$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/40a8a975-aaae-4540-9502-d4fd1caf32ea.roa File: 40a8a975-aaae-4540-9502-d4fd1caf32ea.roa (raw, json) Hash identifier: X+wWL2bOgzPFEcW+d/IN/QeYiCx5ZPPA42h6qLfAUZo= Subject key identifier: 88:27:52:33:20:D8:AF:D0:06:48:49:C4:DD:7F:AE:B3:BE:B7:DB:07 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7632A14DEEA531E66E115F3B60FE9C9B2DFDA5EA Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/40a8a975-aaae-4540-9502-d4fd1caf32ea.roa Signing time: Wed 24 Sep 2025 22:19:10 +0000 ROA not before: Wed 24 Sep 2025 22:19:10 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.64.76.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:32:a1:4d:ee:a5:31:e6:6e:11:5f:3b:60:fe:9c:9b:2d:fd:a5:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 22:19:10 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=e547a4e83f8e10e270d1fdce2123a3841f29cefea231da429e9eb6df2aec74a5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:16:9d:82:e5:6a:b8:2d:37:b7:71:aa:30:7a: cc:8c:05:aa:18:3c:67:b6:db:9e:4f:e7:56:e9:a8: 93:c5:75:7f:e7:5c:55:f9:b0:a0:88:83:4f:63:b8: a1:8b:d5:32:e3:9d:af:88:2d:0b:80:aa:57:59:a1: c8:06:fe:9a:fa:2a:84:60:89:2b:fa:3d:0a:34:10: ff:e9:0b:e3:a9:f8:56:66:96:0c:8c:63:49:10:7c: 5b:af:92:1f:d3:7f:21:ce:6d:ae:34:35:0c:f0:c7: bf:6a:80:df:fa:b8:22:b6:e2:30:5d:05:90:5f:58: a7:61:e6:1d:19:ce:e8:0a:07:d9:98:1e:3d:5e:db: 5a:ce:8c:44:68:8a:86:86:5c:30:93:46:85:6b:68: 8a:8c:c2:ef:79:d4:e1:31:97:55:2e:f2:b9:ab:09: d1:13:86:77:21:87:dd:00:a5:f7:3c:cf:1f:35:89: a1:72:55:27:d2:5f:d1:12:9e:b9:63:6a:76:30:42: a7:47:69:c6:dc:f0:70:6c:48:68:39:36:e7:48:ab: 49:dc:e8:c7:e1:09:f1:02:a5:d8:66:8f:8a:8f:ef: 97:18:3f:e2:ee:05:fc:92:00:7d:dd:2f:df:f9:c1: bd:f7:dc:6b:4b:01:fc:13:4d:ca:cf:a9:7c:12:0c: 58:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:27:52:33:20:D8:AF:D0:06:48:49:C4:DD:7F:AE:B3:BE:B7:DB:07 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/40a8a975-aaae-4540-9502-d4fd1caf32ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.64.76.0/23 Signature Algorithm: sha256WithRSAEncryption b3:b4:e9:99:65:a3:af:bb:aa:90:93:22:6d:9c:fa:9f:81:37: 35:4f:f9:34:ca:a5:e3:cf:d7:7e:19:47:9b:21:e7:84:34:ce: 91:12:62:05:ee:da:dc:09:dd:b3:7e:72:04:60:6f:36:ba:b6: ea:66:bf:36:d7:44:8a:8a:bf:83:4f:c0:ba:0f:23:ca:17:58: 45:29:e0:f0:50:6d:02:20:57:53:1d:23:43:15:0d:07:26:2e: 02:d7:4a:da:8f:78:33:7a:16:14:7a:96:1c:26:21:33:c0:6b: ed:df:16:f7:17:a2:31:dc:8d:15:cb:d9:8e:e9:ef:9b:f6:64: 73:e2:b6:84:97:de:b3:e5:64:96:03:8e:1f:be:3b:54:3d:bc: 51:0f:24:bd:75:5b:cb:63:cb:90:b0:a4:19:a4:2f:04:fe:dd: 2b:05:f6:72:c1:b6:71:c8:7f:bb:9d:42:63:c2:46:80:af:93: f5:3c:87:b2:3a:96:7f:81:3e:b8:42:06:40:5e:1b:bb:ed:9f: 6e:0a:fc:5b:00:c8:4f:b6:eb:7a:f1:b3:18:63:67:68:c4:54: bc:08:ed:6b:33:c2:9a:d7:64:40:30:52:39:89:5d:34:aa:f4: 96:f0:f0:8c:86:33:8c:24:31:51:17:60:c3:d8:2b:97:db:40: 16:5a:99:a1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdjKhTe6lMeZuEV87YP6cmy39peowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MjIxOTEwWhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BlNTQ3YTRlODNmOGUxMGUyNzBkMWZkY2UyMTIzYTM4NDFm MjljZWZlYTIzMWRhNDI5ZTllYjZkZjJhZWM3NGE1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCNFp2C5Wq4LTe3caowesyMBaoYPGe2255P51bpqJPFdX/n XFX5sKCIg09juKGL1TLjna+ILQuAqldZocgG/pr6KoRgiSv6PQo0EP/pC+Op+FZm lgyMY0kQfFuvkh/TfyHOba40NQzwx79qgN/6uCK24jBdBZBfWKdh5h0ZzugKB9mY Hj1e21rOjERoioaGXDCTRoVraIqMwu951OExl1Uu8rmrCdEThnchh90Apfc8zx81 iaFyVSfSX9ESnrljanYwQqdHacbc8HBsSGg5NudIq0nc6MfhCfECpdhmj4qP75cY P+LuBfySAH3dL9/5wb333GtLAfwTTcrPqXwSDFhfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUiCdSMyDYr9AGSEnE3X+us7632wcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQwYThhOTc1LWFhYWUtNDU0MC05NTAyLWQ0ZmQxY2FmMzJlYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESQEwwDQYJKoZIhvcNAQELBQADggEBALO06Zllo6+7qpCTIm2c+p+BNzVP +TTKpePP134ZR5sh54Q0zpESYgXu2twJ3bN+cgRgbza6tupmvzbXRIqKv4NPwLoP I8oXWEUp4PBQbQIgV1MdI0MVDQcmLgLXStqPeDN6FhR6lhwmITPAa+3fFvcXojHc jRXL2Y7p75v2ZHPitoSX3rPlZJYDjh++O1Q9vFEPJL11W8tjy5CwpBmkLwT+3SsF 9nLBtnHIf7udQmPCRoCvk/U8h7I6ln+BPrhCBkBeG7vtn24K/FsAyE+263rxsxhj Z2jEVLwI7WszwprXZEAwUjmJXTSq9Jbw8IyGM4wkMVEXYMPYK5fbQBZamaE= -----END CERTIFICATE-----Generated at Fri Oct 17 22:19:05 2025 by rpki-client