$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/229bd015-f9cf-4f49-9438-aefb68b574d7.roa File: 229bd015-f9cf-4f49-9438-aefb68b574d7.roa (raw, json) Hash identifier: O+1X04r9JGL97PIkQy6BNoll/6RQfUOizveKVWE2R3E= Subject key identifier: 81:A3:FC:28:5E:FE:7F:F5:10:04:EB:BC:4C:AC:09:94:20:88:90:73 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 40D94D85C1C8279C152BC711A4C27DA61D6F1A8A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/229bd015-f9cf-4f49-9438-aefb68b574d7.roa Signing time: Wed 24 Sep 2025 22:22:22 +0000 ROA not before: Wed 24 Sep 2025 22:22:22 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.65.178.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:d9:4d:85:c1:c8:27:9c:15:2b:c7:11:a4:c2:7d:a6:1d:6f:1a:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 22:22:22 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=9fb4d5513217a9d522c2cf4829769dc3abbcf6360e03c8af412a36034fd21f24, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:27:d9:73:7f:1c:51:94:6a:94:1d:63:74:23: e5:7b:0d:6b:5b:55:bd:5d:92:4a:e3:7e:b6:49:5d: e6:6c:72:db:91:c9:a9:6b:66:1f:ac:66:38:61:89: c3:fd:cb:0c:9e:dd:d7:77:8d:ff:da:13:23:de:3e: 2d:c4:71:f3:f1:00:a6:91:69:c2:52:5e:f3:94:37: 82:f3:29:f2:05:cf:05:81:97:db:19:be:a1:ed:b6: 17:dd:aa:33:8e:82:50:a4:60:8e:91:6e:c1:ce:0a: cb:ab:6b:4a:20:69:1a:5c:2c:8a:58:3e:0d:ec:48: 33:d3:ae:65:9e:48:a2:c5:e9:1a:ad:8e:b6:c4:e1: 59:33:c7:aa:ef:ef:33:ac:64:2c:58:18:f7:f6:ac: e5:6b:b6:71:f5:6d:6c:2a:ab:87:3c:c1:c3:22:88: 1b:e0:8e:36:89:fa:ff:26:c7:5d:ff:fa:1f:c0:83: 52:c9:62:f0:d0:e2:ac:a6:af:9b:c4:62:80:cb:66: 80:c9:a7:6b:35:ee:34:3e:ef:b7:61:14:d5:0f:86: b7:5d:05:37:45:f3:59:5b:44:8b:8f:cc:68:00:7b: dd:40:a4:c4:6d:b5:e3:3a:ee:63:91:17:2b:a7:3d: e6:6c:51:44:8a:be:a2:5e:1a:5b:42:a7:73:a3:bd: 33:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:A3:FC:28:5E:FE:7F:F5:10:04:EB:BC:4C:AC:09:94:20:88:90:73 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/229bd015-f9cf-4f49-9438-aefb68b574d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.65.178.0/23 Signature Algorithm: sha256WithRSAEncryption 5b:02:a2:ad:d3:93:f1:51:9c:a1:6b:5a:b9:12:76:26:b5:8e: d6:35:66:08:72:7b:3a:b7:36:e2:7a:a8:b6:23:7d:0c:e4:32: 9e:e6:df:3f:c1:5e:7a:42:62:94:a0:88:19:cd:26:3b:ba:e3: c4:ac:d1:f6:f2:ce:41:8f:dd:37:57:93:0a:b1:d6:e1:ab:84: 72:06:e2:c7:15:fe:6d:b2:86:13:3d:f3:56:da:82:81:c8:44: 82:ff:ff:22:bb:db:c7:90:ea:dc:ee:e9:5d:47:e5:9e:56:37: 20:25:e6:64:96:ce:2d:96:4c:ab:02:89:9c:b5:4a:8d:5f:7c: af:1e:b5:7b:ed:8a:4e:eb:88:d8:32:13:be:5d:e7:d8:62:e0: 9e:a4:64:02:18:13:6b:c6:f7:57:e4:db:b4:b6:1f:50:8f:64: 75:1d:6a:6d:e2:5c:03:62:84:77:f5:a7:0e:75:04:8d:08:a6: 4c:d6:e8:69:d1:a5:3f:7e:9b:8f:22:89:c5:a2:ce:56:d6:f3: 6b:ce:97:41:76:43:2a:ba:6f:c3:05:76:86:07:bb:e1:2f:87: a9:b3:96:61:62:8c:19:54:37:58:0b:46:e1:50:68:20:98:b8: 50:a0:c6:33:65:9b:ad:bc:dd:b9:45:92:6c:99:77:5e:31:a4: a4:09:49:d0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQNlNhcHIJ5wVK8cRpMJ9ph1vGoowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MjIyMjIyWhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZmI0ZDU1MTMyMTdhOWQ1MjJjMmNmNDgyOTc2OWRjM2Fi YmNmNjM2MGUwM2M4YWY0MTJhMzYwMzRmZDIxZjI0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyJ9lzfxxRlGqUHWN0I+V7DWtbVb1dkkrjfrZJXeZsctuR yalrZh+sZjhhicP9ywye3dd3jf/aEyPePi3EcfPxAKaRacJSXvOUN4LzKfIFzwWB l9sZvqHtthfdqjOOglCkYI6RbsHOCsura0ogaRpcLIpYPg3sSDPTrmWeSKLF6Rqt jrbE4Vkzx6rv7zOsZCxYGPf2rOVrtnH1bWwqq4c8wcMiiBvgjjaJ+v8mx13/+h/A g1LJYvDQ4qymr5vEYoDLZoDJp2s17jQ+77dhFNUPhrddBTdF81lbRIuPzGgAe91A pMRtteM67mORFyunPeZsUUSKvqJeGltCp3OjvTPZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUgaP8KF7+f/UQBOu8TKwJlCCIkHMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzIyOWJkMDE1LWY5Y2YtNGY0OS05NDM4LWFlZmI2OGI1NzRkNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESQbIwDQYJKoZIhvcNAQELBQADggEBAFsCoq3Tk/FRnKFrWrkSdia1jtY1 Zghyezq3NuJ6qLYjfQzkMp7m3z/BXnpCYpSgiBnNJju648Ss0fbyzkGP3TdXkwqx 1uGrhHIG4scV/m2yhhM981bagoHIRIL//yK728eQ6tzu6V1H5Z5WNyAl5mSWzi2W TKsCiZy1So1ffK8etXvtik7riNgyE75d59hi4J6kZAIYE2vG91fk27S2H1CPZHUd am3iXANihHf1pw51BI0IpkzW6GnRpT9+m48iicWizlbW82vOl0F2Qyq6b8MFdoYH u+Evh6mzlmFijBlUN1gLRuFQaCCYuFCgxjNlm6283blFkmyZd14xpKQJSdA= -----END CERTIFICATE-----Generated at Fri Oct 17 22:14:29 2025 by rpki-client