$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9fae4975-a38f-4857-8622-1a1ba8c17d9e.roa File: 9fae4975-a38f-4857-8622-1a1ba8c17d9e.roa (raw, json) Hash identifier: camFrao5QsbRRgi0NnGShEI4qTtJdQAGFiPs8vktrls= Subject key identifier: 3F:FD:DE:BF:A7:73:40:31:8A:87:C2:B4:BA:43:8C:B6:BD:50:A4:17 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 73F8F9520BF12C6D325A91EE7310D535AECC820C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9fae4975-a38f-4857-8622-1a1ba8c17d9e.roa Signing time: Tue 21 Oct 2025 11:22:41 +0000 ROA not before: Tue 21 Oct 2025 11:22:41 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.184.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:f8:f9:52:0b:f1:2c:6d:32:5a:91:ee:73:10:d5:35:ae:cc:82:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 21 11:22:41 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=bd0534f6f7e1e14479c798b2134e547705cf85d74689696856a13c87db6b9fb1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f4:58:d0:4d:e0:3f:d7:e4:37:6c:dc:e9:77: 67:81:4d:b0:f3:05:60:fa:8e:02:36:6a:10:56:7c: 49:7b:1f:50:6f:ec:0a:42:e0:a8:8f:66:0b:36:06: b9:1d:ea:43:db:28:54:bc:77:f7:ec:63:a1:07:c9: af:f5:47:03:17:82:20:0b:b0:d2:11:04:76:c8:93: c8:7f:8e:f0:93:30:fd:ee:79:7e:0f:07:37:e7:b9: 25:c0:e8:4d:09:c9:a9:e7:10:a4:a6:dc:83:fa:cd: ff:f5:2e:10:9a:91:7d:61:3c:73:bb:4a:e8:e3:fc: 02:b3:1c:19:71:b3:ee:97:02:b7:3a:a1:16:1c:fa: 0d:af:25:fd:4b:d2:6e:50:d8:db:39:7b:38:90:08: 56:09:ee:cc:86:7e:59:6d:a0:eb:c7:44:e3:26:1f: db:79:26:eb:5e:0c:39:81:4d:c5:1d:c9:16:7f:35: 0d:71:00:2c:b5:63:11:c5:a7:d5:d3:fb:37:48:ed: 25:2c:6e:df:99:ff:4e:45:27:8b:b1:f1:06:5c:8c: c3:4f:50:09:7d:16:1f:64:10:fc:84:d8:ae:aa:ff: db:36:9b:5e:46:34:d6:4d:35:bb:7d:88:6a:3d:b6: ee:21:66:43:a4:08:d3:51:21:82:ad:be:59:60:2f: 71:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:FD:DE:BF:A7:73:40:31:8A:87:C2:B4:BA:43:8C:B6:BD:50:A4:17 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9fae4975-a38f-4857-8622-1a1ba8c17d9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.184.0.0/15 Signature Algorithm: sha256WithRSAEncryption 03:59:e5:f4:86:8c:6f:40:02:08:d7:93:0f:90:65:9f:5c:16: 0b:ce:7f:88:8c:6a:00:4d:bb:47:82:69:6a:14:3b:01:e7:af: 33:4c:08:f9:ab:51:c9:c5:87:d9:ec:b4:9a:ca:26:c9:95:03: 7c:3f:92:be:b2:27:94:d0:1a:1b:73:79:ec:1f:43:dc:68:38: bb:89:db:76:0f:25:13:a8:64:ec:c2:22:2b:24:be:ba:06:e9: 8d:f8:be:c2:e4:9f:96:06:a8:7e:36:28:63:d5:c7:7f:1c:82: a7:ef:ce:5b:4b:f7:de:a4:84:1c:04:30:44:0e:e5:70:a5:ba: ce:53:a5:8e:5b:6c:7a:ce:ef:11:f1:50:9a:8b:15:29:37:f6: f1:56:70:39:88:f5:40:0c:16:ea:1f:69:e1:af:79:9b:56:1e: 93:bb:5e:50:f1:a2:22:b5:f9:be:a4:ba:27:e4:8e:8a:c6:96: a1:d3:76:53:58:e9:7e:20:e1:e6:80:d2:8b:06:5c:2e:ea:5c: 2c:0a:3b:a3:2f:fb:ba:76:3a:e5:1a:24:33:ba:b5:51:ca:bb: d4:4e:00:a9:87:ba:c1:fe:88:05:94:9d:e3:08:73:63:30:08: 8a:81:a4:52:eb:ea:a5:a7:0b:44:52:df:28:88:bd:f8:8f:74: 92:b9:06:ae -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUc/j5UgvxLG0yWpHucxDVNa7MggwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDIxMTEyMjQxWhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BiZDA1MzRmNmY3ZTFlMTQ0NzljNzk4YjIxMzRlNTQ3NzA1 Y2Y4NWQ3NDY4OTY5Njg1NmExM2M4N2RiNmI5ZmIxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDK9FjQTeA/1+Q3bNzpd2eBTbDzBWD6jgI2ahBWfEl7H1Bv 7ApC4KiPZgs2Brkd6kPbKFS8d/fsY6EHya/1RwMXgiALsNIRBHbIk8h/jvCTMP3u eX4PBzfnuSXA6E0JyannEKSm3IP6zf/1LhCakX1hPHO7Sujj/AKzHBlxs+6XArc6 oRYc+g2vJf1L0m5Q2Ns5eziQCFYJ7syGflltoOvHROMmH9t5JuteDDmBTcUdyRZ/ NQ1xACy1YxHFp9XT+zdI7SUsbt+Z/05FJ4ux8QZcjMNPUAl9Fh9kEPyE2K6q/9s2 m15GNNZNNbt9iGo9tu4hZkOkCNNRIYKtvllgL3EHAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUP/3ev6dzQDGKh8K0ukOMtr1QpBcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzlmYWU0OTc1LWEzOGYtNDg1Ny04NjIyLTFhMWJhOGMxN2Q5ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwESuDANBgkqhkiG9w0BAQsFAAOCAQEAA1nl9IaMb0ACCNeTD5Bln1wWC85/ iIxqAE27R4JpahQ7AeevM0wI+atRycWH2ey0msomyZUDfD+SvrInlNAaG3N57B9D 3Gg4u4nbdg8lE6hk7MIiKyS+ugbpjfi+wuSflgaofjYoY9XHfxyCp+/OW0v33qSE HAQwRA7lcKW6zlOljltses7vEfFQmosVKTf28VZwOYj1QAwW6h9p4a95m1Yek7te UPGiIrX5vqS6J+SOisaWodN2U1jpfiDh5oDSiwZcLupcLAo7oy/7unY65RokM7q1 Ucq71E4AqYe6wf6IBZSd4whzYzAIioGkUuvqpacLRFLfKIi9+I90krkGrg== -----END CERTIFICATE-----Generated at Wed Nov 5 01:47:08 2025 by rpki-client