$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/724fab07-5159-4dbd-b53c-97c6d3273583.roa File: 724fab07-5159-4dbd-b53c-97c6d3273583.roa (raw, json) Hash identifier: 2p+ziMU4I43BlXERYwirf+lBjC0F0jiKU4yu1KGgdFk= Subject key identifier: 2B:E0:DD:47:83:89:12:01:4D:45:24:7B:C0:A8:DA:A4:FC:AF:0C:C6 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1B397BA783423DCDE5D4A78FD3420BED881D25 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/724fab07-5159-4dbd-b53c-97c6d3273583.roa Signing time: Wed 24 Sep 2025 21:12:15 +0000 ROA not before: Wed 24 Sep 2025 21:12:15 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.64.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:39:7b:a7:83:42:3d:cd:e5:d4:a7:8f:d3:42:0b:ed:88:1d:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 21:12:15 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=a30cac6e61cbdcc0811b5e86e435504056bb7c7398bbabf6beb1f201ca09b096, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5b:6b:23:67:9e:2c:e7:ba:a7:f2:e0:da:d7: 3c:f8:29:c3:96:85:70:e1:e6:17:dd:92:14:b0:e1: eb:54:cf:b0:a2:19:bb:ed:8b:54:b3:66:1b:28:db: bc:5d:e1:92:03:e7:2e:0e:5c:0c:c8:cc:9c:ed:2f: 1d:17:19:c3:62:c9:f1:2f:81:24:56:83:35:ca:6c: 35:8f:ff:f1:a2:a3:b5:64:df:c1:4c:5f:c1:a8:6d: a7:8c:05:3f:c5:22:1c:25:ad:1d:8e:df:46:62:d4: 36:49:09:e8:8c:ba:26:2c:dc:1d:b5:ad:2d:fd:99: 6c:be:16:dc:34:f2:c8:77:87:36:ba:5f:0d:2c:b7: 5e:f9:fa:63:f9:93:78:aa:fb:fe:e4:e3:ec:a3:e7: 0c:b5:11:0e:0a:f9:f8:8e:e1:20:59:f9:a0:ae:3d: f9:ce:78:51:09:b4:16:74:5e:93:66:3d:00:ef:4c: 56:5d:11:44:d4:1a:a3:2b:85:fa:12:cf:04:c4:bc: 51:08:52:d8:06:db:8f:e2:fd:87:32:36:ad:7c:b1: 70:d5:d3:1b:88:b1:e3:ba:ad:db:fc:55:e0:a2:17: ce:4a:27:fc:b0:4d:a0:ab:26:da:e8:83:f8:30:cf: 07:fb:df:15:9f:41:94:28:ef:c5:9a:b2:58:90:fe: 7b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:E0:DD:47:83:89:12:01:4D:45:24:7B:C0:A8:DA:A4:FC:AF:0C:C6 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/724fab07-5159-4dbd-b53c-97c6d3273583.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.64.179.