$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/16904584-5618-4c5b-af2b-aab4214cc13e.roa File: 16904584-5618-4c5b-af2b-aab4214cc13e.roa (raw, json) Hash identifier: h6hn4ZYvUH++bqd5yZ4PsLgIhVFifULc/pARH8JSwYk= Subject key identifier: CE:89:FE:24:2D:7A:F8:0A:B2:12:70:8C:33:92:5C:E4:F8:F1:F8:A8 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 66B6080ABC4B7EFCAAEEC58095843F25FA64ECB9 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/16904584-5618-4c5b-af2b-aab4214cc13e.roa Signing time: Mon 22 Sep 2025 18:10:26 +0000 ROA not before: Mon 22 Sep 2025 18:10:26 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.155.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:b6:08:0a:bc:4b:7e:fc:aa:ee:c5:80:95:84:3f:25:fa:64:ec:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 18:10:26 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=494a0230f57a8858270347ef5b7e185c8d2d63c15b5f68253b67be803d4c58e3, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:3e:f5:25:74:86:07:0b:8f:ed:9e:6f:72:04: d6:25:5d:9b:07:dc:6c:07:de:08:4a:0b:8e:20:e1: a2:83:36:02:3c:d7:a4:8c:9c:fc:01:03:49:c4:46: c0:a6:46:8c:27:3c:41:34:95:8c:ab:25:7e:3a:19: d2:29:12:96:e4:4c:e6:9b:a5:a0:d0:b4:ab:de:78: 2d:21:c2:09:25:ea:51:63:39:c4:20:15:fb:82:b1: 18:56:3c:af:2c:f4:5a:d8:f3:4c:0f:f8:a0:7e:83: 7c:c7:69:91:2a:09:ef:19:29:b1:b5:5f:1b:14:20: 95:fb:29:56:e6:49:ba:c5:13:a7:bb:d8:70:a1:98: 32:c8:b6:d8:6e:81:45:7c:a1:06:4c:29:7b:d4:ec: 88:32:69:3e:f6:54:65:2c:a5:40:f0:a0:2d:0b:a3: 4c:91:59:90:0a:12:e6:52:a5:5c:6d:f9:ad:62:f2: a8:5d:fe:53:3d:f4:4c:2b:7c:78:f5:e0:13:81:91: 51:a3:d7:e7:15:8d:f6:58:fc:a2:1a:b3:25:e5:07: 65:bf:4d:8e:16:32:3d:50:66:6d:b9:bc:8d:7e:f1: 25:f9:60:ac:9a:00:a2:e2:ee:37:0c:00:5a:92:87: 8a:29:cb:d3:54:dd:31:78:c7:80:d7:f6:8f:42:dc: aa:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:89:FE:24:2D:7A:F8:0A:B2:12:70:8C:33:92:5C:E4:F8:F1:F8:A8 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/16904584-5618-4c5b-af2b-aab4214cc13e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.155.192.0/19 Signature Algorithm: sha256WithRSAEncryption 36:a0:d5:d0:99:d2:90:55:bf:47:11:39:ff:70:89:34:f1:7c: ea:61:0b:1d:bd:57:ec:90:41:15:1d:18:88:f0:4b:24:b6:90: a6:c4:3b:5e:a6:98:a6:d8:e3:d3:af:56:f1:ff:59:02:02:eb: cd:e8:83:92:d4:8c:59:59:bc:eb:91:a8:f7:1b:73:97:51:bf: ec:eb:b9:01:53:12:12:c3:68:a2:65:4d:45:2e:bb:8a:97:6a: de:e8:ac:41:2f:94:6b:a7:4d:37:2b:3c:dd:1d:c1:00:44:0c: 2d:b4:69:42:c2:4a:34:3f:83:25:df:56:4a:2f:0a:42:77:fc: 00:fc:38:3a:ff:4c:01:10:02:9f:35:3e:d7:f4:54:9d:f8:34: c5:7c:d6:15:ce:d0:01:2d:23:15:c4:da:32:ec:ec:c7:d7:ca: 80:cf:52:36:96:54:83:64:6f:21:f9:69:e2:f2:a0:c4:6f:c7: 9b:2a:09:cc:bb:33:fe:05:79:e0:64:4e:ac:93:4b:50:96:5d: 71:8c:e8:fb:61:69:86:6f:d1:b6:ff:c8:24:45:d7:d0:55:ea: 80:b0:3f:fd:ec:e2:42:d1:ca:e7:fc:ac:e6:97:8b:b6:58:70: 5d:9a:62:f0:b3:c5:83:a0:06:64:f9:25:9b:bf:0a:5b:6c:d0: 9b:3c:f1:8a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZrYICrxLfvyq7sWAlYQ/Jfpk7LkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMTgxMDI2WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A0OTRhMDIzMGY1N2E4ODU4MjcwMzQ3ZWY1YjdlMTg1Yzhk MmQ2M2MxNWI1ZjY4MjUzYjY3YmU4MDNkNGM1OGUzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwPvUldIYHC4/tnm9yBNYlXZsH3GwH3ghKC44g4aKDNgI8 16SMnPwBA0nERsCmRownPEE0lYyrJX46GdIpEpbkTOabpaDQtKveeC0hwgkl6lFj OcQgFfuCsRhWPK8s9FrY80wP+KB+g3zHaZEqCe8ZKbG1XxsUIJX7KVbmSbrFE6e7 2HChmDLItthugUV8oQZMKXvU7IgyaT72VGUspUDwoC0Lo0yRWZAKEuZSpVxt+a1i 8qhd/lM99EwrfHj14BOBkVGj1+cVjfZY/KIasyXlB2W/TY4WMj1QZm25vI1+8SX5 YKyaAKLi7jcMAFqSh4opy9NU3TF4x4DX9o9C3KrJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUzon+JC16+AqyEnCMM5Jc5Pjx+KgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzE2OTA0NTg0LTU2MTgtNGM1Yi1hZjJiLWFhYjQyMTRjYzEzZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUSm8AwDQYJKoZIhvcNAQELBQADggEBADag1dCZ0pBVv0cROf9wiTTxfOph Cx29V+yQQRUdGIjwSyS2kKbEO16mmKbY49OvVvH/WQIC683og5LUjFlZvOuRqPcb c5dRv+zruQFTEhLDaKJlTUUuu4qXat7orEEvlGunTTcrPN0dwQBEDC20aULCSjQ/ gyXfVkovCkJ3/AD8ODr/TAEQAp81Ptf0VJ34NMV81hXO0AEtIxXE2jLs7MfXyoDP UjaWVINkbyH5aeLyoMRvx5sqCcy7M/4FeeBkTqyTS1CWXXGM6PthaYZv0bb/yCRF 19BV6oCwP/3s4kLRyuf8rOaXi7ZYcF2aYvCzxYOgBmT5JZu/Clts0Js88Yo= -----END CERTIFICATE-----Generated at Sat Oct 18 05:12:31 2025 by rpki-client