$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eaaec42b-c721-44b1-9e67-65c389a0829b.roa File: eaaec42b-c721-44b1-9e67-65c389a0829b.roa (raw, json) Hash identifier: lGKzMV69rBelkLyVa9X4rgtsWNEjdGE+ywwA5z/pgyw= Subject key identifier: AC:69:9E:28:50:AB:63:1C:AD:F0:BD:2D:AE:7E:29:28:A5:8E:B5:9D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 732B7AFD79A1D196071FE54A436CCE892BB6FE86 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eaaec42b-c721-44b1-9e67-65c389a0829b.roa Signing time: Sun 19 Oct 2025 21:04:19 +0000 ROA not before: Sun 19 Oct 2025 21:04:19 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.66.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:2b:7a:fd:79:a1:d1:96:07:1f:e5:4a:43:6c:ce:89:2b:b6:fe:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 21:04:19 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=5845f961dd06dc97219fbf0025c3985d09dff45b941c72661aef2f8c5810cca5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:de:58:da:65:df:53:ff:af:99:04:bc:92:25: e5:11:00:91:49:55:aa:d6:3b:ab:96:31:41:af:96: 3d:0c:13:a7:0d:07:d5:9a:b5:df:75:f5:80:6a:5a: ad:6e:78:8f:27:05:11:c6:a9:09:79:8e:78:59:86: c9:7f:a5:d8:53:36:75:8c:68:9b:f9:77:5c:29:65: fd:ed:26:76:fd:20:10:b6:f7:8f:89:8b:27:60:b5: ac:34:c6:a8:f1:00:f0:e2:01:0a:86:39:f0:9c:8c: 10:53:98:df:36:16:a1:6b:7b:d3:5d:bf:d2:62:85: bf:12:f5:fb:cd:6f:06:8b:cc:39:70:51:84:2d:39: 5d:7b:62:75:a7:a4:a5:5c:81:0d:3f:b4:b3:88:44: 1e:5e:39:ac:52:47:2f:a5:f3:40:5d:60:d4:5f:41: a0:aa:55:b5:94:d6:25:35:74:1b:45:44:77:a0:74: 9e:de:cd:45:cf:52:66:93:6f:24:c6:29:3a:45:b3: f4:18:a8:ab:94:5e:0d:00:fd:23:6a:ec:3a:90:4f: ad:69:60:b1:48:1f:ab:19:87:4f:12:0a:83:88:dd: d7:20:38:c7:7e:c3:97:b8:f1:6b:a3:07:8f:44:4c: a1:61:2c:96:8e:c1:93:fe:a0:61:97:97:51:78:2b: b8:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:69:9E:28:50:AB:63:1C:AD:F0:BD:2D:AE:7E:29:28:A5:8E:B5:9D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eaaec42b-c721-44b1-9e67-65c389a0829b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.66.115.0/24 Signature Algorithm: sha256WithRSAEncryption 92:0a:66:3f:63:f3:7f:78:3d:83:e6:06:59:35:ab:66:54:70: 1a:70:c2:fb:66:d1:b5:55:bb:2b:45:a6:e5:d0:b2:49:a3:8b: b6:2b:4d:59:2a:d0:ad:76:bd:0d:72:dd:e5:d0:ef:13:ab:98: e9:da:88:6c:32:09:dc:56:e5:cd:fa:4d:e1:10:42:de:9d:7f: a0:88:50:ce:06:54:ca:ff:19:8c:54:a4:8b:64:f5:58:aa:5a: 0e:1f:ec:f8:39:94:66:03:14:26:84:da:7d:21:cb:82:11:8f: 92:fb:54:95:c6:33:50:4e:e6:f3:7e:6a:dd:df:1b:a9:51:d6: f0:5f:70:c5:59:a1:3f:79:99:1d:9f:71:26:3d:e6:78:26:4a: ad:d2:3e:e6:e6:f8:48:70:46:a5:46:93:b4:07:83:c1:3f:8a: 5f:0d:76:f2:54:ae:48:21:ab:7b:cd:e2:3c:c9:72:2b:e9:d8: 02:a6:81:a2:bd:a5:ec:24:91:f2:e8:79:f0:17:f0:6c:b0:92: 04:fe:d5:73:c0:6c:e2:3a:c8:2b:be:64:ca:50:d3:ab:26:c6: 27:1c:1c:c1:6a:37:83:d6:52:91:4e:7c:af:c9:11:c5:88:6b: 36:fc:04:9e:82:d8:90:ac:ee:f2:c9:de:3f:38:2a:01:32:ab: 42:e2:b2:33 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcyt6/Xmh0ZYHH+VKQ2zOiSu2/oYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MjEwNDE5WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A1ODQ1Zjk2MWRkMDZkYzk3MjE5ZmJmMDAyNWMzOTg1ZDA5 ZGZmNDViOTQxYzcyNjYxYWVmMmY4YzU4MTBjY2E1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC83ljaZd9T/6+ZBLySJeURAJFJVarWO6uWMUGvlj0ME6cN B9Watd919YBqWq1ueI8nBRHGqQl5jnhZhsl/pdhTNnWMaJv5d1wpZf3tJnb9IBC2 94+Jiydgtaw0xqjxAPDiAQqGOfCcjBBTmN82FqFre9Ndv9Jihb8S9fvNbwaLzDlw UYQtOV17YnWnpKVcgQ0/tLOIRB5eOaxSRy+l80BdYNRfQaCqVbWU1iU1dBtFRHeg dJ7ezUXPUmaTbyTGKTpFs/QYqKuUXg0A/SNq7DqQT61pYLFIH6sZh08SCoOI3dcg OMd+w5e48WujB49ETKFhLJaOwZP+oGGXl1F4K7i7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUrGmeKFCrYxyt8L0trn4pKKWOtZ0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2VhYWVjNDJiLWM3MjEtNDRiMS05ZTY3LTY1YzM4OWEwODI5Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASQnMwDQYJKoZIhvcNAQELBQADggEBAJIKZj9j8394PYPmBlk1q2ZUcBpw wvtm0bVVuytFpuXQskmji7YrTVkq0K12vQ1y3eXQ7xOrmOnaiGwyCdxW5c36TeEQ Qt6df6CIUM4GVMr/GYxUpItk9ViqWg4f7Pg5lGYDFCaE2n0hy4IRj5L7VJXGM1BO 5vN+at3fG6lR1vBfcMVZoT95mR2fcSY95ngmSq3SPubm+EhwRqVGk7QHg8E/il8N dvJUrkghq3vN4jzJcivp2AKmgaK9pewkkfLoefAX8GywkgT+1XPAbOI6yCu+ZMpQ 06smxiccHMFqN4PWUpFOfK/JEcWIazb8BJ6C2JCs7vLJ3j84KgEyq0LisjM= -----END CERTIFICATE-----Generated at Mon Oct 20 10:58:52 2025 by rpki-client