$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/862ac446-c621-4152-a045-8d4e33e7221e.roa File: 862ac446-c621-4152-a045-8d4e33e7221e.roa (raw, json) Hash identifier: 03ke2Y0qgiWl0NphThp25J25wBxRV/p+/qoEOWAqgBY= Subject key identifier: 8A:F7:EC:71:30:59:AA:45:C8:7C:6A:BE:9C:32:A5:37:42:B5:63:EF Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6C1C5A0905C57B73275BD1807F90546BE05BF2B7 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/862ac446-c621-4152-a045-8d4e33e7221e.roa Signing time: Tue 21 Oct 2025 10:20:04 +0000 ROA not before: Tue 21 Oct 2025 10:20:04 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.104.0.0/14 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:1c:5a:09:05:c5:7b:73:27:5b:d1:80:7f:90:54:6b:e0:5b:f2:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 21 10:20:04 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=c6baeaf59c8b175709be77fe99858ae8f3bec09178437c29fc84580d300eb77c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c3:7f:9b:40:02:5c:da:79:be:7e:4b:b2:1a: 57:fe:89:46:b3:d3:27:2f:e4:05:3f:75:87:4a:d6: f5:ff:19:76:a6:46:ef:e8:0b:cd:af:ab:a6:fa:17: d5:3a:74:f7:91:d0:54:32:d2:54:03:a9:7f:6c:9e: 95:08:70:19:b8:67:e0:4c:27:0f:2c:02:7a:94:24: b5:45:22:6e:46:31:2f:0d:f2:77:ea:63:52:cf:bf: 17:1a:87:be:1d:52:3b:d2:90:6e:92:60:6e:1a:31: 34:d1:4e:5e:9f:71:6a:08:c7:ba:73:e9:5c:67:2c: 10:3f:0d:3c:96:a3:a7:c8:51:5d:0c:7b:29:9b:7b: 96:59:92:9f:32:3c:a5:e8:c4:94:f8:b0:e3:b9:b9: 69:cc:92:5f:8d:77:31:42:e0:ab:90:67:e0:32:03: 8a:2e:66:2b:6a:35:cd:33:72:10:8b:93:19:cf:39: 72:84:e7:a9:86:06:40:b6:61:f1:68:94:98:0d:a2: 0b:f6:3b:29:50:c6:0e:57:40:56:2f:0d:84:a9:fd: 1a:e1:be:0a:25:95:96:f2:93:d6:0f:9e:5c:bc:ed: 75:b5:32:db:a4:e2:cd:af:00:f8:5f:f3:a4:24:06: 09:f9:ed:d7:73:38:31:d9:b1:41:6c:a0:3b:90:d4: ac:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:F7:EC:71:30:59:AA:45:C8:7C:6A:BE:9C:32:A5:37:42:B5:63:EF X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/862ac446-c621-4152-a045-8d4e33e7221e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.104.0.0/14 Signature Algorithm: sha256WithRSAEncryption 87:b6:62:04:13:d8:93:e6:c5:61:51:49:0b:4c:76:08:85:ec: 55:51:21:b0:6d:d3:39:77:00:9c:b1:63:8b:b5:00:1c:92:0a: 7c:14:62:69:5f:37:50:1b:f3:a2:89:d7:92:c7:2a:e6:e6:be: 0c:03:4d:22:e2:1c:06:80:5e:e6:ec:37:19:9c:f2:1d:b0:76: d7:03:8a:78:5f:96:74:5f:b9:a5:77:0f:9c:7b:b4:e3:b7:34: e4:f7:16:21:27:40:d5:36:73:da:0f:21:47:a7:bc:87:24:29: 8a:7b:c0:c8:f7:ac:48:4e:75:b9:52:7d:40:0e:22:fa:88:47: 7f:c9:b8:24:fb:d5:1c:29:41:5c:c5:56:a2:6e:a2:2a:21:af: 56:1c:32:fa:6c:5f:cd:d0:a2:6f:d1:49:fd:98:10:f0:d3:9c: 84:37:94:14:dc:b5:e3:23:44:ff:a0:4f:d1:ee:ca:e2:51:d6: f8:40:f6:f7:4d:26:6b:a5:f2:4b:9c:7a:70:e3:9b:08:d1:d9: 14:46:cd:45:2f:28:aa:77:1f:de:37:30:50:9e:87:5f:1c:a6: be:1b:e1:32:78:50:87:44:50:45:d8:1d:49:46:34:7d:f3:64: 30:01:91:6f:aa:01:13:09:4f:e2:e1:cf:3a:6f:b1:60:05:3c: 58:35:95:6b -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUbBxaCQXFe3MnW9GAf5BUa+Bb8rcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDIxMTAyMDA0WhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BjNmJhZWFmNTljOGIxNzU3MDliZTc3ZmU5OTg1OGFlOGYz YmVjMDkxNzg0MzdjMjlmYzg0NTgwZDMwMGViNzdjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCnw3+bQAJc2nm+fkuyGlf+iUaz0ycv5AU/dYdK1vX/GXam Ru/oC82vq6b6F9U6dPeR0FQy0lQDqX9snpUIcBm4Z+BMJw8sAnqUJLVFIm5GMS8N 8nfqY1LPvxcah74dUjvSkG6SYG4aMTTRTl6fcWoIx7pz6VxnLBA/DTyWo6fIUV0M eymbe5ZZkp8yPKXoxJT4sOO5uWnMkl+NdzFC4KuQZ+AyA4ouZitqNc0zchCLkxnP OXKE56mGBkC2YfFolJgNogv2OylQxg5XQFYvDYSp/RrhvgollZbyk9YPnly87XW1 Mtuk4s2vAPhf86QkBgn57ddzODHZsUFsoDuQ1KxdAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUivfscTBZqkXIfGq+nDKlN0K1Y+8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzg2MmFjNDQ2LWM2MjEtNDE1Mi1hMDQ1LThkNGUzM2U3MjIxZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwISaDANBgkqhkiG9w0BAQsFAAOCAQEAh7ZiBBPYk+bFYVFJC0x2CIXsVVEh sG3TOXcAnLFji7UAHJIKfBRiaV83UBvzoonXkscq5ua+DANNIuIcBoBe5uw3GZzy HbB21wOKeF+WdF+5pXcPnHu047c05PcWISdA1TZz2g8hR6e8hyQpinvAyPesSE51 uVJ9QA4i+ohHf8m4JPvVHClBXMVWom6iKiGvVhwy+mxfzdCib9FJ/ZgQ8NOchDeU FNy14yNE/6BP0e7K4lHW+ED2900ma6XyS5x6cOObCNHZFEbNRS8oqncf3jcwUJ6H XxymvhvhMnhQh0RQRdgdSUY0ffNkMAGRb6oBEwlP4uHPOm+xYAU8WDWVaw== -----END CERTIFICATE-----Generated at Wed Nov 5 01:54:12 2025 by rpki-client