$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7fee9779-1f4d-4a75-af48-fdec6243073f.roa File: 7fee9779-1f4d-4a75-af48-fdec6243073f.roa (raw, json) Hash identifier: FoglGdvJHm3NMrhB/SIHrd27EJX2E4WkgFe719ppQJw= Subject key identifier: BF:60:CD:A8:68:F7:36:AD:35:A6:09:18:D8:6C:61:D0:20:1D:FB:4E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3F5C8898D74F9992796CD7F73BED35BFE0D7725F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7fee9779-1f4d-4a75-af48-fdec6243073f.roa Signing time: Mon 22 Sep 2025 23:18:03 +0000 ROA not before: Mon 22 Sep 2025 23:18:03 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.245.84.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:5c:88:98:d7:4f:99:92:79:6c:d7:f7:3b:ed:35:bf:e0:d7:72:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 23:18:03 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=35c5e949f559874ce7453514129e138ec0c70c08fc3845d4a4b464dcd0408365, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:cd:69:e8:11:b8:a7:7e:63:bf:82:eb:c2:1d: d7:8c:80:af:91:f8:a0:85:ab:3e:01:9f:46:7b:dc: 56:1d:1d:47:18:5b:18:f9:42:db:31:ff:a8:ec:37: 82:31:ce:76:29:16:a2:b3:4b:ca:28:34:b6:38:14: 1d:5a:40:0c:3b:2a:35:08:d0:ec:b1:11:b7:5a:d4: f4:ef:8c:e7:c2:56:2b:99:81:f9:aa:13:7e:45:4d: 74:c8:82:b6:f9:5e:1d:32:c7:4a:e0:63:bf:8d:24: d6:4b:88:58:39:b6:99:12:97:01:ca:21:ee:44:1d: a5:2e:5c:a1:3e:ff:04:c1:64:fd:7c:9b:d0:27:11: 7c:2d:de:2d:5e:45:de:14:72:4c:18:5b:b2:c4:b4: 5b:ce:1f:16:23:b4:97:e2:ea:28:79:a7:18:fa:16: 87:88:69:80:55:2d:e8:9d:2d:8b:69:7d:64:77:2a: 46:27:87:d9:ea:b6:b2:59:38:78:00:e5:80:58:33: 74:39:8c:03:61:b1:8d:58:2e:b5:54:45:0d:7d:6c: 2f:ba:68:22:55:15:86:98:b2:8c:a5:e4:10:b3:9a: 9b:ad:30:c6:2e:2b:b7:cc:d0:ef:e7:99:28:c4:8c: a8:7a:db:95:ed:8d:df:9b:72:27:7a:4c:a1:4c:11: 38:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:60:CD:A8:68:F7:36:AD:35:A6:09:18:D8:6C:61:D0:20:1D:FB:4E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7fee9779-1f4d-4a75-af48-fdec6243073f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.245.84.0/23 Signature Algorithm: sha256WithRSAEncryption 3b:bc:a3:3b:50:91:df:48:f8:1f:23:18:42:67:c3:7a:eb:12: fd:df:fe:95:8d:d4:b9:1f:4a:28:e9:39:38:95:0b:5d:4f:bd: f8:b4:9f:50:97:76:3b:fd:91:0d:5e:c6:b7:6e:96:8f:0c:d1: 0d:c2:20:6d:5d:24:dd:3c:e1:17:1c:19:e6:80:d8:c3:dd:23: 82:ce:f2:df:09:46:7d:af:9d:e7:b8:eb:02:5e:4c:14:b5:74: ab:5d:47:72:de:54:0d:91:19:31:a7:e1:bf:99:0b:03:2d:97: 75:e6:7e:05:d8:32:6d:96:55:8a:d4:81:58:d2:7f:6d:49:65: 00:f1:41:52:a0:ef:46:cf:11:54:4f:07:17:6b:ff:b4:0f:f6: c2:03:82:c2:eb:e1:46:56:24:ed:73:f3:2f:e3:f8:ad:3c:16: 77:89:4c:6f:4e:e7:82:c0:d7:38:3c:d6:db:c2:d0:48:e4:48: ca:6a:53:9b:5e:e8:ff:2c:c7:f5:4d:1f:e2:26:f1:e1:1d:03: fb:df:17:49:a0:3f:8b:c1:93:c3:44:85:50:f9:e2:d7:b6:44: 01:64:40:b0:6a:de:da:ad:44:47:cb:48:65:a3:55:6b:fa:f7: 3d:3e:b6:d8:e4:4b:7a:29:11:5b:29:ad:17:3e:81:40:dc:d9: 8f:70:c0:a8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUP1yImNdPmZJ5bNf3O+01v+DXcl8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjMxODAzWhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AzNWM1ZTk0OWY1NTk4NzRjZTc0NTM1MTQxMjllMTM4ZWMw YzcwYzA4ZmMzODQ1ZDRhNGI0NjRkY2QwNDA4MzY1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCkzWnoEbinfmO/guvCHdeMgK+R+KCFqz4Bn0Z73FYdHUcY Wxj5Qtsx/6jsN4IxznYpFqKzS8ooNLY4FB1aQAw7KjUI0OyxEbda1PTvjOfCViuZ gfmqE35FTXTIgrb5Xh0yx0rgY7+NJNZLiFg5tpkSlwHKIe5EHaUuXKE+/wTBZP18 m9AnEXwt3i1eRd4UckwYW7LEtFvOHxYjtJfi6ih5pxj6FoeIaYBVLeidLYtpfWR3 KkYnh9nqtrJZOHgA5YBYM3Q5jANhsY1YLrVURQ19bC+6aCJVFYaYsoyl5BCzmput MMYuK7fM0O/nmSjEjKh625Xtjd+bcid6TKFMEThzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUv2DNqGj3Nq01pgkY2Gxh0CAd+04wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzdmZWU5Nzc5LTFmNGQtNGE3NS1hZjQ4LWZkZWM2MjQzMDczZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAES9VQwDQYJKoZIhvcNAQELBQADggEBADu8oztQkd9I+B8jGEJnw3rrEv3f /pWN1LkfSijpOTiVC11Pvfi0n1CXdjv9kQ1exrdulo8M0Q3CIG1dJN084RccGeaA 2MPdI4LO8t8JRn2vnee46wJeTBS1dKtdR3LeVA2RGTGn4b+ZCwMtl3XmfgXYMm2W VYrUgVjSf21JZQDxQVKg70bPEVRPBxdr/7QP9sIDgsLr4UZWJO1z8y/j+K08FneJ TG9O54LA1zg81tvC0EjkSMpqU5te6P8sx/VNH+Im8eEdA/vfF0mgP4vBk8NEhVD5 4te2RAFkQLBq3tqtREfLSGWjVWv69z0+ttjkS3opEVsprRc+gUDc2Y9wwKg= -----END CERTIFICATE-----Generated at Fri Oct 17 22:02:02 2025 by rpki-client