$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0afc744c-7051-46d9-8cfb-8e73f39f2f04.roa File: 0afc744c-7051-46d9-8cfb-8e73f39f2f04.roa (raw, json) Hash identifier: bcbu+31iE+nKlk/1C3kWNVK0KpkPYFCmOt8jvllrOrE= Subject key identifier: B2:99:98:D2:A0:57:BF:EB:AB:82:0F:CC:A3:2D:67:A1:4E:55:48:A7 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 585FE28B23D071AFC57CBF0170FC0FD0CE43C62C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0afc744c-7051-46d9-8cfb-8e73f39f2f04.roa Signing time: Mon 22 Sep 2025 17:59:27 +0000 ROA not before: Mon 22 Sep 2025 17:59:27 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.155.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:5f:e2:8b:23:d0:71:af:c5:7c:bf:01:70:fc:0f:d0:ce:43:c6:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 17:59:27 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=5239ed938e68ec21babae05999b438f6e09c959693276bc1a6f64b03bc2b613a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ae:c6:a8:99:46:82:d6:b3:c6:53:71:a2:2c: dd:f7:df:da:b3:5a:66:3b:8f:c8:e3:fe:28:02:f7: 28:c3:52:b4:cb:d1:98:19:02:bb:9b:da:19:6a:88: 39:f9:29:6b:b3:8f:59:c2:77:07:de:2f:bd:1d:0d: cb:1b:32:f0:d2:f9:5f:9c:a3:8f:96:65:24:66:6a: 18:9e:12:95:87:1b:82:f7:b3:36:4f:a7:fe:b8:7c: ed:63:11:c3:75:33:12:a9:df:3f:f0:41:ea:b1:d4: 72:f1:d1:f2:63:2b:fc:b3:22:6a:2b:f4:3e:ee:50: d4:ff:d5:ca:ff:94:cb:32:c2:04:f0:ba:e9:7e:d1: 67:58:35:8f:c6:bb:0f:60:20:cb:88:5a:17:79:d7: 23:d0:48:8f:3c:cb:13:0e:f7:a9:ed:dd:e2:96:35: 93:30:05:5b:63:b5:ed:5b:23:cc:8a:90:19:b4:6b: 2f:42:3e:05:56:e6:3d:e7:18:7b:ce:a4:80:bf:fb: ae:12:93:67:50:c1:3d:2c:75:01:12:49:d5:f3:cb: ae:39:5b:7f:ec:41:f4:91:2e:bf:61:65:7c:02:07: c1:8c:43:b1:8e:66:71:98:7a:c6:48:18:4b:5d:7b: a8:72:dd:dd:23:f2:b1:e2:0c:92:e0:8f:32:38:62: 43:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:99:98:D2:A0:57:BF:EB:AB:82:0F:CC:A3:2D:67:A1:4E:55:48:A7 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0afc744c-7051-46d9-8cfb-8e73f39f2f04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.155.160.0/22 Signature Algorithm: sha256WithRSAEncryption 21:c4:5a:65:56:cc:40:b4:40:d0:0b:1a:8b:bc:6b:ad:c6:5d: 68:a1:0c:0f:8d:89:d1:72:f7:e6:84:f2:4b:d8:fb:21:e6:b7: 26:96:33:4f:72:bf:24:74:e8:aa:5b:a7:ca:2a:a6:00:ba:79: ae:9d:9e:28:72:bc:54:af:21:d3:a4:6f:f7:92:38:e4:92:2b: 07:ff:ad:3b:46:7a:65:29:cb:c0:1f:4b:05:bc:c9:2d:49:61: 1b:be:f4:96:90:d6:d7:e4:83:41:f2:25:3c:06:c3:1e:e4:cd: 68:31:8c:11:c5:7a:d8:10:9c:c4:cd:05:3a:ac:8e:57:c8:02: 5e:3c:02:35:31:64:70:36:a9:4a:db:cd:3d:17:d0:e1:be:f3: d7:2b:ac:7c:ee:a5:8a:a2:46:dd:ee:a8:ba:f1:ac:53:7f:b4: 91:f7:fa:b3:e8:93:42:0d:ee:57:18:c2:78:2f:7f:07:c8:a3: c1:d2:86:bf:e0:46:ac:3f:f4:01:f4:1d:b3:e0:c5:5a:48:16: 43:49:06:f6:ef:c4:c1:db:e1:ba:2e:22:7d:94:ab:e9:c6:f2: f4:92:76:99:b9:61:36:bf:dd:c9:8d:24:de:55:13:85:5f:8a: d3:c1:a8:af:2c:6d:6a:90:89:15:b2:a1:82:8e:6f:c9:27:eb: 85:6a:d4:af -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWF/iiyPQca/FfL8BcPwP0M5DxiwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMTc1OTI3WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A1MjM5ZWQ5MzhlNjhlYzIxYmFiYWUwNTk5OWI0MzhmNmUw OWM5NTk2OTMyNzZiYzFhNmY2NGIwM2JjMmI2MTNhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCZrsaomUaC1rPGU3GiLN3339qzWmY7j8jj/igC9yjDUrTL 0ZgZArub2hlqiDn5KWuzj1nCdwfeL70dDcsbMvDS+V+co4+WZSRmahieEpWHG4L3 szZPp/64fO1jEcN1MxKp3z/wQeqx1HLx0fJjK/yzImor9D7uUNT/1cr/lMsywgTw uul+0WdYNY/Guw9gIMuIWhd51yPQSI88yxMO96nt3eKWNZMwBVtjte1bI8yKkBm0 ay9CPgVW5j3nGHvOpIC/+64Sk2dQwT0sdQESSdXzy645W3/sQfSRLr9hZXwCB8GM Q7GOZnGYesZIGEtde6hy3d0j8rHiDJLgjzI4YkN1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUspmY0qBXv+urgg/Moy1noU5VSKcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzBhZmM3NDRjLTcwNTEtNDZkOS04Y2ZiLThlNzNmMzlmMmYwNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAISm6AwDQYJKoZIhvcNAQELBQADggEBACHEWmVWzEC0QNALGou8a63GXWih DA+NidFy9+aE8kvY+yHmtyaWM09yvyR06Kpbp8oqpgC6ea6dnihyvFSvIdOkb/eS OOSSKwf/rTtGemUpy8AfSwW8yS1JYRu+9JaQ1tfkg0HyJTwGwx7kzWgxjBHFetgQ nMTNBTqsjlfIAl48AjUxZHA2qUrbzT0X0OG+89crrHzupYqiRt3uqLrxrFN/tJH3 +rPok0IN7lcYwngvfwfIo8HShr/gRqw/9AH0HbPgxVpIFkNJBvbvxMHb4bouIn2U q+nG8vSSdpm5YTa/3cmNJN5VE4VfitPBqK8sbWqQiRWyoYKOb8kn64Vq1K8= -----END CERTIFICATE-----Generated at Fri Oct 17 22:15:38 2025 by rpki-client