$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/67ff4ddb-311f-424d-9729-c5ccbcd7e9a6.roa File: 67ff4ddb-311f-424d-9729-c5ccbcd7e9a6.roa (raw, json) Hash identifier: /urgqvFhhRap1YZtJH/b5KeQkLiiIieFPMJvdrauH4k= Subject key identifier: 89:FF:D8:9C:0A:27:C6:BE:82:00:93:1E:9A:96:EC:8C:5F:AB:BE:EE Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7D0EA29BC3AB17C74D4FFCB84840832C43B8BCA3 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/67ff4ddb-311f-424d-9729-c5ccbcd7e9a6.roa Signing time: Mon 22 Sep 2025 23:28:26 +0000 ROA not before: Mon 22 Sep 2025 23:28:26 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.244.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:0e:a2:9b:c3:ab:17:c7:4d:4f:fc:b8:48:40:83:2c:43:b8:bc:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 23:28:26 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=e9102439ecbdf0b8ab80f3b8d9ff6b35da6d3fa6bcabca3f42fd4ce24fa7a621, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:21:05:74:87:18:5c:d6:7e:a2:76:a8:a1:7a: 9d:04:e6:fc:15:34:07:b5:51:eb:04:a6:7c:40:46: fa:f9:80:f1:31:e4:8b:ea:01:a9:a8:1f:ad:85:12: 9c:33:e2:75:8f:1f:b4:ab:6f:82:03:42:7b:c0:5a: 7d:ec:30:59:76:d0:80:7f:d1:73:c8:3d:0f:18:e3: 87:1c:59:aa:e7:c5:a1:e3:9b:e9:a0:93:9e:cf:e3: 78:0e:de:6a:ba:5d:36:8d:37:3a:0e:51:d2:31:d7: 2d:3c:77:4a:32:89:82:1b:73:d4:9a:da:e1:45:e7: b4:69:bc:00:b7:76:cc:54:f2:84:0a:2e:2f:01:3f: f3:e4:60:4c:49:3c:c1:c0:ba:25:f2:75:7f:4b:2d: 02:43:29:2e:ed:fc:b0:0f:d4:a0:30:cc:a8:ca:3e: 66:c2:5c:3c:22:cc:73:b3:c8:5c:50:19:7c:e7:c2: 32:6b:0b:e8:40:88:c1:12:f5:41:e3:05:89:ce:be: db:80:a9:48:bd:d0:79:b1:28:85:f8:97:38:45:ef: 41:f3:e2:06:cd:7b:10:a4:b2:6c:14:47:ef:27:55: 5a:ea:53:b2:1c:21:5b:7f:57:41:91:df:c7:4b:90: 06:a8:32:9e:99:19:35:4e:26:6c:ee:b0:a2:e8:53: 15:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:FF:D8:9C:0A:27:C6:BE:82:00:93:1E:9A:96:EC:8C:5F:AB:BE:EE X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/67ff4ddb-311f-424d-9729-c5ccbcd7e9a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.244.40.0/21 Signature Algorithm: sha256WithRSAEncryption 97:b4:ba:2d:73:85:2f:eb:da:9d:95:3a:fa:7f:be:32:6f:6d: 6a:86:57:09:1b:25:b2:b3:05:be:45:44:08:b8:23:96:12:9f: 37:a4:5b:52:a6:5e:9c:4f:31:e1:83:14:90:71:c5:63:51:48: 7d:08:f7:39:0a:45:a8:9e:ee:c6:e0:d0:94:c3:b1:09:fe:e7: 00:a2:7e:2d:87:a4:83:ef:32:a5:1b:c0:12:ef:da:da:22:d3: 41:eb:4e:5d:c0:60:e9:6a:e8:1e:f2:e9:7d:42:36:48:07:08: 14:cd:1f:64:79:76:a8:12:0f:eb:1b:e8:fa:31:46:ae:58:fd: d2:d5:c8:f7:d4:45:54:f9:b7:b2:28:77:e6:ed:c9:36:c1:0c: bf:85:46:32:f6:9d:61:b7:80:d5:03:62:82:db:9d:f1:9f:d6: 8f:45:79:69:9e:26:fd:3c:00:30:43:f3:78:4d:cb:ff:15:a3: ac:a9:21:c2:59:82:4e:d2:0f:2c:e4:54:39:c0:3f:6c:b4:bf: 17:8d:1f:e2:3c:0f:a1:e4:4b:ee:d1:75:8e:57:19:ef:db:7a: 1d:c5:56:16:88:7c:e6:e3:70:27:3b:c7:c2:f5:6a:ae:e1:38: d9:8a:3e:b0:9a:11:10:81:a5:58:51:b7:c6:8b:7a:86:7c:07: 68:20:7b:e3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfQ6im8OrF8dNT/y4SECDLEO4vKMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjMyODI2WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BlOTEwMjQzOWVjYmRmMGI4YWI4MGYzYjhkOWZmNmIzNWRh NmQzZmE2YmNhYmNhM2Y0MmZkNGNlMjRmYTdhNjIxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNIQV0hxhc1n6idqihep0E5vwVNAe1UesEpnxARvr5gPEx 5IvqAamoH62FEpwz4nWPH7Srb4IDQnvAWn3sMFl20IB/0XPIPQ8Y44ccWarnxaHj m+mgk57P43gO3mq6XTaNNzoOUdIx1y08d0oyiYIbc9Sa2uFF57RpvAC3dsxU8oQK Li8BP/PkYExJPMHAuiXydX9LLQJDKS7t/LAP1KAwzKjKPmbCXDwizHOzyFxQGXzn wjJrC+hAiMES9UHjBYnOvtuAqUi90HmxKIX4lzhF70Hz4gbNexCksmwUR+8nVVrq U7IcIVt/V0GR38dLkAaoMp6ZGTVOJmzusKLoUxXLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUif/YnAonxr6CAJMempbsjF+rvu4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzY3ZmY0ZGRiLTMxMWYtNDI0ZC05NzI5LWM1Y2NiY2Q3ZTlhNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMS9CgwDQYJKoZIhvcNAQELBQADggEBAJe0ui1zhS/r2p2VOvp/vjJvbWqG VwkbJbKzBb5FRAi4I5YSnzekW1KmXpxPMeGDFJBxxWNRSH0I9zkKRaie7sbg0JTD sQn+5wCifi2HpIPvMqUbwBLv2toi00HrTl3AYOlq6B7y6X1CNkgHCBTNH2R5dqgS D+sb6PoxRq5Y/dLVyPfURVT5t7Iod+btyTbBDL+FRjL2nWG3gNUDYoLbnfGf1o9F eWmeJv08ADBD83hNy/8Vo6ypIcJZgk7SDyzkVDnAP2y0vxeNH+I8D6HkS+7RdY5X Ge/beh3FVhaIfObjcCc7x8L1aq7hONmKPrCaERCBpVhRt8aLeoZ8B2gge+M= -----END CERTIFICATE-----Generated at Fri Oct 17 21:57:38 2025 by rpki-client