$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2109ec03-2dd0-4562-a07a-fb3907e473f0.roa File: 2109ec03-2dd0-4562-a07a-fb3907e473f0.roa (raw, json) Hash identifier: 9PG1MENMyAZlTBacBMtv/PPtGC3RwJ6xlb9UusGWAqw= Subject key identifier: F2:C2:87:D6:13:54:BE:52:DF:24:D1:65:75:70:F2:13:5B:42:43:C0 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 393628AF2E3D32B2EA3481A724E868F384E79F76 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2109ec03-2dd0-4562-a07a-fb3907e473f0.roa Signing time: Sat 18 Oct 2025 11:42:15 +0000 ROA not before: Sat 18 Oct 2025 11:42:15 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.155.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:36:28:af:2e:3d:32:b2:ea:34:81:a7:24:e8:68:f3:84:e7:9f:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 11:42:15 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=2dd9c4b3b8b7f8c3b7464bb8f59486576eabe72364654af385386aff76ffd820, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:10:ef:46:64:23:af:df:43:c0:db:9f:6e:aa: 70:a5:e5:79:5e:3c:b4:1d:15:ae:02:ef:8c:40:d6: b5:03:89:2f:43:24:df:b3:af:fa:54:14:aa:c5:73: 37:c9:a2:e2:4e:34:56:1f:b4:35:4f:11:95:9c:1b: d5:e4:86:8d:56:51:dd:ed:3f:e2:3d:71:23:60:b9: d2:9b:00:6d:e6:72:7d:35:8e:97:cd:6b:34:ef:c8: d9:fe:55:35:50:29:a4:4a:b3:71:3c:3c:59:a9:48: bd:3a:11:c4:d6:ff:e0:08:47:a4:b6:1b:4d:25:3e: 88:a4:10:e4:2a:04:77:e4:4c:28:80:d5:46:71:c9: 53:14:62:8a:17:96:b6:a0:e0:25:d5:2b:4b:06:c7: ad:e9:e9:94:10:91:80:f5:0c:be:3b:10:d8:f4:83: 09:09:41:63:df:5a:86:71:b8:28:fb:a5:64:90:ae: 05:e3:e1:28:b9:f8:92:f8:db:a9:2b:d6:c4:47:f6: 95:0a:84:3d:f3:ad:73:ed:a6:7d:c9:9a:b7:90:35: 6f:a6:82:9f:f8:ae:16:47:71:d2:b3:5c:af:0d:27: 33:10:05:98:4d:69:a4:20:5b:9a:44:c7:e6:e2:6a: 34:cc:4c:f4:37:0b:07:5c:93:c1:ea:f1:31:9d:26: 9a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:C2:87:D6:13:54:BE:52:DF:24:D1:65:75:70:F2:13:5B:42:43:C0 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2109ec03-2dd0-4562-a07a-fb3907e473f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.155.196.0/22 Signature Algorithm: sha256WithRSAEncryption 32:e2:41:f4:da:1f:18:f7:f2:aa:c8:6b:2b:db:c4:bd:f2:fc: f2:a5:0e:1c:bf:70:bf:c6:cf:6f:7b:1f:39:40:32:fe:a7:04: 5d:14:52:76:51:ff:7e:02:fa:13:88:36:fb:7c:d1:25:ba:59: 02:6d:51:e5:41:46:28:ef:aa:90:09:8c:fa:73:78:35:52:64: ad:2b:e6:46:27:7d:49:46:b7:1b:b3:3c:ff:7e:01:95:66:3f: 95:42:77:03:8a:b1:29:33:17:8f:dd:3e:60:c7:4b:6e:59:62: f9:59:61:66:bb:1d:c1:6c:d5:69:06:9c:d4:bd:45:df:75:19: 58:ed:6e:dc:0f:84:29:a1:9e:c8:e1:9d:2d:be:f6:81:d6:a5: fd:a3:04:1c:16:e8:37:ca:ae:84:d2:f5:28:e5:61:eb:68:61: af:17:8e:55:85:26:13:c2:e1:69:26:a4:fe:d8:a1:bc:f0:1c: f2:7e:11:cb:96:73:a1:08:86:5c:34:7b:3a:b2:5b:44:66:de: 7f:2e:a8:e7:39:88:2b:71:7d:da:27:b7:18:21:3b:9f:56:9b: c5:3b:8e:40:95:82:0c:13:c5:17:1a:eb:3b:76:58:b4:f4:f2: 78:ef:8f:d1:fb:87:81:34:ea:0e:8b:65:25:f9:13:fd:40:28: 69:12:d6:25 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOTYory49MrLqNIGnJOho84Tnn3YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTE0MjE1WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AyZGQ5YzRiM2I4YjdmOGMzYjc0NjRiYjhmNTk0ODY1NzZl YWJlNzIzNjQ2NTRhZjM4NTM4NmFmZjc2ZmZkODIwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCWEO9GZCOv30PA259uqnCl5XlePLQdFa4C74xA1rUDiS9D JN+zr/pUFKrFczfJouJONFYftDVPEZWcG9Xkho1WUd3tP+I9cSNgudKbAG3mcn01 jpfNazTvyNn+VTVQKaRKs3E8PFmpSL06EcTW/+AIR6S2G00lPoikEOQqBHfkTCiA 1UZxyVMUYooXlrag4CXVK0sGx63p6ZQQkYD1DL47ENj0gwkJQWPfWoZxuCj7pWSQ rgXj4Si5+JL426kr1sRH9pUKhD3zrXPtpn3JmreQNW+mgp/4rhZHcdKzXK8NJzMQ BZhNaaQgW5pEx+biajTMTPQ3Cwdck8Hq8TGdJprDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU8sKH1hNUvlLfJNFldXDyE1tCQ8AwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzIxMDllYzAzLTJkZDAtNDU2Mi1hMDdhLWZiMzkwN2U0NzNmMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAISm8QwDQYJKoZIhvcNAQELBQADggEBADLiQfTaHxj38qrIayvbxL3y/PKl Dhy/cL/Gz297HzlAMv6nBF0UUnZR/34C+hOINvt80SW6WQJtUeVBRijvqpAJjPpz eDVSZK0r5kYnfUlGtxuzPP9+AZVmP5VCdwOKsSkzF4/dPmDHS25ZYvlZYWa7HcFs 1WkGnNS9Rd91GVjtbtwPhCmhnsjhnS2+9oHWpf2jBBwW6DfKroTS9SjlYetoYa8X jlWFJhPC4WkmpP7YobzwHPJ+EcuWc6EIhlw0ezqyW0Rm3n8uqOc5iCtxfdontxgh O59Wm8U7jkCVggwTxRca6zt2WLT08njvj9H7h4E06g6LZSX5E/1AKGkS1iU= -----END CERTIFICATE-----Generated at Mon Oct 20 06:11:20 2025 by rpki-client