$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/246ca63e-17a6-4e85-a615-805643643523.roa File: 246ca63e-17a6-4e85-a615-805643643523.roa (raw, json) Hash identifier: fGPlZw9MEH4eTAuPLx/81QKdY8xQ/t9sD7WARGCc98I= Subject key identifier: 68:5E:0E:25:75:26:4F:C4:CB:18:16:3C:9B:D7:D0:B7:6C:74:70:86 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3950A6F5017B3B993CB7390A94E56F5393C93AB0 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/246ca63e-17a6-4e85-a615-805643643523.roa Signing time: Wed 24 Sep 2025 22:44:18 +0000 ROA not before: Wed 24 Sep 2025 22:44:18 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.67.82.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:50:a6:f5:01:7b:3b:99:3c:b7:39:0a:94:e5:6f:53:93:c9:3a:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 22:44:18 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=28d95ac784ea5ed7cf67fa0543e6f13edfcd427160c70f1153d015f80f05bd3f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a3:e1:3c:2e:f7:52:fc:bc:98:1e:87:48:c7: c5:53:a1:29:4e:97:88:03:d3:16:9c:b2:40:bf:db: 43:4c:cd:15:f3:f8:3c:0b:b7:62:30:c3:c0:7b:20: 47:30:b6:f2:20:75:90:5b:ed:c8:13:b1:03:3b:d4: 5a:82:59:e8:d3:55:2e:eb:3d:7a:f7:21:be:02:16: e5:dc:96:e9:1e:1a:f7:af:48:3d:6d:30:a9:cc:0f: 34:d5:35:71:a0:42:19:c7:46:2c:49:3c:52:28:f4: 95:a1:e0:85:51:93:2a:1a:ec:3b:55:c2:ee:9f:0d: a9:f9:b3:4d:ac:75:c6:04:15:06:f8:1e:fa:a3:20: 2a:53:17:03:09:54:c1:9b:93:ee:e2:2e:0a:df:e7: e6:5f:1c:49:8b:99:4f:1b:ea:ab:1b:32:4b:6b:3a: d8:5b:1c:a7:fc:d2:c8:56:af:c5:91:ff:75:31:78: 68:29:8c:23:39:f4:93:29:e3:18:a3:a0:72:08:ec: f8:3d:44:7d:a8:79:77:21:23:5c:88:f4:66:94:ea: dd:66:e1:83:ef:4d:6f:3e:0a:1e:99:36:a8:5b:19: f4:a9:a7:7d:e8:75:6a:9c:17:59:94:41:e0:6d:75: c3:74:a7:2f:d2:f5:df:82:3d:1e:e7:4a:e9:64:aa: 93:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:5E:0E:25:75:26:4F:C4:CB:18:16:3C:9B:D7:D0:B7:6C:74:70:86 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/246ca63e-17a6-4e85-a615-805643643523.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.67.82.0/23 Signature Algorithm: sha256WithRSAEncryption 76:6c:b0:2a:c7:22:b3:18:4a:3d:c3:85:59:34:11:f2:0a:cf: fe:2a:97:78:69:2a:f2:92:1d:1a:ba:63:29:5a:5f:e8:8b:9e: cc:93:14:33:bb:c1:88:c2:b7:d0:f3:e0:be:7c:bf:f2:2c:7a: 52:44:4a:b8:c4:07:91:cd:27:38:71:4e:92:79:dc:fe:5d:1e: 4b:bb:fa:be:0c:b3:dc:eb:1d:31:fd:89:45:8b:c8:02:70:89: 3f:e0:29:5a:7f:60:95:b0:96:c9:c5:00:db:b8:23:48:dc:eb: 6d:ad:77:9b:ab:fe:a2:41:d3:bf:40:80:c3:0a:7d:df:84:7c: 00:dc:45:6d:30:6b:5e:a3:ae:0e:2e:54:29:bc:a2:df:2d:37: ef:dc:af:f8:9b:4c:04:8e:68:1b:eb:e5:71:d0:a3:db:10:46: fa:96:0b:09:0e:44:1e:dc:28:58:a1:d4:d7:62:a3:c1:42:b6: 01:82:b6:ea:bb:e5:a4:35:d0:f5:6e:b1:41:71:df:9b:02:de: ca:6e:19:a3:08:d8:e6:16:7e:cc:ad:40:c7:7c:d8:8d:55:0b: 15:37:7b:61:5c:fb:14:c0:cc:85:e5:1b:a6:c5:9f:65:99:c2: 22:b6:f5:80:ca:9c:e1:d5:4b:9c:c4:ec:df:c0:74:96:c1:e7: 06:97:2e:eb -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOVCm9QF7O5k8tzkKlOVvU5PJOrAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MjI0NDE4WhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0AyOGQ5NWFjNzg0ZWE1ZWQ3Y2Y2N2ZhMDU0M2U2ZjEzZWRm Y2Q0MjcxNjBjNzBmMTE1M2QwMTVmODBmMDViZDNmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCho+E8LvdS/LyYHodIx8VToSlOl4gD0xacskC/20NMzRXz +DwLt2Iww8B7IEcwtvIgdZBb7cgTsQM71FqCWejTVS7rPXr3Ib4CFuXclukeGvev SD1tMKnMDzTVNXGgQhnHRixJPFIo9JWh4IVRkyoa7DtVwu6fDan5s02sdcYEFQb4 HvqjICpTFwMJVMGbk+7iLgrf5+ZfHEmLmU8b6qsbMktrOthbHKf80shWr8WR/3Ux eGgpjCM59JMp4xijoHII7Pg9RH2oeXchI1yI9GaU6t1m4YPvTW8+Ch6ZNqhbGfSp p33odWqcF1mUQeBtdcN0py/S9d+CPR7nSulkqpNDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUaF4OJXUmT8TLGBY8m9fQt2x0cIYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzI0NmNhNjNlLTE3YTYtNGU4NS1hNjE1LTgwNTY0MzY0MzUyMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESQ1IwDQYJKoZIhvcNAQELBQADggEBAHZssCrHIrMYSj3DhVk0EfIKz/4q l3hpKvKSHRq6YylaX+iLnsyTFDO7wYjCt9Dz4L58v/IselJESrjEB5HNJzhxTpJ5 3P5dHku7+r4Ms9zrHTH9iUWLyAJwiT/gKVp/YJWwlsnFANu4I0jc622td5ur/qJB 079AgMMKfd+EfADcRW0wa16jrg4uVCm8ot8tN+/cr/ibTASOaBvr5XHQo9sQRvqW CwkORB7cKFih1Ndio8FCtgGCtuq75aQ10PVusUFx35sC3spuGaMI2OYWfsytQMd8 2I1VCxU3e2Fc+xTAzIXlG6bFn2WZwiK29YDKnOHVS5zE7N/AdJbB5waXLus= -----END CERTIFICATE-----Generated at Sat Oct 18 07:32:12 2025 by rpki-client