$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9fabc3cb-191f-4da1-ac81-ca6a21c01bf2.roa File: 9fabc3cb-191f-4da1-ac81-ca6a21c01bf2.roa (raw, json) Hash identifier: VVW/KJao8SwX8eQpEh4aoi0x4YAzFFZSxDsS5xe465E= Subject key identifier: 1F:F0:4C:7F:B5:A5:F2:9E:B7:CD:5F:41:66:40:3E:F8:FC:06:8E:72 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 60FA5DEC68647AA784C38E3C4E78D55CC594BD Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9fabc3cb-191f-4da1-ac81-ca6a21c01bf2.roa Signing time: Mon 22 Sep 2025 20:56:14 +0000 ROA not before: Mon 22 Sep 2025 20:56:14 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.172.12.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:fa:5d:ec:68:64:7a:a7:84:c3:8e:3c:4e:78:d5:5c:c5:94:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 20:56:14 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=3d72e699438a43490b7580262842134bb7ba025a6c70f5ae4926a032d56bd10e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4e:9a:83:70:98:51:1f:65:bf:41:78:67:00: a8:e3:30:e1:d8:0e:29:80:b8:ad:77:c4:86:bc:62: b8:c6:59:f8:4d:c8:f7:19:df:76:a3:0a:6a:78:bf: b3:cb:65:24:1d:61:00:00:99:43:57:56:70:ce:a8: bf:ed:37:19:58:14:27:1c:ba:9c:ef:c1:99:0e:95: 20:de:f0:ad:e2:54:34:dc:36:e4:24:ce:11:f4:2c: f5:32:73:32:55:c4:a1:a1:7f:a1:99:f2:10:bb:30: e3:e0:3a:76:f7:f1:15:65:a8:dc:a4:92:4f:66:f7: 40:52:66:5a:14:01:66:f7:ab:57:b4:2f:90:fb:fa: d4:0c:8d:98:57:fa:a3:7b:32:5c:e5:0a:f1:7e:88: 9e:d0:42:83:6e:bb:90:ce:03:06:68:e5:db:67:b1: 02:3d:6b:01:cc:38:3b:41:cb:31:75:43:ac:8e:70: 40:1c:3b:05:d8:41:41:d3:aa:a9:a2:32:6f:2b:6a: ba:81:53:a4:6d:a3:bd:42:db:78:a4:68:77:23:7b: 58:ee:da:31:45:04:a1:a8:4e:c0:76:e1:10:03:e1: ae:89:04:01:4e:cd:51:49:48:e6:65:94:4b:e2:e7: 2a:6a:29:b5:56:19:b6:6f:e8:40:6f:10:c6:37:c4: 55:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:F0:4C:7F:B5:A5:F2:9E:B7:CD:5F:41:66:40:3E:F8:FC:06:8E:72 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9fabc3cb-191f-4da1-ac81-ca6a21c01bf2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.172.12.0/23 Signature Algorithm: sha256WithRSAEncryption 35:38:d1:a4:8f:48:09:ff:0e:79:43:1a:08:08:0f:1a:16:34: 80:fa:82:7c:3f:0f:28:44:83:5f:a5:0b:83:56:5e:39:78:0b: a7:d3:fc:58:5e:26:e0:d2:a7:98:9e:a3:4e:3a:4c:43:1f:95: 49:84:d7:52:c9:75:db:4d:34:2c:fd:d7:36:26:63:90:26:8d: e2:d8:14:a0:92:f5:fe:d0:0e:ad:96:34:73:4c:05:2a:80:80: 