$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b286a3c1-2750-46be-bad9-8ca72fde66e2.roa File: b286a3c1-2750-46be-bad9-8ca72fde66e2.roa (raw, json) Hash identifier: Zhai6yuIpEeA88gEw19WhCl2KkDC2zCp4mwOtEj3Ink= Subject key identifier: ED:CD:19:02:5C:04:F3:DB:34:3D:44:0E:F5:64:0E:2D:5B:C1:0E:51 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 33021CAB956D05E74A8FB08AAA0F7EBFDF883CF3 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b286a3c1-2750-46be-bad9-8ca72fde66e2.roa Signing time: Mon 22 Sep 2025 17:57:42 +0000 ROA not before: Mon 22 Sep 2025 17:57:42 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.154.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:02:1c:ab:95:6d:05:e7:4a:8f:b0:8a:aa:0f:7e:bf:df:88:3c:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 17:57:42 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=966280c11b1729f8bbf1019ff3c3c68f7f779212ea621f02cea190d174d2fc3e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ae:6c:c7:04:13:b7:c6:45:99:29:96:12:54: 22:58:27:d2:64:a8:5f:6f:f5:22:75:66:2f:b3:3a: 7c:28:89:ba:5e:b3:c0:cb:42:64:f7:09:c0:ba:31: 45:ed:33:03:7f:a8:26:4f:98:ba:40:d6:1a:36:9f: 24:c0:d6:3b:56:ca:c5:71:e3:1e:57:44:71:99:14: 9f:80:08:6b:d4:24:d8:70:f3:19:82:dc:11:b3:0e: ab:35:84:67:87:37:d6:03:33:84:7a:e9:0f:cb:bf: 2e:f2:ca:9c:37:cf:dc:ec:09:6f:bf:89:6c:eb:82: 4f:7c:7e:f0:16:bd:59:e8:98:a1:5f:0d:76:40:82: 31:0c:60:10:2f:e7:4a:9e:f7:b7:f6:2c:80:60:e3: c3:e4:ce:ea:9e:9b:5c:43:6c:05:35:e0:be:54:0a: 64:90:d2:a1:90:05:a1:28:fb:e9:8e:52:22:4a:31: 63:e2:a2:1d:ca:76:df:0a:d8:6c:80:49:eb:3c:b6: 9d:70:d8:e0:f9:41:03:3e:00:f2:e2:0f:f9:e5:30: fb:dd:e8:63:04:bb:d4:c2:24:19:ba:62:b7:fa:8d: 56:12:cf:e3:61:c4:d7:80:63:c3:32:d0:9e:20:ef: ff:f0:83:91:ac:8d:0b:3c:56:8f:07:4d:f7:f3:1f: fb:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:CD:19:02:5C:04:F3:DB:34:3D:44:0E:F5:64:0E:2D:5B:C1:0E:51 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b286a3c1-2750-46be-bad9-8ca72fde66e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.154.236.0/22 Signature Algorithm: sha256WithRSAEncryption 15:ea:e8:e1:1b:7d:01:1b:77:1c:b8:3c:d0:3c:27:cb:48:47: a7:a9:ac:84:ba:ca:f8:54:98:b2:01:8b:83:08:59:ce:cd:c0: ab:7c:8c:90:72:4f:c0:ae:2b:ae:cd:0e:40:0f:bb:ae:2a:ab: 76:4a:ce:4e:3c:03:71:44:4a:af:af:25:fb:c8:2a:25:89:aa: 41:af:28:ce:27:59:00:9c:0c:53:dd:8b:c5:de:db:3c:64:a4: 17:98:54:d3:2f:ac:d8:4b:b8:fe:a0:f4:e6:f4:56:b3:07:64: cc:2f:0e:84:a4:f0:70:51:86:07:91:40:6a:a9:fb:53:54:ed: fe:9f:cd:17:79:f6:01:aa:a5:c0:ba:8b:b5:81:ec:ec:62:f4: 5e:02:8d:21:ad:b6:8b:dc:e0:b3:76:d7:65:5f:53:ab:b3:e1: f6:46:6e:0b:95:6f:4c:f5:98:d6:d5:45:1b:61:5d:1e:32:87: 3e:fd:b4:5a:33:0e:fd:ed:38:c7:40:41:bb:61:93:55:cf:61: 02:a0:ed:96:cf:e7:c0:4a:2d:8d:e9:0e:b0:54:f3:1d:cd:75: 10:9d:9b:06:68:30:63:50:4c:05:bf:0e:4c:99:92:0d:69:2f: cb:79:c6:9d:77:df:6b:55:d0:62:ef:fc:cb:7b:83:80:ca:4e: 41:68:bf:fc -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMwIcq5VtBedKj7CKqg9+v9+IPPMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMTc1NzQyWhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A5NjYyODBjMTFiMTcyOWY4YmJmMTAxOWZmM2MzYzY4Zjdm Nzc5MjEyZWE2MjFmMDJjZWExOTBkMTc0ZDJmYzNlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDVrmzHBBO3xkWZKZYSVCJYJ9JkqF9v9SJ1Zi+zOnwoibpe s8DLQmT3CcC6MUXtMwN/qCZPmLpA1ho2nyTA1jtWysVx4x5XRHGZFJ+ACGvUJNhw 8xmC3BGzDqs1hGeHN9YDM4R66Q/Lvy7yypw3z9zsCW+/iWzrgk98fvAWvVnomKFf DXZAgjEMYBAv50qe97f2LIBg48Pkzuqem1xDbAU14L5UCmSQ0qGQBaEo++mOUiJK MWPioh3Kdt8K2GyASes8tp1w2OD5QQM+APLiD/nlMPvd6GMEu9TCJBm6Yrf6jVYS z+NhxNeAY8My0J4g7//wg5GsjQs8Vo8HTffzH/tHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU7c0ZAlwE89s0PUQO9WQOLVvBDlEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2IyODZhM2MxLTI3NTAtNDZiZS1iYWQ5LThjYTcyZmRlNjZlMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAISmuwwDQYJKoZIhvcNAQELBQADggEBABXq6OEbfQEbdxy4PNA8J8tIR6ep rIS6yvhUmLIBi4MIWc7NwKt8jJByT8CuK67NDkAPu64qq3ZKzk48A3FESq+vJfvI KiWJqkGvKM4nWQCcDFPdi8Xe2zxkpBeYVNMvrNhLuP6g9Ob0VrMHZMwvDoSk8HBR hgeRQGqp+1NU7f6fzRd59gGqpcC6i7WB7Oxi9F4CjSGttovc4LN212VfU6uz4fZG bguVb0z1mNbVRRthXR4yhz79tFozDv3tOMdAQbthk1XPYQKg7ZbP58BKLY3pDrBU 8x3NdRCdmwZoMGNQTAW/DkyZkg1pL8t5xp1332tV0GLv/Mt7g4DKTkFov/w= -----END CERTIFICATE-----Generated at Fri Oct 17 21:58:35 2025 by rpki-client