$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/08bcf6bb-7459-4521-90b0-5dcb213b9d49.roa File: 08bcf6bb-7459-4521-90b0-5dcb213b9d49.roa (raw, json) Hash identifier: UUv93K47aNRUORJtIXCOdZd/6fK7yPHKXJLK8GdWjik= Subject key identifier: 82:46:EE:37:C4:AC:1B:ED:33:C4:DB:12:35:79:C4:EE:29:B6:C0:C7 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 71BD6478D62DE2C50635D9F4FFAEFA14BF2303DA Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/08bcf6bb-7459-4521-90b0-5dcb213b9d49.roa Signing time: Sun 19 Oct 2025 03:41:19 +0000 ROA not before: Sun 19 Oct 2025 03:41:19 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.154.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:bd:64:78:d6:2d:e2:c5:06:35:d9:f4:ff:ae:fa:14:bf:23:03:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 03:41:19 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=09c005a94dbec89acb50a7b10c01d36e1f9f684756e4378f5a8c1be8b44320e2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6f:36:4d:77:1f:69:88:72:d8:05:2e:45:a1: 0c:97:a9:8a:dd:8a:ce:4e:b0:1c:c0:17:54:bc:81: 1c:15:fc:e5:ea:85:1a:10:d3:24:73:f3:2d:55:01: ae:bc:75:c5:ef:c4:85:13:72:96:a0:15:5d:5d:2d: 6a:4e:39:30:87:4d:e1:a9:65:58:88:08:8f:b2:9d: ad:b8:f6:a7:43:1a:f2:fa:8a:21:59:6b:16:c8:cf: 08:3c:06:f0:42:b5:4e:fe:82:5a:74:40:c4:01:db: e8:9a:e6:28:ee:99:8b:4c:26:58:8c:e7:ab:89:8b: 42:60:f6:e3:91:e3:17:9f:89:15:00:d0:cc:c3:b4: 77:2f:14:c3:d3:5f:3a:95:35:84:0f:81:22:a8:ae: 59:a0:08:fc:93:94:f7:5c:41:97:32:83:29:26:2a: 4a:ff:26:ec:6e:90:ac:80:9e:9b:6c:93:eb:db:4b: c6:24:e5:ff:3c:91:c5:4f:95:52:57:4d:64:67:09: e0:33:87:4a:07:c6:52:00:a2:8f:98:6d:dc:e2:f2: 45:2f:20:60:c7:dc:30:85:21:e1:78:77:c6:f5:ed: c5:ff:4e:5d:f4:9e:35:91:73:ad:8c:82:ac:19:76: 2f:3c:ce:24:9e:3c:3a:36:bd:a1:a2:77:3a:08:7d: 07:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:46:EE:37:C4:AC:1B:ED:33:C4:DB:12:35:79:C4:EE:29:B6:C0:C7 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/08bcf6bb-7459-4521-90b0-5dcb213b9d49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.154.211.0/24 Signature Algorithm: sha256WithRSAEncryption 33:a7:ec:01:d1:8a:6a:e9:fe:97:e8:21:23:f2:c5:97:1f:a1: 76:6a:fc:1f:fb:b0:34:a9:72:90:3b:6e:35:fa:7a:ff:6a:14: 97:ee:cf:cb:c6:06:2c:65:c3:d2:20:a7:ef:f0:3c:32:44:d7: 46:ed:d7:4c:66:fa:7e:59:96:fd:c8:90:26:eb:0f:44:9d:62: 90:c6:25:2b:90:c8:bb:5a:d0:a0:4e:a8:09:a8:a9:42:f7:87: e6:29:8e:af:57:41:1a:05:24:49:8c:5d:ea:96:df:de:35:5b: 18:f2:6a:43:41:e7:09:91:f7:7a:d4:f4:43:51:4f:3d:3e:64: 98:62:2b:90:84:9d:de:d1:b4:30:ed:43:88:59:f2:2c:a4:4e: c7:a0:d0:b9:33:bc:c9:c4:8a:89:b5:03:4a:29:e6:e1:8d:db: cd:7e:c4:45:8d:6f:d1:59:00:83:97:c3:bc:de:8d:17:50:82: 0b:7b:76:82:eb:c4:96:d7:98:d3:a8:14:cf:13:4d:26:c4:df: ea:48:26:c3:6e:42:35:46:b9:58:c7:ba:73:45:8e:ab:0a:7a: da:87:b1:50:72:cb:d3:d4:69:1b:15:53:67:6f:b1:bb:78:dc: 74:2d:ae:63:da:dd:3c:32:df:3e:ef:a7:8c:29:ba:d4:70:0e: b7:35:f8:bf -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcb1keNYt4sUGNdn0/676FL8jA9owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MDM0MTE5WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AwOWMwMDVhOTRkYmVjODlhY2I1MGE3YjEwYzAxZDM2ZTFm OWY2ODQ3NTZlNDM3OGY1YThjMWJlOGI0NDMyMGUyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwbzZNdx9piHLYBS5FoQyXqYrdis5OsBzAF1S8gRwV/OXq hRoQ0yRz8y1VAa68dcXvxIUTcpagFV1dLWpOOTCHTeGpZViICI+yna249qdDGvL6 iiFZaxbIzwg8BvBCtU7+glp0QMQB2+ia5ijumYtMJliM56uJi0Jg9uOR4xefiRUA 0MzDtHcvFMPTXzqVNYQPgSKorlmgCPyTlPdcQZcygykmKkr/JuxukKyAnptsk+vb S8Yk5f88kcVPlVJXTWRnCeAzh0oHxlIAoo+Ybdzi8kUvIGDH3DCFIeF4d8b17cX/ Tl30njWRc62MgqwZdi88ziSePDo2vaGidzoIfQflAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUgkbuN8SsG+0zxNsSNXnE7im2wMcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzA4YmNmNmJiLTc0NTktNDUyMS05MGIwLTVkY2IyMTNiOWQ0OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASmtMwDQYJKoZIhvcNAQELBQADggEBADOn7AHRimrp/pfoISPyxZcfoXZq /B/7sDSpcpA7bjX6ev9qFJfuz8vGBixlw9Igp+/wPDJE10bt10xm+n5Zlv3IkCbr D0SdYpDGJSuQyLta0KBOqAmoqUL3h+Ypjq9XQRoFJEmMXeqW3941WxjyakNB5wmR 93rU9ENRTz0+ZJhiK5CEnd7RtDDtQ4hZ8iykTseg0LkzvMnEiom1A0op5uGN281+ xEWNb9FZAIOXw7zejRdQggt7doLrxJbXmNOoFM8TTSbE3+pIJsNuQjVGuVjHunNF jqsKetqHsVByy9PUaRsVU2dvsbt43HQtrmPa3Twy3z7vp4wputRwDrc1+L8= -----END CERTIFICATE-----Generated at Mon Oct 20 11:54:54 2025 by rpki-client