$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1fd033c3-ee62-44bb-85a0-002e65e977aa.roa File: 1fd033c3-ee62-44bb-85a0-002e65e977aa.roa (raw, json) Hash identifier: hlkThOIM98PajKGQc27OB8wT8u05sNt8bPbOEuw1E1g= Subject key identifier: 09:38:64:38:0A:5F:6F:94:8A:11:5E:A2:43:6A:85:FC:7B:BE:46:D7 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3CD6FA4D71479C59105D93436E9C3D3E08F3BF53 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1fd033c3-ee62-44bb-85a0-002e65e977aa.roa Signing time: Mon 22 Sep 2025 21:45:18 +0000 ROA not before: Mon 22 Sep 2025 21:45:18 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.239.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:d6:fa:4d:71:47:9c:59:10:5d:93:43:6e:9c:3d:3e:08:f3:bf:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 21:45:18 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=8343f6f4089db013e0d6aa583b6beed93f4fa9b64cfc44f741f7db057e1c9646, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:95:9a:52:81:6f:42:06:26:1e:fe:6e:43:da: f7:3e:98:c3:60:66:33:7d:fa:90:db:bf:87:b0:be: 1d:fa:e4:86:05:29:e1:33:32:e1:6e:cf:68:e2:26: b6:57:21:c4:54:14:29:c8:fd:3e:55:c3:cb:db:57: 69:88:c7:7d:4c:05:78:d9:9a:cb:73:57:32:3b:6d: 63:17:fe:d7:38:02:f2:e9:5a:51:27:88:92:bb:ee: 28:9b:78:d5:19:e5:df:1b:26:fc:eb:d3:44:cb:3d: 94:d0:90:3f:ca:66:df:f4:db:91:b1:f9:5a:25:df: c8:1f:28:ff:15:9b:e2:54:c4:d8:53:c4:57:2d:40: e7:d2:91:62:16:eb:5b:b7:e8:44:af:17:56:76:57: 9b:c0:98:72:84:82:91:30:20:aa:49:89:1c:c3:21: 37:56:5c:e5:69:65:03:44:e1:e0:ce:91:cb:a0:fa: ca:b5:5d:f4:5f:6a:43:10:e8:c4:42:36:63:c1:f3: 59:33:9f:8a:d2:18:11:61:b7:99:19:07:c7:03:fb: 5d:78:8a:b0:33:f4:89:32:0c:98:ba:51:2d:1a:5f: b0:3b:db:60:41:fd:af:fb:8c:c1:ad:05:f0:8a:41: 2b:10:a7:f2:1a:46:a0:22:7b:bb:c4:51:c2:d5:c3: b1:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:38:64:38:0A:5F:6F:94:8A:11:5E:A2:43:6A:85:FC:7B:BE:46:D7 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1fd033c3-ee62-44bb-85a0-002e65e977aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.239.134.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:44:a5:03:c0:c4:c4:4d:cf:b7:c0:e8:6d:ef:7f:52:d1:d6: f2:ab:d7:e1:68:78:5a:6e:a5:d7:1d:a0:65:30:48:40:6d:b7: 37:a0:12:59:23:e0:42:c4:6c:ba:73:3a:c1:a1:9e:1f:8a:20: c8:c1:95:25:49:75:43:13:63:c0:e6:29:61:9a:e0:da:0b:10: 7f:27:8b:92:64:12:d3:99:5e:fe:f5:f5:b7:1e:31:78:04:5e: e7:7f:bf:43:f1:78:06:d9:64:13:f3:c4:8f:6a:c4:58:de:ff: 34:6f:61:3e:d7:d1:5c:93:29:16:40:e5:d9:5e:27:4e:58:d2: d0:20:55:54:09:dc:14:8c:f2:1b:2b:e3:cb:37:d9:b8:26:fc: dc:f0:39:86:fe:c6:11:4b:06:8c:a5:8a:b0:80:a4:30:dd:d8: bd:0f:f5:08:10:2e:1c:fc:5f:f1:4e:d2:85:0d:9a:67:f5:b4: be:56:a3:ab:b0:0a:c5:7a:68:9c:82:04:02:5e:31:f8:7e:d7: 49:dc:b3:bb:2b:b6:5b:e4:c7:20:20:a6:b9:14:78:7d:00:b8: 74:a7:92:aa:e2:8d:53:b5:8f:cc:d2:26:40:b1:cf:9d:76:8b: 6e:58:fc:c8:29:01:c7:1f:b3:41:61:73:a1:99:be:25:9b:08: ae:9f:34:6c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPNb6TXFHnFkQXZNDbpw9Pgjzv1MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjE0NTE4WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A4MzQzZjZmNDA4OWRiMDEzZTBkNmFhNTgzYjZiZWVkOTNm NGZhOWI2NGNmYzQ0Zjc0MWY3ZGIwNTdlMWM5NjQ2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDolZpSgW9CBiYe/m5D2vc+mMNgZjN9+pDbv4ewvh365IYF KeEzMuFuz2jiJrZXIcRUFCnI/T5Vw8vbV2mIx31MBXjZmstzVzI7bWMX/tc4AvLp WlEniJK77iibeNUZ5d8bJvzr00TLPZTQkD/KZt/025Gx+Vol38gfKP8Vm+JUxNhT xFctQOfSkWIW61u36ESvF1Z2V5vAmHKEgpEwIKpJiRzDITdWXOVpZQNE4eDOkcug +sq1XfRfakMQ6MRCNmPB81kzn4rSGBFht5kZB8cD+114irAz9IkyDJi6US0aX7A7 22BB/a/7jMGtBfCKQSsQp/IaRqAie7vEUcLVw7G9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUCThkOApfb5SKEV6iQ2qF/Hu+RtcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzFmZDAzM2MzLWVlNjItNDRiYi04NWEwLTAwMmU2NWU5NzdhYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAS74YwDQYJKoZIhvcNAQELBQADggEBAExEpQPAxMRNz7fA6G3vf1LR1vKr 1+FoeFpupdcdoGUwSEBttzegElkj4ELEbLpzOsGhnh+KIMjBlSVJdUMTY8DmKWGa 4NoLEH8ni5JkEtOZXv719bceMXgEXud/v0PxeAbZZBPzxI9qxFje/zRvYT7X0VyT KRZA5dleJ05Y0tAgVVQJ3BSM8hsr48s32bgm/NzwOYb+xhFLBoylirCApDDd2L0P 9QgQLhz8X/FO0oUNmmf1tL5Wo6uwCsV6aJyCBAJeMfh+10ncs7srtlvkxyAgprkU eH0AuHSnkqrijVO1j8zSJkCxz512i25Y/MgpAccfs0Fhc6GZviWbCK6fNGw= -----END CERTIFICATE-----Generated at Sat Oct 18 00:13:25 2025 by rpki-client