$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eb4989cb-efe2-4ee0-a5ae-9d8fdd6b3807.roa File: eb4989cb-efe2-4ee0-a5ae-9d8fdd6b3807.roa (raw, json) Hash identifier: lpKpm4a3Oh6K14AoRZGg6t65BQ4OIweTfJLlJhrftts= Subject key identifier: F1:45:51:9D:D3:BF:78:6B:FB:67:3C:E7:74:04:E7:F3:BC:B0:05:D5 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 398E5B52CB52C607D7C1D37C4F77A1E3B83C3ED7 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eb4989cb-efe2-4ee0-a5ae-9d8fdd6b3807.roa Signing time: Sat 18 Oct 2025 14:00:09 +0000 ROA not before: Sat 18 Oct 2025 14:00:09 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.155.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:8e:5b:52:cb:52:c6:07:d7:c1:d3:7c:4f:77:a1:e3:b8:3c:3e:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 14:00:09 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=62623c52c3eea91717e716cfed8a5d95d4d91d4818a859354fe2e4f21cba3175, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c5:89:90:e3:84:42:8a:88:c0:c3:0a:4e:15: 14:c6:ed:cc:dc:c3:9d:5a:da:94:d3:7e:19:1c:ff: de:08:68:5a:1a:c3:85:5b:12:70:30:6e:fa:3f:31: a0:af:0b:40:78:1f:59:13:31:34:b4:36:7a:29:0b: af:eb:6c:60:a3:7f:00:18:fe:97:29:ed:44:3e:b9: 86:e3:07:5d:2f:50:c5:fb:2f:e6:3a:b9:fb:38:a3: 60:26:04:4b:99:d3:d9:a1:d2:2d:32:15:45:91:c8: 7c:8e:e9:8d:ed:23:17:02:49:eb:8d:d3:43:27:3c: f5:e6:b6:9e:84:4e:ee:ea:37:bf:21:2a:cb:55:98: da:bd:00:fd:b4:4b:ee:d3:93:45:d0:59:31:b6:18: 74:55:ed:47:88:16:a9:02:f7:df:5e:04:a7:4b:c9: 1f:e7:ad:7c:e8:df:1b:1c:a5:82:08:1d:4d:6a:1d: 65:6d:a1:14:10:18:c3:d6:d9:df:0f:ef:a4:15:cf: 4c:2e:6a:d6:5e:11:81:58:aa:69:33:39:e3:40:9b: 44:84:38:c2:bc:62:97:2f:f3:cf:01:fa:8c:18:73: e7:45:87:4d:ae:09:b0:96:e1:ac:31:49:85:fb:b0: bb:40:b1:2c:fd:96:63:4d:9e:a8:55:26:fb:ca:f1: 97:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:45:51:9D:D3:BF:78:6B:FB:67:3C:E7:74:04:E7:F3:BC:B0:05:D5 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eb4989cb-efe2-4ee0-a5ae-9d8fdd6b3807.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.155.168.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:06:97:53:41:a8:0b:55:1e:0b:de:56:19:aa:9a:7f:d2:42: 9e:5e:6d:83:ba:33:82:a4:06:89:a3:7c:bc:6c:74:6b:e1:90: c2:87:59:ea:e6:05:ab:b9:e1:3c:02:4b:89:5a:db:a9:ed:6d: 8e:11:0d:1b:f1:05:07:35:8b:97:c3:e5:81:48:30:49:a0:b4: 14:b6:19:69:6c:ad:dc:28:e9:f9:6f:bc:f8:3e:48:fb:15:a6: a7:1f:3a:df:a6:ef:b9:0f:55:ec:00:31:b4:52:3f:18:de:2b: fb:9d:23:c2:87:18:c1:7f:f5:92:50:07:cc:ca:36:ff:77:4a: 7d:23:5a:d1:ea:c3:94:b4:63:a2:3b:b6:50:b8:41:5b:f5:0f: cc:82:8c:a9:72:a1:fa:6b:d7:97:79:f8:36:fa:99:78:8e:fc: 67:52:5e:29:35:35:d5:af:a0:7e:e8:fd:9d:69:40:39:dd:07: 9f:3a:b8:94:19:ea:e9:88:51:93:8a:03:fc:3f:85:b7:4f:10: 8f:0c:eb:c3:0f:b3:46:2e:36:21:fd:0e:cc:57:ad:da:1e:11: 5e:c7:96:19:11:7e:90:bd:2d:1e:14:41:7d:69:1c:e1:45:ec: 41:71:a0:4c:d7:dc:b7:d8:06:90:84:c9:b9:36:37:29:fb:37: 14:1f:ca:12 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOY5bUstSxgfXwdN8T3eh47g8PtcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTQwMDA5WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A2MjYyM2M1MmMzZWVhOTE3MTdlNzE2Y2ZlZDhhNWQ5NWQ0 ZDkxZDQ4MThhODU5MzU0ZmUyZTRmMjFjYmEzMTc1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDMxYmQ44RCiojAwwpOFRTG7czcw51a2pTTfhkc/94IaFoa w4VbEnAwbvo/MaCvC0B4H1kTMTS0NnopC6/rbGCjfwAY/pcp7UQ+uYbjB10vUMX7 L+Y6ufs4o2AmBEuZ09mh0i0yFUWRyHyO6Y3tIxcCSeuN00MnPPXmtp6ETu7qN78h KstVmNq9AP20S+7Tk0XQWTG2GHRV7UeIFqkC999eBKdLyR/nrXzo3xscpYIIHU1q HWVtoRQQGMPW2d8P76QVz0wuatZeEYFYqmkzOeNAm0SEOMK8Ypcv888B+owYc+dF h02uCbCW4awxSYX7sLtAsSz9lmNNnqhVJvvK8ZfrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU8UVRndO/eGv7ZzzndATn87ywBdUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2ViNDk4OWNiLWVmZTItNGVlMC1hNWFlLTlkOGZkZDZiMzgwNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASm6gwDQYJKoZIhvcNAQELBQADggEBAA8Gl1NBqAtVHgveVhmqmn/SQp5e bYO6M4KkBomjfLxsdGvhkMKHWermBau54TwCS4la26ntbY4RDRvxBQc1i5fD5YFI MEmgtBS2GWlsrdwo6flvvPg+SPsVpqcfOt+m77kPVewAMbRSPxjeK/udI8KHGMF/ 9ZJQB8zKNv93Sn0jWtHqw5S0Y6I7tlC4QVv1D8yCjKlyofpr15d5+Db6mXiO/GdS Xik1NdWvoH7o/Z1pQDndB586uJQZ6umIUZOKA/w/hbdPEI8M68MPs0YuNiH9DsxX rdoeEV7HlhkRfpC9LR4UQX1pHOFF7EFxoEzX3LfYBpCEybk2Nyn7NxQfyhI= -----END CERTIFICATE-----Generated at Mon Oct 20 03:02:53 2025 by rpki-client