$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/00b70d07-76ea-4400-8c8b-7177f8360b85.roa File: 00b70d07-76ea-4400-8c8b-7177f8360b85.roa (raw, json) Hash identifier: QXM0UJbzJtBq1N6K53HRJunzHbssDEhr1jGuYRYLIeo= Subject key identifier: 07:26:8A:3C:EC:74:91:95:C5:2C:70:8E:4A:0A:20:C6:B3:B3:C8:99 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 29309DBE12E105407D47B1BC8E9BEC1B47810155 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/00b70d07-76ea-4400-8c8b-7177f8360b85.roa Signing time: Mon 22 Sep 2025 17:10:31 +0000 ROA not before: Mon 22 Sep 2025 17:10:31 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.154.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:30:9d:be:12:e1:05:40:7d:47:b1:bc:8e:9b:ec:1b:47:81:01:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 17:10:31 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=ace7c2ff3a856ffc6c489f7fd0132133ef07af3d8d3ba5268d8e53f6dc738533, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0c:99:a2:3d:f0:89:b9:07:20:a8:b3:fc:83: 19:1b:a5:8d:f7:ee:b6:21:75:2c:3a:cd:7b:ff:a7: b6:f2:b5:e2:01:2f:00:90:c7:65:db:a4:32:2f:09: 55:e6:9a:e6:7d:f8:8c:4c:a1:8c:c1:45:14:a5:79: d8:36:7d:29:0f:1c:53:55:d6:d3:69:fc:8c:55:64: fe:6a:64:d6:2a:7c:bb:52:c0:37:6a:04:eb:e3:29: 0b:c5:2b:dc:f9:ea:e0:1b:ec:8e:8b:0e:6e:12:3c: cf:d3:29:de:23:2d:1e:66:7f:03:2f:f7:c7:fb:a5: 1c:e0:eb:44:9d:05:66:03:d5:bb:f2:69:0d:53:66: 4e:e5:71:b4:e5:83:ca:50:96:15:6f:bc:af:85:75: 14:59:5b:64:7e:f0:93:32:7c:2d:fe:bd:65:70:a1: 3f:92:95:8f:0e:6d:37:e0:66:4f:41:a7:63:b9:8e: 81:b9:45:8d:ca:cb:97:5d:ba:5c:e3:08:e8:cd:f7: 3e:ce:12:e0:36:4d:86:ff:6f:10:89:df:ff:d2:b1: a4:f6:56:3d:64:03:aa:c8:f4:0e:70:1b:f7:96:12: 6a:53:2e:41:f5:a8:53:7c:13:58:45:8a:6b:a8:f9: 6c:fc:5b:70:5a:c5:6f:2d:0b:86:d2:d6:e4:c8:ae: f9:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:26:8A:3C:EC:74:91:95:C5:2C:70:8E:4A:0A:20:C6:B3:B3:C8:99 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/00b70d07-76ea-4400-8c8b-7177f8360b85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.154.169.0/24 Signature Algorithm: sha256WithRSAEncryption 48:15:d9:1a:1e:03:f5:a1:bc:18:41:f7:c5:f0:50:92:15:cc: 11:36:a9:2b:75:eb:7c:ac:85:df:8c:b0:ab:2b:25:33:db:7d: 1f:bf:59:46:d7:11:fa:9a:95:76:42:c1:b5:2d:68:6d:cc:ec: 15:33:75:52:60:60:0d:a1:e3:c5:62:86:bc:84:bf:74:39:54: 48:d9:5e:f9:83:81:47:6f:f3:dc:6a:10:45:2b:63:69:eb:d6: 50:89:10:88:da:97:4b:fc:63:eb:c1:3d:b8:9b:17:62:1c:5e: 06:d1:3c:a8:a6:fc:c2:28:38:c1:14:27:48:80:70:0b:65:4b: 13:51:63:de:11:9b:c2:ae:8e:09:15:e1:d6:4b:84:40:f3:5f: 7e:41:d4:55:f2:60:4e:2e:3e:e8:06:6a:5d:80:51:bc:34:e1: ae:3b:35:2f:1a:3d:f8:6b:15:23:8a:b4:e9:e7:32:bb:5c:b7: 66:bd:f3:20:98:0a:29:20:e5:31:b8:68:04:fb:d3:55:68:c1: 22:80:43:b8:0a:c4:f1:bf:6a:ca:cd:8a:a1:ef:b3:86:86:37: be:06:8a:d5:24:3e:b1:29:9e:7a:e9:50:5a:86:bf:9d:99:f6: c7:ca:ee:23:c4:e4:c6:6d:40:00:ab:53:77:35:72:50:f0:de: 30:95:4e:c4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKTCdvhLhBUB9R7G8jpvsG0eBAVUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMTcxMDMxWhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BhY2U3YzJmZjNhODU2ZmZjNmM0ODlmN2ZkMDEzMjEzM2Vm MDdhZjNkOGQzYmE1MjY4ZDhlNTNmNmRjNzM4NTMzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFDJmiPfCJuQcgqLP8gxkbpY337rYhdSw6zXv/p7byteIB LwCQx2XbpDIvCVXmmuZ9+IxMoYzBRRSledg2fSkPHFNV1tNp/IxVZP5qZNYqfLtS wDdqBOvjKQvFK9z56uAb7I6LDm4SPM/TKd4jLR5mfwMv98f7pRzg60SdBWYD1bvy aQ1TZk7lcbTlg8pQlhVvvK+FdRRZW2R+8JMyfC3+vWVwoT+SlY8ObTfgZk9Bp2O5 joG5RY3Ky5ddulzjCOjN9z7OEuA2TYb/bxCJ3//SsaT2Vj1kA6rI9A5wG/eWEmpT LkH1qFN8E1hFimuo+Wz8W3BaxW8tC4bS1uTIrvmdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUByaKPOx0kZXFLHCOSgogxrOzyJkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzAwYjcwZDA3LTc2ZWEtNDQwMC04YzhiLTcxNzdmODM2MGI4NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASmqkwDQYJKoZIhvcNAQELBQADggEBAEgV2RoeA/WhvBhB98XwUJIVzBE2 qSt163yshd+MsKsrJTPbfR+/WUbXEfqalXZCwbUtaG3M7BUzdVJgYA2h48VihryE v3Q5VEjZXvmDgUdv89xqEEUrY2nr1lCJEIjal0v8Y+vBPbibF2IcXgbRPKim/MIo OMEUJ0iAcAtlSxNRY94Rm8KujgkV4dZLhEDzX35B1FXyYE4uPugGal2AUbw04a47 NS8aPfhrFSOKtOnnMrtct2a98yCYCikg5TG4aAT701VowSKAQ7gKxPG/asrNiqHv s4aGN74GitUkPrEpnnrpUFqGv52Z9sfK7iPE5MZtQACrU3c1clDw3jCVTsQ= -----END CERTIFICATE-----Generated at Sat Oct 18 00:00:09 2025 by rpki-client