$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8aa2b2bf-7777-4af2-8be1-4fd0f0b12789.roa File: 8aa2b2bf-7777-4af2-8be1-4fd0f0b12789.roa (raw, json) Hash identifier: gpErXLxpHRT629w76gIOD0cFGPkrB6VrsUs3TVSh1ys= Subject key identifier: E9:06:B6:16:1A:14:FA:41:C5:F7:64:75:76:85:28:2B:19:D7:30:3C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3A31090F6BF9EC89D99DE2D41B4218EDE03086 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8aa2b2bf-7777-4af2-8be1-4fd0f0b12789.roa Signing time: Mon 22 Sep 2025 17:57:36 +0000 ROA not before: Mon 22 Sep 2025 17:57:36 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.154.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:31:09:0f:6b:f9:ec:89:d9:9d:e2:d4:1b:42:18:ed:e0:30:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 17:57:36 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=6a9893ac6dcb4969e68c597237c9bfac7cc00174114d19fec919074e53b806c8, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:8c:a4:48:7d:d8:37:72:36:3c:ae:c5:82:32: fe:6a:64:96:90:ed:66:59:0a:97:8a:97:91:b1:0e: 85:b1:a4:20:9a:0e:3d:04:c7:b6:ce:b7:a8:0b:51: 4c:32:98:3c:36:9d:7d:73:91:4e:b1:ae:0b:b0:d4: 18:7a:70:81:13:ce:68:99:86:83:0a:60:00:cb:2a: d8:e0:7a:40:68:76:1d:d0:1f:cc:cf:01:f5:64:6d: 58:9c:fa:65:28:6f:49:88:e6:06:8b:16:c5:b0:a5: 33:0b:06:91:20:4b:11:21:a9:1a:93:c3:33:ab:a6: 57:ee:e4:cb:68:db:54:58:d4:f3:f3:f9:1f:96:4a: 27:be:04:e3:9d:e9:2c:7e:64:21:4f:9d:53:87:b8: e6:fc:f5:92:15:f0:27:88:21:a4:a9:92:d0:d8:f7: 2f:ea:63:d2:05:b5:89:a5:87:9a:d1:f3:7e:ee:2e: 68:8c:6f:c8:a7:c1:56:7e:3e:2b:25:b6:1b:0b:0f: 48:4e:b8:07:46:9f:18:b1:a5:9c:91:c4:6d:a7:c5: d6:74:24:7a:0a:cd:2f:e1:13:7e:af:69:7f:d2:09: f6:4e:6e:f1:89:3c:df:37:be:ca:75:03:f3:b8:12: a1:59:27:7a:9b:e2:9f:8a:de:e5:25:33:f0:ac:2b: fe:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:06:B6:16:1A:14:FA:41:C5:F7:64:75:76:85:28:2B:19:D7:30:3C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8aa2b2bf-7777-4af2-8be1-4fd0f0b12789.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.154.220.0/22 Signature Algorithm: sha256WithRSAEncryption 13:6b:5b:03:38:45:2f:8f:b6:67:e9:7d:39:a6:8f:a0:4f:78: 78:60:dd:8f:59:9a:a0:80:c7:2a:27:63:f5:bc:6c:0b:dc:ba: 4f:83:98:05:9e:e0:0f:0b:6c:88:86:e6:e5:5a:fd:6c:bb:2b: 60:89:7c:83:c2:7f:5d:26:9c:4d:65:08:d1:a8:3f:a0:f3:93: 98:10:03:28:34:15:08:b5:f0:32:05:dc:e2:09:21:b2:1a:80: