$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/131d77c8-e44d-4b28-bf71-2ef0fc97f0f5.roa File: 131d77c8-e44d-4b28-bf71-2ef0fc97f0f5.roa (raw, json) Hash identifier: YVUxddnGvsln2FiT6qIKKDXGluOqq/NAfybM1xnhq7c= Subject key identifier: D8:35:B0:DA:D5:C2:6A:B1:FC:24:30:4F:97:58:01:3D:68:8D:D6:A0 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 08B9F72D332D3357CF55B7CED24A97F2E4EC39D3 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/131d77c8-e44d-4b28-bf71-2ef0fc97f0f5.roa Signing time: Sat 18 Oct 2025 20:00:12 +0000 ROA not before: Sat 18 Oct 2025 20:00:12 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.244.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:b9:f7:2d:33:2d:33:57:cf:55:b7:ce:d2:4a:97:f2:e4:ec:39:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 20:00:12 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=1699dc89667f57aabe420b9e85dbb58aabd3aa9528468e88d422bd2c4a3a9898, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:95:c0:e8:05:4b:ba:86:f0:56:cf:ae:5a:32: 77:80:0c:00:21:74:0d:4b:73:ce:71:b6:7e:e5:88: 12:4d:42:ce:42:dd:68:40:31:9f:2e:a6:85:9d:d5: 64:62:d6:fd:43:d3:66:cf:4b:60:72:f8:17:e1:39: b6:a5:b3:18:19:2d:a8:85:0b:df:5d:d0:56:98:00: 67:49:b9:31:f7:45:13:9e:84:b8:dd:48:af:f6:ed: fe:79:e1:05:ab:75:c2:0f:9f:19:f4:05:f1:66:d9: dd:2a:25:7f:7b:33:e9:53:ce:aa:f5:bd:1c:85:be: fa:5e:d5:4a:b1:da:70:86:67:13:a8:87:08:8f:e4: 55:da:af:ed:12:27:ad:57:2b:57:49:a3:2a:f4:6d: 4c:5c:a5:24:74:c6:29:45:d4:30:d4:92:d8:04:bc: b2:9f:c5:44:c3:36:98:fe:0d:1c:0c:d6:c7:bc:31: 4f:6d:24:ca:23:98:55:ff:b9:d1:e2:22:0c:2c:7e: 80:ee:ae:e0:54:3d:e5:e9:8c:57:e6:22:7c:82:83: fe:2e:59:5a:d8:a6:45:81:17:06:3f:b5:62:12:c0: 91:ef:1a:a0:c1:c8:2a:31:73:ec:25:d1:91:4d:59: b0:84:83:06:ce:78:2f:dd:6c:5b:28:06:d3:ec:bf: 41:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:35:B0:DA:D5:C2:6A:B1:FC:24:30:4F:97:58:01:3D:68:8D:D6:A0 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/131d77c8-e44d-4b28-bf71-2ef0fc97f0f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.244.194.0/23 Signature Algorithm: sha256WithRSAEncryption 9e:2f:12:ff:6a:52:63:6a:33:56:46:52:e7:d1:dc:8c:fb:a8: 23:97:4b:c1:bf:6c:ef:cc:40:6c:6d:96:4b:0a:bf:90:99:96: 62:db:96:fc:22:e2:1a:ab:d9:e2:f7:41:7f:cc:2f:60:8e:2a: c3:58:06:ce:e3:a4:9a:61:0e:fa:ac:3a:38:76:dd:29:d1:6b: 56:0d:31:4c:66:07:8b:32:4e:7b:7e:ab:b3:0d:ab:7a:79:aa: 15:15:15:c6:7c:d3:ab:73:a9:a8:1a:d7:17:4a:53:33:76:05: 61:6c:4f:ca:10:4b:3a:92:e7:f5:7a:8e:2c:ef:e0:06:13:82: 8f:99:d9:33:63:c4:65:61:f7:bd:25:f4:67:38:2b:62:42:ce: 06:5a:c4:a1:e0:22:d2:0d:66:9f:27:e8:d1:93:88:9a:78:64: ec:67:2d:b1:18:7f:88:4e:5f:2b:c9:6e:fc:70:a6:aa:40:5c: 8a:ca:33:02:80:89:08:60:32:bf:30:75:ba:8e:91:83:58:ab: 17:e4:c2:bd:ea:b6:75:ba:50:6a:28:0d:a7:5c:b6:91:bb:d1: a5:89:fc:ae:b1:dc:7d:54:c0:63:da:a6:25:68:94:39:43:85: 2c:b2:e7:30:04:86:10:55:ea:a7:ce:aa:35:e7:d7:92:db:da: 52:84:2c:93 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCLn3LTMtM1fPVbfO0kqX8uTsOdMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MjAwMDEyWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AxNjk5ZGM4OTY2N2Y1N2FhYmU0MjBiOWU4NWRiYjU4YWFi ZDNhYTk1Mjg0NjhlODhkNDIyYmQyYzRhM2E5ODk4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCDlcDoBUu6hvBWz65aMneADAAhdA1Lc85xtn7liBJNQs5C 3WhAMZ8upoWd1WRi1v1D02bPS2By+BfhObalsxgZLaiFC99d0FaYAGdJuTH3RROe hLjdSK/27f554QWrdcIPnxn0BfFm2d0qJX97M+lTzqr1vRyFvvpe1Uqx2nCGZxOo hwiP5FXar+0SJ61XK1dJoyr0bUxcpSR0xilF1DDUktgEvLKfxUTDNpj+DRwM1se8 MU9tJMojmFX/udHiIgwsfoDuruBUPeXpjFfmInyCg/4uWVrYpkWBFwY/tWISwJHv GqDByCoxc+wl0ZFNWbCEgwbOeC/dbFsoBtPsv0GbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU2DWw2tXCarH8JDBPl1gBPWiN1qAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzEzMWQ3N2M4LWU0NGQtNGIyOC1iZjcxLTJlZjBmYzk3ZjBmNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAES9MIwDQYJKoZIhvcNAQELBQADggEBAJ4vEv9qUmNqM1ZGUufR3Iz7qCOX S8G/bO/MQGxtlksKv5CZlmLblvwi4hqr2eL3QX/ML2COKsNYBs7jpJphDvqsOjh2 3SnRa1YNMUxmB4syTnt+q7MNq3p5qhUVFcZ806tzqaga1xdKUzN2BWFsT8oQSzqS 5/V6jizv4AYTgo+Z2TNjxGVh970l9Gc4K2JCzgZaxKHgItINZp8n6NGTiJp4ZOxn LbEYf4hOXyvJbvxwpqpAXIrKMwKAiQhgMr8wdbqOkYNYqxfkwr3qtnW6UGooDadc tpG70aWJ/K6x3H1UwGPapiVolDlDhSyy5zAEhhBV6qfOqjXn15Lb2lKELJM= -----END CERTIFICATE-----Generated at Mon Oct 20 18:12:37 2025 by rpki-client