$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/68272771-ffab-4d58-ad86-be534a977621.roa File: 68272771-ffab-4d58-ad86-be534a977621.roa (raw, json) Hash identifier: eHO4BaWhfLm9IZBiwAZd8yDnXJHE3Y4LuuAR2tx3njw= Subject key identifier: DB:00:70:28:BB:FE:E2:2D:BC:86:17:ED:A2:75:FF:91:A9:0E:EF:15 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6C36BF2D7305A8D89FA3FE0A20EB15DFF61E9C51 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/68272771-ffab-4d58-ad86-be534a977621.roa Signing time: Mon 22 Sep 2025 19:56:08 +0000 ROA not before: Mon 22 Sep 2025 19:56:08 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.164.52.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:36:bf:2d:73:05:a8:d8:9f:a3:fe:0a:20:eb:15:df:f6:1e:9c:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 19:56:08 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=0729f52c037434a6f1c05a186496fe41e89b14eef41d09bace653b015f4f4210, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:20:6c:1c:6a:6e:64:19:b0:0f:1a:99:d2:9c: 74:44:fd:7e:19:63:59:62:31:f8:35:7b:38:fa:c4: 50:9a:00:f4:53:d4:fa:7f:58:96:05:58:c4:68:f1: 07:62:72:6e:ab:f0:aa:09:57:3d:cf:dc:74:d0:94: fe:71:c4:d9:75:b4:39:7e:0a:ad:87:8f:dc:32:02: 3f:db:75:d2:76:9d:56:60:2b:d7:b0:9f:ea:97:f5: 7a:bd:3a:89:ea:98:19:94:ad:6f:28:af:29:a3:6f: 75:70:ec:2f:4d:ba:39:dc:99:40:47:76:11:4c:af: 65:d1:ff:53:eb:c4:36:02:5c:50:c9:bf:ed:13:63: e7:ec:55:c2:89:20:21:72:da:c6:9d:38:53:a3:7e: 0f:a6:3b:8b:6c:d5:e2:9a:06:70:7c:ed:fe:bf:06: 91:1e:c5:45:a9:7d:e3:81:56:b7:e9:0c:8b:cf:17: 06:43:dc:7a:a4:79:c3:cf:dd:6d:0b:47:77:4d:95: cd:f0:d5:ef:26:cf:a0:ae:f2:71:f5:27:2d:79:45: 98:41:e7:90:37:20:ea:c8:e7:98:81:0b:69:99:eb: c7:91:00:ab:9f:9a:e4:32:67:9f:8c:8b:79:ea:b0: cc:74:ba:72:1a:ee:cd:60:62:00:db:69:f7:b5:67: e3:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:00:70:28:BB:FE:E2:2D:BC:86:17:ED:A2:75:FF:91:A9:0E:EF:15 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/68272771-ffab-4d58-ad86-be534a977621.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.164.52.0/23 Signature Algorithm: sha256WithRSAEncryption 4a:49:ce:7c:6e:00:ac:94:ce:1d:9c:9c:a5:69:76:d6:cf:29: 74:63:d4:c5:36:4c:43:d7:fb:df:93:84:58:48:7f:54:da:fb: 8d:7e:8b:32:99:99:09:ab:8c:f6:0c:af:8f:47:86:ab:b4:e7: 09:ff:25:d9:44:82:2b:30:36:4e:64:d0:3a:ed:95:24:09:8b: bc:fa:73:e7:43:a9:d9:b1:36:7d:74:1a:35:74:a2:ca:22:d9: ec:6d:79:92:7f:cd:ec:ab:a8:88:1c:70:e9:33:99:17:7b:6e: 84:e2:f0:e7:38:1f:06:f8:c3:34:f8:f5:c3:1e:8d:83:f3:2a: 09:b4:e9:43:e9:e5:d4:ed:07:d1:0d:83:a8:4b:bf:32:eb:5c: cf:b2:5d:0f:64:a8:95:6b:fe:2c:55:5b:50:bb:45:28:3c:d4: 7c:06:02:24:85:a6:23:33:7c:d2:f4:c1:40:8a:69:52:0f:1f: 3b:91:a3:61:c5:11:f1:50:09:38:ff:97:04:0d:fc:5a:4a:6e: 15:f7:bb:96:8a:24:45:a8:f2:09:41:71:44:a9:bd:2c:3e:5f: 5e:14:62:4e:1a:36:4e:b2:1b:3c:2c:4f:5a:e5:66:f5:38:eb: db:38:ac:15:49:9d:ea:4a:0b:66:71:38:e1:0e:cc:1c:04:13: f2:89:21:9f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbDa/LXMFqNifo/4KIOsV3/YenFEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMTk1NjA4WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AwNzI5ZjUyYzAzNzQzNGE2ZjFjMDVhMTg2NDk2ZmU0MWU4 OWIxNGVlZjQxZDA5YmFjZTY1M2IwMTVmNGY0MjEwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNIGwcam5kGbAPGpnSnHRE/X4ZY1liMfg1ezj6xFCaAPRT 1Pp/WJYFWMRo8Qdicm6r8KoJVz3P3HTQlP5xxNl1tDl+Cq2Hj9wyAj/bddJ2nVZg K9ewn+qX9Xq9OonqmBmUrW8orymjb3Vw7C9NujncmUBHdhFMr2XR/1PrxDYCXFDJ v+0TY+fsVcKJICFy2sadOFOjfg+mO4ts1eKaBnB87f6/BpEexUWpfeOBVrfpDIvP FwZD3HqkecPP3W0LR3dNlc3w1e8mz6Cu8nH1Jy15RZhB55A3IOrI55iBC2mZ68eR AKufmuQyZ5+Mi3nqsMx0unIa7s1gYgDbafe1Z+MrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU2wBwKLv+4i28hhftonX/kakO7xUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzY4MjcyNzcxLWZmYWItNGQ1OC1hZDg2LWJlNTM0YTk3NzYyMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESpDQwDQYJKoZIhvcNAQELBQADggEBAEpJznxuAKyUzh2cnKVpdtbPKXRj 1MU2TEPX+9+ThFhIf1Ta+41+izKZmQmrjPYMr49Hhqu05wn/JdlEgiswNk5k0Drt lSQJi7z6c+dDqdmxNn10GjV0osoi2exteZJ/zeyrqIgccOkzmRd7boTi8Oc4Hwb4 wzT49cMejYPzKgm06UPp5dTtB9ENg6hLvzLrXM+yXQ9kqJVr/ixVW1C7RSg81HwG AiSFpiMzfNL0wUCKaVIPHzuRo2HFEfFQCTj/lwQN/FpKbhX3u5aKJEWo8glBcUSp vSw+X14UYk4aNk6yGzwsT1rlZvU469s4rBVJnepKC2ZxOOEOzBwEE/KJIZ8= -----END CERTIFICATE-----Generated at Fri Oct 17 22:04:51 2025 by rpki-client