$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e1517ee5-3238-4e45-ba04-02e23009ec1b.roa File: e1517ee5-3238-4e45-ba04-02e23009ec1b.roa (raw, json) Hash identifier: U2wd/tP0xtLfm6PPj0tjRe3IRJjyzwUbdEuPWCbYrOQ= Subject key identifier: 18:57:C6:E0:5E:9A:AB:4F:82:EA:08:37:A8:5F:4F:15:DA:49:0C:DF Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7107BFECF24B7250C7C00875F2D5C6D6F13C34BA Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e1517ee5-3238-4e45-ba04-02e23009ec1b.roa Signing time: Sat 18 Oct 2025 16:11:24 +0000 ROA not before: Sat 18 Oct 2025 16:11:24 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.172.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:07:bf:ec:f2:4b:72:50:c7:c0:08:75:f2:d5:c6:d6:f1:3c:34:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 16:11:24 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=9b7df8481fcfefd69818be37fb3368b151d3c91b57b4b8c163e9d2db51aef87d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b4:14:08:3d:53:02:3e:9b:b8:db:da:21:4d: d7:0c:83:72:19:c3:0b:f1:88:a4:f6:36:0e:be:a8: d0:49:16:c1:11:c0:31:8d:0d:7f:d5:e5:fd:11:6d: 2b:48:d8:a4:f9:7a:a8:29:62:d2:91:f9:6f:b6:56: 92:c3:a8:da:64:07:9f:95:2b:13:10:3b:50:0e:b8: 2d:fa:5b:39:2d:9f:8f:24:c4:3d:fd:6c:ba:8c:83: 48:3b:4b:ef:9a:85:1e:76:ea:ad:cb:59:ae:ba:f3: 9c:2b:26:6b:aa:81:4e:21:f2:95:91:a3:72:84:7b: 48:94:88:e0:ad:09:9c:26:ed:d2:26:00:ce:75:5c: b8:fc:1c:f3:4f:64:bd:ce:dd:a9:c8:fc:e0:61:f2: 4d:14:b8:92:af:b8:c1:fb:82:d7:79:63:7f:2b:90: a5:ec:4c:b2:6f:ab:15:d5:24:93:a5:66:30:54:3c: 4b:2b:d1:6c:e2:89:c5:c5:f3:95:fe:bd:e4:43:18: 95:2c:f0:d6:24:ac:8c:31:82:12:20:b7:c1:c3:f3: 50:30:13:d4:37:b8:56:08:cc:31:52:9a:dc:5b:05: 6b:b7:21:c4:ef:f0:f0:24:63:39:80:8d:69:82:be: 49:09:95:19:cd:d8:d3:b9:e6:e6:09:24:19:c1:5f: e6:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:57:C6:E0:5E:9A:AB:4F:82:EA:08:37:A8:5F:4F:15:DA:49:0C:DF X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e1517ee5-3238-4e45-ba04-02e23009ec1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.172.40.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:64:59:20:6c:df:e8:1c:f0:9e:fa:97:14:46:d6:45:bf:9c: 59:96:31:96:5b:22:43:0a:e1:c4:d1:bb:c0:db:5e:13:cd:bb: e3:60:3e:aa:c4:69:1c:42:20:14:30:bd:fe:38:09:7a:ce:79: de:2c:93:0e:74:c4:1c:df:92:46:b3:be:62:d1:56:92:c5:74: 57:29:f2:50:d0:f1:52:5d:ec:d5:df:71:23:22:15:36:23:b0: bc:58:12:2a:cc:92:10:fa:e2:79:04:84:c8:f0:f6:75:e7:76: d7:e4:44:4e:48:9a:47:55:70:64:f9:d4:5d:b0:73:a5:cb:dc: 46:e4:c8:d7:79:8a:3e:f6:fa:50:4c:22:1e:dd:5d:56:3c:a8: 3f:a2:b3:f9:29:ec:2f:94:68:a5:d0:b8:05:4f:e8:5e:47:69: da:e0:2c:ae:a1:8b:72:20:82:d8:59:dc:e4:c7:e6:43:4f:d7: f5:66:e5:98:83:7b:82:1f:5e:9c:dc:67:df:a2:43:54:4e:ab: 97:95:5b:6c:c1:2e:8d:11:ba:0b:18:77:ca:cd:0b:22:ea:50: e7:cb:14:a9:e8:85:50:0c:a7:59:5a:df:6c:4a:d6:83:4d:b5: 27:5c:58:af:a0:85:fe:e0:f2:42:93:b6:d1:2a:35:a1:69:f7: 6d:20:16:17 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcQe/7PJLclDHwAh18tXG1vE8NLowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTYxMTI0WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A5YjdkZjg0ODFmY2ZlZmQ2OTgxOGJlMzdmYjMzNjhiMTUx ZDNjOTFiNTdiNGI4YzE2M2U5ZDJkYjUxYWVmODdkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCstBQIPVMCPpu429ohTdcMg3IZwwvxiKT2Ng6+qNBJFsER wDGNDX/V5f0RbStI2KT5eqgpYtKR+W+2VpLDqNpkB5+VKxMQO1AOuC36Wzktn48k xD39bLqMg0g7S++ahR526q3LWa6685wrJmuqgU4h8pWRo3KEe0iUiOCtCZwm7dIm AM51XLj8HPNPZL3O3anI/OBh8k0UuJKvuMH7gtd5Y38rkKXsTLJvqxXVJJOlZjBU PEsr0WziicXF85X+veRDGJUs8NYkrIwxghIgt8HD81AwE9Q3uFYIzDFSmtxbBWu3 IcTv8PAkYzmAjWmCvkkJlRnN2NO55uYJJBnBX+b9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUGFfG4F6aq0+C6gg3qF9PFdpJDN8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2UxNTE3ZWU1LTMyMzgtNGU0NS1iYTA0LTAyZTIzMDA5ZWMxYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASrCgwDQYJKoZIhvcNAQELBQADggEBAGpkWSBs3+gc8J76lxRG1kW/nFmW MZZbIkMK4cTRu8DbXhPNu+NgPqrEaRxCIBQwvf44CXrOed4skw50xBzfkkazvmLR VpLFdFcp8lDQ8VJd7NXfcSMiFTYjsLxYEirMkhD64nkEhMjw9nXndtfkRE5ImkdV cGT51F2wc6XL3EbkyNd5ij72+lBMIh7dXVY8qD+is/kp7C+UaKXQuAVP6F5Hadrg LK6hi3IggthZ3OTH5kNP1/Vm5ZiDe4IfXpzcZ9+iQ1ROq5eVW2zBLo0RugsYd8rN CyLqUOfLFKnohVAMp1la32xK1oNNtSdcWK+ghf7g8kKTttEqNaFp920gFhc= -----END CERTIFICATE-----Generated at Mon Oct 20 15:48:27 2025 by rpki-client