$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1977e47b-d95a-411b-94ee-2b283a46e797.roa File: 1977e47b-d95a-411b-94ee-2b283a46e797.roa (raw, json) Hash identifier: 1fujK9XbxFHVpisktgAoMn+HEIKTvLrqyAIB1Jmh0X4= Subject key identifier: DA:05:E1:4D:70:69:0B:1C:A4:47:58:22:56:27:01:D6:DB:33:AE:16 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 171EC5817C62C9B688A582B6460E02C0E0E0793E Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1977e47b-d95a-411b-94ee-2b283a46e797.roa Signing time: Sat 18 Oct 2025 07:30:21 +0000 ROA not before: Sat 18 Oct 2025 07:30:21 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.238.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:1e:c5:81:7c:62:c9:b6:88:a5:82:b6:46:0e:02:c0:e0:e0:79:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 07:30:21 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=032e8e244188d0fcc5b01a164edc0b1bea219629e7387294de674e7b5ad57b27, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a3:a1:de:3a:34:6a:f7:4c:7a:2c:6b:1f:28: 26:84:d7:bc:58:6e:be:e4:a2:b5:8a:dd:7a:1e:08: a5:9d:66:9d:56:2c:20:dd:5d:47:0c:43:d0:e8:09: d3:2d:05:00:59:40:05:49:29:a4:2e:d1:04:00:53: b2:5e:a5:8d:c5:e9:0b:91:19:15:a9:40:26:84:9d: 9e:e6:17:18:c8:93:89:fb:a3:5a:b9:2d:08:58:64: ab:f3:aa:03:c9:7c:cf:e2:29:31:98:c7:96:5c:26: 5e:54:e5:2b:84:55:b7:b9:95:76:48:0a:51:a1:f7: 5b:d2:64:a6:67:d1:db:85:fc:af:ee:a2:4b:a1:13: 93:70:4a:73:b6:8f:ca:12:94:8f:9d:f1:6f:c6:e4: 77:83:bc:45:e6:c9:1a:6c:91:d9:fa:93:e3:c9:f8: 3d:2f:30:77:99:7f:c9:3c:6f:58:ad:66:ba:c2:87: 4b:6b:c9:69:9f:df:c9:1e:ca:ee:22:f8:e5:1a:43: 34:66:fc:3a:d3:e8:b8:32:d7:37:88:9d:b8:49:8b: 0d:f4:58:a3:92:38:93:7c:18:cd:26:0f:1e:32:ab: ac:2c:7b:c9:1e:84:db:d9:fd:10:2b:a1:a1:8b:35: f8:4c:d1:39:92:c9:06:86:71:c4:13:86:64:05:c0: 1d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:05:E1:4D:70:69:0B:1C:A4:47:58:22:56:27:01:D6:DB:33:AE:16 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1977e47b-d95a-411b-94ee-2b283a46e797.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.238.173.0/24 Signature Algorithm: sha256WithRSAEncryption 37:da:12:d2:d9:66:4d:88:b7:9f:80:0b:d1:8f:50:6a:91:fc: 62:72:c6:40:e4:6f:fa:31:1b:3d:0d:cd:ea:75:d1:97:a6:4a: 17:1d:99:e4:ed:26:66:83:49:91:a1:17:35:26:8f:e0:30:34: fc:c3:18:b1:ef:a4:bb:79:76:e1:f9:f4:d2:43:83:64:41:75: e2:9f:f8:6e:2c:68:e1:98:1b:9e:64:31:d3:db:1e:c4:2f:7f: 56:f2:af:49:05:ee:e8:cd:66:e7:9b:c2:ce:8d:96:ae:e8:e8: a0:91:85:a0:42:c1:9d:8e:da:05:2d:7d:fc:dd:a1:e9:6f:9e: 04:0f:b1:d0:9e:a4:01:3a:88:51:42:79:3d:67:5d:48:6b:0d: 12:aa:1b:c0:8c:fc:89:5e:57:97:98:aa:6b:dc:71:f6:19:2b: 5e:22:0d:16:01:3b:10:73:2b:30:2c:69:4f:0a:47:96:39:e2: 09:fd:9c:67:2c:3e:1e:2e:34:2c:aa:61:2a:23:63:3a:d6:98: 39:6a:6d:30:d0:a6:00:3e:04:d5:55:9a:0c:15:0a:68:cc:ae: e7:7a:d9:75:ce:5a:6a:75:1e:6a:04:56:68:7a:84:22:72:12: 7e:e7:14:dc:92:15:e3:f4:1b:fe:cc:21:f3:e9:ef:d5:18:70: b2:ab:7d:20 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFx7FgXxiybaIpYK2Rg4CwODgeT4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MDczMDIxWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AwMzJlOGUyNDQxODhkMGZjYzViMDFhMTY0ZWRjMGIxYmVh MjE5NjI5ZTczODcyOTRkZTY3NGU3YjVhZDU3YjI3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxo6HeOjRq90x6LGsfKCaE17xYbr7korWK3XoeCKWdZp1W LCDdXUcMQ9DoCdMtBQBZQAVJKaQu0QQAU7JepY3F6QuRGRWpQCaEnZ7mFxjIk4n7 o1q5LQhYZKvzqgPJfM/iKTGYx5ZcJl5U5SuEVbe5lXZIClGh91vSZKZn0duF/K/u okuhE5NwSnO2j8oSlI+d8W/G5HeDvEXmyRpskdn6k+PJ+D0vMHeZf8k8b1itZrrC h0tryWmf38keyu4i+OUaQzRm/DrT6Lgy1zeInbhJiw30WKOSOJN8GM0mDx4yq6ws e8kehNvZ/RAroaGLNfhM0TmSyQaGccQThmQFwB0nAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU2gXhTXBpCxykR1giVicB1tszrhYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzE5NzdlNDdiLWQ5NWEtNDExYi05NGVlLTJiMjgzYTQ2ZTc5Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAS7q0wDQYJKoZIhvcNAQELBQADggEBADfaEtLZZk2It5+AC9GPUGqR/GJy xkDkb/oxGz0Nzep10ZemShcdmeTtJmaDSZGhFzUmj+AwNPzDGLHvpLt5duH59NJD g2RBdeKf+G4saOGYG55kMdPbHsQvf1byr0kF7ujNZuebws6Nlq7o6KCRhaBCwZ2O 2gUtffzdoelvngQPsdCepAE6iFFCeT1nXUhrDRKqG8CM/IleV5eYqmvccfYZK14i DRYBOxBzKzAsaU8KR5Y54gn9nGcsPh4uNCyqYSojYzrWmDlqbTDQpgA+BNVVmgwV CmjMrud62XXOWmp1HmoEVmh6hCJyEn7nFNySFeP0G/7MIfPp79UYcLKrfSA= -----END CERTIFICATE-----Generated at Mon Oct 20 06:07:18 2025 by rpki-client