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:df:f3:37:6a:0d:51:18:cc:c1:b5:b6:bf:9c:f2:87:33:32: 2d:25:a6:01:56:21:18:0e:a7:2b:3c:a7:a9:79:f2:6d:97:bb: ae:67:09:be:fd:50:71:45:aa:e2:7f:d4:cb:4d:0d:c2:3c:04: e4:3e:d7:75:0e:82:e4:be:12:ac:ec:b5:36:4d:ee:fd:08:f5: a5:fe:4a:f3:64:64:46:7d:93:5b:4f:18:fc:26:72:8b:f1:cc: f1:0b:b1:85:73:c1:e1:e4:2d:c6:ad:8b:66:19:d1:e9:cf:92: 7b:d6:a5:f1:6f:b1:81:28:9b:cd:9a:8c:9b:d7:77:0c:e8:69: 90:50:50:cf:04:6f:2c:5e:4b:58:78:82:06:36:da:e9:ef:e7: d3:96:2e:d5:cd:a5:6c:32:d2:16:83:88:43:d7:73:b2:b0:95: 39:7c:3b:5a:18:6a:76:26:a3:2c:a7:9c:f4:7c:1b:27:d9:4c: c3:34:3a:1e:5e:e3:7b:c0:85:e3:3d:5f:db:fe:9e:e5:2c:20: f2:99:68:37:55:fd:c4:b1:5a:30:e9:df:86:22:ef:3b:89:57: 13:63:8c:cf:15:2c:e0:3f:15:51:d3:d1:51:af:c3:ad:27:cd: 1c:ac:a6:92:e4:8e:ce:ca:95:74:88:6b:73:c5:69:6e:4c:a8: b7:61:3a:f8 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITGzl7p4NCPc3l1KeP00IL7YgdJTANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzJkZjZmM2IzYTM0YjYzODZkMWEzMmQ4ZjRmYTMxNzhlZjMx ODg3ZDhiNDI4ZGZhYTQ3NjAeFw0yNTA5MjQyMTEyMTVaFw0yNTEwMjkyMzU5NTla MHoxSTBHBgNVBAUTQGEzMGNhYzZlNjFjYmRjYzA4MTFiNWU4NmU0MzU1MDQwNTZi YjdjNzM5OGJiYWJmNmJlYjFmMjAxY2EwOWIwOTYxLTArBgNVBAMTJDVmMjc2MDQ1 LTViOWYtNDVlZi05MjNkLWYzZmNlMjRhNjIyNTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAK5bayNnniznuqfy4NrXPPgpw5aFcOHmF92SFLDh61TPsKIZ u+2LVLNmGyjbvF3hkgPnLg5cDMjMnO0vHRcZw2LJ8S+BJFaDNcpsNY//8aKjtWTf wUxfwahtp4wFP8UiHCWtHY7fRmLUNkkJ6Iy6JizcHbWtLf2ZbL4W3DTyyHeHNrpf DSy3Xvn6Y/mTeKr7/uTj7KPnDLURDgr5+I7hIFn5oK49+c54UQm0FnRek2Y9AO9M Vl0RRNQaoyuF+hLPBMS8UQhS2Abbj+L9hzI2rXyxcNXTG4ix47qt2/xV4KIXzkon /LBNoKsm2uiD+DDPB/vfFZ9BlCjvxZqyWJD+ex8CAwEAAaOCArEwggKtMB0GA1Ud DgQWBBQr4N1Hg4kSAU1FJHvAqNqk/K8MxjAfBgNVHSMEGDAWgBQlrdNCsB63pY6t GZAmiLVLP4H0uDAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzg1MWNlZjE3LTEz MmEtNDMzNy1iN2QxLWJmMTZhNTJmZmQwMy9kZjZmM2IzYTM0YjYzODZkMWEzMmQ4 ZjRmYTMxNzhlZjMxODg3ZDhiNDI4ZGZhYTQ3Ni5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9mNzAzNjk2ZS1lNDdiLTRjMjAtYmQ5My02Zjgw OTA0ZTQyZDIvNzI0ZmFiMDctNTE1OS00ZGJkLWI1M2MtOTdjNmQzMjczNTgzLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMt NmY4MDkwNGU0MmQyL3RqaHRHakxZOVBveGVPOHhpSDJMUW8zNnBIWS5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEABJAszANBgkqhkiG9w0BAQsFAAOCAQEAP9/zN2oNURjMwbW2v5zyhzMyLSWm AVYhGA6nKzynqXnybZe7rmcJvv1QcUWq4n/Uy00NwjwE5D7XdQ6C5L4SrOy1Nk3u /Qj1pf5K82RkRn2TW08Y/CZyi/HM8QuxhXPB4eQtxq2LZhnR6c+Se9al8W+xgSib zZqMm9d3DOhpkFBQzwRvLF5LWHiCBjba6e/n05Yu1c2lbDLSFoOIQ9dzsrCVOXw7 WhhqdiajLKec9HwbJ9lMwzQ6Hl7je8CF4z1f2/6e5Swg8ploN1X9xLFaMOnfhiLv O4lXE2OMzxUs4D8VUdPRUa/DrSfNHKymkuSOzsqVdIhrc8Vpbkyot2E6+A== -----END CERTIFICATE-----Generated at Fri Oct 17 23:46:31 2025 by rpki-client