$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/108fdb1b-8090-4b1b-85fe-3932eb7a8674.roa File: 108fdb1b-8090-4b1b-85fe-3932eb7a8674.roa (raw, json) Hash identifier: fDpn4/f4E27QxLZS0uKLjDwmtt3XwgMVYeI4F1kpI2I= Subject key identifier: 9A:09:B8:A5:D7:21:57:D2:44:70:1F:0C:0B:A1:8A:CE:58:6B:4D:ED Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 11A03C27E04E577DA4FA21D529CD03F548BD3CAC Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/108fdb1b-8090-4b1b-85fe-3932eb7a8674.roa Signing time: Mon 22 Sep 2025 20:56:22 +0000 ROA not before: Mon 22 Sep 2025 20:56:22 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.172.130.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:a0:3c:27:e0:4e:57:7d:a4:fa:21:d5:29:cd:03:f5:48:bd:3c:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 20:56:22 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=5681f8572624a0776795ca4b4e4968be387afa01b10fb86cc9103023a220d81f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e1:76:8f:55:c1:59:2c:80:48:0b:9e:a3:c1: b9:9a:1d:97:2e:dc:ee:f3:a0:ee:36:f0:92:f2:a1: 8f:f3:d7:81:a3:6f:a7:2b:8e:26:5c:67:1c:4c:21: 26:07:19:8b:b3:39:b9:e4:76:12:b7:b1:86:f7:89: d8:d4:b7:90:ce:b4:39:27:ae:d4:5e:54:55:aa:90: 48:be:2b:64:06:eb:fe:e7:32:57:26:17:6f:b8:cc: 23:a1:1a:5f:ff:33:eb:58:e6:51:f0:af:e4:f6:56: c4:95:8a:ea:b6:4e:f2:cc:64:da:e8:51:04:8c:6f: a1:39:fc:58:76:3c:63:d0:ed:9b:d7:2b:9f:08:ed: f7:07:46:32:7d:86:5e:d2:3a:49:4c:c5:97:e0:6d: 89:12:59:bc:2c:ef:8b:c5:81:93:a8:ca:e4:c7:b1: 11:ba:65:b4:b3:ef:3a:b5:c3:db:de:8a:3b:7d:40: 5d:2d:5e:00:5b:85:cc:fe:f4:20:6d:97:d6:c1:30: 66:6c:4c:2d:31:2b:fe:92:10:c9:75:c3:b0:95:70: 06:98:0a:a9:0a:2d:a7:87:12:dd:e7:94:24:f5:73: df:df:4a:e1:6e:a5:17:05:01:9a:5c:a3:e8:75:d1: 8e:48:98:46:6a:40:be:75:35:ee:3f:bd:58:9a:13: 4b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:09:B8:A5:D7:21:57:D2:44:70:1F:0C:0B:A1:8A:CE:58:6B:4D:ED X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/108fdb1b-8090-4b1b-85fe-3932eb7a8674.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.172.130.0/23 Signature Algorithm: sha256WithRSAEncryption 00:f2:35:d8:bc:0c:2a:90:17:6c:27:54:ba:de:85:fb:5e:96: 73:4f:93:a1:82:51:e9:89:c1:a8:6e:e7:c5:b3:f3:d8:14:e2: 36:bb:b3:c5:5e:85:be:7e:a2:7b:44:72:55:7e:f0:a8:97:85: ca:4e:9f:bf:f6:7f:98:2f:19:e3:52:a5:7b:5e:36:d7:7a:22: 8c:86:84:46:45:ee:a7:69:c4:af:91:b2:5a:70:b9:e4:64:b1: f9:c1:7a:32:71:56:2d:53:1c:0f:4a:90:d2:19:23:60:df:d1: 4f:c4:bc:59:6d:c3:8b:35:33:4d:d8:d1:91:40:90:e1:0b:82: e9:94:b7:35:c7:1a:0d:aa:29:74:b6:1c:20:ac:a0:52:60:db: f2:10:8d:22:a1:27:7c:21:2d:3d:03:27:7a:37:15:b8:f9:fa: 2b:b6:29:cc:8a:d8:0d:52:31:bf:c6:60:aa:75:2b:c2:e5:c0: d1:d4:cc:4b:58:8a:d7:2c:50:a3:85:75:7a:da:59:50:93:e9: 89:c3:2b:44:5f:55:51:0e:4e:f7:49:50:cd:02:5f:55:05:5a: f6:80:1f:45:a7:cc:c5:6c:7e:66:c1:81:22:c2:ff:7c:d7:be: 26:f3:eb:e8:80:0c:78:92:4e:67:b2:27:00:1d:ba:4d:77:17: 60:bb:5a:2e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEaA8J+BOV32k+iHVKc0D9Ui9PKwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjA1NjIyWhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A1NjgxZjg1NzI2MjRhMDc3Njc5NWNhNGI0ZTQ5NjhiZTM4 N2FmYTAxYjEwZmI4NmNjOTEwMzAyM2EyMjBkODFmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCq4XaPVcFZLIBIC56jwbmaHZcu3O7zoO428JLyoY/z14Gj b6crjiZcZxxMISYHGYuzObnkdhK3sYb3idjUt5DOtDknrtReVFWqkEi+K2QG6/7n MlcmF2+4zCOhGl//M+tY5lHwr+T2VsSViuq2TvLMZNroUQSMb6E5/Fh2PGPQ7ZvX K58I7fcHRjJ9hl7SOklMxZfgbYkSWbws74vFgZOoyuTHsRG6ZbSz7zq1w9veijt9 QF0tXgBbhcz+9CBtl9bBMGZsTC0xK/6SEMl1w7CVcAaYCqkKLaeHEt3nlCT1c9/f SuFupRcFAZpco+h10Y5ImEZqQL51Ne4/vViaE0vrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUmgm4pdchV9JEcB8MC6GKzlhrTe0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzEwOGZkYjFiLTgwOTAtNGIxYi04NWZlLTM5MzJlYjdhODY3NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESrIIwDQYJKoZIhvcNAQELBQADggEBAADyNdi8DCqQF2wnVLrehftelnNP k6GCUemJwahu58Wz89gU4ja7s8Vehb5+ontEclV+8KiXhcpOn7/2f5gvGeNSpXte Ntd6IoyGhEZF7qdpxK+RslpwueRksfnBejJxVi1THA9KkNIZI2Df0U/EvFltw4s1 M03Y0ZFAkOELgumUtzXHGg2qKXS2HCCsoFJg2/IQjSKhJ3whLT0DJ3o3Fbj5+iu2 KcyK2A1SMb/GYKp1K8LlwNHUzEtYitcsUKOFdXraWVCT6YnDK0RfVVEOTvdJUM0C X1UFWvaAH0WnzMVsfmbBgSLC/3zXvibz6+iADHiSTmeyJwAduk13F2C7Wi4= -----END CERTIFICATE-----Generated at Sat Oct 18 02:36:58 2025 by rpki-client