$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2eadba73-dca7-402e-b9d1-5d0d980f4aed.roa File: 2eadba73-dca7-402e-b9d1-5d0d980f4aed.roa (raw, json) Hash identifier: lCn5lcwkO93RWEfVEOuuaw/yJg7NtH5jUexImWQ8Ol8= Subject key identifier: 79:9D:60:DF:34:3E:16:5D:14:80:62:A9:AD:F8:80:A2:AE:C1:B9:04 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2D16A8DE696EE551128B1B5068CDC9A3F4A761D3 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2eadba73-dca7-402e-b9d1-5d0d980f4aed.roa Signing time: Sat 18 Oct 2025 10:31:29 +0000 ROA not before: Sat 18 Oct 2025 10:31:29 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.173.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:16:a8:de:69:6e:e5:51:12:8b:1b:50:68:cd:c9:a3:f4:a7:61:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 10:31:29 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=b83fc40fa2fb1e082b716c9865690420b3caa9f9d093285722ce8252f0da5a91, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:20:ec:17:c8:60:7f:b2:3e:c7:01:2b:ff:9f: 87:2d:c1:b7:c9:9c:6d:9a:a5:42:74:3c:58:59:f4: 30:8a:31:ee:4a:d8:52:f1:62:97:20:16:d7:d2:34: 43:e4:a3:5d:4f:ba:5d:9d:34:99:a2:6d:8a:06:3a: 7a:82:39:a2:0f:a0:7a:df:44:b3:61:13:96:0d:56: 53:88:3a:eb:d7:ae:f8:ca:8f:44:e7:06:88:93:f4: 85:97:0a:92:3d:83:e4:6c:71:1a:5b:46:b3:29:a6: ea:84:be:6f:b2:da:0b:54:bc:75:a3:2e:e4:1c:2e: bc:23:b3:08:3a:f9:a4:29:5c:95:1d:8a:46:85:c9: ec:b6:3b:40:7f:26:c4:fa:d6:4a:3c:43:4e:c2:fb: 0c:fa:e3:b8:cb:b1:3d:11:be:9a:41:02:a9:03:c3: 25:cf:67:49:43:b9:73:c2:5d:30:9a:b6:14:dc:ab: 07:00:c4:3c:78:e0:50:6a:84:e2:22:fc:1e:f3:24: 63:4f:ee:96:f8:49:a7:a0:a7:d7:a1:09:75:05:fe: 5d:0e:f4:26:aa:e4:03:71:1d:65:67:73:e5:4c:17: 6a:52:1e:5f:b8:ce:2c:24:40:95:54:63:9a:bf:5d: 6a:e7:86:01:31:a8:88:22:80:a6:61:6b:af:22:8e: e7:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:9D:60:DF:34:3E:16:5D:14:80:62:A9:AD:F8:80:A2:AE:C1:B9:04 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2eadba73-dca7-402e-b9d1-5d0d980f4aed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.173.27.0/24 Signature Algorithm: sha256WithRSAEncryption 85:26:4a:fd:19:ed:73:03:5d:de:2a:91:46:10:91:61:bb:f7: e7:74:a5:a2:bf:53:79:c9:c3:e7:9a:9d:b1:a8:c8:36:17:96: 8f:19:67:83:53:5c:97:20:40:31:21:34:1b:26:08:e2:17:bf: a9:25:03:54:ea:88:fa:d0:80:71:0b:93:c0:dc:4e:e1:58:40: 57:82:59:05:47:8f:b5:72:05:a4:55:aa:0b:ac:18:c5:6d:11: 04:11:4c:d3:11:42:4a:f1:25:c3:51:98:fe:37:be:03:32:3a: a9:43:e3:d2:ff:58:6a:cb:dd:8c:0b:4f:a9:28:3c:cc:e3:02: fc:68:9d:1c:cc:88:5c:4d:4d:8f:ad:7d:3f:5b:87:94:d3:09: 62:eb:47:16:47:10:b2:c6:ca:d9:db:3a:fe:90:10:a7:0d:e5: c7:3f:69:8d:7e:96:ac:2e:fc:f6:b1:10:ff:a9:7b:3f:5c:e7: 3a:b1:82:b4:a5:b5:09:bb:59:4b:75:cc:9b:40:af:34:ed:c1: 45:79:ef:2b:a7:ee:46:2e:7d:45:7d:aa:ce:43:70:9a:96:1f: b1:c4:56:9e:43:87:b4:85:fd:1e:e6:ea:6a:45:1d:cd:12:93: 91:25:25:0a:be:9d:0d:a6:55:1b:ec:76:a2:dd:05:55:ff:5d: a5:f3:a6:e3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULRao3mlu5VESixtQaM3Jo/SnYdMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTAzMTI5WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BiODNmYzQwZmEyZmIxZTA4MmI3MTZjOTg2NTY5MDQyMGIz Y2FhOWY5ZDA5MzI4NTcyMmNlODI1MmYwZGE1YTkxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/IOwXyGB/sj7HASv/n4ctwbfJnG2apUJ0PFhZ9DCKMe5K 2FLxYpcgFtfSNEPko11Pul2dNJmibYoGOnqCOaIPoHrfRLNhE5YNVlOIOuvXrvjK j0TnBoiT9IWXCpI9g+RscRpbRrMppuqEvm+y2gtUvHWjLuQcLrwjswg6+aQpXJUd ikaFyey2O0B/JsT61ko8Q07C+wz647jLsT0RvppBAqkDwyXPZ0lDuXPCXTCathTc qwcAxDx44FBqhOIi/B7zJGNP7pb4Saegp9ehCXUF/l0O9Caq5ANxHWVnc+VMF2pS Hl+4ziwkQJVUY5q/XWrnhgExqIgigKZha68ijudfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUeZ1g3zQ+Fl0UgGKprfiAoq7BuQQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzJlYWRiYTczLWRjYTctNDAyZS1iOWQxLTVkMGQ5ODBmNGFlZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASrRswDQYJKoZIhvcNAQELBQADggEBAIUmSv0Z7XMDXd4qkUYQkWG79+d0 paK/U3nJw+eanbGoyDYXlo8ZZ4NTXJcgQDEhNBsmCOIXv6klA1TqiPrQgHELk8Dc TuFYQFeCWQVHj7VyBaRVqgusGMVtEQQRTNMRQkrxJcNRmP43vgMyOqlD49L/WGrL 3YwLT6koPMzjAvxonRzMiFxNTY+tfT9bh5TTCWLrRxZHELLGytnbOv6QEKcN5cc/ aY1+lqwu/PaxEP+pez9c5zqxgrSltQm7WUt1zJtArzTtwUV57yun7kYufUV9qs5D cJqWH7HEVp5Dh7SF/R7m6mpFHc0Sk5ElJQq+nQ2mVRvsdqLdBVX/XaXzpuM= -----END CERTIFICATE-----Generated at Mon Oct 20 02:55:40 2025 by rpki-client