$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1fc25d45-ac14-4f93-9ee5-17dd752ef69f.roa File: 1fc25d45-ac14-4f93-9ee5-17dd752ef69f.roa (raw, json) Hash identifier: V3ZOzxIqiJQkY42mBmhgvJ/C3ZJh49QtlA20t4tG5Mg= Subject key identifier: 01:B7:39:09:DD:E3:12:0C:DE:A1:14:C7:98:8E:18:27:7E:90:E8:82 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2BF8B1CD15F959F06F0BC2A709A09D6B71CB8310 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1fc25d45-ac14-4f93-9ee5-17dd752ef69f.roa Signing time: Sat 18 Oct 2025 22:42:33 +0000 ROA not before: Sat 18 Oct 2025 22:42:33 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.173.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:f8:b1:cd:15:f9:59:f0:6f:0b:c2:a7:09:a0:9d:6b:71:cb:83:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 22:42:33 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=cc8e9539acc846ae57fc57c417b3b1a0a614453e57fce7eb86031a52c57c6346, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:49:1b:09:79:b2:5a:00:ba:0c:6a:2e:75:ed: 6e:27:a6:0b:86:ee:e9:64:cf:66:f8:61:d4:ce:ac: 7d:ed:b8:65:b9:eb:06:14:e8:b4:ea:26:09:47:17: 27:42:7f:52:51:3d:fb:1c:2b:32:97:3e:ef:8c:65: a0:f7:cb:60:f0:6b:82:0c:eb:e2:b9:e5:16:41:39: 55:4f:dd:ec:ac:11:e5:b2:18:8a:cb:60:7f:f1:15: 1a:23:85:97:93:4b:cd:cf:4c:04:87:b6:91:0e:35: fe:f8:bd:e1:81:39:48:85:6b:4c:31:2f:8e:a5:e4: 06:f7:ce:ec:b5:f2:58:d9:42:55:b6:10:9c:12:78: e0:1a:65:6a:91:83:59:d7:94:52:61:b5:2c:e8:a2: 4a:80:83:a1:f7:3f:bf:af:02:e7:d7:6e:03:aa:8e: 1c:69:17:21:df:3c:42:7b:3f:0b:e6:d8:4a:03:0a: 21:e2:eb:56:ed:d7:4f:cf:ba:e1:d8:48:07:67:e6: c6:4f:8a:75:fa:7e:a5:a2:b9:9f:6d:65:a0:c0:f2: 72:09:2a:b1:e5:dc:19:79:2f:f8:22:ee:8d:08:2b: 41:b3:df:11:e7:da:9e:9f:25:fc:67:4e:a7:2d:b6: df:33:89:a0:ae:61:1a:03:15:28:f3:11:cf:4f:97: 21:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:B7:39:09:DD:E3:12:0C:DE:A1:14:C7:98:8E:18:27:7E:90:E8:82 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1fc25d45-ac14-4f93-9ee5-17dd752ef69f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.173.151.0/24 Signature Algorithm: sha256WithRSAEncryption ae:ce:a9:a3:70:d1:8a:4b:1a:da:a0:8b:a5:e0:93:46:ac:fb: ba:32:69:70:45:2b:a6:42:a2:a3:8b:8c:3e:7d:fd:f9:e9:f9: 7b:18:03:22:45:e6:c7:0d:8f:2c:74:5f:5c:14:24:26:1e:b8: 2c:60:0b:53:a2:9d:c1:bf:e2:07:f4:cf:b6:a6:11:6b:f6:7f: 0c:c1:b9:1f:72:90:da:1d:b7:21:12:79:0c:c4:ea:f5:93:9a: b1:a7:b7:53:1d:a8:43:e7:e0:5b:5c:30:3d:fc:87:4a:0f:b3: 31:f1:97:87:1a:b5:a4:dd:b5:83:ad:1e:49:08:3c:73:13:77: c1:3d:52:33:63:79:ba:02:2e:30:80:6e:fa:ce:ac:29:aa:59: ba:97:5b:3f:99:95:2d:0c:4b:09:7e:2a:3f:f0:07:d0:bb:fe: 38:35:5d:1f:92:fe:9b:14:e8:73:24:a6:e6:4e:37:5a:3b:f1: 95:4b:24:e7:d6:75:eb:bb:bb:85:7a:57:57:74:75:b9:fa:fe: 65:c3:7d:85:8e:ff:ac:df:73:d6:ee:80:d7:fb:6b:8f:b0:14: 23:29:5d:27:69:5f:35:cf:9d:23:ed:4d:06:5f:ab:01:a3:15: c7:fe:17:74:a8:e3:9c:6e:84:63:f3:52:c4:62:eb:f5:b1:76: 9c:79:75:9b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUK/ixzRX5WfBvC8KnCaCda3HLgxAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MjI0MjMzWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BjYzhlOTUzOWFjYzg0NmFlNTdmYzU3YzQxN2IzYjFhMGE2 MTQ0NTNlNTdmY2U3ZWI4NjAzMWE1MmM1N2M2MzQ2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDlSRsJebJaALoMai517W4npguG7ulkz2b4YdTOrH3tuGW5 6wYU6LTqJglHFydCf1JRPfscKzKXPu+MZaD3y2Dwa4IM6+K55RZBOVVP3eysEeWy GIrLYH/xFRojhZeTS83PTASHtpEONf74veGBOUiFa0wxL46l5Ab3zuy18ljZQlW2 EJwSeOAaZWqRg1nXlFJhtSzookqAg6H3P7+vAufXbgOqjhxpFyHfPEJ7Pwvm2EoD CiHi61bt10/PuuHYSAdn5sZPinX6fqWiuZ9tZaDA8nIJKrHl3Bl5L/gi7o0IK0Gz 3xHn2p6fJfxnTqcttt8ziaCuYRoDFSjzEc9PlyEvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUAbc5Cd3jEgzeoRTHmI4YJ36Q6IIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzFmYzI1ZDQ1LWFjMTQtNGY5My05ZWU1LTE3ZGQ3NTJlZjY5Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASrZcwDQYJKoZIhvcNAQELBQADggEBAK7OqaNw0YpLGtqgi6Xgk0as+7oy aXBFK6ZCoqOLjD59/fnp+XsYAyJF5scNjyx0X1wUJCYeuCxgC1OincG/4gf0z7am EWv2fwzBuR9ykNodtyESeQzE6vWTmrGnt1MdqEPn4FtcMD38h0oPszHxl4cataTd tYOtHkkIPHMTd8E9UjNjeboCLjCAbvrOrCmqWbqXWz+ZlS0MSwl+Kj/wB9C7/jg1 XR+S/psU6HMkpuZON1o78ZVLJOfWdeu7u4V6V1d0dbn6/mXDfYWO/6zfc9bugNf7 a4+wFCMpXSdpXzXPnSPtTQZfqwGjFcf+F3So45xuhGPzUsRi6/Wxdpx5dZs= -----END CERTIFICATE-----Generated at Mon Oct 20 02:58:38 2025 by rpki-client