$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b217d7b0-e57c-4797-814e-369557236c25.roa File: b217d7b0-e57c-4797-814e-369557236c25.roa (raw, json) Hash identifier: RH3gsiMnY4LUdnn8gJUIwTawHTkMnPNorfzRHiTtFNg= Subject key identifier: F3:E8:AB:06:29:3E:70:04:B7:2D:D4:9A:B3:F2:F2:69:05:63:AC:B3 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 43526CAF507E1E9BB9FF4B5BE854D5F209418409 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b217d7b0-e57c-4797-814e-369557236c25.roa Signing time: Wed 24 Sep 2025 22:26:20 +0000 ROA not before: Wed 24 Sep 2025 22:26:20 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.65.40.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:52:6c:af:50:7e:1e:9b:b9:ff:4b:5b:e8:54:d5:f2:09:41:84:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 22:26:20 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=0106f69a5eb68a5169b8c35dd25057ae57b71e74b4a548e91793edf91a1e4db6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:74:23:ae:ed:a7:93:25:0c:69:bc:bb:86:9c: 29:73:57:0f:90:aa:1a:2b:a0:2c:8a:a1:14:99:70: 91:24:d9:22:85:ae:ba:92:5f:91:92:56:b0:77:21: fa:ea:88:1f:da:c6:6d:5a:fc:f6:b4:24:f7:b6:e7: ac:57:aa:3b:19:ef:95:73:99:d9:59:1e:b7:4f:59: e1:24:84:56:0b:66:3f:83:99:72:79:f6:d5:14:a6: 2a:bb:4e:c8:72:0a:50:69:cb:a6:35:ba:64:21:2a: e5:6b:0e:24:2f:8e:65:b4:a3:70:07:12:18:20:04: 7f:31:22:9c:a7:34:f3:d2:75:5f:7a:27:6e:27:e7: d8:2b:28:2f:a8:ca:e1:76:8c:0d:92:67:2e:e2:9d: 46:f4:13:e1:45:e4:b0:b7:a7:d3:cf:9f:d8:39:ca: 14:70:53:fb:65:ea:c3:d1:af:76:0b:59:67:fa:d1: d5:ec:6d:31:4a:ed:39:24:5a:cd:98:8f:ab:5c:6a: e5:54:62:ee:2b:d8:6e:c2:54:25:7a:62:30:56:4a: e5:36:ad:14:99:02:75:19:ae:aa:54:d2:b0:cc:43: fe:a3:de:56:3f:68:19:27:84:58:26:3b:0c:32:3a: 58:d1:26:e9:b3:2f:f2:44:70:61:a8:66:b2:08:0d: 9e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:E8:AB:06:29:3E:70:04:B7:2D:D4:9A:B3:F2:F2:69:05:63:AC:B3 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b217d7b0-e57c-4797-814e-369557236c25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.65.40.0/23 Signature Algorithm: sha256WithRSAEncryption 1c:b7:cd:25:9d:b5:4f:01:2d:bd:0d:14:f6:17:f3:79:8b:c0: 54:a6:88:bc:25:c7:11:19:54:12:89:c6:19:2e:e2:9d:94:a5: 5b:2a:6a:8a:77:fd:4d:7f:84:f1:3e:b4:d3:6e:a8:1e:55:52: 13:53:13:49:7c:5e:ce:82:c1:71:9b:e6:8e:d0:31:5f:50:3d: 53:ba:e5:fb:01:db:e7:fb:a3:0f:43:ca:53:50:53:3c:17:11: 15:50:ba:8e:a1:6c:21:1d:0b:99:2c:70:f3:f7:c8:13:0e:3b: 0a:28:cf:1d:aa:e8:de:8e:28:fe:8f:d7:9c:28:de:ee:79:a9: ee:a3:4f:de:0a:05:94:8c:a5:90:85:84:93:13:4a:35:bd:c8: d2:31:ca:44:aa:f4:fb:81:4e:69:d9:9b:10:64:a3:f3:7e:8a: 95:91:79:02:67:6b:64:08:6e:71:3b:0e:7e:9f:f4:2a:2e:d3: 8f:ac:82:16:dd:af:04:53:e4:48:96:4f:a2:c6:d1:de:0f:70: 66:53:ca:2c:85:47:5f:82:ce:2d:5c:cf:7e:b4:b5:44:3a:00: c6:d0:11:a4:20:26:7a:db:cc:c0:5a:ef:6a:8b:1f:f2:2e:a5: 68:6e:1e:a2:32:4d:02:f8:98:42:4a:b5:02:f4:ce:9f:27:4b: cd:f8:13:93 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQ1Jsr1B+Hpu5/0tb6FTV8glBhAkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MjIyNjIwWhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0AwMTA2ZjY5YTVlYjY4YTUxNjliOGMzNWRkMjUwNTdhZTU3 YjcxZTc0YjRhNTQ4ZTkxNzkzZWRmOTFhMWU0ZGI2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxdCOu7aeTJQxpvLuGnClzVw+QqhoroCyKoRSZcJEk2SKF rrqSX5GSVrB3IfrqiB/axm1a/Pa0JPe256xXqjsZ75VzmdlZHrdPWeEkhFYLZj+D mXJ59tUUpiq7TshyClBpy6Y1umQhKuVrDiQvjmW0o3AHEhggBH8xIpynNPPSdV96 J24n59grKC+oyuF2jA2SZy7inUb0E+FF5LC3p9PPn9g5yhRwU/tl6sPRr3YLWWf6 0dXsbTFK7TkkWs2Yj6tcauVUYu4r2G7CVCV6YjBWSuU2rRSZAnUZrqpU0rDMQ/6j 3lY/aBknhFgmOwwyOljRJumzL/JEcGGoZrIIDZ4ZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU8+irBik+cAS3LdSas/LyaQVjrLMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2IyMTdkN2IwLWU1N2MtNDc5Ny04MTRlLTM2OTU1NzIzNmMyNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESQSgwDQYJKoZIhvcNAQELBQADggEBABy3zSWdtU8BLb0NFPYX83mLwFSm iLwlxxEZVBKJxhku4p2UpVsqaop3/U1/hPE+tNNuqB5VUhNTE0l8Xs6CwXGb5o7Q MV9QPVO65fsB2+f7ow9DylNQUzwXERVQuo6hbCEdC5kscPP3yBMOOwoozx2q6N6O KP6P15wo3u55qe6jT94KBZSMpZCFhJMTSjW9yNIxykSq9PuBTmnZmxBko/N+ipWR eQJna2QIbnE7Dn6f9Cou04+sghbdrwRT5EiWT6LG0d4PcGZTyiyFR1+Czi1cz360 tUQ6AMbQEaQgJnrbzMBa72qLH/IupWhuHqIyTQL4mEJKtQL0zp8nS834E5M= -----END CERTIFICATE-----Generated at Fri Oct 17 23:52:52 2025 by rpki-client