$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d0201ae9-7b85-4c12-b337-47ed3ede1720.roa File: d0201ae9-7b85-4c12-b337-47ed3ede1720.roa (raw, json) Hash identifier: oSa2UJH64l+GP+/FYz6S9iH/YvZn+KzE+G8IMFNAcNw= Subject key identifier: 8F:81:F1:2A:29:6B:5D:7D:77:F4:E7:52:4C:30:57:BD:0E:62:4A:66 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4F5481BFE4EC325B0C3EFCF718DCAA58A73AC310 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d0201ae9-7b85-4c12-b337-47ed3ede1720.roa Signing time: Fri 26 Sep 2025 16:13:24 +0000 ROA not before: Fri 26 Sep 2025 16:13:24 +0000 ROA not after: Fri 31 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.101.212.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:54:81:bf:e4:ec:32:5b:0c:3e:fc:f7:18:dc:aa:58:a7:3a:c3:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 26 16:13:24 2025 GMT Not After : Oct 31 23:59:59 2025 GMT Subject: serialNumber=522001faf6a46b93ba90eff855effdd2802d26bd62ce3beec11fb8271faf52b5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:78:ea:e1:46:54:60:f1:1c:c9:83:1a:13:cd: 83:2c:de:24:ab:a3:97:7f:ca:2c:0e:63:be:32:58: 0b:da:d5:57:a4:a6:95:45:57:e6:d9:ac:7f:e1:d1: a1:d1:cb:58:19:df:d9:ed:27:d5:81:fa:37:99:4b: f0:98:69:89:0d:d0:33:af:e1:a6:d1:6d:ba:74:81: 5c:d6:d8:19:2f:bb:0b:9d:69:44:7d:87:ae:1d:90: c0:df:68:84:89:85:b7:61:28:47:d2:ba:8d:af:6f: 26:ea:f0:a8:39:6a:f5:e0:21:eb:49:9a:6d:d5:db: 67:be:dc:07:e8:9b:d5:61:c8:e5:6e:bc:32:45:5b: 8a:22:55:26:2d:36:99:5e:1c:ae:5b:55:21:13:4c: 45:88:4e:a9:6e:0e:c0:a3:5c:f8:df:c9:71:ac:f2: 7c:ea:f6:0e:f3:29:83:9f:19:43:2d:9f:57:86:fa: 5c:b1:42:52:98:d2:a9:1d:0d:63:c4:ed:28:c0:36: 5e:0c:6f:b3:d7:dc:ee:c6:85:51:28:9f:f0:d3:ee: fa:e2:e5:03:d9:8e:a7:19:87:7d:2a:f3:e4:25:ff: c5:62:cf:b8:ec:7d:62:ae:a3:e1:db:e4:44:c9:40: 20:e8:7c:51:c0:58:fe:60:8f:72:26:7c:21:d8:e3: bc:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:81:F1:2A:29:6B:5D:7D:77:F4:E7:52:4C:30:57:BD:0E:62:4A:66 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d0201ae9-7b85-4c12-b337-47ed3ede1720.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.101.212.0/23 Signature Algorithm: sha256WithRSAEncryption ae:79:a1:7f:b9:c1:74:b6:6b:82:b2:98:b1:da:b1:61:08:8c: 44:af:f3:31:48:80:25:3c:45:35:0d:16:aa:ee:38:e4:ea:e5: 59:f9:c6:42:65:47:11:d1:2e:f1:6c:a4:20:ea:8d:41:23:16: 81:d6:7c:d1:9b:7f:30:02:e2:ee:d2:27:6c:eb:6e:4c:49:db: c7:a9:e9:7e:0f:7c:d4:62:c6:61:ca:5a:4b:45:9b:95:af:f8: 2b:9f:46:d1:8e:21:a9:0f:09:9a:c5:2e:9b:28:48:ad:7b:2b: b7:0c:21:ad:00:e6:60:1e:db:54:e0:ef:b0:91:52:5c:9e:23: 3f:f0:09:ed:a2:08:c6:af:06:fb:78:d1:b8:ba:bb:c4:9b:74: 51:cc:93:bb:c5:12:36:d1:f4:23:c1:8f:64:e9:fe:71:47:22: 25:72:07:37:06:a5:65:c8:56:bf:dc:2c:38:24:89:33:de:06: 44:d7:0f:13:b9:ef:6d:2a:ab:d8:0f:48:62:b4:01:3d:83:c3: 23:a8:49:89:20:59:89:2f:8b:e5:05:4f:20:d5:ab:67:87:b2: 90:c3:5b:1d:5f:e7:78:1d:f5:5b:f2:7b:11:b1:a9:72:1e:e8: 27:2e:4f:39:79:21:d0:bd:d9:c6:26:08:42:cf:a8:1d:35:9a: c4:ea:06:3f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUT1SBv+TsMlsMPvz3GNyqWKc6wxAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI2MTYxMzI0WhcNMjUxMDMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A1MjIwMDFmYWY2YTQ2YjkzYmE5MGVmZjg1NWVmZmRkMjgw MmQyNmJkNjJjZTNiZWVjMTFmYjgyNzFmYWY1MmI1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDAeOrhRlRg8RzJgxoTzYMs3iSro5d/yiwOY74yWAva1Vek ppVFV+bZrH/h0aHRy1gZ39ntJ9WB+jeZS/CYaYkN0DOv4abRbbp0gVzW2Bkvuwud aUR9h64dkMDfaISJhbdhKEfSuo2vbybq8Kg5avXgIetJmm3V22e+3Afom9VhyOVu vDJFW4oiVSYtNpleHK5bVSETTEWITqluDsCjXPjfyXGs8nzq9g7zKYOfGUMtn1eG +lyxQlKY0qkdDWPE7SjANl4Mb7PX3O7GhVEon/DT7vri5QPZjqcZh30q8+Ql/8Vi z7jsfWKuo+Hb5ETJQCDofFHAWP5gj3ImfCHY47xxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUj4HxKilrXX139OdSTDBXvQ5iSmYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2QwMjAxYWU5LTdiODUtNGMxMi1iMzM3LTQ3ZWQzZWRlMTcyMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESZdQwDQYJKoZIhvcNAQELBQADggEBAK55oX+5wXS2a4KymLHasWEIjESv 8zFIgCU8RTUNFqruOOTq5Vn5xkJlRxHRLvFspCDqjUEjFoHWfNGbfzAC4u7SJ2zr bkxJ28ep6X4PfNRixmHKWktFm5Wv+CufRtGOIakPCZrFLpsoSK17K7cMIa0A5mAe 21Tg77CRUlyeIz/wCe2iCMavBvt40bi6u8SbdFHMk7vFEjbR9CPBj2Tp/nFHIiVy BzcGpWXIVr/cLDgkiTPeBkTXDxO5720qq9gPSGK0AT2DwyOoSYkgWYkvi+UFTyDV q2eHspDDWx1f53gd9VvyexGxqXIe6CcuTzl5IdC92cYmCELPqB01msTqBj8= -----END CERTIFICATE-----Generated at Mon Oct 20 21:18:52 2025 by rpki-client