$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/291493af-7412-43cf-a5fa-2dabfc0496f6.roa File: 291493af-7412-43cf-a5fa-2dabfc0496f6.roa (raw, json) Hash identifier: v+QXqihnAgBvTbaxAqmnJCoSadYy2dxyJeBDkw/RISY= Subject key identifier: 3F:18:21:50:2A:01:8F:36:C1:BF:86:F5:40:46:03:7F:45:48:6D:04 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 01FB178A763960E27BE573C912C6CAF79B310CCB Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/291493af-7412-43cf-a5fa-2dabfc0496f6.roa Signing time: Mon 22 Sep 2025 19:08:52 +0000 ROA not before: Mon 22 Sep 2025 19:08:52 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.161.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:fb:17:8a:76:39:60:e2:7b:e5:73:c9:12:c6:ca:f7:9b:31:0c:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 19:08:52 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=898cca950b8206d820c88190b3dfadcf3a618214cca7c9cfc8548d2f71c632d3, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:04:9a:1c:de:66:8f:06:72:1c:6c:2f:47:75: 06:17:cb:89:68:03:75:39:e8:91:96:ba:aa:5a:50: 87:aa:56:90:01:13:ee:52:2e:b6:6f:03:d6:71:b8: fe:12:90:95:c6:40:ed:88:c3:95:f1:4a:55:4e:80: 68:f6:51:24:27:d7:dd:5e:4d:62:0c:cd:dd:5b:e0: 0e:f6:23:95:7d:61:9f:f8:03:d0:1c:23:cf:e9:54: 75:5e:d3:13:a3:81:12:2d:51:da:a5:a1:77:94:d5: 78:63:ff:79:a0:ba:de:f3:d8:5a:fc:2f:b8:9d:f0: f6:65:68:a0:5f:de:27:32:c4:de:4c:52:77:ed:59: ab:b2:b0:6b:43:dd:bd:1c:5f:93:80:db:4c:bd:5a: 85:d1:c7:18:92:57:0b:fd:db:cf:dc:ea:90:10:b4: 3a:8d:84:21:58:d5:61:97:d5:a8:f4:7c:c1:a2:b4: f0:c4:77:22:37:92:c4:b7:e1:bb:0a:a2:42:53:95: 57:97:df:3f:0f:b6:3c:42:b3:22:92:ca:fa:44:44: df:32:b2:a9:59:d1:7d:dc:a1:c9:57:c5:73:c2:52: 97:a8:df:31:93:82:69:d0:8b:8e:7c:d2:f0:fc:c0: ac:cc:41:d7:04:01:86:76:dc:b9:70:65:e2:6c:17: 4d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:18:21:50:2A:01:8F:36:C1:BF:86:F5:40:46:03:7F:45:48:6D:04 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/291493af-7412-43cf-a5fa-2dabfc0496f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.161.52.0/22 Signature Algorithm: sha256WithRSAEncryption b4:d1:66:8a:d6:ed:f8:c9:ef:f0:11:48:34:c4:5e:90:4b:03: a0:ac:d2:83:23:36:a9:3a:96:57:da:a2:02:50:33:2c:b8:7a: 7e:a2:a1:b5:bb:1a:1b:8f:68:07:7b:47:c8:b6:2c:91:e2:aa: 7d:49:60:dc:5e:2d:33:87:c5:d9:43:ad:5a:17:03:6f:ef:4a: f6:90:6d:f6:cf:28:e5:00:e3:b8:2d:40:ef:27:ac:e8:44:fa: 48:49:a7:d7:f3:88:e6:f7:67:e5:28:30:4a:d5:e6:a3:ec:3f: fb:6f:c5:4d:e2:d1:cc:91:28:d2:71:0b:05:7b:49:88:f1:35: 88:38:e0:66:45:b5:0e:e9:bf:2e:98:94:bf:a9:7f:dc:f3:2d: 52:44:5d:76:d9:9c:8f:36:0b:d9:4a:5f:24:80:28:d3:92:b1: f9:08:39:1f:7d:68:ed:a3:9f:e4:de:9e:39:f5:c9:a1:0f:87: 03:7e:3d:51:91:fa:7a:f1:a8:13:2a:2c:91:20:ae:2e:0d:08: 9c:b1:e8:d0:2f:cc:60:41:ae:e2:37:38:7b:e5:55:55:4c:b5: a4:9a:f7:da:bf:78:77:d1:bf:8d:00:ea:31:65:c2:32:8d:ef: 4d:61:cd:f4:07:80:c2:20:9c:a1:15:92:bc:c1:86:5d:a6:f1: 08:6a:a7:fe -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAfsXinY5YOJ75XPJEsbK95sxDMswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMTkwODUyWhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A4OThjY2E5NTBiODIwNmQ4MjBjODgxOTBiM2RmYWRjZjNh NjE4MjE0Y2NhN2M5Y2ZjODU0OGQyZjcxYzYzMmQzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCnBJoc3maPBnIcbC9HdQYXy4loA3U56JGWuqpaUIeqVpAB E+5SLrZvA9ZxuP4SkJXGQO2Iw5XxSlVOgGj2USQn191eTWIMzd1b4A72I5V9YZ/4 A9AcI8/pVHVe0xOjgRItUdqloXeU1Xhj/3mgut7z2Fr8L7id8PZlaKBf3icyxN5M UnftWauysGtD3b0cX5OA20y9WoXRxxiSVwv928/c6pAQtDqNhCFY1WGX1aj0fMGi tPDEdyI3ksS34bsKokJTlVeX3z8PtjxCsyKSyvpERN8ysqlZ0X3coclXxXPCUpeo 3zGTgmnQi4580vD8wKzMQdcEAYZ23LlwZeJsF01RAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUPxghUCoBjzbBv4b1QEYDf0VIbQQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzI5MTQ5M2FmLTc0MTItNDNjZi1hNWZhLTJkYWJmYzA0OTZmNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAISoTQwDQYJKoZIhvcNAQELBQADggEBALTRZorW7fjJ7/ARSDTEXpBLA6Cs 0oMjNqk6llfaogJQMyy4en6iobW7GhuPaAd7R8i2LJHiqn1JYNxeLTOHxdlDrVoX A2/vSvaQbfbPKOUA47gtQO8nrOhE+khJp9fziOb3Z+UoMErV5qPsP/tvxU3i0cyR KNJxCwV7SYjxNYg44GZFtQ7pvy6YlL+pf9zzLVJEXXbZnI82C9lKXySAKNOSsfkI OR99aO2jn+Tenjn1yaEPhwN+PVGR+nrxqBMqLJEgri4NCJyx6NAvzGBBruI3OHvl VVVMtaSa99q/eHfRv40A6jFlwjKN701hzfQHgMIgnKEVkrzBhl2m8Qhqp/4= -----END CERTIFICATE-----Generated at Fri Oct 17 22:17:41 2025 by rpki-client