6d: 29:fe:71:86:87:af:00:89:24:89:2f:75:66:06:47: eb:67:53:f3:ac:74:a7:d5:fd:7b:61:26:0b:1f:35: 5f:a9:07:89:fc:31:03:df:b8:bc:f3:76:e9:e3:9d: 1c:6d:e3:75:25:52:6f:ea:b5:fb:06:a1:95:ac:97: 02:50:96:e2:15:e7:55:42:99:6d:c8:5a:2e:4b:9e: cb:c5:ad:90:54:6c:67:27:05:b6:34:62:60:aa:97: c9:ec:9c:56:2c:af:d0:e1:fb:ac:33:6c:8d:c1:a3: 7e:b3:fe:4c:0b:c9:44:97:12:b3:1a:ee:41:6d:47: c9:68:6d:39:35:1d:e0:96:53:a2:8a:c3:81:6e:5f: 0b:96:90:fd:1d:8f:c1:73:7b:57:dd:41:e7:d8:4a: a5:b3:b9:00:a5:92:0d:e0:69:bd:b7:fd:0b:37:15: db:49:ba:ed:f3:7e:71:99:0a:64:ee:be:5f:fd:00: 2c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:0F:25:07:70:32:A6:39:5B:5D:02:01:F9:36:88:67:1B:D9:76:7F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/94af38fc-12b9-478f-a149-525c20838676.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.68.17.0/24 Signature Algorithm: sha256WithRSAEncryption 51:9b:0b:b8:18:19:5c:31:40:c2:ad:e3:f0:99:64:8d:67:d7: 86:8c:06:4b:ee:12:21:4c:37:d9:d6:89:49:5b:94:bd:fd:85: de:4a:42:4f:0a:4f:c2:12:1c:7f:d5:b3:18:fe:02:7a:69:30: 9d:8d:f8:ff:40:d7:5b:db:46:ac:ad:d3:8a:d3:8a:78:a9:be: 81:1d:d9:56:21:01:d1:ce:69:06:0b:8d:bb:7a:f0:ab:1a:46: ba:da:a9:b5:2c:3f:b5:a3:a9:63:ad:07:a1:8c:2e:bd:69:b6: e9:6d:3c:20:14:f6:63:59:aa:2d:2b:16:fe:4b:73:86:10:70: 45:24:62:d7:b4:bc:0b:fa:c5:6b:02:d5:28:38:ee:26:8c:63: a6:0c:e2:e8:c6:9a:2f:9d:98:d4:8a:89:85:48:1d:58:b0:55: 40:ec:63:b3:57:f8:97:2b:f8:61:bf:6f:47:da:a6:88:58:2b: 91:ed:52:e5:89:32:bb:70:51:87:46:26:d7:ea:ac:02:0b:57: e9:01:dc:55:fb:91:2f:ea:5d:60:9b:88:75:d1:80:54:a1:52: 30:8e:db:eb:81:67:39:f1:0f:e7:b9:b9:b7:36:14:f8:28:6f: 57:35:46:a3:f5:b7:b0:a3:2a:e8:18:61:c5:48:5d:8a:0c:90: 3b:48:1a:6b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUK74DQoI3D2W9Je28QThvUKig30MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTE5MDAyNTUyWhcNMjUxMDI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A5NTQ2YmZiNzY0M2FiNTQ0ODA1NzQ1NWFhYjg2ODRjODNj YmE2NjlkZjllZDMyOTI5YWZiNTBkYmYxMTU0NjdhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4zT9tWQWcmr3sqxQZzP1303SiJD+e6vv/3PNDg5FCuo8C bTCtBQXX3zWRjL3FflBDENIgePF89CTeT201Rx/gTlYCErE3naEXbSn+cYaHrwCJ JIkvdWYGR+tnU/OsdKfV/XthJgsfNV+pB4n8MQPfuLzzdunjnRxt43UlUm/qtfsG oZWslwJQluIV51VCmW3IWi5LnsvFrZBUbGcnBbY0YmCql8nsnFYsr9Dh+6wzbI3B o36z/kwLyUSXErMa7kFtR8lobTk1HeCWU6KKw4FuXwuWkP0dj8Fze1fdQefYSqWz uQClkg3gab23/Qs3FdtJuu3zfnGZCmTuvl/9ACyNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUwA8lB3AypjlbXQIB+TaIZxvZdn8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzk0YWYzOGZjLTEyYjktNDc4Zi1hMTQ5LTUyNWMyMDgzODY3Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASRBEwDQYJKoZIhvcNAQELBQADggEBAFGbC7gYGVwxQMKt4/CZZI1n14aM BkvuEiFMN9nWiUlblL39hd5KQk8KT8ISHH/Vsxj+AnppMJ2N+P9A11vbRqyt04rT inipvoEd2VYhAdHOaQYLjbt68KsaRrraqbUsP7WjqWOtB6GMLr1ptultPCAU9mNZ qi0rFv5Lc4YQcEUkYte0vAv6xWsC1Sg47iaMY6YM4ujGmi+dmNSKiYVIHViwVUDs Y7NX+Jcr+GG/b0fapohYK5HtUuWJMrtwUYdGJtfqrAILV+kB3FX7kS/qXWCbiHXR gFShUjCO2+uBZznxD+e5ubc2FPgob1c1RqP1t7CjKugYYcVIXYoMkDtIGms= -----END CERTIFICATE-----Generated at Fri Sep 19 04:37:40 2025 by rpki-client