$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0fec2bc3-bef1-4250-948a-6a07da92b0d8.roa File: 0fec2bc3-bef1-4250-948a-6a07da92b0d8.roa (raw, json) Hash identifier: K99dbettodVGgxXvP7i7mDYOjkfC6uWnFNZboVfIj/c= Subject key identifier: E3:DE:78:94:EF:E0:FD:E0:BE:03:E9:2C:C2:1B:A1:28:E3:8C:A6:F6 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0AF9DC68E292054B4D923DA0C651558DBFEBDDE0 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0fec2bc3-bef1-4250-948a-6a07da92b0d8.roa Signing time: Mon 22 Sep 2025 20:00:49 +0000 ROA not before: Mon 22 Sep 2025 20:00:49 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.165.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:f9:dc:68:e2:92:05:4b:4d:92:3d:a0:c6:51:55:8d:bf:eb:dd:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 20:00:49 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=d69613912071d1e1b7e63a3f119a0be4cbefa3025fbed42a11da48baa8951db8, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:79:fd:bd:b5:10:ff:e2:78:61:7f:f6:95:14: 46:34:73:c7:e2:bd:0e:ae:6a:eb:0a:4e:69:56:55: d4:fc:56:66:56:e2:fd:91:af:61:37:db:ba:26:72: 9d:4f:98:e7:15:ae:0b:9c:f8:fb:20:f9:89:41:c3: 9b:1f:a0:8c:a9:01:c1:ab:84:98:0d:20:39:67:c9: 3e:6b:f6:fc:0f:17:94:0e:24:df:0f:e4:1c:38:e5: e3:69:72:b4:47:78:39:8f:16:80:28:1f:71:55:40: d5:25:25:f1:c1:41:46:01:22:c6:ea:c4:d8:bf:a5: 90:f7:73:df:d6:b0:2a:0b:6a:dd:47:9d:89:f2:aa: 40:69:6d:3a:57:5c:bc:af:c8:4e:5e:af:d4:53:9d: 76:4e:00:48:4e:8b:ad:57:06:eb:b4:90:5b:c9:c3: bd:61:49:06:ca:29:75:c8:59:0d:08:db:db:cf:44: f8:a1:bb:07:01:2e:32:75:04:bf:19:87:79:51:b3: 6d:03:e1:e6:e1:07:a3:07:17:34:6c:07:d3:22:f6: e9:cc:4f:db:40:bc:40:3e:a2:ae:45:24:8c:3b:a0: 3d:8f:c2:e3:81:94:92:59:ef:ec:e1:72:2b:38:7d: 3b:8c:9d:41:1b:0f:f3:63:69:6e:68:48:38:a0:fd: c6:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:DE:78:94:EF:E0:FD:E0:BE:03:E9:2C:C2:1B:A1:28:E3:8C:A6:F6 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0fec2bc3-bef1-4250-948a-6a07da92b0d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.165.228.0/23 Signature Algorithm: sha256WithRSAEncryption 23:54:89:1f:7b:36:43:9f:74:f9:de:88:4c:e7:88:57:4c:3d: 73:e4:f0:e3:b8:1a:41:39:a0:27:8f:48:55:3b:2a:34:84:b1: 84:4d:ab:39:25:db:64:83:42:13:db:23:e5:f0:44:58:20:3b: df:4f:de:b1:07:c8:37:93:84:eb:9d:fc:71:45:7f:e7:41:c3: 98:32:fd:bf:f3:c6:b0:3a:23:23:9e:dd:28:9f:8b:a0:9b:48: f7:57:e7:5d:3f:df:d6:13:26:10:b2:ad:f4:63:13:59:7c:91: 53:c9:96:cc:fc:c4:bc:78:bf:45:92:d6:70:cc:b9:d5:3a:1d: 7d:78:6b:78:be:3c:84:8d:80:49:f0:11:3a:e1:71:0c:b2:e6: 06:96:25:4d:e8:d4:9f:fa:5b:d8:46:18:e4:ee:ad:d6:90:0d: a1:a3:5b:73:1e:ce:5a:39:cb:1d:63:23:84:f1:49:37:cc:79: 54:01:32:cf:94:c0:d4:07:22:ad:86:49:28:c8:87:76:cc:fc: d6:2a:ce:9a:18:62:50:7c:41:4a:34:62:71:1d:58:b9:39:63: 77:30:2a:f2:bf:de:f8:db:92:9a:47:84:75:9b:fd:b7:09:c6: a9:d5:59:b9:95:b6:85:76:60:fe:c4:cd:3b:85:8f:b1:36:d8: c7:0d:49:0d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCvncaOKSBUtNkj2gxlFVjb/r3eAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjAwMDQ5WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BkNjk2MTM5MTIwNzFkMWUxYjdlNjNhM2YxMTlhMGJlNGNi ZWZhMzAyNWZiZWQ0MmExMWRhNDhiYWE4OTUxZGI4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCSef29tRD/4nhhf/aVFEY0c8fivQ6uausKTmlWVdT8VmZW 4v2Rr2E327omcp1PmOcVrguc+Psg+YlBw5sfoIypAcGrhJgNIDlnyT5r9vwPF5QO JN8P5Bw45eNpcrRHeDmPFoAoH3FVQNUlJfHBQUYBIsbqxNi/pZD3c9/WsCoLat1H nYnyqkBpbTpXXLyvyE5er9RTnXZOAEhOi61XBuu0kFvJw71hSQbKKXXIWQ0I29vP RPihuwcBLjJ1BL8Zh3lRs20D4ebhB6MHFzRsB9Mi9unMT9tAvEA+oq5FJIw7oD2P wuOBlJJZ7+zhcis4fTuMnUEbD/NjaW5oSDig/cYFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU4954lO/g/eC+A+kswhuhKOOMpvYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzBmZWMyYmMzLWJlZjEtNDI1MC05NDhhLTZhMDdkYTkyYjBkOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESpeQwDQYJKoZIhvcNAQELBQADggEBACNUiR97NkOfdPneiEzniFdMPXPk 8OO4GkE5oCePSFU7KjSEsYRNqzkl22SDQhPbI+XwRFggO99P3rEHyDeThOud/HFF f+dBw5gy/b/zxrA6IyOe3Sifi6CbSPdX510/39YTJhCyrfRjE1l8kVPJlsz8xLx4 v0WS1nDMudU6HX14a3i+PISNgEnwETrhcQyy5gaWJU3o1J/6W9hGGOTurdaQDaGj W3Mezlo5yx1jI4TxSTfMeVQBMs+UwNQHIq2GSSjIh3bM/NYqzpoYYlB8QUo0YnEd WLk5Y3cwKvK/3vjbkppHhHWb/bcJxqnVWbmVtoV2YP7EzTuFj7E22McNSQ0= -----END CERTIFICATE-----Generated at Sat Oct 18 04:20:01 2025 by rpki-client