fc:86:df:c7:50:54:10:57:13:50:0b:73:c2:8a:9a:12:67:60: 7b:b5:37:59:81:5d:93:66:1c:e6:ad:fe:e1:9c:2f:1f:d4:46: 92:2d:b8:de:9e:25:ab:99:ac:e2:73:76:7d:be:29:35:e0:90: d2:2d:0e:bb:34:c8:18:23:5c:82:56:a8:fa:77:5b:be:b4:51: 39:37:30:00:de:2a:56:7d:0f:8b:65:cf:fa:57:8b:6f:89:0e: b4:14:80:fc:cf:ac:3b:2d:67:12:47:9d:ce:0f:4c:9e:57:95: 7c:30:27:b9:92:aa:3f:15:4d:ba:a5:a4:e0:39:b0:c4:f8:92: 3e:b4:cb:1d:71:d3:cb:fc:a6:c6:1c:a7:94:11:18:bf:4f:5f: 28:88:ad:73:98:1f:5c:3f:ff:48:d1:b8:e1:9b:fc:e8:8f:2d: 68:58:63:8d -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITOjEJD2v57InZneLUG0IY7eAwhjANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzJkZjZmM2IzYTM0YjYzODZkMWEzMmQ4ZjRmYTMxNzhlZjMx ODg3ZDhiNDI4ZGZhYTQ3NjAeFw0yNTA5MjIxNzU3MzZaFw0yNTEwMjcyMzU5NTla MHoxSTBHBgNVBAUTQDZhOTg5M2FjNmRjYjQ5NjllNjhjNTk3MjM3YzliZmFjN2Nj MDAxNzQxMTRkMTlmZWM5MTkwNzRlNTNiODA2YzgxLTArBgNVBAMTJDVmMjc2MDQ1 LTViOWYtNDVlZi05MjNkLWYzZmNlMjRhNjIyNTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAO+MpEh92DdyNjyuxYIy/mpklpDtZlkKl4qXkbEOhbGkIJoO PQTHts63qAtRTDKYPDadfXORTrGuC7DUGHpwgRPOaJmGgwpgAMsq2OB6QGh2HdAf zM8B9WRtWJz6ZShvSYjmBosWxbClMwsGkSBLESGpGpPDM6umV+7ky2jbVFjU8/P5 H5ZKJ74E453pLH5kIU+dU4e45vz1khXwJ4ghpKmS0Nj3L+pj0gW1iaWHmtHzfu4u aIxvyKfBVn4+KyW2GwsPSE64B0afGLGlnJHEbafF1nQkegrNL+ETfq9pf9IJ9k5u 8Yk83ze+ynUD87gSoVknepvin4re5SUz8Kwr/vcCAwEAAaOCArEwggKtMB0GA1Ud DgQWBBTpBrYWGhT6QcX3ZHV2hSgrGdcwPDAfBgNVHSMEGDAWgBQlrdNCsB63pY6t GZAmiLVLP4H0uDAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzg1MWNlZjE3LTEz MmEtNDMzNy1iN2QxLWJmMTZhNTJmZmQwMy9kZjZmM2IzYTM0YjYzODZkMWEzMmQ4 ZjRmYTMxNzhlZjMxODg3ZDhiNDI4ZGZhYTQ3Ni5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9mNzAzNjk2ZS1lNDdiLTRjMjAtYmQ5My02Zjgw OTA0ZTQyZDIvOGFhMmIyYmYtNzc3Ny00YWYyLThiZTEtNGZkMGYwYjEyNzg5LnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMt NmY4MDkwNGU0MmQyL3RqaHRHakxZOVBveGVPOHhpSDJMUW8zNnBIWS5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAhKa3DANBgkqhkiG9w0BAQsFAAOCAQEAE2tbAzhFL4+2Z+l9OaaPoE94eGDd j1maoIDHKidj9bxsC9y6T4OYBZ7gDwtsiIbm5Vr9bLsrYIl8g8J/XSacTWUI0ag/ oPOTmBADKDQVCLXwMgXc4gkhshqA/Ibfx1BUEFcTUAtzwoqaEmdge7U3WYFdk2Yc 5q3+4ZwvH9RGki243p4lq5ms4nN2fb4pNeCQ0i0OuzTIGCNcglao+ndbvrRROTcw AN4qVn0Pi2XP+leLb4kOtBSA/M+sOy1nEkedzg9MnleVfDAnuZKqPxVNuqWk4Dmw xPiSPrTLHXHTy/ymxhynlBEYv09fKIitc5gfXD//SNG44Zv86I8taFhjjQ== -----END CERTIFICATE-----Generated at Fri Oct 17 23:52:39 2025 by rpki-client