$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4e918bca-77b0-49e0-bf9f-a2447b1f45d6.roa File: 4e918bca-77b0-49e0-bf9f-a2447b1f45d6.roa (raw, json) Hash identifier: fmCPa0F5as8Wvf8ZCKAAIzbXFlXNeSIgkVke2P9am3w= Subject key identifier: B0:06:73:B7:43:56:4D:0B:27:6F:52:C5:0C:B7:81:87:87:BC:89:61 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1C07FE14D32E56847F31A2314D15E558C89A158A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4e918bca-77b0-49e0-bf9f-a2447b1f45d6.roa Signing time: Mon 22 Sep 2025 23:21:55 +0000 ROA not before: Mon 22 Sep 2025 23:21:55 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.244.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:07:fe:14:d3:2e:56:84:7f:31:a2:31:4d:15:e5:58:c8:9a:15:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 23:21:55 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=01de1afe75151c27f899e1ab3c4ae187987f1b52c7155b11832b6aa9236641cb, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e2:22:c6:30:9b:84:11:12:fe:72:71:8c:d5: e4:61:07:3e:df:1a:69:4f:6b:69:b5:f8:31:98:36: 2c:c1:e0:09:b9:b4:8d:6a:81:fe:9e:af:e8:1d:f5: 89:cc:77:ab:88:9b:58:46:33:a7:10:9e:45:1c:2c: 9a:ab:22:a4:0d:c6:b1:ac:44:8e:87:41:d5:9b:f2: 47:a6:4f:48:05:07:0e:37:29:39:52:cc:17:a8:7a: ca:81:b3:4c:d7:98:f2:a1:b6:79:1a:d0:e4:84:d8: bc:21:d5:d5:f0:8d:af:60:2a:e5:a4:16:97:21:ee: 64:7c:f9:22:60:51:67:7d:80:30:a7:6d:4e:26:52: fa:f9:a5:fb:a7:20:fd:3b:97:ef:d4:14:cd:01:f1: 42:95:8b:77:a8:4d:97:66:4d:bd:be:10:9c:22:e7: be:dc:aa:3e:5a:23:aa:78:b1:e1:b0:aa:fe:db:ab: e3:50:b1:ab:67:c5:6b:e8:ed:22:6c:e4:16:25:0e: a5:a3:74:67:a9:1d:e4:4c:51:44:10:ef:69:81:35: 42:08:3d:2f:4b:ee:3e:a6:8e:c6:b1:42:a1:7f:af: 87:c9:b6:a9:68:90:d6:61:e3:62:64:97:4d:4e:a7: c8:dc:6a:a0:30:eb:f5:aa:d0:79:8c:b2:4a:f5:20: 2c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:06:73:B7:43:56:4D:0B:27:6F:52:C5:0C:B7:81:87:87:BC:89:61 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4e918bca-77b0-49e0-bf9f-a2447b1f45d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.244.16.0/22 Signature Algorithm: sha256WithRSAEncryption 9d:85:52:ce:41:a5:9d:d5:e7:71:90:f8:ff:2d:b5:ce:ee:4f: 02:72:84:b6:c6:6b:27:6a:7c:7f:8b:f1:a3:e6:4b:32:37:67: 2a:d8:9c:fa:aa:0a:e9:42:16:0e:98:16:24:ab:1c:c3:bf:05: 48:32:c3:27:a9:a2:d8:ea:0c:07:29:a2:cd:68:4b:1d:ea:ed: 59:d0:a4:2b:d1:9d:b7:55:65:4b:e5:9d:b9:0c:1c:e9:d7:e7: 7d:59:a8:9a:c2:c5:d8:94:2f:29:ac:25:fd:22:2f:8d:60:39: 96:b4:7f:c5:94:71:7f:c8:ef:59:9b:41:ea:a3:dd:23:90:3c: 03:5d:9e:7d:1d:77:16:2d:e3:bb:8c:59:81:62:79:c0:5e:2a: 47:0b:22:d9:6c:02:3b:55:e6:d4:7f:30:7c:02:63:85:dd:86: 46:13:25:70:f0:bb:99:15:29:20:01:16:29:85:a9:06:c7:e8: f1:03:e0:67:04:09:6f:72:b2:18:0a:a5:7c:9f:22:b5:76:22: d7:3a:bd:76:e1:f6:b2:ec:16:21:7c:a4:a9:63:64:8a:3a:d9: 4d:54:99:d2:63:b0:6e:ba:2c:66:59:1b:1d:32:20:6f:0a:69: f2:1f:1a:d8:d4:01:59:ed:2b:e8:f4:b6:48:f8:0a:ff:9c:32: 68:9d:48:c8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHAf+FNMuVoR/MaIxTRXlWMiaFYowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjMyMTU1WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AwMWRlMWFmZTc1MTUxYzI3Zjg5OWUxYWIzYzRhZTE4Nzk4 N2YxYjUyYzcxNTViMTE4MzJiNmFhOTIzNjY0MWNiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDI4iLGMJuEERL+cnGM1eRhBz7fGmlPa2m1+DGYNizB4Am5 tI1qgf6er+gd9YnMd6uIm1hGM6cQnkUcLJqrIqQNxrGsRI6HQdWb8kemT0gFBw43 KTlSzBeoesqBs0zXmPKhtnka0OSE2Lwh1dXwja9gKuWkFpch7mR8+SJgUWd9gDCn bU4mUvr5pfunIP07l+/UFM0B8UKVi3eoTZdmTb2+EJwi577cqj5aI6p4seGwqv7b q+NQsatnxWvo7SJs5BYlDqWjdGepHeRMUUQQ72mBNUIIPS9L7j6mjsaxQqF/r4fJ tqlokNZh42Jkl01Op8jcaqAw6/Wq0HmMskr1ICwNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUsAZzt0NWTQsnb1LFDLeBh4e8iWEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzRlOTE4YmNhLTc3YjAtNDllMC1iZjlmLWEyNDQ3YjFmNDVkNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIS9BAwDQYJKoZIhvcNAQELBQADggEBAJ2FUs5BpZ3V53GQ+P8ttc7uTwJy hLbGaydqfH+L8aPmSzI3ZyrYnPqqCulCFg6YFiSrHMO/BUgywyepotjqDAcpos1o Sx3q7VnQpCvRnbdVZUvlnbkMHOnX531ZqJrCxdiULymsJf0iL41gOZa0f8WUcX/I 71mbQeqj3SOQPANdnn0ddxYt47uMWYFiecBeKkcLItlsAjtV5tR/MHwCY4XdhkYT JXDwu5kVKSABFimFqQbH6PED4GcECW9yshgKpXyfIrV2Itc6vXbh9rLsFiF8pKlj ZIo62U1UmdJjsG66LGZZGx0yIG8KafIfGtjUAVntK+j0tkj4Cv+cMmidSMg= -----END CERTIFICATE-----Generated at Fri Oct 17 23:58:15 2025 by rpki-client