$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/696af19e-cf51-4bc5-8a70-1d7a5bbd6bea.roa File: 696af19e-cf51-4bc5-8a70-1d7a5bbd6bea.roa (raw, json) Hash identifier: saVOY8cYPWZA4MCBRhiXcjO9BklxjehvbpGBK9uKkZI= Subject key identifier: 45:F5:A3:3C:0F:9E:37:8A:56:A8:C0:4A:E3:86:F0:08:BE:88:79:CF Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4F505A09719911D8F16C7B3DFDA2D99E99B4246C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/696af19e-cf51-4bc5-8a70-1d7a5bbd6bea.roa Signing time: Mon 22 Sep 2025 22:08:43 +0000 ROA not before: Mon 22 Sep 2025 22:08:43 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.239.130.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:50:5a:09:71:99:11:d8:f1:6c:7b:3d:fd:a2:d9:9e:99:b4:24:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 22:08:43 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=0dec1e77e770876a7b85e0e6ece28c7fe354daed3f266e0deb7c5c245a2917aa, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d0:a3:25:7a:e5:26:84:2f:5b:0f:a4:32:81: d1:c1:67:38:11:e3:a1:af:63:ae:23:d9:8b:6d:a9: 78:e9:65:d2:63:0b:44:51:25:04:74:07:57:4e:10: 27:2e:f2:64:3a:75:40:a1:d8:76:e9:6a:b0:60:6a: 23:8f:73:00:ea:03:03:25:85:e1:66:b1:8b:50:7b: 5b:32:b5:9d:4c:2f:93:00:00:57:92:f3:08:d3:24: a9:80:a2:ba:b2:67:04:47:66:60:47:e0:3d:94:a8: a8:34:29:e8:33:57:11:c5:42:4f:09:25:f5:81:8f: 09:ec:17:78:21:fa:da:20:d5:4b:7a:3f:cb:d5:f1: d0:07:8f:9c:dd:1a:3a:d1:e1:98:cd:c8:a3:20:9f: e7:b9:5c:03:70:64:12:2c:6d:8d:a2:ce:52:cc:bf: c6:52:d2:71:7f:4d:f7:74:98:f6:57:07:b7:70:9d: 80:5d:dd:a4:f1:64:cf:15:a8:36:7d:16:44:ba:75: f4:76:21:6f:fd:db:6f:39:c8:e0:19:ae:98:4b:31: 0a:e6:1c:d4:a7:b3:d6:a9:7e:6a:05:5d:7e:1e:62: 59:0b:2e:de:e2:bd:a2:04:45:f2:05:74:35:d1:9a: 78:9e:b0:0e:8e:81:15:80:54:cc:36:d1:b0:1d:f7: 2e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:F5:A3:3C:0F:9E:37:8A:56:A8:C0:4A:E3:86:F0:08:BE:88:79:CF X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/696af19e-cf51-4bc5-8a70-1d7a5bbd6bea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.239.130.0/23 Signature Algorithm: sha256WithRSAEncryption a4:92:7d:ac:e3:09:bc:9a:4f:f0:5b:c8:9b:8e:57:49:e9:3c: 64:e8:0b:5e:98:a4:71:84:87:69:97:c9:3b:21:49:47:ec:c5: 8c:d3:da:46:1f:e5:bc:86:a7:93:17:50:5c:cf:ee:9e:f6:ba: 48:93:4f:ef:f4:3e:d5:4c:eb:ee:e3:05:7a:62:5c:90:7d:c1: 41:89:44:c0:b8:6f:dd:ab:d0:88:8a:f3:16:d5:ac:3a:f9:18: 2e:6d:74:16:2d:88:78:90:8c:53:ef:49:3e:ff:29:04:41:1a: 2d:74:1e:ef:f5:42:43:ff:33:19:22:af:0b:c3:85:49:c7:ab: 8b:d1:dc:c4:b2:62:2e:01:a0:94:ac:b2:12:29:34:d8:10:20: 48:2d:c9:c9:13:36:99:eb:ee:82:a6:c2:ae:90:bd:ca:7f:89: d0:e9:6d:3b:ed:98:f2:23:56:b8:49:57:1d:6f:7d:62:ef:27: 87:05:c8:9c:24:62:db:84:73:2b:6d:b5:a0:92:c1:a2:68:5c: 54:bc:a1:f1:57:aa:e9:46:b1:12:3c:53:f2:24:e9:95:73:f1: f8:38:a0:02:1f:d7:f4:c9:ab:1a:e4:34:6c:e5:1f:a1:9d:a1: 32:05:a6:70:0b:1e:38:be:31:8d:6f:19:25:2d:1e:8a:54:4d: 2f:ef:5c:94 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUT1BaCXGZEdjxbHs9/aLZnpm0JGwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjIwODQzWhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AwZGVjMWU3N2U3NzA4NzZhN2I4NWUwZTZlY2UyOGM3ZmUz NTRkYWVkM2YyNjZlMGRlYjdjNWMyNDVhMjkxN2FhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC10KMleuUmhC9bD6QygdHBZzgR46GvY64j2YttqXjpZdJj C0RRJQR0B1dOECcu8mQ6dUCh2HbparBgaiOPcwDqAwMlheFmsYtQe1sytZ1ML5MA AFeS8wjTJKmAorqyZwRHZmBH4D2UqKg0KegzVxHFQk8JJfWBjwnsF3gh+tog1Ut6 P8vV8dAHj5zdGjrR4ZjNyKMgn+e5XANwZBIsbY2izlLMv8ZS0nF/Tfd0mPZXB7dw nYBd3aTxZM8VqDZ9FkS6dfR2IW/92285yOAZrphLMQrmHNSns9apfmoFXX4eYlkL Lt7ivaIERfIFdDXRmniesA6OgRWAVMw20bAd9y7rAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQURfWjPA+eN4pWqMBK44bwCL6Iec8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzY5NmFmMTllLWNmNTEtNGJjNS04YTcwLTFkN2E1YmJkNmJlYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAES74IwDQYJKoZIhvcNAQELBQADggEBAKSSfazjCbyaT/BbyJuOV0npPGTo C16YpHGEh2mXyTshSUfsxYzT2kYf5byGp5MXUFzP7p72ukiTT+/0PtVM6+7jBXpi XJB9wUGJRMC4b92r0IiK8xbVrDr5GC5tdBYtiHiQjFPvST7/KQRBGi10Hu/1QkP/ MxkirwvDhUnHq4vR3MSyYi4BoJSsshIpNNgQIEgtyckTNpnr7oKmwq6Qvcp/idDp bTvtmPIjVrhJVx1vfWLvJ4cFyJwkYtuEcytttaCSwaJoXFS8ofFXqulGsRI8U/Ik 6ZVz8fg4oAIf1/TJqxrkNGzlH6GdoTIFpnALHji+MY1vGSUtHopUTS/vXJQ= -----END CERTIFICATE-----Generated at Fri Oct 17 23:48:31 2025 by rpki-client