$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/97c2aac1-04af-4f3d-8729-014335c73580.roa File: 97c2aac1-04af-4f3d-8729-014335c73580.roa (raw, json) Hash identifier: SBS9Iplq3ikSxTN1Yw3tJzgquW792LameW7dDf6gDIc= Subject key identifier: 5F:F0:76:A9:04:0F:43:56:65:F7:EA:07:22:F3:3A:76:03:CB:91:8B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1ABFA611E4ADA6A08B698A8005A7236A0871F197 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/97c2aac1-04af-4f3d-8729-014335c73580.roa Signing time: Mon 22 Sep 2025 17:30:02 +0000 ROA not before: Mon 22 Sep 2025 17:30:02 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.155.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:bf:a6:11:e4:ad:a6:a0:8b:69:8a:80:05:a7:23:6a:08:71:f1:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 17:30:02 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=4ae9ab0a9f92940c98595b6c5dce62911c1399c44fd51f101635e237e89c2c0d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:cd:4b:19:96:71:30:68:37:72:b6:e3:6e:f2: c6:5b:8d:6f:f1:ff:67:8e:e2:be:88:a1:93:fb:8e: 38:45:b4:d1:5d:08:df:7f:1a:f9:80:55:51:15:10: 2f:1a:55:31:6f:00:4b:74:a6:51:d8:d0:9c:54:00: 99:81:10:da:ec:59:f7:6c:bb:e7:1d:9c:0d:61:f4: d2:b3:ea:8b:5c:7a:4f:47:15:ee:b5:98:9a:36:4b: c2:0b:dc:b1:11:40:29:66:1a:d8:5e:13:57:6f:b3: 1e:fb:54:00:4c:6f:e9:60:21:1b:72:41:31:af:61: 50:72:b4:0d:e5:11:6b:f9:08:35:65:6d:c9:3d:a3: ee:d5:1d:f6:bc:72:7f:47:09:95:68:40:bd:eb:41: ab:b0:9e:75:72:17:bc:74:8e:ea:6d:bc:03:21:30: 99:d6:f1:e8:eb:fe:48:27:67:9f:91:14:fc:77:73: 5c:e2:83:47:b2:c3:1d:cd:e1:cd:3c:1c:52:93:b7: 4e:ec:b9:81:0a:4f:9c:ea:ab:60:10:d3:5b:46:44: 7d:60:73:fd:ca:4e:dc:68:d4:10:66:a9:3c:c3:c5: c0:c2:cf:64:48:9c:eb:47:a7:97:70:0e:1b:79:56: 38:34:29:6b:d7:37:60:78:6d:e4:68:a7:19:5c:f3: ff:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:F0:76:A9:04:0F:43:56:65:F7:EA:07:22:F3:3A:76:03:CB:91:8B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/97c2aac1-04af-4f3d-8729-014335c73580.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.155.218.0/24 Signature Algorithm: sha256WithRSAEncryption 26:90:b1:f6:71:52:95:97:66:36:2c:c5:12:33:e5:6d:b3:82: 26:4a:4a:19:66:fa:13:18:66:8a:65:d8:b6:b8:3a:ec:bb:21: 7e:fa:4d:6f:ba:ad:dd:4f:3c:23:29:45:d1:be:73:9b:c5:90: c8:67:51:9e:c0:51:0d:02:fb:bc:ff:97:7b:c9:0d:cc:95:00: 45:7c:70:ca:dd:3d:68:02:58:58:71:91:c4:38:90:21:cd:ca: 82:95:c0:9c:da:8e:3d:c3:ce:af:52:0a:bc:ee:48:4b:b8:fb: d5:ac:b6:08:76:e5:5e:8d:46:9e:47:07:4a:6b:98:7a:35:d6: 94:49:32:d8:2b:ef:dc:59:06:1d:2b:78:04:4e:38:83:45:ea: 0c:7c:f1:7b:83:ab:8e:2f:46:e1:4c:9f:8d:bf:c9:b8:f2:2e: 30:c3:c6:fb:9d:75:ae:08:14:57:c6:9a:44:18:7e:af:d9:fb: c2:1a:1b:6f:17:ec:f7:cd:f5:ba:5f:89:41:05:f0:bc:96:1f: d8:47:43:7a:db:80:ee:44:fa:b2:74:1e:bb:90:a3:1f:59:9b: d0:0a:c6:75:fb:05:0e:70:b2:93:02:7b:2e:d3:ce:2b:aa:38: 39:13:bd:d5:19:9c:e1:c0:61:44:15:25:a2:63:cb:1e:27:73: d9:97:18:4d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGr+mEeStpqCLaYqABacjaghx8ZcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMTczMDAyWhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A0YWU5YWIwYTlmOTI5NDBjOTg1OTViNmM1ZGNlNjI5MTFj MTM5OWM0NGZkNTFmMTAxNjM1ZTIzN2U4OWMyYzBkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrzUsZlnEwaDdytuNu8sZbjW/x/2eO4r6IoZP7jjhFtNFd CN9/GvmAVVEVEC8aVTFvAEt0plHY0JxUAJmBENrsWfdsu+cdnA1h9NKz6otcek9H Fe61mJo2S8IL3LERQClmGtheE1dvsx77VABMb+lgIRtyQTGvYVBytA3lEWv5CDVl bck9o+7VHfa8cn9HCZVoQL3rQauwnnVyF7x0juptvAMhMJnW8ejr/kgnZ5+RFPx3 c1zig0eywx3N4c08HFKTt07suYEKT5zqq2AQ01tGRH1gc/3KTtxo1BBmqTzDxcDC z2RInOtHp5dwDht5Vjg0KWvXN2B4beRopxlc8/9XAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUX/B2qQQPQ1Zl9+oHIvM6dgPLkYswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzk3YzJhYWMxLTA0YWYtNGYzZC04NzI5LTAxNDMzNWM3MzU4MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASm9owDQYJKoZIhvcNAQELBQADggEBACaQsfZxUpWXZjYsxRIz5W2zgiZK Shlm+hMYZopl2La4Ouy7IX76TW+6rd1PPCMpRdG+c5vFkMhnUZ7AUQ0C+7z/l3vJ DcyVAEV8cMrdPWgCWFhxkcQ4kCHNyoKVwJzajj3Dzq9SCrzuSEu4+9Wstgh25V6N Rp5HB0prmHo11pRJMtgr79xZBh0reAROOINF6gx88XuDq44vRuFMn42/ybjyLjDD xvudda4IFFfGmkQYfq/Z+8IaG28X7PfN9bpfiUEF8LyWH9hHQ3rbgO5E+rJ0HruQ ox9Zm9AKxnX7BQ5wspMCey7TziuqODkTvdUZnOHAYUQVJaJjyx4nc9mXGE0= -----END CERTIFICATE-----Generated at Fri Oct 17 22:04:36 2025 by rpki-client