$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1c52a6e1-bdd5-4a76-af2c-e8054fb1b46f.roa File: 1c52a6e1-bdd5-4a76-af2c-e8054fb1b46f.roa (raw, json) Hash identifier: 3WZhhL4b/g91vjqkoAo48vWaixbZiTqtj4kwPzb4ook= Subject key identifier: C8:06:F4:82:45:17:C8:A2:8A:F4:7D:B3:ED:00:80:75:34:E4:04:70 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3F63DE5F50BB1A2B5654DFE0F2C85BDD071C09CB Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1c52a6e1-bdd5-4a76-af2c-e8054fb1b46f.roa Signing time: Sat 18 Oct 2025 14:41:34 +0000 ROA not before: Sat 18 Oct 2025 14:41:34 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.244.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:63:de:5f:50:bb:1a:2b:56:54:df:e0:f2:c8:5b:dd:07:1c:09:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 14:41:34 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=e67ad53b5e15e53e0667fe4fa8687b7fa882cee668bf4cc5baaf915e8d96b014, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:66:ef:25:81:43:3c:f8:e9:89:f1:c4:88:3a: 82:c7:21:26:08:eb:9e:cd:38:96:d1:96:e4:20:58: 31:88:d6:56:4e:69:6f:7e:57:5d:bf:39:5e:1e:34: 07:eb:70:ea:8b:a7:0f:6f:52:72:91:6c:ef:a2:c6: e2:53:87:40:b2:e1:ca:ff:1f:98:aa:24:48:6f:e3: 6a:2f:5d:90:33:5e:02:eb:21:bc:f2:7a:83:de:ae: a2:76:ee:8d:a6:49:f1:94:2d:10:bf:b4:c2:fc:a7: 78:26:74:c9:e5:e1:14:e3:99:dc:e0:59:ed:84:67: f8:f0:cb:3c:f0:a2:71:69:2d:d5:65:34:7f:78:ff: c1:b2:bc:39:28:e5:4e:ba:d4:2e:53:0a:f8:21:42: 4a:0d:1b:63:83:62:fb:2e:14:31:4d:be:8d:12:1e: 96:84:87:f3:e5:d3:a6:d9:41:b5:b3:af:bf:78:06: 5a:93:99:c5:9b:0d:9a:a6:97:86:8a:95:87:8d:e4: 6c:34:c1:dc:8a:22:e0:2d:49:b1:de:04:a8:9c:a7: b9:90:eb:d8:cc:df:e4:5f:27:9c:17:f1:c2:53:cd: bd:e0:23:ff:ff:7a:49:00:58:46:63:ea:3c:8c:12: 44:c8:f2:eb:dc:62:22:ec:3d:50:96:39:ef:8a:24: da:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:06:F4:82:45:17:C8:A2:8A:F4:7D:B3:ED:00:80:75:34:E4:04:70 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1c52a6e1-bdd5-4a76-af2c-e8054fb1b46f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.244.192.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:b9:72:e1:43:12:81:22:78:e5:8b:bc:58:f6:c1:39:d3:68: 30:ea:82:a6:ff:6f:04:b4:f3:20:74:05:39:77:60:75:7b:cd: ff:5e:2e:ba:a0:13:dc:1a:73:de:8d:d4:8b:17:a8:a5:ae:fd: c5:36:23:4a:b1:ef:e0:74:bd:b3:53:50:b1:15:77:cd:27:82: b3:49:c6:31:0b:cf:b1:a5:52:d6:07:88:64:f8:71:5a:bb:94: 9c:c8:1e:1a:a3:a6:6b:8d:43:dc:fd:43:48:60:40:ed:ce:92: c7:89:dc:74:36:74:7d:cf:aa:01:b2:2e:f9:c8:0c:bf:ec:8d: e0:f8:66:b2:83:38:ed:3b:0d:c8:b5:0a:4d:33:83:a2:94:b3: e5:1e:7c:59:a7:58:70:8d:0b:9c:6e:3e:9d:74:0d:99:19:3c: 79:3f:75:b2:cd:31:aa:69:79:b1:cf:b7:a8:8e:e5:e6:44:18: 0b:b7:16:13:bb:91:76:68:a0:aa:cd:b4:57:f5:8c:2e:93:0c: c5:f0:c0:d4:f3:b5:77:6c:97:0c:37:f4:c5:49:86:af:04:4d: b4:c0:af:c0:71:a8:74:5c:ca:a5:48:7d:a6:41:ff:db:a1:78: 1b:d4:34:da:80:b7:1c:0d:da:cd:24:31:c2:6d:4c:cf:c8:bf: 4d:90:e6:3e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUP2PeX1C7GitWVN/g8shb3QccCcswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTQ0MTM0WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BlNjdhZDUzYjVlMTVlNTNlMDY2N2ZlNGZhODY4N2I3ZmE4 ODJjZWU2NjhiZjRjYzViYWFmOTE1ZThkOTZiMDE0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCgZu8lgUM8+OmJ8cSIOoLHISYI657NOJbRluQgWDGI1lZO aW9+V12/OV4eNAfrcOqLpw9vUnKRbO+ixuJTh0Cy4cr/H5iqJEhv42ovXZAzXgLr IbzyeoPerqJ27o2mSfGULRC/tML8p3gmdMnl4RTjmdzgWe2EZ/jwyzzwonFpLdVl NH94/8GyvDko5U661C5TCvghQkoNG2ODYvsuFDFNvo0SHpaEh/Pl06bZQbWzr794 BlqTmcWbDZqml4aKlYeN5Gw0wdyKIuAtSbHeBKicp7mQ69jM3+RfJ5wX8cJTzb3g I///ekkAWEZj6jyMEkTI8uvcYiLsPVCWOe+KJNr5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUyAb0gkUXyKKK9H2z7QCAdTTkBHAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzFjNTJhNmUxLWJkZDUtNGE3Ni1hZjJjLWU4MDU0ZmIxYjQ2Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAS9MAwDQYJKoZIhvcNAQELBQADggEBAJ+5cuFDEoEieOWLvFj2wTnTaDDq gqb/bwS08yB0BTl3YHV7zf9eLrqgE9wac96N1IsXqKWu/cU2I0qx7+B0vbNTULEV d80ngrNJxjELz7GlUtYHiGT4cVq7lJzIHhqjpmuNQ9z9Q0hgQO3OkseJ3HQ2dH3P qgGyLvnIDL/sjeD4ZrKDOO07Dci1Ck0zg6KUs+UefFmnWHCNC5xuPp10DZkZPHk/ dbLNMappebHPt6iO5eZEGAu3FhO7kXZooKrNtFf1jC6TDMXwwNTztXdslww39MVJ hq8ETbTAr8BxqHRcyqVIfaZB/9uheBvUNNqAtxwN2s0kMcJtTM/Iv02Q5j4= -----END CERTIFICATE-----Generated at Mon Oct 20 17:29:18 2025 by rpki-client