$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2021d14e-2677-4971-bebd-d26a780e369d.roa File: 2021d14e-2677-4971-bebd-d26a780e369d.roa (raw, json) Hash identifier: ElijVk1Q8EO+9RUsGxDkPrKzEBONnaORLiVJSZJoRa8= Subject key identifier: 1B:D3:9F:31:20:A2:9D:64:AC:67:5B:C3:EA:23:68:AF:D1:84:5C:85 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6B4BDAC32AF6B6A7B3968C4AC85C90A61517F1F6 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2021d14e-2677-4971-bebd-d26a780e369d.roa Signing time: Mon 22 Sep 2025 18:52:01 +0000 ROA not before: Mon 22 Sep 2025 18:52:01 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.160.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:4b:da:c3:2a:f6:b6:a7:b3:96:8c:4a:c8:5c:90:a6:15:17:f1:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 18:52:01 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=e0297054bf164a035e80a709a8a70bc89efa24386576ea880b1dc4bebf91b45f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:33:7c:81:77:a0:eb:91:0b:37:90:e1:77:ce: a7:fb:48:08:07:f4:09:19:a2:a0:f9:68:f7:10:b0: 86:fc:c8:e0:08:5b:3d:d0:8b:0e:5e:13:ae:41:ca: c1:39:e2:5e:6c:bf:98:d9:e2:1f:de:68:8d:3b:d9: f8:f9:61:aa:f2:28:f0:09:d6:6d:30:dc:a4:be:12: 3e:4a:98:67:29:64:6b:74:b7:ab:87:fe:53:d1:91: 5d:1e:71:f7:3e:6f:65:a3:66:08:56:30:46:ea:a8: d0:83:13:ed:93:ce:9e:4e:0d:67:fd:73:73:74:e5: 56:d1:5b:8f:12:57:e0:ad:b2:f4:e3:a0:7b:51:88: de:0e:f7:94:bd:8d:61:12:1a:51:63:38:9c:19:e3: e1:99:2c:b2:cd:78:50:9b:bb:9e:3f:30:b4:c6:b8: ae:7a:fd:33:d4:f7:b2:98:35:13:ab:71:81:2c:26: 41:c6:8e:a3:71:2b:ba:5e:47:6c:59:69:a4:a7:2c: 8b:77:ae:7f:d4:96:54:c1:0d:3a:31:37:9b:b5:81: b5:e9:76:52:9d:87:07:b8:c5:85:0b:7a:64:48:bd: 5b:1a:32:1b:c9:d8:59:c3:7e:79:05:2a:a1:de:6b: d0:a2:3a:b9:22:69:51:5e:4c:ec:63:8e:ef:39:b2: 43:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:D3:9F:31:20:A2:9D:64:AC:67:5B:C3:EA:23:68:AF:D1:84:5C:85 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2021d14e-2677-4971-bebd-d26a780e369d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.160.88.0/23 Signature Algorithm: sha256WithRSAEncryption a6:e3:5e:c4:9e:01:67:1a:20:0f:de:fd:44:f5:44:89:78:e8: 34:62:20:30:2d:d6:9d:b0:df:e7:f4:90:49:a6:10:7d:be:cb: bc:83:cf:5e:18:5d:de:7b:6a:8f:3e:69:c1:2e:5b:4e:a4:e6: 77:e3:4c:21:bb:24:94:be:94:ad:b3:ef:ec:52:06:04:a5:ab: 83:ff:c8:81:87:05:e8:98:33:c3:ea:22:6a:e8:13:ea:18:91: 2a:27:c7:e4:c3:03:b1:ed:c3:85:82:fe:e8:8c:27:27:d7:cc: 2e:88:67:0b:1a:73:58:45:8a:05:a2:5f:9a:e9:fe:cd:36:2c: 11:0e:06:fd:83:3b:52:41:19:41:a0:e2:9c:41:96:d4:9e:22: 6b:8e:ec:48:6a:e8:b4:fe:1b:d7:6c:f9:51:6e:bf:14:e5:f0: ef:e2:03:8c:7e:71:4a:7c:fb:72:e1:35:2f:56:af:94:9c:2f: cb:58:76:98:0a:08:b8:fa:a0:d9:c1:d1:33:78:97:e8:d7:e2: 56:95:bd:53:ae:82:07:e5:04:40:53:1d:c0:19:0c:ab:a0:28: eb:fc:aa:55:21:8e:41:4d:84:2e:7f:f0:7c:0a:9b:5e:d0:5f: 37:40:b5:56:4f:2f:59:77:20:f3:bc:9a:4f:da:08:2a:58:0f: fb:8a:88:87 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUa0vawyr2tqezloxKyFyQphUX8fYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMTg1MjAxWhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BlMDI5NzA1NGJmMTY0YTAzNWU4MGE3MDlhOGE3MGJjODll ZmEyNDM4NjU3NmVhODgwYjFkYzRiZWJmOTFiNDVmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyM3yBd6DrkQs3kOF3zqf7SAgH9AkZoqD5aPcQsIb8yOAI Wz3Qiw5eE65BysE54l5sv5jZ4h/eaI072fj5YaryKPAJ1m0w3KS+Ej5KmGcpZGt0 t6uH/lPRkV0ecfc+b2WjZghWMEbqqNCDE+2Tzp5ODWf9c3N05VbRW48SV+CtsvTj oHtRiN4O95S9jWESGlFjOJwZ4+GZLLLNeFCbu54/MLTGuK56/TPU97KYNROrcYEs JkHGjqNxK7peR2xZaaSnLIt3rn/UllTBDToxN5u1gbXpdlKdhwe4xYULemRIvVsa MhvJ2FnDfnkFKqHea9CiOrkiaVFeTOxjju85skPtAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUG9OfMSCinWSsZ1vD6iNor9GEXIUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzIwMjFkMTRlLTI2NzctNDk3MS1iZWJkLWQyNmE3ODBlMzY5ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESoFgwDQYJKoZIhvcNAQELBQADggEBAKbjXsSeAWcaIA/e/UT1RIl46DRi IDAt1p2w3+f0kEmmEH2+y7yDz14YXd57ao8+acEuW06k5nfjTCG7JJS+lK2z7+xS BgSlq4P/yIGHBeiYM8PqImroE+oYkSonx+TDA7Htw4WC/uiMJyfXzC6IZwsac1hF igWiX5rp/s02LBEOBv2DO1JBGUGg4pxBltSeImuO7Ehq6LT+G9ds+VFuvxTl8O/i A4x+cUp8+3LhNS9Wr5ScL8tYdpgKCLj6oNnB0TN4l+jX4laVvVOuggflBEBTHcAZ DKugKOv8qlUhjkFNhC5/8HwKm17QXzdAtVZPL1l3IPO8mk/aCCpYD/uKiIc= -----END CERTIFICATE-----Generated at Fri Oct 17 22:17:31 2025 by rpki-client