$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e7065c63-959c-48c6-bef3-7a87181dc1c7.roa File: e7065c63-959c-48c6-bef3-7a87181dc1c7.roa (raw, json) Hash identifier: /axTGQucjJcAvl79QwzKcZEBkjcc1g2d1s2DkdnqOhA= Subject key identifier: 8A:E1:42:EA:F9:C0:BC:74:F6:83:47:06:35:AD:10:47:B3:CB:60:49 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 34FCD93BE870FA21CCC605869437E5AE4C91C690 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e7065c63-959c-48c6-bef3-7a87181dc1c7.roa Signing time: Sat 18 Oct 2025 14:51:12 +0000 ROA not before: Sat 18 Oct 2025 14:51:12 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.161.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:fc:d9:3b:e8:70:fa:21:cc:c6:05:86:94:37:e5:ae:4c:91:c6:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 14:51:12 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=a09a68d94a0cd77b33adc05d1a24d42f65d5486a8ebdd1b1d70a0febc7c51d9d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:16:93:28:8f:9b:2d:9f:1b:01:48:c6:60:35: a3:11:2a:fb:ad:96:97:ac:ea:b1:13:56:d4:1c:4d: d0:b6:33:54:58:c4:11:c3:a2:12:29:6a:9e:ea:50: 96:1e:a7:01:d9:c2:1a:fb:c6:dc:c3:4c:3b:0c:b7: e5:c5:38:0d:50:67:cd:02:d6:5b:63:41:71:5f:7e: 0f:c1:8b:44:a5:ba:60:95:96:f0:c8:30:a3:4c:96: 55:86:e5:08:c7:4a:0f:d2:01:fa:db:1a:18:5f:30: a3:64:f0:0a:d5:02:43:6d:65:f7:28:ea:e2:0f:02: 19:30:23:fd:2a:43:13:53:82:50:9b:f5:84:3f:52: 76:d0:4f:f5:8a:25:c2:25:f2:51:19:82:e7:f0:75: 9a:14:90:97:f0:8a:44:07:17:d0:7e:80:9a:68:34: 57:2f:9f:0d:e8:63:c2:ba:47:fa:40:b4:1f:6b:50: 03:f2:16:2f:29:1d:b5:85:ef:ee:b2:5b:91:84:77: 2b:3f:b7:a3:08:92:07:98:92:71:bf:94:e7:3e:cc: 58:03:64:4b:85:87:17:0b:b0:0b:c2:b0:8e:22:b9: 7f:f3:4b:b5:a7:dd:59:ff:49:fe:24:16:27:2c:e6: 5b:45:9e:40:fe:d9:e5:32:26:87:0d:86:9c:a3:69: 2e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:E1:42:EA:F9:C0:BC:74:F6:83:47:06:35:AD:10:47:B3:CB:60:49 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e7065c63-959c-48c6-bef3-7a87181dc1c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.161.158.0/24 Signature Algorithm: sha256WithRSAEncryption 13:6c:d7:63:8e:3c:80:fe:74:c0:e1:cf:5e:dc:01:38:03:b9: 75:ca:df:28:f4:a2:a3:4f:58:29:79:6f:af:92:3d:8c:47:c4: 36:df:b4:67:3d:b2:c7:c2:c3:b5:fa:26:39:8c:6a:ba:bb:b4: 96:95:31:4f:a6:20:b3:14:36:69:9e:4c:3c:92:d4:2b:ce:13: 09:f7:30:d6:f6:fa:b5:2c:86:d2:bd:b8:5f:04:d5:50:f5:97: 41:0d:16:e5:7b:39:95:40:84:90:a4:48:df:d0:c9:91:84:17: 53:07:53:56:33:62:0c:d4:cd:d1:b0:14:58:7a:fd:01:85:6f: 51:2c:f6:a6:29:b6:38:b5:c0:dd:05:b8:c5:f5:46:44:e6:89: 31:aa:e9:99:77:e8:3e:06:06:a5:75:f4:d9:22:dc:1e:a7:4f: de:6f:f6:d6:1d:9d:f8:ef:29:07:18:f3:0d:ea:e4:f9:32:ec: 1c:f6:be:1f:b5:e1:ac:85:bd:b1:2e:1c:0a:19:0b:07:43:61: b4:d4:63:fd:cd:a7:45:bc:9d:d5:60:8b:11:10:87:2e:f2:0a: 71:82:2e:93:91:d9:1c:32:97:99:1d:25:cd:ce:49:07:df:07: b0:5d:f1:ab:16:5a:0c:69:b6:13:aa:52:ac:1f:b0:8e:26:dd: c6:e1:07:cb -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNPzZO+hw+iHMxgWGlDflrkyRxpAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTQ1MTEyWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BhMDlhNjhkOTRhMGNkNzdiMzNhZGMwNWQxYTI0ZDQyZjY1 ZDU0ODZhOGViZGQxYjFkNzBhMGZlYmM3YzUxZDlkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6FpMoj5stnxsBSMZgNaMRKvutlpes6rETVtQcTdC2M1RY xBHDohIpap7qUJYepwHZwhr7xtzDTDsMt+XFOA1QZ80C1ltjQXFffg/Bi0SlumCV lvDIMKNMllWG5QjHSg/SAfrbGhhfMKNk8ArVAkNtZfco6uIPAhkwI/0qQxNTglCb 9YQ/UnbQT/WKJcIl8lEZgufwdZoUkJfwikQHF9B+gJpoNFcvnw3oY8K6R/pAtB9r UAPyFi8pHbWF7+6yW5GEdys/t6MIkgeYknG/lOc+zFgDZEuFhxcLsAvCsI4iuX/z S7Wn3Vn/Sf4kFics5ltFnkD+2eUyJocNhpyjaS7hAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUiuFC6vnAvHT2g0cGNa0QR7PLYEkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2U3MDY1YzYzLTk1OWMtNDhjNi1iZWYzLTdhODcxODFkYzFjNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASoZ4wDQYJKoZIhvcNAQELBQADggEBABNs12OOPID+dMDhz17cATgDuXXK 3yj0oqNPWCl5b6+SPYxHxDbftGc9ssfCw7X6JjmMarq7tJaVMU+mILMUNmmeTDyS 1CvOEwn3MNb2+rUshtK9uF8E1VD1l0ENFuV7OZVAhJCkSN/QyZGEF1MHU1YzYgzU zdGwFFh6/QGFb1Es9qYptji1wN0FuMX1RkTmiTGq6Zl36D4GBqV19Nki3B6nT95v 9tYdnfjvKQcY8w3q5Pky7Bz2vh+14ayFvbEuHAoZCwdDYbTUY/3Np0W8ndVgixEQ hy7yCnGCLpOR2Rwyl5kdJc3OSQffB7Bd8asWWgxpthOqUqwfsI4m3cbhB8s= -----END CERTIFICATE-----Generated at Mon Oct 20 11:02:00 2025 by rpki-client