$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/af61d29b-6070-4ed4-9ce1-b52eda046968.roa File: af61d29b-6070-4ed4-9ce1-b52eda046968.roa (raw, json) Hash identifier: YTzyyGtvwW5A5BtnbDls9ds9f1EDApYzn7YprmE4XGI= Subject key identifier: B8:D1:A6:F7:B4:C0:98:D9:E0:F0:24:D9:EF:D4:53:7C:6C:4A:E1:FF Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 434B2CE99AD73E62CAB69B0AC0E5C5566DBBF973 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/af61d29b-6070-4ed4-9ce1-b52eda046968.roa Signing time: Wed 24 Sep 2025 22:07:08 +0000 ROA not before: Wed 24 Sep 2025 22:07:08 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.67.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:4b:2c:e9:9a:d7:3e:62:ca:b6:9b:0a:c0:e5:c5:56:6d:bb:f9:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 22:07:08 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=eeeb8939929b5dcef59a09ca4271e5e805d1702206d35322bb870ef8314acce5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:fc:fd:0c:6e:b8:8b:78:1c:59:b7:7a:23:47: 34:dd:1c:a8:0b:b3:7e:a4:b5:af:fe:93:f7:c2:4b: f3:a1:30:31:6b:90:fc:ea:ca:77:0a:7f:21:a2:fd: 91:01:04:0a:a9:d5:35:d1:3b:cf:d4:30:19:14:9f: 17:f7:99:08:1c:08:45:c0:61:c6:86:3d:c7:1a:fc: 84:b0:59:c1:ce:41:bd:7c:72:ef:3c:aa:ce:f0:97: 16:61:f7:a1:5d:9d:c9:b2:5c:83:a4:74:14:4f:b6: 83:f0:b3:10:58:15:e4:a9:8c:4a:bd:12:c0:61:57: c8:9b:f2:fa:ac:ea:76:57:58:a7:99:b3:f9:51:12: 4c:72:ef:5f:f7:6a:60:74:57:4b:1e:dc:54:fd:23: dc:98:f9:93:9d:3d:7b:8d:5c:2f:8f:dc:ea:04:ed: 70:a7:6f:fc:64:6e:54:01:6c:22:0a:dd:dc:d0:94: 2f:b9:e6:db:cb:1d:61:b6:fc:5f:18:43:42:fe:7b: 32:3a:c5:8d:8b:bf:49:e7:40:41:66:64:9d:37:07: e3:24:ea:29:2d:7a:98:af:37:72:36:36:2f:36:11: 98:61:1e:42:96:df:c1:13:d4:2a:44:d1:f4:f2:eb: a0:52:1b:85:3f:02:d9:ce:53:e8:e3:64:96:94:df: 0b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:D1:A6:F7:B4:C0:98:D9:E0:F0:24:D9:EF:D4:53:7C:6C:4A:E1:FF X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/af61d29b-6070-4ed4-9ce1-b52eda046968.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.67.242.0/24 Signature Algorithm: sha256WithRSAEncryption a0:70:fc:e0:5b:fe:06:ad:67:82:35:77:ed:ce:d2:d8:e2:59: ea:45:5a:34:8a:1b:97:88:74:2a:a0:8d:fc:5a:a7:af:00:41: a4:82:64:4b:72:0a:75:d2:0a:cc:00:78:00:4a:d2:30:1b:5e: 35:c3:70:9b:b3:90:b2:73:d2:56:d2:45:d8:0c:7d:22:ed:40: 24:0c:1e:e1:f3:59:ea:7e:55:35:23:bb:87:60:5e:33:73:1d: 43:34:c9:62:a5:f9:28:ac:3e:ad:56:f8:95:44:0c:3e:1f:8a: 59:77:98:de:36:70:69:6a:9b:85:df:71:e6:b0:43:97:d0:4b: 50:97:51:9a:6f:38:37:1b:f7:6d:f1:e6:66:a3:49:ce:a3:aa: c1:a7:7c:53:e6:e5:fd:b8:60:75:1c:2c:11:68:ec:0c:0b:4b: ac:b3:ab:0a:d9:f4:d2:63:72:40:1e:68:08:1d:6c:b1:61:1f: 74:26:7f:17:ee:b1:c3:b7:a0:a9:1a:4c:15:3a:e8:60:1b:00: 72:c3:b9:b6:61:8e:6e:7b:0d:c2:1c:da:5e:85:6d:e6:20:7e: 95:bc:d8:16:2e:69:7d:d7:35:ab:59:78:6a:13:08:67:96:df: 12:50:db:55:6f:51:c2:95:4e:ed:d0:b4:e9:a6:41:dc:2d:b5: 7f:03:01:2c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQ0ss6ZrXPmLKtpsKwOXFVm27+XMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MjIwNzA4WhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BlZWViODkzOTkyOWI1ZGNlZjU5YTA5Y2E0MjcxZTVlODA1 ZDE3MDIyMDZkMzUzMjJiYjg3MGVmODMxNGFjY2U1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDr/P0MbriLeBxZt3ojRzTdHKgLs36kta/+k/fCS/OhMDFr kPzqyncKfyGi/ZEBBAqp1TXRO8/UMBkUnxf3mQgcCEXAYcaGPcca/ISwWcHOQb18 cu88qs7wlxZh96FdncmyXIOkdBRPtoPwsxBYFeSpjEq9EsBhV8ib8vqs6nZXWKeZ s/lREkxy71/3amB0V0se3FT9I9yY+ZOdPXuNXC+P3OoE7XCnb/xkblQBbCIK3dzQ lC+55tvLHWG2/F8YQ0L+ezI6xY2Lv0nnQEFmZJ03B+Mk6iktepivN3I2Ni82EZhh HkKW38ET1CpE0fTy66BSG4U/AtnOU+jjZJaU3wuXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUuNGm97TAmNng8CTZ79RTfGxK4f8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2FmNjFkMjliLTYwNzAtNGVkNC05Y2UxLWI1MmVkYTA0Njk2OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASQ/IwDQYJKoZIhvcNAQELBQADggEBAKBw/OBb/gatZ4I1d+3O0tjiWepF WjSKG5eIdCqgjfxap68AQaSCZEtyCnXSCswAeABK0jAbXjXDcJuzkLJz0lbSRdgM fSLtQCQMHuHzWep+VTUju4dgXjNzHUM0yWKl+SisPq1W+JVEDD4fill3mN42cGlq m4XfceawQ5fQS1CXUZpvODcb923x5majSc6jqsGnfFPm5f24YHUcLBFo7AwLS6yz qwrZ9NJjckAeaAgdbLFhH3QmfxfuscO3oKkaTBU66GAbAHLDubZhjm57DcIc2l6F beYgfpW82BYuaX3XNatZeGoTCGeW3xJQ21VvUcKVTu3QtOmmQdwttX8DASw= -----END CERTIFICATE-----Generated at Fri Oct 17 21:55:30 2025 by rpki-client