$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a1fc4b65-da3a-4e71-9e72-233f13fb4521.roa File: a1fc4b65-da3a-4e71-9e72-233f13fb4521.roa (raw, json) Hash identifier: gfNlihL/7SfFvUL+XygoYnfdOfI/RcbDIgVCnRZ3hJ0= Subject key identifier: 10:2A:B6:43:E4:5E:DC:1D:2A:1F:86:ED:D3:7C:71:5C:AD:86:F6:58 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 19A94A2FC49DFE3260EA80D7798CBF8101763869 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a1fc4b65-da3a-4e71-9e72-233f13fb4521.roa Signing time: Mon 22 Sep 2025 18:47:08 +0000 ROA not before: Mon 22 Sep 2025 18:47:08 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.160.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:a9:4a:2f:c4:9d:fe:32:60:ea:80:d7:79:8c:bf:81:01:76:38:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 18:47:08 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=1005cbb494edb95def0d519964890353edea3cef814037bd7654829b312caf36, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fc:5e:c5:21:31:87:4e:ef:38:c6:63:6e:99: 72:b5:23:26:2b:62:36:13:a1:d9:6d:c4:45:3e:a7: da:61:a5:89:35:b9:3f:49:47:e6:f1:f5:19:40:7b: 00:7f:a3:1d:d4:c6:1f:29:fb:ae:97:c0:33:23:cb: 4c:94:1e:89:82:3a:61:aa:8a:d9:84:df:32:c1:c5: d1:7b:95:29:2b:c1:ca:46:93:cc:a4:ba:5b:f1:74: 98:1c:3a:be:76:3d:b8:3a:d2:73:21:33:0c:ee:78: 9e:81:4a:32:65:2e:f4:d2:91:4a:e0:ea:99:eb:fe: e3:ec:66:9f:c1:f5:3c:9a:c7:f4:c6:ec:47:22:6e: 92:af:87:84:57:c7:dc:f3:14:9a:86:52:e3:fc:e1: 4c:97:e9:4f:d9:ea:84:7b:cc:1c:30:77:b1:27:42: 82:25:08:7d:61:c2:b0:5d:57:e0:5a:3d:d2:de:a2: 70:90:a7:dc:b9:3a:dd:4c:60:ab:ad:28:61:93:75: f1:f9:c9:16:bc:14:78:e1:eb:c2:24:d5:a6:b1:d1: ea:d3:c1:3b:b8:cf:49:f8:0d:2e:6b:01:d7:43:92: e4:56:f6:7a:d7:2b:13:f1:2e:61:70:4c:d8:0d:cd: df:30:0c:7f:8a:4d:66:f1:27:22:7e:06:fa:e1:3a: 84:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:2A:B6:43:E4:5E:DC:1D:2A:1F:86:ED:D3:7C:71:5C:AD:86:F6:58 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a1fc4b65-da3a-4e71-9e72-233f13fb4521.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.160.204.0/23 Signature Algorithm: sha256WithRSAEncryption 76:d3:d7:7a:4e:10:b4:95:fd:47:e8:93:43:47:aa:cd:ea:c8: 25:10:ce:0c:9e:81:48:f6:0c:28:11:89:e8:93:5b:79:c8:d3: 3f:36:e8:2d:59:1e:cd:db:90:bd:d5:e8:29:60:78:cc:bd:bf: 64:aa:1e:70:b0:e4:2f:51:33:19:09:90:b6:f7:61:ac:25:d0: 76:ac:00:1e:a4:d6:b2:f9:0c:79:4e:66:d1:1f:d2:f6:42:db: d8:f6:a5:64:bd:30:de:e5:70:e6:e0:2f:2e:fb:6f:cf:06:65: 84:11:29:d8:93:be:11:cd:06:0b:7d:ea:20:40:08:ae:fe:c0: c8:ed:27:06:21:f2:a4:f1:3f:cf:6c:f0:5b:76:e7:41:de:52: e2:1c:52:f3:fa:82:f6:8b:f9:8c:be:a8:bc:84:76:25:2f:cb: b8:78:04:d0:13:71:b6:47:71:ce:27:e0:1a:cc:48:e1:d9:5d: 5b:cf:49:5d:0e:a8:77:86:2b:52:2d:0b:d6:25:f7:a7:63:1f: 0d:b3:70:04:4f:c2:cf:66:c1:45:78:11:46:60:6c:54:5a:71: da:48:6a:22:53:08:11:b3:62:06:48:38:6f:58:bb:e1:be:6d: c0:a7:fd:24:02:88:b5:c7:93:97:37:79:11:aa:4e:80:f7:b8: 29:2e:39:b3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGalKL8Sd/jJg6oDXeYy/gQF2OGkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMTg0NzA4WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AxMDA1Y2JiNDk0ZWRiOTVkZWYwZDUxOTk2NDg5MDM1M2Vk ZWEzY2VmODE0MDM3YmQ3NjU0ODI5YjMxMmNhZjM2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7/F7FITGHTu84xmNumXK1IyYrYjYTodltxEU+p9phpYk1 uT9JR+bx9RlAewB/ox3Uxh8p+66XwDMjy0yUHomCOmGqitmE3zLBxdF7lSkrwcpG k8ykulvxdJgcOr52Pbg60nMhMwzueJ6BSjJlLvTSkUrg6pnr/uPsZp/B9Tyax/TG 7EcibpKvh4RXx9zzFJqGUuP84UyX6U/Z6oR7zBwwd7EnQoIlCH1hwrBdV+BaPdLe onCQp9y5Ot1MYKutKGGTdfH5yRa8FHjh68Ik1aax0erTwTu4z0n4DS5rAddDkuRW 9nrXKxPxLmFwTNgNzd8wDH+KTWbxJyJ+BvrhOoQ/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUECq2Q+Re3B0qH4bt03xxXK2G9lgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2ExZmM0YjY1LWRhM2EtNGU3MS05ZTcyLTIzM2YxM2ZiNDUyMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESoMwwDQYJKoZIhvcNAQELBQADggEBAHbT13pOELSV/Ufok0NHqs3qyCUQ zgyegUj2DCgRieiTW3nI0z826C1ZHs3bkL3V6ClgeMy9v2SqHnCw5C9RMxkJkLb3 Yawl0HasAB6k1rL5DHlOZtEf0vZC29j2pWS9MN7lcObgLy77b88GZYQRKdiTvhHN Bgt96iBACK7+wMjtJwYh8qTxP89s8Ft250HeUuIcUvP6gvaL+Yy+qLyEdiUvy7h4 BNATcbZHcc4n4BrMSOHZXVvPSV0OqHeGK1ItC9Yl96djHw2zcARPws9mwUV4EUZg bFRacdpIaiJTCBGzYgZIOG9Yu+G+bcCn/SQCiLXHk5c3eRGqToD3uCkuObM= -----END CERTIFICATE-----Generated at Fri Oct 17 22:04:54 2025 by rpki-client