$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/84262edb-ec81-418e-abfd-3ced5d695481.roa File: 84262edb-ec81-418e-abfd-3ced5d695481.roa (raw, json) Hash identifier: zy3gb3TteqCqVGVwuDedJD2wf45YMOH+fgcYox0DlsM= Subject key identifier: 9E:5A:13:A1:8D:C4:77:0E:8C:BF:99:A7:55:34:9B:64:9A:B1:46:EE Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1042691BCDDD48DE66C70991A21E21B9D8048397 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/84262edb-ec81-418e-abfd-3ced5d695481.roa Signing time: Mon 22 Sep 2025 19:42:43 +0000 ROA not before: Mon 22 Sep 2025 19:42:43 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.165.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:42:69:1b:cd:dd:48:de:66:c7:09:91:a2:1e:21:b9:d8:04:83:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 19:42:43 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=33be1df11c818dd3bf6bb22c57fee3cfdeacb206a6ec91848ebb5d401efc907d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:15:f7:89:de:84:81:10:09:4d:d4:89:5e:0b: 1e:41:53:86:ff:93:8f:4f:9f:ce:e3:29:13:0b:8f: c7:f7:b1:06:4a:f4:9f:f1:cf:6d:b6:e7:40:5f:76: 59:85:b7:ba:14:d9:dd:c1:b5:4f:cc:3d:d9:8a:52: ff:21:08:2c:38:08:cb:27:d7:ed:76:9a:13:6c:22: 23:9c:f3:93:94:b6:48:52:74:d8:38:c2:24:55:a3: 3f:c1:87:78:05:fb:bb:0c:64:e4:03:e6:03:5a:ea: e0:55:5a:aa:8f:9f:69:97:a7:08:31:46:c3:9e:7d: 44:54:2c:a8:40:bd:e5:e5:ae:1f:02:8f:55:2e:b4: 83:c3:0e:b9:a6:2c:fb:f8:10:70:7e:a0:25:7a:a4: 35:7f:d4:8f:df:0e:a6:51:a6:f5:1f:fb:d2:a7:b7: a7:c3:09:a8:93:68:1b:63:14:36:ba:3b:77:de:b0: 71:97:ff:9f:64:a6:60:fd:5f:fa:f3:96:43:58:ab: b3:46:1d:c6:8b:53:49:9f:4a:ac:bd:f4:4b:4d:a7: a3:79:d5:dc:95:b4:64:fe:d9:7b:0f:ed:57:ba:33: ad:59:93:9f:dd:76:20:13:ac:c1:37:04:4e:30:ea: 6b:51:91:04:a2:df:84:e2:6a:75:6e:71:b0:e4:e3: d2:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:5A:13:A1:8D:C4:77:0E:8C:BF:99:A7:55:34:9B:64:9A:B1:46:EE X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/84262edb-ec81-418e-abfd-3ced5d695481.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.165.230.0/24 Signature Algorithm: sha256WithRSAEncryption a5:d3:af:a0:0f:8f:50:0b:f8:c2:42:78:ae:03:a7:69:a2:b7: 89:6c:d0:e6:7c:f6:fd:2f:62:89:27:42:46:a9:34:ac:45:74: 64:66:32:ee:58:81:2f:22:94:88:bb:5d:ec:ce:ee:2f:6f:e6: 67:45:ad:65:72:78:57:fe:80:49:91:c8:f7:fd:f3:6b:de:08: ae:d1:60:d7:95:83:f2:89:63:7e:d2:49:25:1d:7a:f3:b5:85: 76:cb:3d:3a:59:a7:16:94:f4:64:9a:78:84:ec:59:48:a2:78: 5c:cc:fb:c1:54:63:f3:24:f2:59:21:e4:22:1c:c1:03:98:84: 7b:a6:29:69:44:9d:7d:c3:f6:b1:7b:9b:01:d7:9f:31:03:7e: e1:a1:fd:18:b4:5a:26:13:28:4e:6e:bb:0a:7b:91:15:a5:8e: 25:fb:64:0c:20:79:43:0f:5c:d8:e9:ee:e5:c9:65:da:f9:b2: 47:e9:fe:8e:14:71:e5:ad:01:86:33:d2:94:db:45:33:3c:2b: 04:f5:28:5c:f4:2d:8e:6e:f2:a3:ab:c6:45:fc:33:5a:8a:94: 1b:26:ca:dc:ff:15:a4:a4:f5:de:80:a4:cc:8e:3c:21:0a:d6: f5:d9:88:c0:0a:d3:ed:0f:25:15:58:c4:5a:9c:fa:cd:d6:bc: d3:46:8a:2e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEEJpG83dSN5mxwmRoh4hudgEg5cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMTk0MjQzWhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AzM2JlMWRmMTFjODE4ZGQzYmY2YmIyMmM1N2ZlZTNjZmRl YWNiMjA2YTZlYzkxODQ4ZWJiNWQ0MDFlZmM5MDdkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1FfeJ3oSBEAlN1IleCx5BU4b/k49Pn87jKRMLj8f3sQZK 9J/xz22250BfdlmFt7oU2d3BtU/MPdmKUv8hCCw4CMsn1+12mhNsIiOc85OUtkhS dNg4wiRVoz/Bh3gF+7sMZOQD5gNa6uBVWqqPn2mXpwgxRsOefURULKhAveXlrh8C j1UutIPDDrmmLPv4EHB+oCV6pDV/1I/fDqZRpvUf+9Knt6fDCaiTaBtjFDa6O3fe sHGX/59kpmD9X/rzlkNYq7NGHcaLU0mfSqy99EtNp6N51dyVtGT+2XsP7Ve6M61Z k5/ddiATrME3BE4w6mtRkQSi34TianVucbDk49IxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUnloToY3Edw6Mv5mnVTSbZJqxRu4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzg0MjYyZWRiLWVjODEtNDE4ZS1hYmZkLTNjZWQ1ZDY5NTQ4MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASpeYwDQYJKoZIhvcNAQELBQADggEBAKXTr6APj1AL+MJCeK4Dp2mit4ls 0OZ89v0vYoknQkapNKxFdGRmMu5YgS8ilIi7XezO7i9v5mdFrWVyeFf+gEmRyPf9 82veCK7RYNeVg/KJY37SSSUdevO1hXbLPTpZpxaU9GSaeITsWUiieFzM+8FUY/Mk 8lkh5CIcwQOYhHumKWlEnX3D9rF7mwHXnzEDfuGh/Ri0WiYTKE5uuwp7kRWljiX7 ZAwgeUMPXNjp7uXJZdr5skfp/o4UceWtAYYz0pTbRTM8KwT1KFz0LY5u8qOrxkX8 M1qKlBsmytz/FaSk9d6ApMyOPCEK1vXZiMAK0+0PJRVYxFqc+s3WvNNGii4= -----END CERTIFICATE-----Generated at Fri Oct 17 23:56:41 2025 by rpki-client