$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0572a91c-8288-4fc2-bd59-5deeab9569c5.roa File: 0572a91c-8288-4fc2-bd59-5deeab9569c5.roa (raw, json) Hash identifier: 7aGC1AEMS3cGPtnU936mV4lzD3b8wxm3tTdJnwkpGFI= Subject key identifier: DD:89:15:D7:38:7C:DE:58:E5:C8:B2:69:69:E4:00:E5:AF:49:02:76 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 32C5BA19CF834D24203206E42525DA231A2A8901 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0572a91c-8288-4fc2-bd59-5deeab9569c5.roa Signing time: Sat 18 Oct 2025 06:10:11 +0000 ROA not before: Sat 18 Oct 2025 06:10:11 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.173.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:c5:ba:19:cf:83:4d:24:20:32:06:e4:25:25:da:23:1a:2a:89:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 06:10:11 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=21170822cd2a8079d3d0824f501246435c11c8390f6f966ce4c9b24c83f84631, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f2:6b:77:63:cf:ab:3f:39:aa:b8:88:69:33: 50:17:9c:0c:2f:a9:ce:88:51:02:69:92:d0:7e:0f: cd:d7:95:c5:6c:21:15:75:fb:9a:13:4c:d8:5e:53: 96:81:75:fa:0a:9f:29:0c:b5:1c:0a:1d:0d:53:2c: b5:e6:47:18:a1:8d:c8:ab:d4:40:18:6a:75:6f:17: 4e:af:c0:0f:48:59:16:d5:1d:0d:15:b8:4b:21:30: c9:b1:47:66:b0:58:02:cb:c6:cb:16:ec:bb:37:58: 1d:24:28:1d:35:56:6c:ea:30:f5:05:16:3b:70:62: ac:9a:36:e7:0e:20:07:e6:8d:7a:a6:34:a1:dc:79: fa:60:eb:cb:0c:79:6a:db:9c:6e:85:89:d0:16:1b: 7c:5b:b2:70:0c:0e:80:22:36:4f:18:b9:e6:8d:2d: 33:69:58:d8:40:23:76:9b:75:68:60:80:f5:fd:43: 42:5f:3e:12:2e:fc:41:3c:65:fe:fb:e5:e5:ee:ec: eb:f7:88:b2:3a:81:39:07:b8:1f:14:15:61:e6:5d: 0c:a4:74:d9:44:a7:0a:03:9c:d5:ea:97:bf:64:73: 56:8b:0c:de:70:5c:57:97:17:70:e8:73:68:81:cd: 0c:17:d7:c0:6e:8d:cd:83:66:f2:fe:a7:c0:08:6e: ad:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:89:15:D7:38:7C:DE:58:E5:C8:B2:69:69:E4:00:E5:AF:49:02:76 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0572a91c-8288-4fc2-bd59-5deeab9569c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.173.224.0/22 Signature Algorithm: sha256WithRSAEncryption 4d:0c:86:32:d9:cf:0e:a1:c8:1e:96:d3:73:a4:5a:54:72:8b: 3e:31:6e:c6:b9:dd:e2:ff:24:b9:ca:1c:1e:d5:0e:ed:fd:02: 24:96:b0:9e:fb:3d:2f:81:c0:d1:ad:a1:7f:b8:6e:5e:9a:05: 1d:1b:ce:60:52:9e:74:c4:f6:04:7d:b4:80:90:3c:2f:50:8c: db:e6:f4:2b:c1:00:7b:e1:6d:54:33:45:b5:46:b1:2f:15:06: 07:8c:6f:26:ce:d4:78:94:c5:1a:6e:a2:d1:ca:46:4d:bc:0c: cc:f1:8b:72:da:b0:24:2d:dd:bb:ab:1e:e0:5b:08:d0:3b:88: 66:5f:f0:8b:7f:a8:c8:6f:54:62:03:fb:ef:fb:e1:4f:f5:bb: 31:c3:94:1d:36:6d:bd:5d:77:d9:5e:03:78:aa:2b:8f:bc:d2: 82:06:2b:9d:e6:f0:ac:49:90:12:55:83:d6:ad:05:c2:ba:f4: 9c:09:ff:96:84:d1:d2:f0:b9:4e:61:04:c3:53:6d:8d:82:4e: 0f:3d:7c:6b:2d:2c:dc:60:11:ee:05:08:5e:cc:c6:ef:31:67: 9c:2c:fe:92:96:0b:0a:92:1d:90:09:bb:58:82:12:62:64:22: e2:4e:d5:ef:11:50:64:d0:a2:59:fb:8b:7c:ad:8c:17:15:d8: d9:88:0d:a7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMsW6Gc+DTSQgMgbkJSXaIxoqiQEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MDYxMDExWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AyMTE3MDgyMmNkMmE4MDc5ZDNkMDgyNGY1MDEyNDY0MzVj MTFjODM5MGY2Zjk2NmNlNGM5YjI0YzgzZjg0NjMxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCV8mt3Y8+rPzmquIhpM1AXnAwvqc6IUQJpktB+D83XlcVs IRV1+5oTTNheU5aBdfoKnykMtRwKHQ1TLLXmRxihjcir1EAYanVvF06vwA9IWRbV HQ0VuEshMMmxR2awWALLxssW7Ls3WB0kKB01VmzqMPUFFjtwYqyaNucOIAfmjXqm NKHcefpg68sMeWrbnG6FidAWG3xbsnAMDoAiNk8YueaNLTNpWNhAI3abdWhggPX9 Q0JfPhIu/EE8Zf775eXu7Ov3iLI6gTkHuB8UFWHmXQykdNlEpwoDnNXql79kc1aL DN5wXFeXF3Doc2iBzQwX18Bujc2DZvL+p8AIbq3fAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU3YkV1zh83ljlyLJpaeQA5a9JAnYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzA1NzJhOTFjLTgyODgtNGZjMi1iZDU5LTVkZWVhYjk1NjljNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAISreAwDQYJKoZIhvcNAQELBQADggEBAE0MhjLZzw6hyB6W03OkWlRyiz4x bsa53eL/JLnKHB7VDu39AiSWsJ77PS+BwNGtoX+4bl6aBR0bzmBSnnTE9gR9tICQ PC9QjNvm9CvBAHvhbVQzRbVGsS8VBgeMbybO1HiUxRpuotHKRk28DMzxi3LasCQt 3burHuBbCNA7iGZf8It/qMhvVGID++/74U/1uzHDlB02bb1dd9leA3iqK4+80oIG K53m8KxJkBJVg9atBcK69JwJ/5aE0dLwuU5hBMNTbY2CTg89fGstLNxgEe4FCF7M xu8xZ5ws/pKWCwqSHZAJu1iCEmJkIuJO1e8RUGTQoln7i3ytjBcV2NmIDac= -----END CERTIFICATE-----Generated at Sat Oct 18 07:31:44 2025 by rpki-client