$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e8c30b46-0c3d-470d-b8dc-e62b1f747522.roa File: e8c30b46-0c3d-470d-b8dc-e62b1f747522.roa (raw, json) Hash identifier: xu2WvMoV+hV0g7k+jKUSFKSyU0dWCJUPcF6q99y2zCA= Subject key identifier: 88:08:DC:3B:DD:B8:3E:46:DA:E5:C3:95:F4:84:26:FA:79:95:D1:C6 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 05AFBBD0881E8811009513724DF2040F124F92C3 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e8c30b46-0c3d-470d-b8dc-e62b1f747522.roa Signing time: Sat 18 Oct 2025 16:33:55 +0000 ROA not before: Sat 18 Oct 2025 16:33:55 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.154.162.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:af:bb:d0:88:1e:88:11:00:95:13:72:4d:f2:04:0f:12:4f:92:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 16:33:55 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=384ecf6d2db55414770f163506ba732af48e42b0d87ffabc205d75cd9f197383, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:29:bf:c0:3d:e2:99:87:f9:9c:a8:b7:5d:ed: fc:66:41:fb:5c:f3:99:e3:88:b6:6d:ef:f9:97:1a: 34:b6:89:6b:23:ba:23:cf:c2:d8:e2:b4:c5:91:e9: cc:0b:27:f7:43:13:d4:69:ba:a8:db:6f:a1:a2:82: 01:fc:c9:c1:d4:d7:14:0f:72:93:0d:bd:1a:e5:53: 8b:f8:a6:3e:1e:26:ef:72:29:3c:f4:72:06:1c:ac: 7a:b0:65:c3:09:89:48:1f:9b:08:6e:b7:56:3f:87: 05:4e:72:09:31:ed:9e:26:53:db:9a:94:a3:94:fe: 1c:1f:8a:50:7b:5e:34:13:e6:a6:bf:93:3e:5f:18: d3:62:85:cb:96:4a:6c:0a:f7:ae:57:be:2b:f2:b0: e2:25:8b:3b:70:56:cc:93:80:1a:63:67:8e:6b:d5: f2:5f:64:fb:09:64:af:f4:d6:8d:c4:5a:a3:c6:90: b0:50:08:ab:5d:e1:1b:b1:1f:77:bd:0e:ef:da:20: 43:b4:dd:5d:51:4f:d8:53:f3:dc:05:0e:59:54:60: c4:f8:58:d3:ee:d4:a1:a8:74:0e:d0:d3:35:89:a8: f7:65:92:65:c3:22:38:b4:aa:39:a7:07:54:17:83: 3b:cb:e9:da:b0:c1:b1:b1:33:3f:ce:79:69:b7:b4: fa:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:08:DC:3B:DD:B8:3E:46:DA:E5:C3:95:F4:84:26:FA:79:95:D1:C6 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e8c30b46-0c3d-470d-b8dc-e62b1f747522.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.154.162.0/23 Signature Algorithm: sha256WithRSAEncryption 1f:ab:ec:8b:fa:cd:7f:23:f9:8d:b9:9f:86:d6:5e:ee:6f:2b: 72:39:dc:e4:6a:dd:3c:ac:9c:51:45:4e:4c:61:6b:73:c1:cc: 9d:7c:2b:58:e8:9e:a5:8f:6a:a4:fb:be:bf:39:66:12:32:39: 3b:1d:99:c8:67:d7:22:1d:d3:f0:d5:8a:61:af:c8:08:7b:b9: 72:7f:47:3f:bf:af:5b:68:a1:9e:e4:1c:a4:69:a9:8d:1c:49: 25:a9:3b:d8:ab:10:d8:0e:2d:be:6f:8d:2c:e0:88:56:a7:5e: 5e:bf:1c:85:16:17:ae:39:cc:b6:6b:65:35:0b:0c:61:94:e6: 9a:a4:23:94:21:12:07:3b:04:7d:c9:93:f1:21:6e:e3:32:02: b8:43:ce:65:e8:fe:c8:14:10:3e:f1:a1:74:0b:78:1f:77:9f: 37:02:f4:97:04:4d:69:a8:b7:42:1b:b1:4d:b3:89:a4:75:3f: 0e:34:e6:1b:52:ab:d2:03:e3:78:a4:11:cf:33:37:83:61:60: dc:9f:9c:4e:80:a4:4b:79:46:3d:c7:5a:5a:b7:e5:cd:12:4d: cf:e4:4b:db:93:ed:22:30:49:55:2a:79:bf:90:6e:7a:b6:63: c3:31:48:31:46:ee:ee:3b:ea:ba:2a:07:2a:de:1c:91:39:8a: f7:52:d7:7a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBa+70IgeiBEAlRNyTfIEDxJPksMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTYzMzU1WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AzODRlY2Y2ZDJkYjU1NDE0NzcwZjE2MzUwNmJhNzMyYWY0 OGU0MmIwZDg3ZmZhYmMyMDVkNzVjZDlmMTk3MzgzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCoKb/APeKZh/mcqLdd7fxmQftc85njiLZt7/mXGjS2iWsj uiPPwtjitMWR6cwLJ/dDE9Rpuqjbb6GiggH8ycHU1xQPcpMNvRrlU4v4pj4eJu9y KTz0cgYcrHqwZcMJiUgfmwhut1Y/hwVOcgkx7Z4mU9ualKOU/hwfilB7XjQT5qa/ kz5fGNNihcuWSmwK965XvivysOIliztwVsyTgBpjZ45r1fJfZPsJZK/01o3EWqPG kLBQCKtd4RuxH3e9Du/aIEO03V1RT9hT89wFDllUYMT4WNPu1KGodA7Q0zWJqPdl kmXDIji0qjmnB1QXgzvL6dqwwbGxMz/OeWm3tPpPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUiAjcO924Pkba5cOV9IQm+nmV0cYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2U4YzMwYjQ2LTBjM2QtNDcwZC1iOGRjLWU2MmIxZjc0NzUyMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESmqIwDQYJKoZIhvcNAQELBQADggEBAB+r7Iv6zX8j+Y25n4bWXu5vK3I5 3ORq3TysnFFFTkxha3PBzJ18K1jonqWPaqT7vr85ZhIyOTsdmchn1yId0/DVimGv yAh7uXJ/Rz+/r1tooZ7kHKRpqY0cSSWpO9irENgOLb5vjSzgiFanXl6/HIUWF645 zLZrZTULDGGU5pqkI5QhEgc7BH3Jk/EhbuMyArhDzmXo/sgUED7xoXQLeB93nzcC 9JcETWmot0IbsU2ziaR1Pw405htSq9ID43ikEc8zN4NhYNyfnE6ApEt5Rj3HWlq3 5c0STc/kS9uT7SIwSVUqeb+Qbnq2Y8MxSDFG7u476roqByreHJE5ivdS13o= -----END CERTIFICATE-----Generated at Mon Oct 20 05:17:15 2025 by rpki-client