$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a2b3123a-278b-4ccf-9e6a-c02c37918469.roa File: a2b3123a-278b-4ccf-9e6a-c02c37918469.roa (raw, json) Hash identifier: rmqykYSNq75KWaRkD6TG7FCmzZJ+o/HRdeb+C9nuQ6s= Subject key identifier: 10:EC:F9:14:EC:CB:AE:0A:EA:14:4C:E5:C2:AB:FB:99:AA:81:84:92 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2595BB3A86A40B1E2EA68D1664DFB469DA3536BD Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a2b3123a-278b-4ccf-9e6a-c02c37918469.roa Signing time: Wed 24 Sep 2025 21:14:35 +0000 ROA not before: Wed 24 Sep 2025 21:14:35 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.64.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:95:bb:3a:86:a4:0b:1e:2e:a6:8d:16:64:df:b4:69:da:35:36:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 21:14:35 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=9307a21b9f5d2dde37c0496704869c9f35cd058d217be46ef543986524756d95, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:43:e8:51:75:0a:85:ef:74:87:18:65:62:0e: 4f:0b:9f:39:89:39:46:46:62:2c:92:67:4b:0c:57: 38:0c:26:b5:69:38:01:63:8f:db:fa:6b:64:50:2d: 49:6c:6b:13:f6:15:b1:1f:ee:1d:1b:ec:7e:e2:43: 17:60:c3:31:ee:52:4f:0f:e5:a4:97:bb:17:27:71: 42:bc:6e:c6:64:a6:f9:2d:b1:0e:e7:48:cd:39:de: ea:97:52:92:02:a8:24:dc:bf:e0:e6:46:2c:95:7d: 12:28:8c:f4:e6:f8:91:91:6f:73:b1:6b:84:b0:b3: ce:40:12:23:69:34:16:bb:b9:05:ff:d2:e6:a2:09: 21:a9:2f:dd:e6:fa:0f:31:99:81:f4:b3:9b:8b:61: cd:ae:2b:1b:5e:23:1b:4a:5a:85:98:7f:90:e0:ff: f8:25:75:77:d9:88:f3:b2:95:a6:91:1f:8e:61:4d: 0d:b8:e0:4b:04:8c:f1:be:0a:ae:14:c9:fb:1a:77: 5b:46:09:2f:c5:aa:a0:b5:bb:aa:07:a5:c3:25:f9: 23:07:6e:9a:46:41:d1:69:4a:3b:21:3c:01:e9:f2: e6:b6:97:c1:b9:4e:83:94:d4:41:68:60:66:8d:b5: 32:d7:1f:17:a9:35:1e:c9:6c:ae:ef:17:f4:8e:aa: 0c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:EC:F9:14:EC:CB:AE:0A:EA:14:4C:E5:C2:AB:FB:99:AA:81:84:92 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a2b3123a-278b-4ccf-9e6a-c02c37918469.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.64.214.0/24 Signature Algorithm: sha256WithRSAEncryption b4:d0:bc:89:ed:e1:07:01:e2:35:df:6d:e1:22:c2:3b:00:dd: 4c:a1:5f:47:07:0d:4e:7d:ef:ca:8b:e6:70:0b:a9:ad:5e:25: 20:eb:ee:d3:7d:4b:0c:80:93:58:d0:d1:67:b5:74:11:59:de: 53:02:cc:75:ff:62:af:15:42:f5:b1:c6:61:9e:20:37:71:57: b0:b4:f2:e7:dd:88:e4:aa:cc:69:45:ba:fe:c6:75:aa:f3:dc: ed:f3:48:83:26:c2:92:7a:7e:ab:63:5e:8f:df:1c:33:e8:e9: 1e:d5:3c:6b:02:8c:52:bf:c2:d8:77:3e:b8:16:43:51:56:a0: 72:fd:74:f9:cd:66:c9:87:11:c2:b6:7d:6e:11:8e:dc:a6:0e: 3f:06:2e:9e:41:8b:a7:fe:79:25:69:e6:22:37:6a:57:55:45: 39:2f:01:7c:2d:d6:28:b8:e7:7a:36:78:1d:c6:8d:fa:b3:70: 79:bd:04:42:c9:5b:1f:8c:08:e9:0e:98:e3:ad:97:89:f1:4d: f9:0b:d2:a3:72:bf:d0:25:a3:f0:e3:8c:0d:2d:81:cb:b1:6a: c5:71:8e:b0:31:16:cd:ac:98:f5:43:17:64:d5:0d:c7:d5:ed: 0f:0c:5d:63:b4:93:b4:e6:52:2d:99:3d:05:de:97:c6:d4:f4: 0f:c8:21:2d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJZW7OoakCx4upo0WZN+0ado1Nr0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MjExNDM1WhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A5MzA3YTIxYjlmNWQyZGRlMzdjMDQ5NjcwNDg2OWM5ZjM1 Y2QwNThkMjE3YmU0NmVmNTQzOTg2NTI0NzU2ZDk1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDQ+hRdQqF73SHGGViDk8LnzmJOUZGYiySZ0sMVzgMJrVp OAFjj9v6a2RQLUlsaxP2FbEf7h0b7H7iQxdgwzHuUk8P5aSXuxcncUK8bsZkpvkt sQ7nSM053uqXUpICqCTcv+DmRiyVfRIojPTm+JGRb3Oxa4Sws85AEiNpNBa7uQX/ 0uaiCSGpL93m+g8xmYH0s5uLYc2uKxteIxtKWoWYf5Dg//gldXfZiPOylaaRH45h TQ244EsEjPG+Cq4Uyfsad1tGCS/FqqC1u6oHpcMl+SMHbppGQdFpSjshPAHp8ua2 l8G5ToOU1EFoYGaNtTLXHxepNR7JbK7vF/SOqgyPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUEOz5FOzLrgrqFEzlwqv7maqBhJIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2EyYjMxMjNhLTI3OGItNGNjZi05ZTZhLWMwMmMzNzkxODQ2OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASQNYwDQYJKoZIhvcNAQELBQADggEBALTQvInt4QcB4jXfbeEiwjsA3Uyh X0cHDU5978qL5nALqa1eJSDr7tN9SwyAk1jQ0We1dBFZ3lMCzHX/Yq8VQvWxxmGe IDdxV7C08ufdiOSqzGlFuv7Gdarz3O3zSIMmwpJ6fqtjXo/fHDPo6R7VPGsCjFK/ wth3PrgWQ1FWoHL9dPnNZsmHEcK2fW4RjtymDj8GLp5Bi6f+eSVp5iI3aldVRTkv AXwt1ii453o2eB3GjfqzcHm9BELJWx+MCOkOmOOtl4nxTfkL0qNyv9Alo/DjjA0t gcuxasVxjrAxFs2smPVDF2TVDcfV7Q8MXWO0k7TmUi2ZPQXel8bU9A/IIS0= -----END CERTIFICATE-----Generated at Fri Oct 17 22:04:45 2025 by rpki-client