$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/87815058-ce8f-41af-8294-5c6c3e77aed2.roa File: 87815058-ce8f-41af-8294-5c6c3e77aed2.roa (raw, json) Hash identifier: iM7qgijdbdlMDnPYlS7c/79x4pDP4ZLkMlIDwOUzOaI= Subject key identifier: 75:BF:17:0D:88:B1:67:59:3D:F4:5D:26:4D:06:7E:F1:58:0C:21:31 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 228DFF9BC135D1A830C060324D3BAA7633EF0F05 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/87815058-ce8f-41af-8294-5c6c3e77aed2.roa Signing time: Mon 22 Sep 2025 21:03:06 +0000 ROA not before: Mon 22 Sep 2025 21:03:06 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.173.14.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:8d:ff:9b:c1:35:d1:a8:30:c0:60:32:4d:3b:aa:76:33:ef:0f:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 21:03:06 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=0cd8b11471b7c18eeec1cd1b8a2d0f73eeb6cc736980c19a7a8067fcf67ba590, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:16:7d:f8:9f:5c:3f:bd:33:76:54:65:f8:c6: 97:67:20:b3:5b:a0:50:08:0d:e2:93:c8:55:15:a5: 05:e2:c9:2d:98:17:04:25:fb:12:cd:0a:81:5a:d6: 08:70:36:f1:9c:1d:5d:c7:ea:94:9b:92:a3:0e:16: b0:78:bf:d3:6d:28:66:97:2c:12:33:bf:5f:c0:b3: a4:6a:76:f5:c6:83:cc:c8:9a:60:b3:96:e8:7e:f9: 1f:59:3a:2a:be:25:05:a0:8d:ef:8a:f9:83:26:1c: 7a:8d:74:a0:e5:f3:eb:8e:70:3f:d6:68:1c:30:f9: 97:55:c7:98:36:f0:aa:d4:74:ca:8f:a6:df:25:ce: 6d:91:2a:3b:d9:63:8a:b7:34:67:2d:b4:22:7a:87: 58:dc:3c:d4:60:3b:3f:ee:70:1c:a8:1e:4e:cc:de: bd:35:77:b6:b9:23:02:ae:68:9d:8c:76:c8:86:7c: d6:1d:78:68:fc:4d:79:0d:e2:4c:e3:02:21:21:46: 57:03:db:59:87:c8:bb:7d:e1:95:bc:6b:15:47:6b: 89:23:b8:55:8b:02:b8:ce:64:a3:66:56:20:4d:b1: ed:1a:2a:bb:1c:df:c6:ee:da:51:60:bb:03:9d:de: 30:90:0d:8b:65:b1:8c:08:98:2f:41:92:2a:9f:1c: ae:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:BF:17:0D:88:B1:67:59:3D:F4:5D:26:4D:06:7E:F1:58:0C:21:31 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/87815058-ce8f-41af-8294-5c6c3e77aed2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.173.14.0/23 Signature Algorithm: sha256WithRSAEncryption 03:ba:d8:39:04:92:75:da:be:e6:b2:46:a3:26:d7:71:32:a7: f4:5c:24:cd:5c:66:50:b9:98:0b:f7:9d:3c:f6:67:43:65:8f: e0:0b:91:44:41:fa:ed:13:12:98:9b:28:2b:12:06:11:89:30: 7f:d2:5a:df:32:1a:8f:58:a6:4c:67:c4:5c:88:bc:05:f1:21: 62:62:f0:89:67:54:58:5c:6a:6d:fb:1d:1c:9e:50:9d:04:fb: 16:8d:c4:70:d5:68:3b:f7:f9:e4:26:5c:82:b2:3b:6e:f4:74: 04:86:41:11:bd:87:dd:72:5a:43:64:03:cc:28:b0:86:63:c2: e8:fc:6b:62:7f:d9:89:fc:67:53:9c:01:e9:1c:d5:cd:9c:b7: 0d:db:b8:cf:4b:43:f1:e9:ac:5d:99:80:75:eb:ed:fd:d3:95: 54:93:aa:08:e0:1c:ba:12:cd:15:bb:da:ea:cd:c8:eb:70:9c: 35:7f:79:aa:cb:08:6b:18:d2:2e:94:71:6a:29:b9:c5:0d:01: d6:f1:91:98:e1:5e:ac:30:df:8c:79:01:a4:d5:f9:5a:74:70: 6a:e2:fb:a0:43:8f:10:0b:e1:1b:16:44:51:bd:92:3a:df:d6: f1:cf:9a:58:b2:81:1e:bd:d0:98:0b:62:09:70:7e:4f:da:ea: f5:01:00:d8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIo3/m8E10agwwGAyTTuqdjPvDwUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjEwMzA2WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AwY2Q4YjExNDcxYjdjMThlZWVjMWNkMWI4YTJkMGY3M2Vl YjZjYzczNjk4MGMxOWE3YTgwNjdmY2Y2N2JhNTkwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3Fn34n1w/vTN2VGX4xpdnILNboFAIDeKTyFUVpQXiyS2Y FwQl+xLNCoFa1ghwNvGcHV3H6pSbkqMOFrB4v9NtKGaXLBIzv1/As6RqdvXGg8zI mmCzluh++R9ZOiq+JQWgje+K+YMmHHqNdKDl8+uOcD/WaBww+ZdVx5g28KrUdMqP pt8lzm2RKjvZY4q3NGcttCJ6h1jcPNRgOz/ucByoHk7M3r01d7a5IwKuaJ2MdsiG fNYdeGj8TXkN4kzjAiEhRlcD21mHyLt94ZW8axVHa4kjuFWLArjOZKNmViBNse0a Krsc38bu2lFguwOd3jCQDYtlsYwImC9BkiqfHK4JAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUdb8XDYixZ1k99F0mTQZ+8VgMITEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzg3ODE1MDU4LWNlOGYtNDFhZi04Mjk0LTVjNmMzZTc3YWVkMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESrQ4wDQYJKoZIhvcNAQELBQADggEBAAO62DkEknXavuayRqMm13Eyp/Rc JM1cZlC5mAv3nTz2Z0Nlj+ALkURB+u0TEpibKCsSBhGJMH/SWt8yGo9YpkxnxFyI vAXxIWJi8IlnVFhcam37HRyeUJ0E+xaNxHDVaDv3+eQmXIKyO270dASGQRG9h91y WkNkA8wosIZjwuj8a2J/2Yn8Z1OcAekc1c2ctw3buM9LQ/HprF2ZgHXr7f3TlVST qgjgHLoSzRW72urNyOtwnDV/earLCGsY0i6UcWopucUNAdbxkZjhXqww34x5AaTV +Vp0cGri+6BDjxAL4RsWRFG9kjrf1vHPmliygR690JgLYglwfk/a6vUBANg= -----END CERTIFICATE-----Generated at Fri Oct 17 22:04:12 2025 by rpki-client