$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/257fc579-6262-4686-ae49-7a98c75da672.roa File: 257fc579-6262-4686-ae49-7a98c75da672.roa (raw, json) Hash identifier: fTg4531L2PDfvpEVFvGX7gRTeDJmH1g9dQvlyleISnA= Subject key identifier: 4B:46:2D:FD:B0:29:86:E9:8C:6F:77:4F:47:7B:71:48:11:1A:FF:FA Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 34D6D789F92E00329FF7D987FFD7424E48247838 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/257fc579-6262-4686-ae49-7a98c75da672.roa Signing time: Wed 24 Sep 2025 22:22:19 +0000 ROA not before: Wed 24 Sep 2025 22:22:19 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.65.172.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:d6:d7:89:f9:2e:00:32:9f:f7:d9:87:ff:d7:42:4e:48:24:78:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 22:22:19 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=912c72a023e1652eb8f144d77037019efe1527280fdf2b5daa98c74e3508d53b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:3d:6f:c6:b7:cb:f7:25:8c:c5:ea:aa:2b:12: 4e:30:7c:fa:00:bb:d3:c3:79:41:24:5b:ad:78:f1: 90:e7:4c:ee:2a:2a:fe:05:f9:55:df:3a:28:c5:f5: 4d:94:16:21:bd:61:f1:53:2c:44:a1:7a:67:71:ae: 97:7b:14:62:0e:56:68:8f:93:a7:48:f0:52:18:10: a2:a3:c2:11:bf:a8:25:b0:b7:97:fe:07:b0:8b:30: 9b:a4:e7:06:ba:32:5d:42:ed:79:56:4d:63:c1:9c: 3c:a6:17:c7:fe:52:0d:e9:5d:8b:2e:63:5c:a1:92: 96:1e:f2:8d:f8:a0:90:58:ae:55:2a:e0:50:4c:8b: dd:b0:4d:71:a6:29:ad:fd:42:ef:16:03:71:2f:e2: a0:18:e0:b6:33:51:b5:f0:ed:4e:84:76:0d:dd:ee: 8f:bc:e0:5d:06:47:15:42:05:83:07:c9:bd:bd:c3: 43:ad:fb:85:4a:ad:d3:56:13:0f:c3:d9:23:48:e4: 72:df:4b:d3:2b:7c:b9:8a:34:43:d8:db:48:49:b4: 36:ce:37:98:11:33:b7:0d:9e:de:d1:bd:c5:74:3c: 2c:14:41:ff:2f:e4:e3:dd:e2:33:a2:0d:54:a3:1e: 91:d1:dc:16:f0:41:eb:42:c3:fd:68:98:1e:ad:92: fb:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:46:2D:FD:B0:29:86:E9:8C:6F:77:4F:47:7B:71:48:11:1A:FF:FA X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/257fc579-6262-4686-ae49-7a98c75da672.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.65.172.0/23 Signature Algorithm: sha256WithRSAEncryption 53:46:ee:06:27:64:42:f4:00:f0:01:02:07:4b:1e:39:68:34: 01:42:02:74:71:c7:9f:0b:28:5a:8d:e4:9f:2a:ab:b7:ba:cd: e4:50:7c:63:8b:c6:1d:dd:eb:bc:99:70:e2:d9:27:ff:8a:7f: 07:04:6e:5d:a6:65:24:26:08:1b:70:6a:aa:da:4b:5f:56:c7: 16:9b:f8:54:3c:26:82:26:a9:42:f0:f3:b7:4c:93:a6:e3:0b: 5a:eb:1d:f3:49:67:aa:ba:13:e0:4a:ff:ae:f3:c5:74:b8:7e: e4:1c:c1:72:92:9f:34:79:43:9b:31:2a:8d:f6:9a:2b:38:3b: 6a:20:f5:df:95:81:0f:ee:75:b7:3c:aa:73:a7:73:fe:55:4a: c1:a3:4b:01:cb:47:5f:3d:a9:f6:7f:f9:b9:57:53:7f:19:fa: c2:6b:d1:b4:b8:fe:2f:3a:a8:18:c6:e0:a2:3d:5c:34:68:94: fe:88:06:62:17:61:77:8f:3c:7f:49:56:6b:47:98:5d:bc:75: 4c:43:f4:c2:de:17:29:10:16:1d:6e:0e:79:45:b3:02:a8:b3: 63:18:7f:a9:ee:86:25:fe:7f:74:36:0c:70:b1:43:25:7b:bb: 3b:84:5f:57:33:6d:ce:df:aa:3a:41:a4:e7:41:e1:ba:1e:04: 5d:cc:c4:a4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNNbXifkuADKf99mH/9dCTkgkeDgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MjIyMjE5WhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A5MTJjNzJhMDIzZTE2NTJlYjhmMTQ0ZDc3MDM3MDE5ZWZl MTUyNzI4MGZkZjJiNWRhYTk4Yzc0ZTM1MDhkNTNiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD2PW/Gt8v3JYzF6qorEk4wfPoAu9PDeUEkW6148ZDnTO4q Kv4F+VXfOijF9U2UFiG9YfFTLEShemdxrpd7FGIOVmiPk6dI8FIYEKKjwhG/qCWw t5f+B7CLMJuk5wa6Ml1C7XlWTWPBnDymF8f+Ug3pXYsuY1yhkpYe8o34oJBYrlUq 4FBMi92wTXGmKa39Qu8WA3Ev4qAY4LYzUbXw7U6Edg3d7o+84F0GRxVCBYMHyb29 w0Ot+4VKrdNWEw/D2SNI5HLfS9MrfLmKNEPY20hJtDbON5gRM7cNnt7RvcV0PCwU Qf8v5OPd4jOiDVSjHpHR3BbwQetCw/1omB6tkvtPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUS0Yt/bAphumMb3dPR3txSBEa//owHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzI1N2ZjNTc5LTYyNjItNDY4Ni1hZTQ5LTdhOThjNzVkYTY3Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESQawwDQYJKoZIhvcNAQELBQADggEBAFNG7gYnZEL0APABAgdLHjloNAFC AnRxx58LKFqN5J8qq7e6zeRQfGOLxh3d67yZcOLZJ/+KfwcEbl2mZSQmCBtwaqra S19Wxxab+FQ8JoImqULw87dMk6bjC1rrHfNJZ6q6E+BK/67zxXS4fuQcwXKSnzR5 Q5sxKo32mis4O2og9d+VgQ/udbc8qnOnc/5VSsGjSwHLR189qfZ/+blXU38Z+sJr 0bS4/i86qBjG4KI9XDRolP6IBmIXYXePPH9JVmtHmF28dUxD9MLeFykQFh1uDnlF swKos2MYf6nuhiX+f3Q2DHCxQyV7uzuEX1czbc7fqjpBpOdB4boeBF3MxKQ= -----END CERTIFICATE-----Generated at Sat Oct 18 02:35:25 2025 by rpki-client