$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/94f4366b-e582-4827-a1a2-4ef00a8fe442.roa File: 94f4366b-e582-4827-a1a2-4ef00a8fe442.roa (raw, json) Hash identifier: CSeK15/P/p0CmyNmq/ZeDy0opG/GJyx/qs4UCIRRnLU= Subject key identifier: 84:BB:67:B3:87:9D:44:91:92:15:1B:44:6D:E7:57:D0:13:E7:11:5E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 129141F7B3149901E1222D11B6E78CDF178D4E38 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/94f4366b-e582-4827-a1a2-4ef00a8fe442.roa Signing time: Mon 22 Sep 2025 17:24:05 +0000 ROA not before: Mon 22 Sep 2025 17:24:05 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.155.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:91:41:f7:b3:14:99:01:e1:22:2d:11:b6:e7:8c:df:17:8d:4e:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 17:24:05 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=d44be8a67f87c2536c0b35692a42aaa75ccafda5a9bfb8478f5d8be7820c6174, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c9:05:e0:47:fb:1d:93:9d:98:ed:f4:ed:09: 68:ad:84:60:15:51:67:52:f8:49:c5:04:37:e8:8a: 7a:a1:a1:c5:79:4e:b1:30:0d:0f:ee:89:06:9a:6d: 4f:54:a9:10:b6:ce:3d:d0:71:28:d0:ab:5f:00:d5: 0b:fd:bd:30:1d:9b:b5:19:56:24:31:bc:4b:e9:db: f9:fc:c6:7a:99:b2:e6:55:a0:50:49:b2:71:c9:ba: ee:60:a4:15:8c:29:6a:43:10:4c:4d:f3:c6:a5:89: f9:3d:fe:40:ab:8b:b6:29:44:77:2c:f5:ea:af:68: 2c:fa:5c:92:34:d0:d2:8f:3a:4a:45:3c:71:d8:cd: f5:5f:b7:59:c7:f7:fc:dc:af:89:9d:41:9c:4b:1e: e5:81:e4:bd:c6:89:bc:68:4f:9c:1e:0f:92:5e:72: 38:cd:a0:fd:20:0b:de:22:ef:5b:3e:99:ad:27:b2: d6:54:c4:0d:0b:ab:2d:a6:4c:76:1c:ab:83:fb:d0: 2d:86:12:48:29:6c:f0:ea:a6:c1:10:25:58:ae:4d: 94:52:a7:80:2e:db:ea:0f:47:39:26:12:29:c0:e3: a3:74:f1:33:81:de:76:32:5c:f2:fb:62:e3:a3:1e: 25:6d:e8:4b:3a:f6:43:b0:c7:fe:c2:85:b8:3d:53: fa:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:BB:67:B3:87:9D:44:91:92:15:1B:44:6D:E7:57:D0:13:E7:11:5E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/94f4366b-e582-4827-a1a2-4ef00a8fe442.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.155.101.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:2c:c6:22:b7:99:96:83:a0:8e:4b:c3:35:cb:20:67:1d:f6: 75:47:8f:c3:37:86:63:bd:cc:2a:72:2f:3b:1c:06:de:09:1e: e9:be:af:eb:50:f5:0d:47:1e:2c:9c:c0:e7:c9:75:77:94:d4: c5:8f:23:25:a3:bc:1b:88:ce:f7:57:05:80:79:65:47:78:3e: 51:75:c8:fd:c4:8e:2d:a7:a1:05:d5:50:80:66:a4:81:09:34: b0:79:c2:40:74:b2:19:ee:a6:98:20:91:1d:39:3f:2f:be:f9: 81:2d:23:7a:3b:24:e0:ee:d3:d2:9f:18:5c:ce:c2:d2:ac:37: 12:11:e8:13:54:f7:7d:42:e2:31:01:59:21:16:b9:dd:c6:ae: dc:ca:fa:58:eb:7d:06:4b:85:9e:e6:f2:eb:9e:08:d3:10:8d: a4:b8:ac:88:d4:08:93:eb:07:4d:09:5e:0a:d3:69:0e:2e:c2: cf:96:6c:6f:48:c4:8c:5b:3f:b8:3f:bb:cb:ee:40:81:32:c2: ee:bb:4f:a9:c3:fa:64:98:8d:12:d2:34:ec:f0:ca:9e:47:95: ce:8e:b7:28:90:c8:74:4e:c7:17:7c:36:67:b4:2c:46:ea:ee: 48:55:67:e9:89:8d:e7:3d:b7:23:20:ab:07:75:8c:16:6c:c1: ff:c7:85:bd -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEpFB97MUmQHhIi0RtueM3xeNTjgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMTcyNDA1WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BkNDRiZThhNjdmODdjMjUzNmMwYjM1NjkyYTQyYWFhNzVj Y2FmZGE1YTliZmI4NDc4ZjVkOGJlNzgyMGM2MTc0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDEyQXgR/sdk52Y7fTtCWithGAVUWdS+EnFBDfoinqhocV5 TrEwDQ/uiQaabU9UqRC2zj3QcSjQq18A1Qv9vTAdm7UZViQxvEvp2/n8xnqZsuZV oFBJsnHJuu5gpBWMKWpDEExN88alifk9/kCri7YpRHcs9eqvaCz6XJI00NKPOkpF PHHYzfVft1nH9/zcr4mdQZxLHuWB5L3GibxoT5weD5JecjjNoP0gC94i71s+ma0n stZUxA0Lqy2mTHYcq4P70C2GEkgpbPDqpsEQJViuTZRSp4Au2+oPRzkmEinA46N0 8TOB3nYyXPL7YuOjHiVt6Es69kOwx/7Chbg9U/qZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUhLtns4edRJGSFRtEbedX0BPnEV4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzk0ZjQzNjZiLWU1ODItNDgyNy1hMWEyLTRlZjAwYThmZTQ0Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASm2UwDQYJKoZIhvcNAQELBQADggEBAGosxiK3mZaDoI5LwzXLIGcd9nVH j8M3hmO9zCpyLzscBt4JHum+r+tQ9Q1HHiycwOfJdXeU1MWPIyWjvBuIzvdXBYB5 ZUd4PlF1yP3Eji2noQXVUIBmpIEJNLB5wkB0shnuppggkR05Py+++YEtI3o7JODu 09KfGFzOwtKsNxIR6BNU931C4jEBWSEWud3GrtzK+ljrfQZLhZ7m8uueCNMQjaS4 rIjUCJPrB00JXgrTaQ4uws+WbG9IxIxbP7g/u8vuQIEywu67T6nD+mSYjRLSNOzw yp5Hlc6OtyiQyHROxxd8Nme0LEbq7khVZ+mJjec9tyMgqwd1jBZswf/Hhb0= -----END CERTIFICATE-----Generated at Fri Oct 17 22:02:40 2025 by rpki-client