$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eb79e5cd-b809-4a12-b1fd-a23112c18185.roa File: eb79e5cd-b809-4a12-b1fd-a23112c18185.roa (raw, json) Hash identifier: PaA9r1jbGOJ3SekmQEOxkWfvh7yZKxSBDyGLJ3vIYJQ= Subject key identifier: C4:BF:DE:F3:64:4D:E3:5E:C6:D9:BE:CD:CC:31:FA:55:18:BC:E3:48 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 10AD2356F733AECDE0235C287CFC7063DBD76036 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eb79e5cd-b809-4a12-b1fd-a23112c18185.roa Signing time: Fri 19 Sep 2025 00:10:34 +0000 ROA not before: Fri 19 Sep 2025 00:10:34 +0000 ROA not after: Fri 24 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.158.180.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:ad:23:56:f7:33:ae:cd:e0:23:5c:28:7c:fc:70:63:db:d7:60:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 19 00:10:34 2025 GMT Not After : Oct 24 23:59:59 2025 GMT Subject: serialNumber=2ca666a95ed9138cd0871c61eec37b1f5331f9a2ca572889e3694fa1802119c1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:39:26:94:8a:50:46:11:47:57:31:6b:d2:1d: 70:67:d6:ac:6c:29:96:36:f7:6f:23:c7:23:16:39: c8:0e:ec:dc:39:97:85:30:23:64:2e:d9:c5:de:89: 31:37:03:be:86:ce:2f:e1:5a:1e:f6:90:17:cf:34: a7:cf:21:e3:d1:64:74:c7:53:56:45:0b:f3:d9:04: 12:53:67:4f:1b:b5:1d:97:14:1f:56:12:c5:af:a0: 3b:ed:ae:d7:14:3a:b3:57:0e:f0:b6:6e:83:db:56: f5:3c:45:3a:f5:36:4a:9a:f7:c0:d7:9e:99:9e:90: e7:53:b2:f1:41:5d:0d:0d:f6:0e:02:9e:e4:ea:5f: 94:df:c8:6b:d5:08:d8:26:38:7a:e5:c8:9a:45:94: 85:8b:90:dc:b4:0c:07:4c:3e:57:48:01:2b:73:96: 86:30:4a:98:a9:d7:90:f7:d8:57:c9:bc:d1:e2:51: f7:47:06:ad:92:db:09:4b:8c:94:67:1c:a3:38:07: fb:91:89:d3:41:bd:c8:57:6d:cf:41:1b:8e:47:34: 5d:87:60:72:ad:de:58:e3:30:28:61:a3:19:47:f9: ef:0c:22:5b:a1:bf:ec:86:61:c3:fb:ab:ee:cd:34: 7b:f7:50:7b:07:95:58:bc:8a:30:54:6a:ab:09:65: 4a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:BF:DE:F3:64:4D:E3:5E:C6:D9:BE:CD:CC:31:FA:55:18:BC:E3:48 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eb79e5cd-b809-4a12-b1fd-a23112c18185.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.158.180.0/23 Signature Algorithm: sha256WithRSAEncryption 99:71:30:08:90:82:20:d6:bf:dc:2c:26:a8:26:91:94:78:3e: ae:ba:28:7f:88:00:94:e8:5f:d5:52:0f:23:04:7d:f5:50:71: f7:2d:f8:c3:64:09:86:6c:14:2c:5a:ae:1d:39:c8:5e:b4:a5: 4e:80:ed:e3:cb:16:ab:07:6e:f7:cd:38:84:e2:c6:48:59:1d: a5:be:81:7a:cc:dd:9d:49:77:f7:e9:be:dd:24:e5:ff:c6:ff: 84:35:d2:26:16:12:27:e7:fa:cd:dc:d6:c2:58:6f:16:21:57: 0e:47:f3:57:39:f9:df:94:a2:a1:f2:13:e2:23:2b:ca:a1:af: 14:cf:2f:ab:36:a2:d3:c1:db:07:eb:20:cd:f7:75:61:21:e3: db:ad:da:2d:68:b5:15:7d:0f:3d:19:07:86:14:d0:46:7f:fe: c1:1c:b2:8c:31:13:93:e4:5e:2e:68:75:55:28:08:f0:9a:86: 3e:f5:64:58:9e:fb:cc:bf:e4:ea:31:0a:eb:fa:65:aa:fe:e7: 5d:c5:80:b5:14:41:7f:09:e0:2e:d6:00:2c:dd:4d:d4:01:92: 45:68:71:53:de:04:e8:46:0d:6f:19:3a:23:84:9d:b3:7d:85: 6e:68:ae:f1:7a:2f:6d:0e:44:9b:41:02:cb:8d:13:d1:8c:0b: 57:2d:1c:1c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEK0jVvczrs3gI1wofPxwY9vXYDYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTE5MDAxMDM0WhcNMjUxMDI0MjM1OTU5 WjB6MUkwRwYDVQQFE0AyY2E2NjZhOTVlZDkxMzhjZDA4NzFjNjFlZWMzN2IxZjUz MzFmOWEyY2E1NzI4ODllMzY5NGZhMTgwMjExOWMxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCuOSaUilBGEUdXMWvSHXBn1qxsKZY2928jxyMWOcgO7Nw5 l4UwI2Qu2cXeiTE3A76Gzi/hWh72kBfPNKfPIePRZHTHU1ZFC/PZBBJTZ08btR2X FB9WEsWvoDvtrtcUOrNXDvC2boPbVvU8RTr1Nkqa98DXnpmekOdTsvFBXQ0N9g4C nuTqX5TfyGvVCNgmOHrlyJpFlIWLkNy0DAdMPldIAStzloYwSpip15D32FfJvNHi UfdHBq2S2wlLjJRnHKM4B/uRidNBvchXbc9BG45HNF2HYHKt3ljjMChhoxlH+e8M Iluhv+yGYcP7q+7NNHv3UHsHlVi8ijBUaqsJZUo1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUxL/e82RN417G2b7NzDH6VRi840gwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2ViNzllNWNkLWI4MDktNGExMi1iMWZkLWEyMzExMmMxODE4NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEPnrQwDQYJKoZIhvcNAQELBQADggEBAJlxMAiQgiDWv9wsJqgmkZR4Pq66 KH+IAJToX9VSDyMEffVQcfct+MNkCYZsFCxarh05yF60pU6A7ePLFqsHbvfNOITi xkhZHaW+gXrM3Z1Jd/fpvt0k5f/G/4Q10iYWEifn+s3c1sJYbxYhVw5H81c5+d+U oqHyE+IjK8qhrxTPL6s2otPB2wfrIM33dWEh49ut2i1otRV9Dz0ZB4YU0EZ//sEc sowxE5PkXi5odVUoCPCahj71ZFie+8y/5OoxCuv6Zar+513FgLUUQX8J4C7WACzd TdQBkkVocVPeBOhGDW8ZOiOEnbN9hW5orvF6L20ORJtBAsuNE9GMC1ctHBw= -----END CERTIFICATE-----Generated at Fri Sep 19 06:04:00 2025 by rpki-client