$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/13429f90-6530-4d2b-9065-938eb43d3420.roa File: 13429f90-6530-4d2b-9065-938eb43d3420.roa (raw, json) Hash identifier: tgzuLs3g3CH+etmghLkfCvAo8YWtaX/6VJoToCR4tAA= Subject key identifier: 9D:6A:42:6E:17:57:B1:3C:CA:17:79:66:B2:00:2B:EF:4E:01:09:5C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 46EA456425568516093DD180502D9BDA5292A8 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/13429f90-6530-4d2b-9065-938eb43d3420.roa Signing time: Mon 22 Sep 2025 20:17:15 +0000 ROA not before: Mon 22 Sep 2025 20:17:15 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.165.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:ea:45:64:25:56:85:16:09:3d:d1:80:50:2d:9b:da:52:92:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 20:17:15 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=5064f110ae26807cd38e13519207d2e0ed0b7560a5547d68edb47e6abc5b396a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:81:f6:46:90:e0:67:c4:7d:31:bc:00:85:3b: ef:74:cc:7c:e7:e1:63:dd:22:39:16:63:2a:1f:bb: 36:42:f6:4c:d5:6b:4c:11:bb:2c:63:3b:63:46:69: ff:73:49:93:6b:3b:90:3f:c3:7e:da:44:03:40:20: 75:ac:e1:5c:e5:5e:66:f9:a0:60:3d:f2:31:f2:58: fa:fa:05:f7:cc:79:c6:e3:4a:cd:80:70:32:ac:80: 45:40:c6:a3:33:57:9f:6b:a6:6f:47:95:11:f7:2d: 5b:78:02:cf:20:bc:5a:95:96:9f:18:a5:6f:d0:df: 84:83:b8:a3:e5:12:6f:47:71:87:9a:a3:af:98:c3: 5a:5e:b0:51:6d:76:9f:82:b3:d3:e4:db:9d:bd:2c: 1b:74:3d:ec:56:a9:4a:8a:ff:2e:82:6a:4c:70:53: e7:3a:19:fa:9c:53:18:df:a1:00:fd:0f:70:92:70: 8c:7b:53:b8:3f:75:21:eb:0f:c1:5c:1e:06:72:dd: cd:dc:8e:34:35:4a:2e:9c:c6:ea:b1:1c:0c:1d:48: 91:04:dc:f5:c3:21:6b:01:a3:63:9f:c5:96:38:63: 63:0c:1c:af:d1:be:33:06:25:8a:0b:03:6d:c4:16: b3:ba:3c:f6:6d:9a:f2:e1:de:5a:c3:87:3e:1f:87: 11:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:6A:42:6E:17:57:B1:3C:CA:17:79:66:B2:00:2B:EF:4E:01:09:5C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/13429f90-6530-4d2b-9065-938eb43d3420.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.165.144.0/20 Signature Algorithm: sha256WithRSAEncryption 21:22:b7:52:bf:4a:aa:87:8a:0b:74:63:89:d9:83:51:e7:06: 5a:9e:bf:b8:f4:7d:8f:19:9c:c0:e2:15:b2:59:ee:51:21:a2: 07:39:27:29:eb:94:85:4f:1f:0a:06:f6:83:6e:11:91:d3:3e: b9:23:26:0f:fa:e4:4f:0d:4f:3b:22:9f:39:44:bc:83:99:9d: 77:0e:64:68:8b:b7:e8:8c:f4:93:04:66:e9:e6:30:e9:c4:4c: