$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a799a239-0440-4669-91f1-6cef88ee2c61.roa File: a799a239-0440-4669-91f1-6cef88ee2c61.roa (raw, json) Hash identifier: U4xA7taBzieym5CWI6a6L9F57K8cFYodXKqPFys0XOo= Subject key identifier: 8C:89:14:1A:37:ED:FB:85:0C:A8:AC:13:D0:D9:21:3B:EC:21:5C:07 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 46882104452D8A075B580D806DD7E50A91690FE5 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a799a239-0440-4669-91f1-6cef88ee2c61.roa Signing time: Mon 22 Sep 2025 19:31:57 +0000 ROA not before: Mon 22 Sep 2025 19:31:57 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.164.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:88:21:04:45:2d:8a:07:5b:58:0d:80:6d:d7:e5:0a:91:69:0f:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 19:31:57 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=2a168da2ef810d733d808e51a842726412c1e756b67e7218790247144de12f4f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fc:3f:69:e0:f5:1b:7c:eb:b3:1e:5f:6e:12: 4e:f3:cb:2f:48:b5:5a:c7:c6:83:4f:3a:d8:78:94: ed:6c:52:46:aa:0d:e3:6a:b5:e6:96:27:ec:63:53: b8:d2:00:54:31:be:bc:dd:49:a2:bc:35:34:b5:79: ce:f0:6a:5c:a2:fa:96:0f:5d:fe:bb:1d:a7:72:e3: f9:f6:be:fa:42:8f:8c:f5:f9:6c:6e:bc:42:93:84: 46:f1:90:63:19:6a:1d:23:ba:6d:05:ff:5e:65:a0: 4d:01:2f:dc:97:23:ae:1e:a0:c1:71:84:17:ef:92: 70:58:a3:3e:98:f0:7a:32:3b:72:80:dd:15:db:14: 22:29:7b:66:53:36:5c:39:97:59:01:05:b8:cc:51: e9:bf:14:f3:df:d3:90:25:2e:de:55:ee:d6:93:ae: 31:31:1b:df:c1:e6:98:47:a4:c4:3f:2a:c5:4b:83: d0:d0:70:c8:5b:03:30:16:eb:af:fd:76:34:8d:fc: 70:1a:ca:6f:a1:a7:6a:0a:ff:77:2a:36:d6:e7:7e: e9:9a:36:04:62:9d:1b:3a:3d:8c:69:27:5d:24:38: 42:e5:7d:39:14:aa:da:e4:da:08:c7:de:c9:ba:d2: 4e:dd:10:d1:01:67:40:ff:4b:e4:cd:18:43:8b:96: 89:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:89:14:1A:37:ED:FB:85:0C:A8:AC:13:D0:D9:21:3B:EC:21:5C:07 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a799a239-0440-4669-91f1-6cef88ee2c61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.164.92.0/24 Signature Algorithm: sha256WithRSAEncryption 24:e8:4c:d6:5b:96:b5:76:67:2f:df:8f:ac:4e:76:de:48:fb: 97:de:0b:92:0a:26:70:42:a3:88:fc:55:10:1b:61:9b:2d:95: c1:17:0c:40:31:98:a4:7d:5c:18:d9:25:84:a5:db:54:dc:48: a0:66:c6:9f:01:12:58:93:49:e3:d9:1b:fd:e9:59:2b:20:29: 89:c5:a4:0d:d3:7b:3c:e1:aa:e8:60:72:24:33:93:20:20:1d: d3:31:f3:6a:38:5b:47:9d:45:9b:40:9e:ec:c5:68:3f:e4:04: 3c:f4:9f:a6:5d:1c:7a:62:71:23:30:c4:b9:8a:6f:b7:2b:b9: f9:29:85:1f:f4:b8:9a:f1:52:d7:07:f5:83:72:45:2d:1c:57: fd:e9:07:28:b4:a2:d4:94:0f:13:78:49:7a:d9:a5:e4:06:d6: 44:e9:2d:fe:5f:f2:fa:db:d3:13:27:3f:66:99:45:5e:51:f5: f0:84:0c:09:34:e4:f7:ce:4c:7d:d9:27:06:34:ef:08:d5:09: fe:6b:4f:53:01:08:37:4a:ea:2b:96:f4:ee:e0:10:10:d9:01: 67:a2:b1:dd:aa:0e:f2:29:d3:3b:66:b0:89:d9:0b:a3:2c:47: 30:0c:22:7c:54:de:b9:b6:d4:c7:4a:94:9e:aa:e6:8b:49:5c: 5c:d0:66:a1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURoghBEUtigdbWA2AbdflCpFpD+UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMTkzMTU3WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AyYTE2OGRhMmVmODEwZDczM2Q4MDhlNTFhODQyNzI2NDEy YzFlNzU2YjY3ZTcyMTg3OTAyNDcxNDRkZTEyZjRmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCy/D9p4PUbfOuzHl9uEk7zyy9ItVrHxoNPOth4lO1sUkaq DeNqteaWJ+xjU7jSAFQxvrzdSaK8NTS1ec7walyi+pYPXf67Hady4/n2vvpCj4z1 +WxuvEKThEbxkGMZah0jum0F/15loE0BL9yXI64eoMFxhBfvknBYoz6Y8HoyO3KA 3RXbFCIpe2ZTNlw5l1kBBbjMUem/FPPf05AlLt5V7taTrjExG9/B5phHpMQ/KsVL g9DQcMhbAzAW66/9djSN/HAaym+hp2oK/3cqNtbnfumaNgRinRs6PYxpJ10kOELl fTkUqtrk2gjH3sm60k7dENEBZ0D/S+TNGEOLlom1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUjIkUGjft+4UMqKwT0NkhO+whXAcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2E3OTlhMjM5LTA0NDAtNDY2OS05MWYxLTZjZWY4OGVlMmM2MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASpFwwDQYJKoZIhvcNAQELBQADggEBACToTNZblrV2Zy/fj6xOdt5I+5fe C5IKJnBCo4j8VRAbYZstlcEXDEAxmKR9XBjZJYSl21TcSKBmxp8BEliTSePZG/3p WSsgKYnFpA3TezzhquhgciQzkyAgHdMx82o4W0edRZtAnuzFaD/kBDz0n6ZdHHpi cSMwxLmKb7crufkphR/0uJrxUtcH9YNyRS0cV/3pByi0otSUDxN4SXrZpeQG1kTp Lf5f8vrb0xMnP2aZRV5R9fCEDAk05PfOTH3ZJwY07wjVCf5rT1MBCDdK6iuW9O7g EBDZAWeisd2qDvIp0ztmsInZC6MsRzAMInxU3rm21MdKlJ6q5otJXFzQZqE= -----END CERTIFICATE-----Generated at Fri Oct 17 22:05:16 2025 by rpki-client