$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/818e7d37-2665-41cd-b742-0306afcce5a9.roa File: 818e7d37-2665-41cd-b742-0306afcce5a9.roa (raw, json) Hash identifier: 4PrDPw3pP2gDauSLUqUKNJP2AaSUsMSVA4GL2I6Tolw= Subject key identifier: D9:81:87:94:4C:1A:F2:EF:8D:6C:A1:E6:3C:E5:A5:EA:20:62:26:45 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3473C96E88079A4704C50EB634609D509534E642 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/818e7d37-2665-41cd-b742-0306afcce5a9.roa Signing time: Tue 21 Oct 2025 11:12:43 +0000 ROA not before: Tue 21 Oct 2025 11:12:43 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.64.0.0/13 maxlen: 13 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:73:c9:6e:88:07:9a:47:04:c5:0e:b6:34:60:9d:50:95:34:e6:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 21 11:12:43 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=977f1a72607ee01f4090eaf46d7960440a6b0e9021ef3012b97cc62a6c035391, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0a:8d:70:de:c8:ad:57:bd:fa:cf:22:c1:48: e5:a0:21:9e:8f:1f:4c:70:63:6f:2b:cc:04:80:9a: 48:de:24:2c:f6:3e:73:36:87:0d:76:d7:ab:1d:52: 84:f0:aa:18:e2:fe:13:60:eb:aa:23:26:28:fb:93: 2a:d2:d0:c4:7e:15:63:e0:ed:c8:52:5b:85:b3:c3: 78:d0:d8:48:4d:56:e5:f4:63:cd:d1:03:b0:ea:19: 95:5a:75:31:33:ac:1d:1e:33:30:bd:be:e6:f6:03: 26:08:e2:49:7c:88:e0:98:29:b5:26:23:2c:e5:82: 81:7a:47:89:82:ed:e7:ff:a1:64:84:4f:dd:01:73: 9e:d9:9f:d8:87:af:9a:df:78:59:d5:72:63:5e:3a: 83:97:f2:62:b8:20:25:af:f8:fb:44:5a:d4:b4:92: bb:da:78:51:f3:35:b9:b8:48:1f:5a:5b:c3:46:14: 26:17:bb:f8:e8:3f:17:04:3d:17:23:68:d7:4f:e3: 44:e6:16:b0:bb:09:35:5e:3f:09:c3:11:00:6b:cf: 32:21:9a:c8:5d:25:9f:91:c4:a3:fe:71:6b:eb:72: 02:ab:31:59:9c:27:cd:f4:1f:db:6e:53:94:4d:ff: e1:f4:19:f4:c3:46:36:82:ba:14:3a:4a:7b:01:87: 0e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:81:87:94:4C:1A:F2:EF:8D:6C:A1:E6:3C:E5:A5:EA:20:62:26:45 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/818e7d37-2665-41cd-b742-0306afcce5a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.64.0.0/13 Signature Algorithm: sha256WithRSAEncryption ab:bc:3f:67:e5:8b:ca:0a:56:ff:7e:38:e2:f8:a5:75:2c:2f: cb:41:6f:70:d4:54:c8:3f:3e:85:38:83:45:8d:64:03:99:64: e1:8d:76:4b:2b:3a:7d:b1:83:65:a3:bb:6d:27:c3:27:37:be: 2a:9e:38:91:3d:6f:33:43:87:73:7d:1d:af:57:77:26:73:43: 38:72:f9:34:26:af:df:4f:e5:9d:26:4c:5a:d0:90:46:f8:b3: 07:7f:e3:4e:de:4d:4c:d4:7c:ba:5c:6d:da:fe:f6:23:3b:85: 19:03:1b:b7:49:1c:80:38:f8:63:4e:c2:2b:50:07:15:df:b0: 99:7c:8b:d4:78:02:8d:c1:12:7c:07:37:a1:79:38:2d:05:d6: a6:1a:d2:62:15:16:b1:9c:2f:68:f4:d9:ed:00:f2:3b:7a:c0: c1:30:3a:57:77:eb:3c:e5:23:31:e5:2e:72:0e:a9:17:d8:b5: 04:3b:63:ba:33:6e:b5:4e:89:52:95:e5:55:62:85:ed:58:4f: b3:00:02:de:b8:b0:1c:86:a6:9f:a8:47:c7:07:33:e4:d3:35: 7d:ec:4a:8a:a7:98:70:3b:8a:4e:42:bc:04:31:98:62:f6:b3: d6:ec:4a:7c:6c:47:f5:af:3f:4f:a1:04:52:5d:af:c9:22:45: d2:40:85:ec -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUNHPJbogHmkcExQ62NGCdUJU05kIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDIxMTExMjQzWhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A5NzdmMWE3MjYwN2VlMDFmNDA5MGVhZjQ2ZDc5NjA0NDBh NmIwZTkwMjFlZjMwMTJiOTdjYzYyYTZjMDM1MzkxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyCo1w3sitV736zyLBSOWgIZ6PH0xwY28rzASAmkjeJCz2 PnM2hw1216sdUoTwqhji/hNg66ojJij7kyrS0MR+FWPg7chSW4Wzw3jQ2EhNVuX0 Y83RA7DqGZVadTEzrB0eMzC9vub2AyYI4kl8iOCYKbUmIyzlgoF6R4mC7ef/oWSE T90Bc57Zn9iHr5rfeFnVcmNeOoOX8mK4ICWv+PtEWtS0krvaeFHzNbm4SB9aW8NG FCYXu/joPxcEPRcjaNdP40TmFrC7CTVePwnDEQBrzzIhmshdJZ+RxKP+cWvrcgKr MVmcJ830H9tuU5RN/+H0GfTDRjaCuhQ6SnsBhw7DAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU2YGHlEwa8u+NbKHmPOWl6iBiJkUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzgxOGU3ZDM3LTI2NjUtNDFjZC1iNzQyLTAzMDZhZmNjZTVhOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwM2QDANBgkqhkiG9w0BAQsFAAOCAQEAq7w/Z+WLygpW/3444vildSwvy0Fv cNRUyD8+hTiDRY1kA5lk4Y12Sys6fbGDZaO7bSfDJze+Kp44kT1vM0OHc30dr1d3 JnNDOHL5NCav30/lnSZMWtCQRvizB3/jTt5NTNR8ulxt2v72IzuFGQMbt0kcgDj4 Y07CK1AHFd+wmXyL1HgCjcESfAc3oXk4LQXWphrSYhUWsZwvaPTZ7QDyO3rAwTA6 V3frPOUjMeUucg6pF9i1BDtjujNutU6JUpXlVWKF7VhPswAC3riwHIamn6hHxwcz 5NM1fexKiqeYcDuKTkK8BDGYYvaz1uxKfGxH9a8/T6EEUl2vySJF0kCF7A== -----END CERTIFICATE-----Generated at Wed Nov 5 01:56:52 2025 by rpki-client