$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/833a49ed-f6f3-4762-a2f5-938b437f86db.roa File: 833a49ed-f6f3-4762-a2f5-938b437f86db.roa (raw, json) Hash identifier: q9EquFu4cuOmXpT63NkcE/Yv26aXgIQfRwOZnXEJ7TQ= Subject key identifier: 02:45:B0:D5:B2:73:B7:7D:77:35:2B:36:B3:67:F8:BE:BC:86:4D:40 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2D7C5EC0EBF50B507782806DFEB5DAF37971CB68 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/833a49ed-f6f3-4762-a2f5-938b437f86db.roa Signing time: Mon 22 Sep 2025 20:36:32 +0000 ROA not before: Mon 22 Sep 2025 20:36:32 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.172.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:7c:5e:c0:eb:f5:0b:50:77:82:80:6d:fe:b5:da:f3:79:71:cb:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 20:36:32 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=cb83cca22ccecad87fca02e526cdd9e0f5c062e55b32eac894057c9b6be2f609, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:cf:98:8d:17:30:78:62:66:db:b1:fd:e4:f6: f4:85:80:e2:b0:01:74:be:82:d5:ef:10:64:c4:4c: 49:75:8f:16:f2:de:8b:05:44:a8:81:5a:9f:c2:f4: 55:88:8a:24:55:17:f3:94:c0:89:94:3b:36:72:0e: c9:f2:e5:74:f5:d4:1c:a1:c6:cb:f3:0a:64:92:94: 21:ff:08:6a:9e:21:52:0c:75:97:48:0f:82:01:ba: 7a:b3:28:59:a4:10:d3:40:86:e8:57:a7:b5:2d:0a: be:ec:c6:3e:05:1b:bf:08:0b:24:6e:87:cd:6c:bb: 20:ac:70:20:b5:a3:d9:a9:37:f3:65:3b:b7:a5:14: f8:b2:76:a4:09:f3:38:c7:3e:79:bc:96:6c:f8:39: ba:4a:01:2d:d0:88:3b:65:2c:9a:26:5b:2e:41:77: 88:86:85:6d:c0:88:35:d4:bc:1d:10:5d:ca:d8:30: 1e:cb:d2:15:ac:e4:6a:c6:4a:00:93:95:69:e1:cc: bb:7e:56:de:67:0c:a9:3f:a2:e1:cf:44:50:98:c7: 3e:3a:1f:ed:4e:6c:1e:19:fa:d9:64:6e:f6:0b:8f: 46:d5:9e:79:c6:b4:ce:a8:3a:8b:71:c8:a0:51:d9: d0:fd:a3:d8:15:73:0f:67:4c:99:4d:eb:80:2d:0a: 02:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:45:B0:D5:B2:73:B7:7D:77:35:2B:36:B3:67:F8:BE:BC:86:4D:40 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/833a49ed-f6f3-4762-a2f5-938b437f86db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.172.50.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:35:ff:e7:62:7e:18:b1:a0:be:a2:89:b8:f7:67:6f:f5:19: 86:9e:69:3b:8f:58:72:c4:81:54:97:a1:d2:6c:8b:e7:66:9b: 23:e4:d2:92:1e:71:22:dc:6d:c2:93:50:ff:9f:b0:9a:14:d1: 70:c5:b4:31:59:d4:98:d0:11:9c:02:a8:2a:34:cd:71:f9:c5: 2c:b5:4f:b9:57:ea:c1:14:c3:55:ab:4e:56:02:a8:ee:24:00: e7:ca:2e:49:2d:05:e0:7e:14:6f:2f:a8:b2:16:c8:24:6f:25: ef:97:67:96:23:f5:d2:e1:df:01:2c:fc:e4:78:87:37:54:33: 3b:36:72:78:df:b7:09:4b:de:d7:da:3f:1a:c2:e5:e3:b7:8a: de:3b:56:8f:e4:d7:ce:de:b5:50:34:e8:f9:e9:6c:04:1c:3d: 61:e6:3d:f8:7a:b5:ee:b7:ba:2a:53:58:13:57:20:ab:12:6f: d8:81:1f:98:db:18:bc:19:a3:f4:f9:e1:bf:7d:6e:c9:53:36: 71:e1:65:20:73:29:d8:1f:1b:0c:15:b6:cf:a7:31:47:c3:07: 3f:6b:6e:61:df:d4:c3:f3:74:6f:5c:ac:3b:50:3e:a5:89:3f: f8:49:05:cc:2b:25:a1:f5:52:86:f1:46:1e:6f:ba:35:20:24: 06:9e:cf:de -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULXxewOv1C1B3goBt/rXa83lxy2gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjAzNjMyWhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BjYjgzY2NhMjJjY2VjYWQ4N2ZjYTAyZTUyNmNkZDllMGY1 YzA2MmU1NWIzMmVhYzg5NDA1N2M5YjZiZTJmNjA5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjz5iNFzB4Ymbbsf3k9vSFgOKwAXS+gtXvEGTETEl1jxby 3osFRKiBWp/C9FWIiiRVF/OUwImUOzZyDsny5XT11ByhxsvzCmSSlCH/CGqeIVIM dZdID4IBunqzKFmkENNAhuhXp7UtCr7sxj4FG78ICyRuh81suyCscCC1o9mpN/Nl O7elFPiydqQJ8zjHPnm8lmz4ObpKAS3QiDtlLJomWy5Bd4iGhW3AiDXUvB0QXcrY MB7L0hWs5GrGSgCTlWnhzLt+Vt5nDKk/ouHPRFCYxz46H+1ObB4Z+tlkbvYLj0bV nnnGtM6oOotxyKBR2dD9o9gVcw9nTJlN64AtCgJBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUAkWw1bJzt313NSs2s2f4vryGTUAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzgzM2E0OWVkLWY2ZjMtNDc2Mi1hMmY1LTkzOGI0MzdmODZkYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASrDIwDQYJKoZIhvcNAQELBQADggEBAI01/+difhixoL6iibj3Z2/1GYae aTuPWHLEgVSXodJsi+dmmyPk0pIecSLcbcKTUP+fsJoU0XDFtDFZ1JjQEZwCqCo0 zXH5xSy1T7lX6sEUw1WrTlYCqO4kAOfKLkktBeB+FG8vqLIWyCRvJe+XZ5Yj9dLh 3wEs/OR4hzdUMzs2cnjftwlL3tfaPxrC5eO3it47Vo/k187etVA06PnpbAQcPWHm Pfh6te63uipTWBNXIKsSb9iBH5jbGLwZo/T54b99bslTNnHhZSBzKdgfGwwVts+n MUfDBz9rbmHf1MPzdG9crDtQPqWJP/hJBcwrJaH1UobxRh5vujUgJAaez94= -----END CERTIFICATE-----Generated at Fri Oct 17 21:56:59 2025 by rpki-client