$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aebd0446-cd2b-42f0-b35e-c9d8e6448840.roa File: aebd0446-cd2b-42f0-b35e-c9d8e6448840.roa (raw, json) Hash identifier: fIICgw/GPS11gyaRpsDUj7+a2JZSLyFcw5zvE2u4Ry0= Subject key identifier: A8:A2:CD:D1:3B:0C:31:66:75:34:40:25:68:95:01:4E:C4:F6:A8:B2 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 423D899EF1F4F4CC95C74A907DB35EEE9A0D4FCE Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aebd0446-cd2b-42f0-b35e-c9d8e6448840.roa Signing time: Wed 24 Sep 2025 21:37:12 +0000 ROA not before: Wed 24 Sep 2025 21:37:12 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.65.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:3d:89:9e:f1:f4:f4:cc:95:c7:4a:90:7d:b3:5e:ee:9a:0d:4f:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 21:37:12 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=1392a0f95c1d4d2a40d721554c88d2cbcb7e090f5d940553e96b25047cc17930, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:06:46:9c:87:3a:1b:56:6a:84:d1:da:fc:bb: 89:d7:20:4f:78:85:55:d1:64:4c:04:8a:e8:5b:96: 62:a8:d9:74:5d:61:46:bc:da:a6:ed:b4:79:6d:7b: dc:7f:cd:5e:dc:b2:ad:06:fd:ee:6e:b2:26:af:d7: da:f4:e3:81:31:3b:de:59:a6:49:59:41:0d:55:df: 86:58:43:f2:8b:81:d8:6f:59:89:a4:98:36:53:54: 57:02:33:2b:bf:32:86:ba:5c:cc:fc:0e:24:7c:b3: c9:94:5f:99:ad:1c:c9:31:6a:6c:a4:f8:12:90:93: c1:22:15:97:45:ed:d3:83:89:22:89:51:c3:26:2b: 9d:c0:d4:e9:cd:84:16:d4:af:de:66:7e:10:3d:e6: 68:cf:7a:72:23:2f:88:a0:4f:30:57:45:c0:74:97: 51:4b:e9:b9:e9:87:7e:36:13:19:98:34:86:d2:7c: 4c:59:37:9c:d6:48:b3:26:bf:d4:29:4c:8c:97:a2: 20:1a:09:fc:ed:96:93:4a:76:a6:3e:9c:c0:11:33: e1:ff:66:22:81:4d:c6:89:e7:d7:ff:8a:8f:19:19: 03:c5:46:d3:15:9f:1d:2f:3d:ff:b8:a3:d9:ed:06: 5c:03:d8:42:fd:a1:b7:01:e9:03:9f:ad:f0:32:52: 8d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:A2:CD:D1:3B:0C:31:66:75:34:40:25:68:95:01:4E:C4:F6:A8:B2 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aebd0446-cd2b-42f0-b35e-c9d8e6448840.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.65.47.0/24 Signature Algorithm: sha256WithRSAEncryption 96:92:d3:a9:31:e3:71:d1:87:9d:f3:49:47:fa:2f:c4:e9:a3: 9a:d5:10:d6:43:f1:5d:9f:1a:49:23:db:27:a0:02:0a:7e:27: 96:7d:58:2f:61:60:65:2d:e1:cc:21:df:e1:f1:cf:9b:7d:c7: 26:d2:fe:0d:26:8c:c2:eb:13:90:e5:5a:3a:58:70:5c:b9:8e: af:11:60:c4:f2:71:8b:32:4d:4d:9b:d2:88:d7:3e:ac:fb:25: 7d:ba:d4:04:ff:19:12:4a:b0:02:cf:cb:ad:d7:4b:ce:06:3f: 02:09:3f:9b:2c:45:c8:6d:a0:fa:f0:60:72:20:6d:af:c1:04: 1f:9e:7e:24:28:15:e8:2a:71:84:57:89:d4:b3:40:7e:68:5e: 93:75:31:44:a3:ed:cf:b9:9f:f5:04:45:f8:ff:47:3e:d1:42: 5c:46:b4:47:f3:70:86:50:aa:9a:5d:66:f0:89:6c:7a:6f:c1: a4:b7:5f:42:37:c8:79:71:f3:ec:d3:bd:4c:35:40:27:15:70: fb:bf:13:7a:50:ee:18:0c:55:62:c2:f0:ae:4f:d6:3e:8b:a3: 6a:a8:92:75:c5:c9:f9:b9:66:4c:3b:fc:52:88:44:bf:9d:10: 14:85:31:36:b8:f0:44:f5:1e:18:80:4c:83:60:49:94:35:7d: 8b:90:6c:42 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQj2JnvH09MyVx0qQfbNe7poNT84wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MjEzNzEyWhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0AxMzkyYTBmOTVjMWQ0ZDJhNDBkNzIxNTU0Yzg4ZDJjYmNi N2UwOTBmNWQ5NDA1NTNlOTZiMjUwNDdjYzE3OTMwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCaBkachzobVmqE0dr8u4nXIE94hVXRZEwEiuhblmKo2XRd YUa82qbttHlte9x/zV7csq0G/e5usiav19r044ExO95ZpklZQQ1V34ZYQ/KLgdhv WYmkmDZTVFcCMyu/Moa6XMz8DiR8s8mUX5mtHMkxamyk+BKQk8EiFZdF7dODiSKJ UcMmK53A1OnNhBbUr95mfhA95mjPenIjL4igTzBXRcB0l1FL6bnph342ExmYNIbS fExZN5zWSLMmv9QpTIyXoiAaCfztlpNKdqY+nMARM+H/ZiKBTcaJ59f/io8ZGQPF RtMVnx0vPf+4o9ntBlwD2EL9obcB6QOfrfAyUo0pAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUqKLN0TsMMWZ1NEAlaJUBTsT2qLIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2FlYmQwNDQ2LWNkMmItNDJmMC1iMzVlLWM5ZDhlNjQ0ODg0MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASQS8wDQYJKoZIhvcNAQELBQADggEBAJaS06kx43HRh53zSUf6L8Tpo5rV ENZD8V2fGkkj2yegAgp+J5Z9WC9hYGUt4cwh3+Hxz5t9xybS/g0mjMLrE5DlWjpY cFy5jq8RYMTycYsyTU2b0ojXPqz7JX261AT/GRJKsALPy63XS84GPwIJP5ssRcht oPrwYHIgba/BBB+efiQoFegqcYRXidSzQH5oXpN1MUSj7c+5n/UERfj/Rz7RQlxG tEfzcIZQqppdZvCJbHpvwaS3X0I3yHlx8+zTvUw1QCcVcPu/E3pQ7hgMVWLC8K5P 1j6Lo2qoknXFyfm5Zkw7/FKIRL+dEBSFMTa48ET1HhiATINgSZQ1fYuQbEI= -----END CERTIFICATE-----Generated at Fri Oct 17 23:48:17 2025 by rpki-client