$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1aac233b-c923-4559-83c5-9a30e4a79573.roa File: 1aac233b-c923-4559-83c5-9a30e4a79573.roa (raw, json) Hash identifier: 2eTP4gOWcvRUwe1y35qcUudRgKvbgYRvUB+gPRIl3cs= Subject key identifier: AE:3C:C7:E3:67:3B:70:E9:AF:15:33:89:B5:D1:2D:08:33:98:97:79 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7DAE8467E8B661E7F34DC2DF416ACBC59A9A87B4 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1aac233b-c923-4559-83c5-9a30e4a79573.roa Signing time: Sun 19 Oct 2025 18:22:35 +0000 ROA not before: Sun 19 Oct 2025 18:22:35 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.67.124.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:ae:84:67:e8:b6:61:e7:f3:4d:c2:df:41:6a:cb:c5:9a:9a:87:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 18:22:35 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=ce2928ad2a4b97ac185b3223fd7f37ef46df58dda048ac73770872e44023f08b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2f:5c:93:fe:fc:9f:86:86:e0:8f:4e:fc:e6: 13:64:8c:6a:a5:0c:16:3e:32:31:fa:99:08:80:cd: ff:f3:de:af:4c:b2:5e:91:12:3a:8a:49:02:a0:68: 88:ed:ce:47:ee:3b:ad:c9:0c:ac:e5:42:52:c4:b0: fd:a0:e0:b1:51:c0:19:38:c8:af:4b:fc:0d:84:52: 2e:38:88:ed:8c:84:a6:26:54:8f:b8:6a:24:12:eb: fa:5d:4f:22:cf:5c:0d:09:0d:f9:20:85:2a:0b:5f: 50:bd:13:0f:11:40:3c:00:86:38:42:4a:e7:c3:1a: 93:f7:2c:24:ab:c1:c0:0e:a0:12:36:1a:18:07:02: 4d:dd:72:8c:79:5b:cf:e3:63:10:84:14:6d:fc:66: 6d:14:5f:0b:9b:f5:ee:7e:17:5b:68:c0:0b:38:ff: d8:91:d8:2d:9f:d3:03:00:06:fd:cf:9e:24:96:38: a0:6f:36:8a:f6:0d:db:2b:bf:ee:ca:76:c0:f5:db: 37:8c:ed:fb:dc:56:34:47:a0:99:0f:3d:22:1c:a2: fe:cc:34:6f:a0:f5:81:9f:2b:43:be:3e:cb:ba:a8: 95:c0:b7:74:b2:3a:84:72:80:a5:3a:e3:d4:88:49: 7e:28:07:bf:8c:dc:71:69:9b:0c:5e:4b:7c:23:3f: 99:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:3C:C7:E3:67:3B:70:E9:AF:15:33:89:B5:D1:2D:08:33:98:97:79 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1aac233b-c923-4559-83c5-9a30e4a79573.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.67.124.0/23 Signature Algorithm: sha256WithRSAEncryption 47:02:be:ed:80:13:46:52:9b:62:d8:c9:10:4a:f6:16:6d:f7: e6:dd:42:a5:f3:32:9a:dc:d5:71:1c:86:7b:94:44:08:d9:c9: 78:eb:de:a9:ee:de:14:44:36:08:cb:01:b9:c4:cb:33:96:ed: 2a:24:63:8b:2d:2b:08:15:ed:48:ed:a6:bb:3d:c2:d4:06:8b: 81:c2:aa:11:c8:54:c6:f3:f2:fb:de:09:bb:2d:d9:5e:40:c2: eb:9f:a1:7d:da:f1:02:c8:3e:d2:f9:00:c1:4d:fb:b7:5e:01: 68:41:ad:45:e6:41:e5:89:51:1c:aa:e6:a6:5b:7a:fc:33:16: 6d:a5:11:6e:22:12:41:73:f7:3a:29:3b:74:af:9a:e9:6d:da: 6e:78:3c:b6:5d:81:d7:47:f0:d7:cd:02:ce:37:1e:4a:70:ff: 29:03:d2:62:5a:c2:a4:d5:fc:b4:69:f4:65:31:c2:e5:a9:9d: 7c:84:0a:88:20:b5:cf:f4:9c:a7:e7:dc:71:79:22:2f:bc:c6: 9d:bf:f4:f6:3d:cc:38:f9:71:f6:92:20:86:7f:f8:73:c1:82: 47:5c:75:7f:3d:93:93:79:e3:a2:63:61:1d:ef:3b:d5:10:46: 3e:9e:18:12:7c:09:51:5d:6b:61:35:48:10:3c:f9:c9:b6:3c: e1:cc:37:7c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfa6EZ+i2YefzTcLfQWrLxZqah7QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTgyMjM1WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BjZTI5MjhhZDJhNGI5N2FjMTg1YjMyMjNmZDdmMzdlZjQ2 ZGY1OGRkYTA0OGFjNzM3NzA4NzJlNDQwMjNmMDhiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjL1yT/vyfhobgj0785hNkjGqlDBY+MjH6mQiAzf/z3q9M sl6REjqKSQKgaIjtzkfuO63JDKzlQlLEsP2g4LFRwBk4yK9L/A2EUi44iO2MhKYm VI+4aiQS6/pdTyLPXA0JDfkghSoLX1C9Ew8RQDwAhjhCSufDGpP3LCSrwcAOoBI2 GhgHAk3dcox5W8/jYxCEFG38Zm0UXwub9e5+F1towAs4/9iR2C2f0wMABv3PniSW OKBvNor2Ddsrv+7KdsD12zeM7fvcVjRHoJkPPSIcov7MNG+g9YGfK0O+Psu6qJXA t3SyOoRygKU649SISX4oB7+M3HFpmwxeS3wjP5lzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUrjzH42c7cOmvFTOJtdEtCDOYl3kwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzFhYWMyMzNiLWM5MjMtNDU1OS04M2M1LTlhMzBlNGE3OTU3My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESQ3wwDQYJKoZIhvcNAQELBQADggEBAEcCvu2AE0ZSm2LYyRBK9hZt9+bd QqXzMprc1XEchnuURAjZyXjr3qnu3hRENgjLAbnEyzOW7SokY4stKwgV7Ujtprs9 wtQGi4HCqhHIVMbz8vveCbst2V5AwuufoX3a8QLIPtL5AMFN+7deAWhBrUXmQeWJ URyq5qZbevwzFm2lEW4iEkFz9zopO3Svmult2m54PLZdgddH8NfNAs43Hkpw/ykD 0mJawqTV/LRp9GUxwuWpnXyECoggtc/0nKfn3HF5Ii+8xp2/9PY9zDj5cfaSIIZ/ +HPBgkdcdX89k5N546JjYR3vO9UQRj6eGBJ8CVFda2E1SBA8+cm2POHMN3w= -----END CERTIFICATE-----Generated at Mon Oct 20 02:55:38 2025 by rpki-client