$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/828def39-7470-4f79-936b-ebc232391c9d.roa File: 828def39-7470-4f79-936b-ebc232391c9d.roa (raw, json) Hash identifier: vVT4OZn9spPMjvgSW9BwiIVg1I/+Spy+tkffIFBhxIQ= Subject key identifier: A8:7A:2F:F2:4B:9F:62:A1:DC:C6:D7:DA:50:AF:86:0F:AB:BE:BD:98 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6DB4AB1CEFAE4EE9EB9C88B8B80D5C888EE23D85 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/828def39-7470-4f79-936b-ebc232391c9d.roa Signing time: Mon 22 Sep 2025 19:27:38 +0000 ROA not before: Mon 22 Sep 2025 19:27:38 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.164.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:b4:ab:1c:ef:ae:4e:e9:eb:9c:88:b8:b8:0d:5c:88:8e:e2:3d:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 19:27:38 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=b3d6823b225089498f9a0381dfe19e5e218b1382b761b5499e3a8f5109cbfc9e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:43:25:0d:ae:64:e0:30:33:5a:f6:9f:a6:3e: d2:9e:7c:71:e7:69:b9:90:68:8e:09:ae:22:ea:71: 91:6d:c4:12:bc:ac:03:e8:e7:69:5a:fb:95:c6:9e: 80:fc:53:11:e3:22:55:78:bd:ae:fa:2f:3a:1b:74: f4:67:17:2a:42:a0:8a:ae:3f:24:59:fc:c8:c1:5d: 42:f8:50:7a:19:7d:5b:eb:bd:43:8b:36:3e:38:72: 40:f0:18:df:dd:91:d8:df:4e:41:a7:e2:16:7f:f1: 86:d5:79:39:d3:35:6d:91:5c:93:6f:36:00:27:e7: 38:8a:60:d9:95:50:09:f6:9b:54:2b:d6:3d:b6:e7: 81:4c:6c:0b:6b:b8:e5:ba:60:cf:14:57:8d:65:50: a9:99:c4:1a:46:8a:93:2a:31:80:cc:f1:e6:f5:08: 37:b7:63:83:87:0c:dd:8c:3d:68:ab:43:cc:07:88: 80:d3:ef:7b:a7:05:1f:69:d8:fd:2f:2b:1d:67:17: f3:c1:6b:78:5b:16:8a:b3:c2:4a:41:71:2d:0c:3f: ef:ca:c3:2d:11:3a:cd:2e:2e:ef:cd:cb:fb:f8:80: 28:c7:a5:1c:08:51:18:1d:06:c1:90:eb:e7:08:e4: 32:9c:09:f1:97:42:05:19:47:bb:23:76:b8:4d:4d: d4:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:7A:2F:F2:4B:9F:62:A1:DC:C6:D7:DA:50:AF:86:0F:AB:BE:BD:98 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/828def39-7470-4f79-936b-ebc232391c9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.164.245.0/24 Signature Algorithm: sha256WithRSAEncryption ab:0f:01:75:0f:41:25:d1:c8:6d:27:96:d8:77:33:b8:48:99: 5c:e8:07:bd:61:b7:07:d7:5c:94:f3:b5:44:36:fb:d1:14:5d: fd:f3:80:0d:c6:98:b2:29:13:9c:92:1a:07:17:01:c6:4a:fd: 75:8f:42:ad:82:43:63:98:82:a6:f7:2b:8d:e5:79:31:a7:bc: c6:a1:3e:b7:b0:2b:f8:4c:dd:c5:8b:36:dc:5c:b8:fb:fc:ff: 57:61:c2:f2:f7:e4:36:86:da:82:8d:79:15:71:dc:7a:93:d2: 62:e4:b8:3c:66:ba:dd:9f:36:7d:3e:81:48:86:e1:47:36:6d: 89:38:ec:65:42:cc:1c:ae:1b:99:03:a6:5a:95:4f:28:1d:17: fc:4a:6a:7c:bb:cb:96:72:41:fe:94:e2:f5:58:c8:a8:6c:bb: f5:c5:dc:5b:5f:0f:e2:b2:7a:dc:9d:ef:5f:35:17:80:f3:de: f2:a7:98:6b:5e:83:52:e5:2b:b3:16:43:89:70:5c:33:56:d8: ad:0c:a8:46:3d:1b:9e:c7:19:94:8a:bc:ab:94:5d:75:cb:20: 3f:f1:4b:b6:f4:cf:c1:14:2b:be:ec:46:0b:4e:24:f3:96:cc: 8a:fb:85:f3:38:f3:6d:84:ee:19:e5:6e:99:37:c7:03:99:3d: 51:4f:df:36 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbbSrHO+uTunrnIi4uA1ciI7iPYUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMTkyNzM4WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BiM2Q2ODIzYjIyNTA4OTQ5OGY5YTAzODFkZmUxOWU1ZTIx OGIxMzgyYjc2MWI1NDk5ZTNhOGY1MTA5Y2JmYzllMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGQyUNrmTgMDNa9p+mPtKefHHnabmQaI4JriLqcZFtxBK8 rAPo52la+5XGnoD8UxHjIlV4va76LzobdPRnFypCoIquPyRZ/MjBXUL4UHoZfVvr vUOLNj44ckDwGN/dkdjfTkGn4hZ/8YbVeTnTNW2RXJNvNgAn5ziKYNmVUAn2m1Qr 1j2254FMbAtruOW6YM8UV41lUKmZxBpGipMqMYDM8eb1CDe3Y4OHDN2MPWirQ8wH iIDT73unBR9p2P0vKx1nF/PBa3hbFoqzwkpBcS0MP+/Kwy0ROs0uLu/Ny/v4gCjH pRwIURgdBsGQ6+cI5DKcCfGXQgUZR7sjdrhNTdRjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUqHov8kufYqHcxtfaUK+GD6u+vZgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzgyOGRlZjM5LTc0NzAtNGY3OS05MzZiLWViYzIzMjM5MWM5ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASpPUwDQYJKoZIhvcNAQELBQADggEBAKsPAXUPQSXRyG0nlth3M7hImVzo B71htwfXXJTztUQ2+9EUXf3zgA3GmLIpE5ySGgcXAcZK/XWPQq2CQ2OYgqb3K43l eTGnvMahPrewK/hM3cWLNtxcuPv8/1dhwvL35DaG2oKNeRVx3HqT0mLkuDxmut2f Nn0+gUiG4Uc2bYk47GVCzByuG5kDplqVTygdF/xKany7y5ZyQf6U4vVYyKhsu/XF 3FtfD+Kyetyd7181F4Dz3vKnmGteg1LlK7MWQ4lwXDNW2K0MqEY9G57HGZSKvKuU XXXLID/xS7b0z8EUK77sRgtOJPOWzIr7hfM4822E7hnlbpk3xwOZPVFP3zY= -----END CERTIFICATE-----Generated at Fri Oct 17 23:52:17 2025 by rpki-client