$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/232b02f1-c695-4b1b-b398-cf58c1677ca9.roa File: 232b02f1-c695-4b1b-b398-cf58c1677ca9.roa (raw, json) Hash identifier: n6WY2QnWkKAaudha+rb985A8l1ss3RWx8rYthWw2Kzg= Subject key identifier: 1F:43:4D:B2:3E:93:46:F6:16:2A:C5:17:9D:B3:56:2D:D5:CC:88:F4 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 33D8451D7FF9201BC6F95A1FA55A0C4B9EEE411E Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/232b02f1-c695-4b1b-b398-cf58c1677ca9.roa Signing time: Sat 18 Oct 2025 19:00:11 +0000 ROA not before: Sat 18 Oct 2025 19:00:11 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.173.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:d8:45:1d:7f:f9:20:1b:c6:f9:5a:1f:a5:5a:0c:4b:9e:ee:41:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 19:00:11 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=e55c32a55bfeb31d77434cd8147c51dc8f3ab5a33922c3a811020a869478c2a8, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:cf:47:00:ba:b0:86:c8:70:74:da:cb:af:a3: 9c:1d:ae:44:45:03:89:aa:c9:44:27:cd:4d:27:12: 9e:18:0a:36:fc:7c:59:5e:2d:8c:4b:bd:1b:66:16: 41:e0:88:62:e0:d6:14:c4:0b:73:c4:ca:ee:75:94: 19:a8:3d:b4:b8:24:d2:df:93:3b:0c:cc:6b:f2:87: aa:29:43:7c:50:fc:98:4e:48:90:ef:f4:08:ac:de: 95:8a:4e:af:1e:2a:d5:e8:ec:f3:c8:83:20:a5:75: 00:52:3d:ff:e6:37:e6:60:66:58:63:46:6a:02:12: f3:de:0b:f8:a8:aa:bc:b5:df:91:a9:cb:78:9f:9b: 7c:f4:91:d5:5b:81:0b:d0:9c:d3:0f:c5:d2:41:ab: ec:ea:0b:7d:c9:c0:7d:88:d0:cf:8b:f3:b8:92:0c: c9:85:4e:e5:34:a8:52:a3:11:a5:e8:7e:17:27:76: aa:91:50:6e:9c:02:c2:34:0d:0f:49:07:8d:84:dc: ca:63:ae:04:ab:2c:e5:7c:eb:83:98:b9:d4:4f:b0: 61:a8:96:61:ad:df:af:a1:23:fd:98:93:cc:08:fd: f5:f0:d8:60:28:05:9c:c9:d9:ba:74:5e:b0:de:b0: 7d:93:d5:5e:82:5a:94:9c:70:06:a4:92:3f:d1:59: 33:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:43:4D:B2:3E:93:46:F6:16:2A:C5:17:9D:B3:56:2D:D5:CC:88:F4 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/232b02f1-c695-4b1b-b398-cf58c1677ca9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.173.35.0/24 Signature Algorithm: sha256WithRSAEncryption 45:98:57:d8:aa:de:a9:e5:5b:b7:6a:71:5f:33:72:51:d8:c2: db:7b:33:99:61:a8:63:63:4a:07:01:d1:bc:ae:55:e1:17:33: 3b:4c:e3:16:9a:98:5f:51:ab:84:de:80:41:4c:46:8f:62:22: 1d:47:d0:80:e8:e8:af:0d:dd:66:58:c0:42:c1:6f:85:f2:82: 23:b3:fe:84:39:0b:f2:4b:7f:73:e2:38:e4:99:ae:6a:6a:57: 83:11:a9:8a:85:be:f3:8b:28:33:98:9f:a4:00:77:89:36:35: 96:c9:46:76:a7:f0:d0:9e:82:b6:c7:55:ba:e4:d2:2e:f5:28: 0b:bb:3a:9f:b3:d5:76:7c:3a:89:0e:e9:d1:b0:be:65:29:21: 5d:a5:9b:22:d4:26:92:86:a4:76:6c:8f:b6:f1:a9:4c:f5:aa: 1e:c3:7a:fd:3e:d8:f2:9d:86:ab:b8:c6:aa:91:43:48:57:cb: d1:22:6f:a7:ad:6b:50:9d:2d:a3:e9:39:60:8c:33:68:2c:4a: 71:95:7d:47:98:c1:f5:e6:67:09:7b:0d:05:86:20:8d:b3:39: db:ea:5e:85:e5:e4:0e:91:2f:16:b1:86:91:a1:eb:2e:07:c2: a6:4c:26:c3:cb:a9:be:21:92:fd:80:7e:95:ab:8c:b6:1c:41: b4:7b:be:64 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUM9hFHX/5IBvG+VofpVoMS57uQR4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTkwMDExWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BlNTVjMzJhNTViZmViMzFkNzc0MzRjZDgxNDdjNTFkYzhm M2FiNWEzMzkyMmMzYTgxMTAyMGE4Njk0NzhjMmE4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDpz0cAurCGyHB02suvo5wdrkRFA4mqyUQnzU0nEp4YCjb8 fFleLYxLvRtmFkHgiGLg1hTEC3PEyu51lBmoPbS4JNLfkzsMzGvyh6opQ3xQ/JhO SJDv9Ais3pWKTq8eKtXo7PPIgyCldQBSPf/mN+ZgZlhjRmoCEvPeC/ioqry135Gp y3ifm3z0kdVbgQvQnNMPxdJBq+zqC33JwH2I0M+L87iSDMmFTuU0qFKjEaXofhcn dqqRUG6cAsI0DQ9JB42E3MpjrgSrLOV864OYudRPsGGolmGt36+hI/2Yk8wI/fXw 2GAoBZzJ2bp0XrDesH2T1V6CWpSccAakkj/RWTPpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUH0NNsj6TRvYWKsUXnbNWLdXMiPQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzIzMmIwMmYxLWM2OTUtNGIxYi1iMzk4LWNmNThjMTY3N2NhOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASrSMwDQYJKoZIhvcNAQELBQADggEBAEWYV9iq3qnlW7dqcV8zclHYwtt7 M5lhqGNjSgcB0byuVeEXMztM4xaamF9Rq4TegEFMRo9iIh1H0IDo6K8N3WZYwELB b4XygiOz/oQ5C/JLf3PiOOSZrmpqV4MRqYqFvvOLKDOYn6QAd4k2NZbJRnan8NCe grbHVbrk0i71KAu7Op+z1XZ8OokO6dGwvmUpIV2lmyLUJpKGpHZsj7bxqUz1qh7D ev0+2PKdhqu4xqqRQ0hXy9Eib6eta1CdLaPpOWCMM2gsSnGVfUeYwfXmZwl7DQWG II2zOdvqXoXl5A6RLxaxhpGh6y4HwqZMJsPLqb4hkv2AfpWrjLYcQbR7vmQ= -----END CERTIFICATE-----Generated at Mon Oct 20 11:09:16 2025 by rpki-client