d4:0f:e2:d6:44:d2:08:d7:92:df:9d:59:c6:83:30:73:9c:2d: f8:52:a6:fe:9d:5b:38:cc:47:bf:d8:6b:cb:0c:90:5b:d0:14: 70:d0:ed:a6:2c:98:39:54:c2:04:f0:75:57:e0:d0:f7:31:38: bb:14:3b:f7:bf:ae:d0:14:ac:30:57:78:ea:2c:b8:9a:38:7a: 6f:a4:d2:72:fd:f6:63:86:d6:26:6a:5a:86:b9:1e:ab:05:4d: 49:7a:58:5c:c1:0a:0d:9a:73:8e:c8:c7:d5:42:6b:99:13:1c: eb:9d:e6:e6:ff:7a:98:50:b0:e4:d3:c1:d9:d6:84:73:54:36: 80:bf:73:46:e4:14:6a:92:63:39:26:02:0b:4d:2e:b4:a2:c9: 33:bb:94:af:aa:1e:b8:b6:24:1c:6d:83:cb:8e:3e:9b:ba:13: 2e:c4:5b:28 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITRupFZCVWhRYJPdGAUC2b2lKSqDANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzJkZjZmM2IzYTM0YjYzODZkMWEzMmQ4ZjRmYTMxNzhlZjMx ODg3ZDhiNDI4ZGZhYTQ3NjAeFw0yNTA5MjIyMDE3MTVaFw0yNTEwMjcyMzU5NTla MHoxSTBHBgNVBAUTQDUwNjRmMTEwYWUyNjgwN2NkMzhlMTM1MTkyMDdkMmUwZWQw Yjc1NjBhNTU0N2Q2OGVkYjQ3ZTZhYmM1YjM5NmExLTArBgNVBAMTJDVmMjc2MDQ1 LTViOWYtNDVlZi05MjNkLWYzZmNlMjRhNjIyNTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAJqB9kaQ4GfEfTG8AIU773TMfOfhY90iORZjKh+7NkL2TNVr TBG7LGM7Y0Zp/3NJk2s7kD/DftpEA0AgdazhXOVeZvmgYD3yMfJY+voF98x5xuNK zYBwMqyARUDGozNXn2umb0eVEfctW3gCzyC8WpWWnxilb9DfhIO4o+USb0dxh5qj r5jDWl6wUW12n4Kz0+Tbnb0sG3Q97FapSor/LoJqTHBT5zoZ+pxTGN+hAP0PcJJw jHtTuD91IesPwVweBnLdzdyONDVKLpzG6rEcDB1IkQTc9cMhawGjY5/FljhjYwwc r9G+MwYligsDbcQWs7o89m2a8uHeWsOHPh+HEQsCAwEAAaOCArEwggKtMB0GA1Ud DgQWBBSdakJuF1exPMoXeWayACvvTgEJXDAfBgNVHSMEGDAWgBQlrdNCsB63pY6t GZAmiLVLP4H0uDAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzg1MWNlZjE3LTEz MmEtNDMzNy1iN2QxLWJmMTZhNTJmZmQwMy9kZjZmM2IzYTM0YjYzODZkMWEzMmQ4 ZjRmYTMxNzhlZjMxODg3ZDhiNDI4ZGZhYTQ3Ni5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9mNzAzNjk2ZS1lNDdiLTRjMjAtYmQ5My02Zjgw OTA0ZTQyZDIvMTM0MjlmOTAtNjUzMC00ZDJiLTkwNjUtOTM4ZWI0M2QzNDIwLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMt NmY4MDkwNGU0MmQyL3RqaHRHakxZOVBveGVPOHhpSDJMUW8zNnBIWS5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBBKlkDANBgkqhkiG9w0BAQsFAAOCAQEAISK3Ur9KqoeKC3RjidmDUecGWp6/ uPR9jxmcwOIVslnuUSGiBzknKeuUhU8fCgb2g24RkdM+uSMmD/rkTw1POyKfOUS8 g5mddw5kaIu36Iz0kwRm6eYw6cRM1A/i1kTSCNeS351ZxoMwc5wt+FKm/p1bOMxH v9hrywyQW9AUcNDtpiyYOVTCBPB1V+DQ9zE4uxQ797+u0BSsMFd46iy4mjh6b6TS cv32Y4bWJmpahrkeqwVNSXpYXMEKDZpzjsjH1UJrmRMc653m5v96mFCw5NPB2daE c1Q2gL9zRuQUapJjOSYCC00utKLJM7uUr6oeuLYkHG2Dy44+m7oTLsRbKA== -----END CERTIFICATE-----Generated at Sat Oct 18 02:40:21 2025 by rpki-client