$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eeb110ed-1e9f-40eb-91e5-68bfcab3b754.roa File: eeb110ed-1e9f-40eb-91e5-68bfcab3b754.roa (raw, json) Hash identifier: A8gDwZlZRl68EhTCcdQZFiJR6yLXZD8EPcnJZSK+xJY= Subject key identifier: 1F:54:C6:6D:F1:EA:C9:32:1D:FE:1D:02:29:6D:7C:D3:99:1D:7E:77 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2A8598689E72BF4F05C5F7A8C37172E5813DA5F1 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eeb110ed-1e9f-40eb-91e5-68bfcab3b754.roa Signing time: Thu 25 Sep 2025 19:21:51 +0000 ROA not before: Thu 25 Sep 2025 19:21:51 +0000 ROA not after: Thu 30 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.168.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:85:98:68:9e:72:bf:4f:05:c5:f7:a8:c3:71:72:e5:81:3d:a5:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 25 19:21:51 2025 GMT Not After : Oct 30 23:59:59 2025 GMT Subject: serialNumber=01436432fae35a1e70d2f166de4ce4283beff870f8721777385e8f8238e8a7d5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:86:de:39:f8:e9:44:2a:5a:68:79:97:5d:79: 26:18:dc:f5:a1:a8:8f:7a:54:91:62:7a:17:eb:c1: f9:13:e1:ec:60:7a:0a:53:32:75:6b:88:f5:9d:f9: bb:d7:90:e9:ff:75:7a:09:f6:45:3b:3c:4c:9a:70: bc:77:02:8f:4c:6b:4a:20:65:ad:bf:fa:b8:67:1a: 60:61:97:be:45:cf:a0:dc:41:34:b2:7b:16:ef:16: 32:61:72:a6:e0:43:56:21:8e:8a:4b:56:be:3e:02: e5:38:c1:a1:22:2d:50:45:2e:55:19:36:5e:bb:2b: f5:67:8b:26:55:13:97:5e:06:31:4c:d8:2f:cc:ea: 5c:96:3d:b7:e0:cc:d2:98:65:be:06:c9:b9:c4:37: 3d:a4:98:e0:ad:03:74:70:97:6e:15:f1:ae:98:4b: e9:69:c1:fa:63:6d:97:7a:01:44:73:d5:fa:19:ba: ed:bd:10:db:7b:92:50:27:9e:db:5c:6d:ca:49:50: 8b:f6:cc:25:3f:59:c3:fa:00:8b:63:1e:46:be:6d: eb:7e:2e:35:8c:36:4d:5c:80:42:5e:9a:61:81:0a: 87:34:70:1e:ce:3e:31:63:b7:9c:26:1d:9e:81:8c: 01:c4:27:11:1b:90:bf:2e:6c:66:53:3b:0a:ad:61: 96:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:54:C6:6D:F1:EA:C9:32:1D:FE:1D:02:29:6D:7C:D3:99:1D:7E:77 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eeb110ed-1e9f-40eb-91e5-68bfcab3b754.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.168.29.0/24 Signature Algorithm: sha256WithRSAEncryption 10:c8:2d:2a:4d:91:a3:74:93:c8:e5:ac:bb:4c:4a:a1:2e:06: f8:de:b6:e9:60:6b:a7:a6:e6:85:8d:74:08:23:14:40:7d:75: 9d:b6:f7:37:94:fc:62:f4:5c:32:24:f6:b9:fc:9b:20:19:59: 7a:ab:8d:23:0d:fd:d3:8b:c4:af:6d:6b:70:ef:e9:86:e8:65: a3:d2:e9:c6:fc:78:fb:a6:41:50:b0:c4:68:26:75:dc:0a:e6: 77:1f:27:26:b5:b2:0f:0e:63:ba:10:f3:b0:29:59:2f:ee:fd: 6a:97:3a:19:09:62:a2:6e:0d:50:3f:dd:a7:2d:91:3f:63:b4: cc:16:32:2e:e2:fa:57:ef:4b:24:e7:52:77:a9:d7:97:95:13: 7b:30:2e:6b:a4:89:9f:98:1e:ae:6c:7a:d0:c4:ea:98:a7:e8: 96:a6:2c:1f:7d:dd:30:f2:06:08:1e:d7:75:4a:75:34:dd:20: fb:c3:47:cd:9f:77:48:14:26:52:63:72:5f:91:49:64:fb:6f: 7f:9c:eb:0a:c3:24:0a:32:bb:46:45:6b:bb:01:18:7e:8c:17: 79:14:bc:b6:9a:5b:92:7c:1a:5c:9b:ec:2f:48:46:0a:80:c0: f6:28:4b:35:e4:a6:33:64:04:33:c0:9a:32:ef:a5:61:60:32: d1:39:ff:ca -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKoWYaJ5yv08Fxfeow3Fy5YE9pfEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI1MTkyMTUxWhcNMjUxMDMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AwMTQzNjQzMmZhZTM1YTFlNzBkMmYxNjZkZTRjZTQyODNi ZWZmODcwZjg3MjE3NzczODVlOGY4MjM4ZThhN2Q1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDMht45+OlEKlpoeZddeSYY3PWhqI96VJFiehfrwfkT4exg egpTMnVriPWd+bvXkOn/dXoJ9kU7PEyacLx3Ao9Ma0ogZa2/+rhnGmBhl75Fz6Dc QTSyexbvFjJhcqbgQ1YhjopLVr4+AuU4waEiLVBFLlUZNl67K/VniyZVE5deBjFM 2C/M6lyWPbfgzNKYZb4GybnENz2kmOCtA3Rwl24V8a6YS+lpwfpjbZd6AURz1foZ uu29ENt7klAnnttcbcpJUIv2zCU/WcP6AItjHka+bet+LjWMNk1cgEJemmGBCoc0 cB7OPjFjt5wmHZ6BjAHEJxEbkL8ubGZTOwqtYZY1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUH1TGbfHqyTId/h0CKW1805kdfncwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2VlYjExMGVkLTFlOWYtNDBlYi05MWU1LTY4YmZjYWIzYjc1NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADqB0wDQYJKoZIhvcNAQELBQADggEBABDILSpNkaN0k8jlrLtMSqEuBvje tulga6em5oWNdAgjFEB9dZ229zeU/GL0XDIk9rn8myAZWXqrjSMN/dOLxK9ta3Dv 6YboZaPS6cb8ePumQVCwxGgmddwK5ncfJya1sg8OY7oQ87ApWS/u/WqXOhkJYqJu DVA/3actkT9jtMwWMi7i+lfvSyTnUnep15eVE3swLmukiZ+YHq5setDE6pin6Jam LB993TDyBgge13VKdTTdIPvDR82fd0gUJlJjcl+RSWT7b3+c6wrDJAoyu0ZFa7sB GH6MF3kUvLaaW5J8Glyb7C9IRgqAwPYoSzXkpjNkBDPAmjLvpWFgMtE5/8o= -----END CERTIFICATE-----Generated at Mon Oct 20 18:11:52 2025 by rpki-client