$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/33e49a95-589f-422f-b545-ad285013c4f0.roa File: 33e49a95-589f-422f-b545-ad285013c4f0.roa (raw, json) Hash identifier: IPuuUyJ4ZbY1FXn4/FslkoAAkq0NIIGAHmDZZiELd+o= Subject key identifier: 53:32:BA:9C:69:A8:C5:B2:6A:D9:DF:32:42:2C:41:6B:1F:82:E2:C8 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 24D225A5CDCACF716F072DD376275BC4A2FF7D50 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/33e49a95-589f-422f-b545-ad285013c4f0.roa Signing time: Wed 24 Sep 2025 22:49:18 +0000 ROA not before: Wed 24 Sep 2025 22:49:18 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.65.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:d2:25:a5:cd:ca:cf:71:6f:07:2d:d3:76:27:5b:c4:a2:ff:7d:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 22:49:18 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=a3278c158579db9d596ccebdfda0305dfaa8e7fc0fcf759dfca61fda33448a4e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:fa:ee:ae:26:7f:33:68:30:83:28:23:9a:ef: 88:82:d3:f3:6b:0c:3f:66:4e:48:e6:63:04:46:e0: 48:5d:58:82:ea:62:e4:8f:80:7a:93:dd:b1:2e:ed: bb:3a:9e:cb:62:98:51:d4:26:e2:52:81:cc:21:de: 55:4c:59:d0:8a:3b:46:35:b2:08:f1:4e:40:36:ca: 8f:6f:10:f4:f1:16:34:c4:0b:9a:1f:d3:07:8f:0a: fa:81:70:f2:a3:85:b9:b2:bc:bc:52:44:4e:82:82: 78:9f:64:ee:7d:44:17:18:0d:00:2d:80:81:88:03: 53:8a:2c:56:7b:08:d8:86:4f:9a:c0:39:ff:ff:30: be:c6:43:00:9f:35:51:a3:07:c0:26:d5:a5:9f:c5: d1:c1:5f:63:e3:21:b3:56:2b:fd:25:e0:0c:fb:7d: b8:d6:26:1c:61:e6:6c:32:01:ab:56:3a:90:01:9c: ea:99:12:f1:0d:5e:19:8c:5e:81:13:4c:9f:06:ed: 61:0b:43:e1:9e:5a:c7:cc:56:88:1a:ee:27:9f:1d: 90:1a:09:3c:67:30:ca:01:e9:10:59:bc:87:66:21: 0c:38:19:06:f7:42:8a:f8:b7:d7:c8:ac:14:98:b9: 6b:55:36:fa:37:be:69:4a:49:e9:f4:f8:59:4e:98: 0b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:32:BA:9C:69:A8:C5:B2:6A:D9:DF:32:42:2C:41:6B:1F:82:E2:C8 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/33e49a95-589f-422f-b545-ad285013c4f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.65.124.0/22 Signature Algorithm: sha256WithRSAEncryption 54:95:84:64:4d:cd:32:c4:8a:a0:bb:17:36:13:d6:9b:55:81: 12:fb:b4:52:c8:3a:d8:54:a3:06:ba:06:89:42:53:9e:c8:ae: ab:c4:a9:2e:99:94:f7:ab:06:47:1e:fc:e5:c3:9c:c0:dc:1a: 4e:48:b8:bb:cf:ff:e3:03:a7:78:c0:5a:19:59:b6:79:b3:67: 06:bb:7c:02:f9:78:31:00:a9:8c:19:fb:7c:38:e4:7b:d3:7f: a5:10:81:33:02:82:9f:d2:f8:51:2c:75:2e:dd:46:9e:69:b9: 47:ef:2e:1f:23:50:f3:f7:db:9a:34:70:ef:d4:1f:a1:70:e5: 07:6b:31:83:66:09:24:06:4f:c2:dd:24:2e:22:32:d0:52:e7: 0d:2e:ea:d5:9a:d4:3d:6a:21:bf:9e:6b:3b:93:f4:5a:e1:cc: f5:e3:7c:81:8f:1d:44:4a:55:55:42:fd:ba:af:93:f8:3e:ef: aa:b1:6b:f5:08:e5:39:3f:e6:8f:84:5e:1f:6c:4b:ab:3e:eb: 6b:c4:df:c4:f1:c5:a6:fd:e3:3f:2f:87:62:60:ec:a2:bc:c2: 23:29:8b:75:99:16:3d:cf:e3:de:75:63:d2:a3:77:43:72:b5: fc:8f:31:e8:f0:81:d1:18:a7:20:70:16:16:e1:09:8e:eb:9a: fa:f0:c2:38 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJNIlpc3Kz3FvBy3TdidbxKL/fVAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MjI0OTE4WhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BhMzI3OGMxNTg1NzlkYjlkNTk2Y2NlYmRmZGEwMzA1ZGZh YThlN2ZjMGZjZjc1OWRmY2E2MWZkYTMzNDQ4YTRlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCi+u6uJn8zaDCDKCOa74iC0/NrDD9mTkjmYwRG4EhdWILq YuSPgHqT3bEu7bs6nstimFHUJuJSgcwh3lVMWdCKO0Y1sgjxTkA2yo9vEPTxFjTE C5of0wePCvqBcPKjhbmyvLxSRE6CgnifZO59RBcYDQAtgIGIA1OKLFZ7CNiGT5rA Of//ML7GQwCfNVGjB8Am1aWfxdHBX2PjIbNWK/0l4Az7fbjWJhxh5mwyAatWOpAB nOqZEvENXhmMXoETTJ8G7WELQ+GeWsfMVoga7iefHZAaCTxnMMoB6RBZvIdmIQw4 GQb3Qor4t9fIrBSYuWtVNvo3vmlKSen0+FlOmAu/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUUzK6nGmoxbJq2d8yQixBax+C4sgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzMzZTQ5YTk1LTU4OWYtNDIyZi1iNTQ1LWFkMjg1MDEzYzRmMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAISQXwwDQYJKoZIhvcNAQELBQADggEBAFSVhGRNzTLEiqC7FzYT1ptVgRL7 tFLIOthUowa6BolCU57IrqvEqS6ZlPerBkce/OXDnMDcGk5IuLvP/+MDp3jAWhlZ tnmzZwa7fAL5eDEAqYwZ+3w45HvTf6UQgTMCgp/S+FEsdS7dRp5puUfvLh8jUPP3 25o0cO/UH6Fw5QdrMYNmCSQGT8LdJC4iMtBS5w0u6tWa1D1qIb+eazuT9FrhzPXj fIGPHURKVVVC/bqvk/g+76qxa/UI5Tk/5o+EXh9sS6s+62vE38Txxab94z8vh2Jg 7KK8wiMpi3WZFj3P4951Y9Kjd0NytfyPMejwgdEYpyBwFhbhCY7rmvrwwjg= -----END CERTIFICATE-----Generated at Sat Oct 18 00:13:02 2025 by rpki-client