$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/48723177-93f8-4058-b652-44945f852ecd.roa File: 48723177-93f8-4058-b652-44945f852ecd.roa (raw, json) Hash identifier: ggCIYgHlbycYM6qaGSQKg2AZ6UN8yhuj2VvRANp8y18= Subject key identifier: D5:6E:FF:65:60:C0:45:62:A2:E9:62:F8:D1:F8:EE:36:66:4F:C8:2C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4EA65495995ECB68A128F91F6F9B99C6620FEE80 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/48723177-93f8-4058-b652-44945f852ecd.roa Signing time: Fri 26 Sep 2025 16:32:10 +0000 ROA not before: Fri 26 Sep 2025 16:32:10 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 18.34.232.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:a6:54:95:99:5e:cb:68:a1:28:f9:1f:6f:9b:99:c6:62:0f:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 16:32:10 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=fc812f24b48c89b3257fb113164ef8d6182e5ba80829999be00824d338179248, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:59:2d:07:56:7c:6d:b1:53:f6:83:21:49:38: b6:e3:80:cc:42:83:4f:6f:eb:65:ee:a0:ce:fa:b4: e8:71:d1:9e:38:89:02:fb:51:eb:60:d3:7f:48:55: 80:13:e9:37:c6:87:3c:b7:f8:56:95:12:dd:de:0e: 34:8a:8a:72:48:b1:ff:a8:a6:0e:a9:56:26:72:66: 30:97:f6:ee:47:7a:ec:cf:c5:f6:14:95:c3:7d:4f: f7:ed:f0:aa:b6:f2:c8:d0:24:92:d9:1e:ce:98:75: 8c:59:33:69:07:0f:5c:69:c1:b6:df:d2:2f:7e:e3: 75:87:8f:23:fe:3a:f8:58:12:68:e4:e9:2e:95:b6: 5a:03:9c:b2:05:b4:52:52:a4:d0:06:0d:90:35:96: b4:a6:58:46:ef:5b:fa:b7:b1:ab:59:c6:06:1a:c4: f8:71:74:39:78:58:ec:03:bb:d3:87:3c:1c:63:71: e9:26:8b:54:8f:6b:1a:05:be:53:7c:60:64:63:18: f0:99:fc:3e:eb:7a:9b:f2:e8:fa:1c:c9:2b:f4:04: d2:01:91:0b:5e:b1:03:95:47:9f:4c:bb:fb:ee:a6: f2:43:80:9b:f2:b6:ca:a6:67:be:68:cc:aa:65:87: 9c:ff:58:bc:c1:40:11:7b:50:bf:9e:bb:2c:85:97: 11:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:6E:FF:65:60:C0:45:62:A2:E9:62:F8:D1:F8:EE:36:66:4F:C8:2C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/48723177-93f8-4058-b652-44945f852ecd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.34.232.0/21 Signature Algorithm: sha256WithRSAEncryption 6e:2b:d2:d1:35:ab:b8:12:44:95:f5:13:a2:8e:82:13:d2:29: 84:32:41:7a:49:50:c6:c3:a2:08:0f:35:ae:92:03:16:c8:b3: 6a:d7:1b:06:99:54:c6:ea:3e:d2:cc:b3:a8:b7:c3:f7:99:fa: ae:b6:55:fb:77:27:39:15:1d:c3:b8:e0:11:f1:27:b9:30:44: 34:e9:88:65:b6:da:5b:f4:85:61:7f:86:7e:1e:01:de:f4:67: ea:a6:a8:9c:61:25:bc:e4:a0:f4:10:61:8d:b3:46:0c:8b:a1: a0:05:ae:d8:0a:32:6c:e1:a8:0b:a0:fe:68:23:af:74:da:d5: bb:35:c5:ba:7d:30:39:82:3d:49:c4:a2:cb:bd:db:fe:8c:9b: 70:3f:ed:09:bd:d6:2d:5b:50:d1:8e:66:10:d4:2e:de:02:f0: 68:a0:4c:29:3a:7e:6b:71:8d:25:65:7c:5c:47:8d:9c:57:e1: 15:20:8c:b3:47:f2:d4:cd:07:d3:43:fb:4a:31:92:13:59:4f: e0:38:54:1c:12:e7:2c:4d:67:b0:71:ca:c6:ee:63:02:d3:2c: 1d:f7:e6:6e:4e:03:cb:7e:57:1b:ce:e3:f3:d0:2d:b2:83:ec: f3:d5:8b:a4:4d:3d:cb:7e:7b:9b:74:90:cf:ae:11:a4:8a:80: 4e:80:24:d4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTqZUlZley2ihKPkfb5uZxmIP7oAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MTYzMjEwWhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0BmYzgxMmYyNGI0OGM4OWIzMjU3ZmIxMTMxNjRlZjhkNjE4 MmU1YmE4MDgyOTk5OWJlMDA4MjRkMzM4MTc5MjQ4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxWS0HVnxtsVP2gyFJOLbjgMxCg09v62XuoM76tOhx0Z44 iQL7Uetg039IVYAT6TfGhzy3+FaVEt3eDjSKinJIsf+opg6pViZyZjCX9u5HeuzP xfYUlcN9T/ft8Kq28sjQJJLZHs6YdYxZM2kHD1xpwbbf0i9+43WHjyP+OvhYEmjk 6S6VtloDnLIFtFJSpNAGDZA1lrSmWEbvW/q3satZxgYaxPhxdDl4WOwDu9OHPBxj cekmi1SPaxoFvlN8YGRjGPCZ/D7repvy6PocySv0BNIBkQtesQOVR59Mu/vupvJD gJvytsqmZ75ozKplh5z/WLzBQBF7UL+euyyFlxGDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU1W7/ZWDARWKi6WL40fjuNmZPyCwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQ4NzIzMTc3LTkzZjgtNDA1OC1iNjUyLTQ0OTQ1Zjg1MmVjZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMSIugwDQYJKoZIhvcNAQELBQADggEBAG4r0tE1q7gSRJX1E6KOghPSKYQy QXpJUMbDoggPNa6SAxbIs2rXGwaZVMbqPtLMs6i3w/eZ+q62Vft3JzkVHcO44BHx J7kwRDTpiGW22lv0hWF/hn4eAd70Z+qmqJxhJbzkoPQQYY2zRgyLoaAFrtgKMmzh qAug/mgjr3Ta1bs1xbp9MDmCPUnEosu92/6Mm3A/7Qm91i1bUNGOZhDULt4C8Gig TCk6fmtxjSVlfFxHjZxX4RUgjLNH8tTNB9ND+0oxkhNZT+A4VBwS5yxNZ7Bxysbu YwLTLB335m5OA8t+VxvO4/PQLbKD7PPVi6RNPct+e5t0kM+uEaSKgE6AJNQ= -----END CERTIFICATE-----Generated at Sat Oct 18 18:04:53 2025 by rpki-client