$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8f55da44-9e04-4a17-b322-8948d63492d9.roa File: 8f55da44-9e04-4a17-b322-8948d63492d9.roa (raw, json) Hash identifier: fqKQ9eFBCmgHYlaDUc+iiXWF9kBlxAi6aHIVbEQ2kPg= Subject key identifier: E4:5A:53:1B:2C:1C:C8:13:1D:B2:EC:42:3A:F5:7F:3E:1A:F2:13:65 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 55126F7AC2595A81F6EF1BBC3C9976A29D510209 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8f55da44-9e04-4a17-b322-8948d63492d9.roa Signing time: Mon 22 Sep 2025 21:03:10 +0000 ROA not before: Mon 22 Sep 2025 21:03:10 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.173.146.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:12:6f:7a:c2:59:5a:81:f6:ef:1b:bc:3c:99:76:a2:9d:51:02:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 21:03:10 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=2efebb8e4c007cf6682b816357025c0f12052797dcdcf4f34b0161114929909f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:48:c0:11:ac:28:29:b2:a9:50:0e:13:43:89: db:f3:ed:ec:a1:cc:26:5b:62:60:59:ee:d5:42:e7: 64:df:86:35:b2:7e:84:a2:7a:a4:7f:c1:aa:0f:74: e1:9d:5e:f0:78:f3:1b:ac:79:9a:6e:9f:93:6d:ae: b1:71:c8:db:82:c4:42:6c:6c:ef:fe:e1:d3:9d:f6: 3a:37:4c:95:61:cd:2d:f4:ea:06:52:05:1e:49:7a: ef:d1:34:e1:eb:13:e6:12:12:01:e1:19:4d:06:81: 90:f6:88:d0:77:cd:a7:07:66:a1:c2:e8:90:d3:15: d3:1a:84:02:41:7b:43:89:73:e4:3c:ef:f0:25:50: 91:63:db:3d:1d:57:f4:4c:fb:61:4b:21:3c:53:f3: 6a:96:d4:0e:8d:8d:94:ad:e4:1c:e7:5c:af:64:79: 62:2e:e6:72:3f:58:90:ab:d8:c8:55:93:6d:78:6c: e7:a4:c6:90:f4:16:ed:50:91:c5:c1:ee:58:94:75: 4f:68:ec:29:91:1f:a0:e5:9d:7d:c7:a3:96:cd:25: 22:ff:2b:f4:20:60:3f:93:ad:f2:09:ec:5d:b6:e2: 2f:01:0d:88:5d:ba:e3:b2:6c:91:ca:a7:aa:66:6f: f0:37:33:ae:77:03:56:34:60:df:f9:be:51:f1:44: 9e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:5A:53:1B:2C:1C:C8:13:1D:B2:EC:42:3A:F5:7F:3E:1A:F2:13:65 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8f55da44-9e04-4a17-b322-8948d63492d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.173.146.0/23 Signature Algorithm: sha256WithRSAEncryption 9f:d4:bf:b1:77:ef:46:53:4e:e5:07:39:b9:06:83:d8:43:60: cc:35:4a:1f:3f:94:8b:c6:35:5e:ed:7b:94:83:8d:14:78:03: fb:25:14:5f:79:62:c1:1c:47:a1:97:76:db:99:f7:63:8f:20: dd:a8:34:38:2b:51:a5:36:a3:79:60:9b:0a:f3:28:97:ab:c3: 78:90:01:e1:28:79:4c:4f:89:9c:c5:72:da:b9:c2:82:2e:11: 4c:60:17:16:ae:2a:a9:95:89:30:75:6f:89:be:f8:9e:d6:12: 84:42:7d:d7:4f:22:10:6f:6e:cb:b1:36:8b:08:3a:48:36:a7: aa:32:85:e5:f0:a7:f0:ce:56:e4:05:00:16:9f:11:8b:74:86: 26:a5:f0:01:02:39:fb:a8:93:08:1f:c6:5e:5a:b1:28:54:0a: f4:d6:b9:ef:7f:73:4d:61:3f:8a:08:ae:34:61:38:ae:01:02: b3:55:51:26:cd:c1:b6:f5:fa:66:94:95:b9:49:e4:12:2b:eb: 08:0e:79:d5:89:28:c5:08:44:b8:90:20:f4:ed:3d:ba:16:cb: 69:b0:5d:7d:11:7f:fd:c3:9e:72:5d:ea:42:79:03:53:22:0c: df:b6:0c:3e:7c:80:3e:29:be:b3:c2:fd:b3:bc:50:c8:87:24: af:d1:97:69 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVRJvesJZWoH27xu8PJl2op1RAgkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjEwMzEwWhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AyZWZlYmI4ZTRjMDA3Y2Y2NjgyYjgxNjM1NzAyNWMwZjEy MDUyNzk3ZGNkY2Y0ZjM0YjAxNjExMTQ5Mjk5MDlmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCaSMARrCgpsqlQDhNDidvz7eyhzCZbYmBZ7tVC52TfhjWy foSieqR/waoPdOGdXvB48xuseZpun5NtrrFxyNuCxEJsbO/+4dOd9jo3TJVhzS30 6gZSBR5Jeu/RNOHrE+YSEgHhGU0GgZD2iNB3zacHZqHC6JDTFdMahAJBe0OJc+Q8 7/AlUJFj2z0dV/RM+2FLITxT82qW1A6NjZSt5BznXK9keWIu5nI/WJCr2MhVk214 bOekxpD0Fu1QkcXB7liUdU9o7CmRH6DlnX3Ho5bNJSL/K/QgYD+TrfIJ7F224i8B DYhduuOybJHKp6pmb/A3M653A1Y0YN/5vlHxRJ4jAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU5FpTGywcyBMdsuxCOvV/PhryE2UwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzhmNTVkYTQ0LTllMDQtNGExNy1iMzIyLTg5NDhkNjM0OTJkOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESrZIwDQYJKoZIhvcNAQELBQADggEBAJ/Uv7F370ZTTuUHObkGg9hDYMw1 Sh8/lIvGNV7te5SDjRR4A/slFF95YsEcR6GXdtuZ92OPIN2oNDgrUaU2o3lgmwrz KJerw3iQAeEoeUxPiZzFctq5woIuEUxgFxauKqmViTB1b4m++J7WEoRCfddPIhBv bsuxNosIOkg2p6oyheXwp/DOVuQFABafEYt0hial8AECOfuokwgfxl5asShUCvTW ue9/c01hP4oIrjRhOK4BArNVUSbNwbb1+maUlblJ5BIr6wgOedWJKMUIRLiQIPTt PboWy2mwXX0Rf/3DnnJd6kJ5A1MiDN+2DD58gD4pvrPC/bO8UMiHJK/Rl2k= -----END CERTIFICATE-----Generated at Fri Oct 17 23:52:19 2025 by rpki-client