$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ec7a4d6c-8406-48bc-9894-2519a45e560f.roa File: ec7a4d6c-8406-48bc-9894-2519a45e560f.roa (raw, json) Hash identifier: /QMJly59J9VJvnkAuEz5BRtUkJT1l+vmkektvCGl6FU= Subject key identifier: 08:9D:15:66:C1:22:C9:22:61:7D:ED:8E:EB:EF:15:7A:1C:02:BB:84 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 11B65FE2FF61581F5CFB87564906951912679B4F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ec7a4d6c-8406-48bc-9894-2519a45e560f.roa Signing time: Sat 18 Oct 2025 17:32:45 +0000 ROA not before: Sat 18 Oct 2025 17:32:45 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.164.130.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:b6:5f:e2:ff:61:58:1f:5c:fb:87:56:49:06:95:19:12:67:9b:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 17:32:45 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=71505802cb9ac972f647dbca8b986b6359aad96592f00f3d372482bc58d6b989, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8e:e5:05:15:8b:15:98:8c:67:50:9a:c5:ce: 93:fd:3c:2f:c1:16:a0:00:0d:3a:ce:ee:d0:1f:3a: bd:04:91:9a:ca:ee:3e:60:65:87:00:82:9d:89:ac: 9b:2e:22:bf:1d:89:52:fe:93:da:00:2d:6d:95:05: d4:b2:87:fc:de:00:02:4d:1d:56:00:c7:84:4d:85: ec:43:3f:a0:d8:f5:b4:b7:02:09:b5:17:d7:72:42: 93:83:b0:6b:4d:43:0b:95:28:c0:57:ae:43:d6:4a: 75:97:57:9d:b3:a5:30:58:39:d1:1b:66:fd:70:c0: a2:d6:64:2f:0a:16:1b:6d:1c:7b:6a:07:a7:fa:04: e0:6a:f4:61:c6:99:e0:35:25:82:90:1a:a8:13:89: e9:9c:04:5a:83:ec:51:fa:57:c4:1e:a3:a7:c5:99: 27:e9:96:c7:7b:28:d4:21:7c:18:32:97:49:12:6b: a2:83:32:63:94:c9:fa:0b:b8:93:9d:db:14:5b:6f: cd:4b:21:06:2a:60:17:47:16:f1:8b:1b:9a:fd:7a: 12:77:94:d0:09:7f:14:58:0e:70:e0:5e:3e:c5:3c: a7:85:68:10:51:1b:b8:e1:85:22:cf:fe:c9:30:d2: 0d:83:c2:b5:27:d7:a1:cb:2c:bd:1a:64:4e:73:97: a6:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:9D:15:66:C1:22:C9:22:61:7D:ED:8E:EB:EF:15:7A:1C:02:BB:84 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ec7a4d6c-8406-48bc-9894-2519a45e560f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.164.130.0/23 Signature Algorithm: sha256WithRSAEncryption 87:22:90:bd:35:c3:6d:3b:b2:61:5e:47:ae:a6:10:b2:db:97: a0:41:0a:4a:3a:4e:12:a0:c6:67:71:5e:d9:97:17:82:20:da: ca:e6:e3:0c:6e:da:10:8e:3f:ad:a4:04:02:9d:d1:b4:42:ae: 72:e1:01:05:a7:90:c7:ca:5f:bf:a4:92:61:df:36:e9:79:72: 8d:e3:54:c1:65:7d:c2:7b:c0:3e:49:aa:17:23:0c:7f:22:2d: c3:10:95:fe:9b:bc:ea:ac:84:c4:f1:9d:21:ac:1d:da:92:0f: a3:1a:5d:1a:d2:a2:ab:a7:32:e7:d5:b6:3c:91:1e:15:ba:10: 5c:fd:c3:12:71:33:c5:2e:9c:be:b6:62:9b:ca:67:2d:8f:af: f8:ad:f3:44:12:05:ef:cd:be:f6:da:13:bb:9d:27:af:64:12: 14:98:b6:d6:ba:eb:9a:f7:8b:c9:ad:6a:3c:49:a6:05:65:df: b3:95:75:c4:b8:f6:e6:59:95:e8:be:b8:20:d9:d9:d5:67:f9: 51:6d:cf:83:6c:c3:9c:50:47:3b:e3:5c:0a:a4:f6:c2:95:57: 1f:be:73:3a:6a:03:c0:0d:de:14:e9:58:42:ba:8b:19:97:28: 03:18:f2:8b:3b:ca:28:09:b6:40:3c:38:dd:50:3e:1e:19:58: 67:34:63:9a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEbZf4v9hWB9c+4dWSQaVGRJnm08wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTczMjQ1WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A3MTUwNTgwMmNiOWFjOTcyZjY0N2RiY2E4Yjk4NmI2MzU5 YWFkOTY1OTJmMDBmM2QzNzI0ODJiYzU4ZDZiOTg5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0juUFFYsVmIxnUJrFzpP9PC/BFqAADTrO7tAfOr0EkZrK 7j5gZYcAgp2JrJsuIr8diVL+k9oALW2VBdSyh/zeAAJNHVYAx4RNhexDP6DY9bS3 Agm1F9dyQpODsGtNQwuVKMBXrkPWSnWXV52zpTBYOdEbZv1wwKLWZC8KFhttHHtq B6f6BOBq9GHGmeA1JYKQGqgTiemcBFqD7FH6V8Qeo6fFmSfplsd7KNQhfBgyl0kS a6KDMmOUyfoLuJOd2xRbb81LIQYqYBdHFvGLG5r9ehJ3lNAJfxRYDnDgXj7FPKeF aBBRG7jhhSLP/skw0g2DwrUn16HLLL0aZE5zl6b1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUCJ0VZsEiySJhfe2O6+8VehwCu4QwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2VjN2E0ZDZjLTg0MDYtNDhiYy05ODk0LTI1MTlhNDVlNTYwZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESpIIwDQYJKoZIhvcNAQELBQADggEBAIcikL01w207smFeR66mELLbl6BB Cko6ThKgxmdxXtmXF4Ig2srm4wxu2hCOP62kBAKd0bRCrnLhAQWnkMfKX7+kkmHf Nul5co3jVMFlfcJ7wD5JqhcjDH8iLcMQlf6bvOqshMTxnSGsHdqSD6MaXRrSoqun MufVtjyRHhW6EFz9wxJxM8UunL62YpvKZy2Pr/it80QSBe/NvvbaE7udJ69kEhSY tta665r3i8mtajxJpgVl37OVdcS49uZZlei+uCDZ2dVn+VFtz4Nsw5xQRzvjXAqk 9sKVVx++czpqA8AN3hTpWEK6ixmXKAMY8os7yigJtkA8ON1QPh4ZWGc0Y5o= -----END CERTIFICATE-----Generated at Mon Oct 20 08:42:15 2025 by rpki-client