$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8eaae68c-b351-4abf-b060-c79da2eac355.roa File: 8eaae68c-b351-4abf-b060-c79da2eac355.roa (raw, json) Hash identifier: XBTpOr98ZkApJHuULLedmXv/BSgg6KEijnTojsK2Rdo= Subject key identifier: 71:B5:00:8C:D1:1A:C7:A6:7A:CD:DB:18:E5:30:9E:AE:03:4B:30:63 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 28778DAA914663FE399FEE0B30693FE1A9871823 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8eaae68c-b351-4abf-b060-c79da2eac355.roa Signing time: Mon 22 Sep 2025 17:38:40 +0000 ROA not before: Mon 22 Sep 2025 17:38:40 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.155.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:77:8d:aa:91:46:63:fe:39:9f:ee:0b:30:69:3f:e1:a9:87:18:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 17:38:40 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=c110a82c498f6fe93d28786f3b33d4806b1a8e5110e5e5999011ed7a31b9459c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:63:87:bc:10:ae:65:18:bb:fb:49:07:77:39: e1:47:5a:a4:cc:b9:36:78:02:d2:9a:80:bd:11:86: 49:87:49:86:36:69:22:b1:b0:e5:c6:fa:ab:38:37: ce:93:8f:52:59:7d:53:13:ff:1d:04:7a:44:1e:ff: ec:05:3a:7f:96:00:79:90:db:68:7d:10:34:92:27: 82:5f:96:80:c6:48:7f:df:39:a8:75:20:8c:b0:2e: 6e:ab:79:0c:0c:d8:22:c1:1c:73:3f:4c:d1:d8:d5: fd:2a:b7:98:e0:87:89:e9:d6:34:8b:8a:b3:68:5c: c8:5a:44:5e:7f:47:55:14:3c:0d:65:39:b0:dd:36: e4:34:5b:b3:1c:60:32:6a:e6:c0:9a:43:93:d0:6f: fd:19:8c:5a:9f:b1:fa:d2:a9:72:db:c6:51:c5:e1: ef:3a:6b:b1:31:21:fd:47:91:73:37:e9:36:b6:cf: 02:14:0c:f7:aa:61:52:dd:60:e7:1a:f6:f5:cd:af: 9b:4f:1b:2d:04:b2:65:4b:03:17:bd:af:dd:88:50: 0d:78:84:e4:68:c5:a1:b8:b7:06:4f:76:fc:5a:c0: 63:3c:0e:d1:3f:56:ec:d0:cb:f5:8c:ad:59:83:48: 74:51:d2:f1:e0:65:34:57:bd:95:6d:7d:63:02:5d: fd:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:B5:00:8C:D1:1A:C7:A6:7A:CD:DB:18:E5:30:9E:AE:03:4B:30:63 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8eaae68c-b351-4abf-b060-c79da2eac355.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.155.94.0/24 Signature Algorithm: sha256WithRSAEncryption 36:bb:f7:4d:a4:49:fc:18:2e:7e:fb:93:99:5c:74:db:5d:35: fc:f8:5e:7c:98:6f:00:4a:e7:02:92:39:ef:d7:37:e6:4f:aa: 6d:5a:02:f5:20:5e:85:98:b5:07:27:5e:f4:6d:bc:e1:2a:c5: 1e:3b:95:dd:3a:bc:ff:12:97:9e:c0:90:35:b3:e4:4a:e2:5a: 6c:72:41:b3:e5:d1:ca:49:48:9a:17:b7:2f:e5:24:ed:d9:4b: 3a:3d:15:fd:7a:79:2f:fd:02:61:43:c8:21:c0:7d:86:3c:41: a3:03:9b:5b:8e:bb:c0:ba:3d:d4:69:95:17:ec:5a:04:e6:95: 24:c9:3a:49:5e:bb:a4:62:fb:e8:b4:70:46:42:63:7c:92:52: e9:6b:b8:72:30:a2:5e:fa:39:8a:30:4f:98:68:6b:3f:d3:eb: d4:4f:66:18:90:c4:8e:96:12:5b:d0:43:ee:68:b7:36:e6:f8: 4f:a2:05:42:41:7b:36:67:94:51:11:33:d8:6e:f2:a9:9d:50: 87:93:dc:63:84:27:88:8b:3d:17:b6:18:6d:77:e9:09:f6:25: f7:43:6d:c6:29:e3:28:d9:12:6c:0d:02:2f:a9:45:ff:06:6e: ff:80:b6:18:14:1f:da:d3:e3:c0:16:51:30:06:09:f6:2d:5f: a7:2c:31:85 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKHeNqpFGY/45n+4LMGk/4amHGCMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMTczODQwWhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BjMTEwYTgyYzQ5OGY2ZmU5M2QyODc4NmYzYjMzZDQ4MDZi MWE4ZTUxMTBlNWU1OTk5MDExZWQ3YTMxYjk0NTljMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCsY4e8EK5lGLv7SQd3OeFHWqTMuTZ4AtKagL0RhkmHSYY2 aSKxsOXG+qs4N86Tj1JZfVMT/x0EekQe/+wFOn+WAHmQ22h9EDSSJ4JfloDGSH/f Oah1IIywLm6reQwM2CLBHHM/TNHY1f0qt5jgh4np1jSLirNoXMhaRF5/R1UUPA1l ObDdNuQ0W7McYDJq5sCaQ5PQb/0ZjFqfsfrSqXLbxlHF4e86a7ExIf1HkXM36Ta2 zwIUDPeqYVLdYOca9vXNr5tPGy0EsmVLAxe9r92IUA14hORoxaG4twZPdvxawGM8 DtE/VuzQy/WMrVmDSHRR0vHgZTRXvZVtfWMCXf3/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUcbUAjNEax6Z6zdsY5TCergNLMGMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzhlYWFlNjhjLWIzNTEtNGFiZi1iMDYwLWM3OWRhMmVhYzM1NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASm14wDQYJKoZIhvcNAQELBQADggEBADa7902kSfwYLn77k5lcdNtdNfz4 XnyYbwBK5wKSOe/XN+ZPqm1aAvUgXoWYtQcnXvRtvOEqxR47ld06vP8Sl57AkDWz 5EriWmxyQbPl0cpJSJoXty/lJO3ZSzo9Ff16eS/9AmFDyCHAfYY8QaMDm1uOu8C6 PdRplRfsWgTmlSTJOkleu6Ri++i0cEZCY3ySUulruHIwol76OYowT5hoaz/T69RP ZhiQxI6WElvQQ+5otzbm+E+iBUJBezZnlFERM9hu8qmdUIeT3GOEJ4iLPRe2GG13 6Qn2JfdDbcYp4yjZEmwNAi+pRf8Gbv+AthgUH9rT48AWUTAGCfYtX6csMYU= -----END CERTIFICATE-----Generated at Fri Oct 17 22:02:35 2025 by rpki-client