60:12:97:b1:9a:d3:46:19:bb:be:5c:7b:b3:c9:0c:e0:25:58: b1:73:9b:72:74:cc:b4:98:5f:21:9b:65:1d:72:b9:3a:53:ae: 56:85:8e:d4:58:04:84:bb:05:6f:6a:50:af:ed:60:43:24:a4: 70:53:c8:6e:1f:37:9d:9b:48:8e:75:ab:ba:eb:b6:31:e3:d8: 59:b7:cb:d8:76:fa:73:c8:4c:b4:78:a8:5e:11:5c:98:33:aa: 38:85:7d:9d:4e:53:e6:1c:66:92:cc:a2:0c:02:15:76:47:fd: f7:af:79:47:a9:aa:f9:b4:5f:81:bc:d1:36:80:7a:fb:e7:c0: da:20:75:26:ee:09:9b:97:c4:08:1d:77:92:31:38:ac:9d:5d: f5:4c:50:fe:ea:e9:1b:e6:a2:c8:e3:8d:47:db:0f:ab:d1:6d: 73:6f:f8:2c -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITYPpd7GhkeqeEw448TnjVXMWUvTANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzJkZjZmM2IzYTM0YjYzODZkMWEzMmQ4ZjRmYTMxNzhlZjMx ODg3ZDhiNDI4ZGZhYTQ3NjAeFw0yNTA5MjIyMDU2MTRaFw0yNTEwMjcyMzU5NTla MHoxSTBHBgNVBAUTQDNkNzJlNjk5NDM4YTQzNDkwYjc1ODAyNjI4NDIxMzRiYjdi YTAyNWE2YzcwZjVhZTQ5MjZhMDMyZDU2YmQxMGUxLTArBgNVBAMTJDVmMjc2MDQ1 LTViOWYtNDVlZi05MjNkLWYzZmNlMjRhNjIyNTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBALFOmoNwmFEfZb9BeGcAqOMw4dgOKYC4rXfEhrxiuMZZ+E3I 9xnfdqMKani/s8tlJB1hAACZQ1dWcM6ov+03GVgUJxy6nO/BmQ6VIN7wreJUNNw2 5CTOEfQs9TJzMlXEoaF/oZnyELsw4+A6dvfxFWWo3KSST2b3QFJmWhQBZverV7Qv kPv61AyNmFf6o3syXOUK8X6IntBCg267kM4DBmjl22exAj1rAcw4O0HLMXVDrI5w QBw7BdhBQdOqqaIybytquoFTpG2jvULbeKRodyN7WO7aMUUEoahOwHbhEAPhrokE AU7NUUlI5mWUS+LnKmoptVYZtm/oQG8QxjfEVfsCAwEAAaOCArEwggKtMB0GA1Ud DgQWBBQf8Ex/taXynrfNX0FmQD74/AaOcjAfBgNVHSMEGDAWgBQlrdNCsB63pY6t GZAmiLVLP4H0uDAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzg1MWNlZjE3LTEz MmEtNDMzNy1iN2QxLWJmMTZhNTJmZmQwMy9kZjZmM2IzYTM0YjYzODZkMWEzMmQ4 ZjRmYTMxNzhlZjMxODg3ZDhiNDI4ZGZhYTQ3Ni5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9mNzAzNjk2ZS1lNDdiLTRjMjAtYmQ5My02Zjgw OTA0ZTQyZDIvOWZhYmMzY2ItMTkxZi00ZGExLWFjODEtY2E2YTIxYzAxYmYyLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMt NmY4MDkwNGU0MmQyL3RqaHRHakxZOVBveGVPOHhpSDJMUW8zNnBIWS5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEARKsDDANBgkqhkiG9w0BAQsFAAOCAQEANTjRpI9ICf8OeUMaCAgPGhY0gPqC fD8PKESDX6ULg1ZeOXgLp9P8WF4m4NKnmJ6jTjpMQx+VSYTXUsl12000LP3XNiZj kCaN4tgUoJL1/tAOrZY0c0wFKoCAYBKXsZrTRhm7vlx7s8kM4CVYsXObcnTMtJhf IZtlHXK5OlOuVoWO1FgEhLsFb2pQr+1gQySkcFPIbh83nZtIjnWruuu2MePYWbfL 2Hb6c8hMtHioXhFcmDOqOIV9nU5T5hxmksyiDAIVdkf99695R6mq+bRfgbzRNoB6 ++fA2iB1Ju4Jm5fECB13kjE4rJ1d9UxQ/urpG+aiyOONR9sPq9Ftc2/4LA== -----END CERTIFICATE-----Generated at Fri Oct 17 21:58:25 2025 by rpki-client