$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ebb0809e-61d1-4ea8-8f12-08d93a25747f.roa File: ebb0809e-61d1-4ea8-8f12-08d93a25747f.roa (raw, json) Hash identifier: Xe3k2vZDVkzbHYqOIgFwLXbx0+v1NTljc9zwl3hePOw= Subject key identifier: C2:A8:27:D3:50:C3:81:4C:30:81:50:C7:85:2F:35:BA:A5:51:0B:6F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7CBE1F755C103CE3CF1EC8BE0D344C9BEB631A10 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ebb0809e-61d1-4ea8-8f12-08d93a25747f.roa Signing time: Sat 18 Oct 2025 14:22:27 +0000 ROA not before: Sat 18 Oct 2025 14:22:27 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.160.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:be:1f:75:5c:10:3c:e3:cf:1e:c8:be:0d:34:4c:9b:eb:63:1a:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 14:22:27 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=17cecb953697696cc0d1a8ab91beb12f70807e3ee778a93e6bddee7a7d13260b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:16:fc:58:f3:61:5a:fb:2d:9f:4d:8e:82:08: 69:3e:33:3b:a9:68:0f:99:94:82:e1:8a:dd:ce:ad: de:dd:98:6d:21:5c:72:fa:b9:38:a1:23:b4:d9:5f: 6e:b8:25:52:a3:23:a9:2e:a3:c2:68:81:d4:ae:b9: 4e:35:4d:51:d2:c9:1a:4d:d2:64:a9:f1:3d:c0:c4: 8e:ad:df:af:96:16:4e:fc:79:c7:12:9a:f7:c1:7c: d7:f3:9e:94:af:d9:e2:41:fd:92:c5:b5:92:2c:4b: c4:5c:31:fc:1d:2d:82:10:93:62:a8:bd:7f:21:a0: 5d:c0:f0:ab:62:e6:03:00:73:82:e6:6b:85:37:7f: 59:0e:c9:c6:d0:dd:21:f4:34:c1:86:cf:0d:9e:45: 1c:9f:8e:82:a5:e8:36:44:36:b2:39:39:f7:3b:85: 84:c8:e7:64:a7:57:e2:97:55:ab:75:ad:57:94:95: 4f:ad:87:43:4c:91:0f:73:53:37:d6:5c:c3:69:5d: 3e:a0:e8:e0:86:98:ba:b4:0a:88:78:c3:fc:f9:e1: 52:dd:ba:4f:f2:d6:da:31:86:8a:34:dd:3f:e7:e1: 73:01:5c:9d:2c:b1:24:d2:1c:10:97:cf:1b:0b:65: 71:3d:3a:a2:db:74:76:ee:3e:75:8b:4f:75:e7:12: 0b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:A8:27:D3:50:C3:81:4C:30:81:50:C7:85:2F:35:BA:A5:51:0B:6F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ebb0809e-61d1-4ea8-8f12-08d93a25747f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.160.156.0/22 Signature Algorithm: sha256WithRSAEncryption 73:3f:4c:42:1c:17:19:6e:01:ca:0f:56:b6:39:d9:a5:b7:db: 6b:d7:01:d9:50:ad:ef:1e:f6:a3:f9:51:cb:28:7f:24:95:ce: 1b:ac:7f:d6:b5:ff:c8:23:a8:1d:40:a4:74:6e:f1:d8:a0:fe: a4:ba:77:6e:5a:e3:48:d1:f1:24:dc:a7:c5:ed:4d:bd:04:8e: c8:5d:8d:e9:e9:ca:61:cd:ab:9d:fa:dd:36:53:9c:35:6f:d6: 7a:91:ec:b4:41:af:e4:4b:fc:70:0e:40:3c:e6:13:91:82:23: 20:c7:48:a1:6d:30:26:cc:56:99:07:91:a8:ee:13:39:8e:b8: 11:80:8a:88:f7:ab:40:d4:73:19:54:6a:ea:53:73:90:ca:d0: 0d:5b:47:a8:6d:14:62:35:af:27:dc:fa:46:e5:84:d2:73:52: ab:ad:18:43:80:5f:66:91:22:f6:e6:16:c5:a1:ef:44:c1:d9: 18:cc:81:79:11:16:cf:49:d5:a8:6c:a3:5a:2a:5c:3e:97:03: 0a:5b:b8:6f:86:22:20:2d:91:eb:ce:88:d3:5c:2f:94:84:3c: 88:99:c2:b0:57:cc:a1:0c:f5:4e:bd:37:e3:0d:f8:c4:f6:f4: a1:c7:c9:1c:3e:64:f9:27:6f:00:fb:f6:50:cf:77:2d:2b:bc: 8f:82:49:2b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfL4fdVwQPOPPHsi+DTRMm+tjGhAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTQyMjI3WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AxN2NlY2I5NTM2OTc2OTZjYzBkMWE4YWI5MWJlYjEyZjcw ODA3ZTNlZTc3OGE5M2U2YmRkZWU3YTdkMTMyNjBiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCuFvxY82Fa+y2fTY6CCGk+MzupaA+ZlILhit3Ord7dmG0h XHL6uTihI7TZX264JVKjI6kuo8JogdSuuU41TVHSyRpN0mSp8T3AxI6t36+WFk78 eccSmvfBfNfznpSv2eJB/ZLFtZIsS8RcMfwdLYIQk2KovX8hoF3A8Kti5gMAc4Lm a4U3f1kOycbQ3SH0NMGGzw2eRRyfjoKl6DZENrI5Ofc7hYTI52SnV+KXVat1rVeU lU+th0NMkQ9zUzfWXMNpXT6g6OCGmLq0Coh4w/z54VLduk/y1toxhoo03T/n4XMB XJ0ssSTSHBCXzxsLZXE9OqLbdHbuPnWLT3XnEgsVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUwqgn01DDgUwwgVDHhS81uqVRC28wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2ViYjA4MDllLTYxZDEtNGVhOC04ZjEyLTA4ZDkzYTI1NzQ3Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAISoJwwDQYJKoZIhvcNAQELBQADggEBAHM/TEIcFxluAcoPVrY52aW322vX AdlQre8e9qP5UcsofySVzhusf9a1/8gjqB1ApHRu8dig/qS6d25a40jR8STcp8Xt Tb0EjshdjenpymHNq5363TZTnDVv1nqR7LRBr+RL/HAOQDzmE5GCIyDHSKFtMCbM VpkHkajuEzmOuBGAioj3q0DUcxlUaupTc5DK0A1bR6htFGI1ryfc+kblhNJzUqut GEOAX2aRIvbmFsWh70TB2RjMgXkRFs9J1ahso1oqXD6XAwpbuG+GIiAtkevOiNNc L5SEPIiZwrBXzKEM9U69N+MN+MT29KHHyRw+ZPknbwD79lDPdy0rvI+CSSs= -----END CERTIFICATE-----Generated at Mon Oct 20 09:49:22 2025 by rpki-client