$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/24e7daf5-1561-4347-8d9d-2b77f00690dd.roa File: 24e7daf5-1561-4347-8d9d-2b77f00690dd.roa (raw, json) Hash identifier: 4Do9CGppVWAS83aR2KANLQolbzbQWnDskWpFR0z0rls= Subject key identifier: D7:54:9D:E6:69:C9:78:57:9E:05:8D:A9:E2:F5:A2:D0:74:6D:D3:93 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 47BE9B1ADFA78615C1EE3C60FA08CFAA35321D85 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/24e7daf5-1561-4347-8d9d-2b77f00690dd.roa Signing time: Sat 18 Oct 2025 09:10:10 +0000 ROA not before: Sat 18 Oct 2025 09:10:10 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.244.186.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:be:9b:1a:df:a7:86:15:c1:ee:3c:60:fa:08:cf:aa:35:32:1d:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 09:10:10 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=4bedfae571a0e0eb0e37f19cbe3c627352099b488d311f22bd935f9858a17b5f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:05:f1:4e:78:82:7a:f0:e9:53:3a:67:92:a1: e4:e4:eb:b8:00:74:b5:5b:c7:78:33:4b:b3:a1:ff: 55:d5:71:4b:d6:96:de:9c:0f:b4:93:29:3f:26:25: 83:f4:c7:a0:5e:81:3f:4b:46:d3:8b:04:90:c1:4b: 53:1d:a2:83:78:81:8c:80:12:b4:ae:46:87:e2:be: b9:08:fe:8e:02:ef:aa:5f:6c:71:13:fa:90:d3:16: fe:02:ba:8b:49:71:0d:28:0e:51:65:03:5b:88:e3: ab:7a:8c:46:04:8f:d4:85:38:ff:f3:b0:8b:7f:c0: 34:e1:22:3d:82:02:30:44:99:6e:70:6e:dc:01:d6: 04:62:0a:ce:e2:d3:d5:05:9d:54:b2:ff:e3:46:6f: ee:6a:54:61:a6:f4:f9:c2:25:d7:29:dc:31:52:cb: a8:9b:72:16:07:34:17:92:6a:e9:cd:cc:c1:df:89: f2:42:8c:d5:e2:7c:df:69:a4:51:72:34:1d:1d:2f: 74:12:79:de:de:fd:ca:73:53:1e:3e:a9:39:f8:10: a0:e8:16:ff:69:73:be:fe:4c:8a:cb:83:6d:5a:00: 02:99:d4:9f:18:ae:04:6f:0b:d8:76:a1:02:4c:b8: e4:6d:9e:10:84:f0:b3:74:90:40:ba:79:f9:b1:29: 98:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:54:9D:E6:69:C9:78:57:9E:05:8D:A9:E2:F5:A2:D0:74:6D:D3:93 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/24e7daf5-1561-4347-8d9d-2b77f00690dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.244.186.0/23 Signature Algorithm: sha256WithRSAEncryption 33:27:ab:0c:6a:24:57:cb:ce:c7:69:57:a8:d1:3a:3a:07:33: 7a:b1:58:07:39:4c:2b:b1:54:08:2e:5c:02:b7:ba:c2:a1:6e: 4e:bb:31:ce:ee:f9:93:08:e7:ea:b4:e8:b7:07:32:c3:be:2d: fc:65:b4:2a:34:3a:7b:fe:cb:62:e2:ce:b0:1f:76:97:48:e2: 69:60:df:50:c3:b9:15:8c:18:ec:87:f8:67:8a:f0:96:2f:05: 3a:2c:b8:16:c2:fd:8b:d0:1d:93:5d:99:3b:b7:16:6a:b4:6e: 90:d2:66:c5:13:09:97:e5:d2:3b:0e:54:c0:ef:04:ff:05:11: a7:1d:d7:d6:52:6e:70:c0:72:ec:dd:92:09:fc:39:a7:b1:f7: dc:22:4b:67:d0:a9:b8:0c:96:63:d9:15:11:6b:14:80:dc:a4: 77:e1:b0:d5:e6:8b:6b:e2:e5:cd:54:c5:17:73:d9:41:c5:17: 5e:29:af:2d:28:f8:6a:83:22:e5:f9:89:69:fe:e0:bc:3c:7e: 77:71:b8:0f:77:30:d4:f2:77:6c:22:19:8a:0c:90:ad:a7:41: 35:5e:08:2d:9c:80:08:96:30:d9:a4:35:bf:56:f8:b1:4b:36: 4f:01:0a:59:24:31:a6:de:ae:d9:2b:85:e5:ec:a6:c4:fb:03: 14:b6:97:7a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUR76bGt+nhhXB7jxg+gjPqjUyHYUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MDkxMDEwWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A0YmVkZmFlNTcxYTBlMGViMGUzN2YxOWNiZTNjNjI3MzUy MDk5YjQ4OGQzMTFmMjJiZDkzNWY5ODU4YTE3YjVmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2BfFOeIJ68OlTOmeSoeTk67gAdLVbx3gzS7Oh/1XVcUvW lt6cD7STKT8mJYP0x6BegT9LRtOLBJDBS1MdooN4gYyAErSuRofivrkI/o4C76pf bHET+pDTFv4CuotJcQ0oDlFlA1uI46t6jEYEj9SFOP/zsIt/wDThIj2CAjBEmW5w btwB1gRiCs7i09UFnVSy/+NGb+5qVGGm9PnCJdcp3DFSy6ibchYHNBeSaunNzMHf ifJCjNXifN9ppFFyNB0dL3QSed7e/cpzUx4+qTn4EKDoFv9pc77+TIrLg21aAAKZ 1J8YrgRvC9h2oQJMuORtnhCE8LN0kEC6efmxKZhrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU11Sd5mnJeFeeBY2p4vWi0HRt05MwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzI0ZTdkYWY1LTE1NjEtNDM0Ny04ZDlkLTJiNzdmMDA2OTBkZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAES9LowDQYJKoZIhvcNAQELBQADggEBADMnqwxqJFfLzsdpV6jROjoHM3qx WAc5TCuxVAguXAK3usKhbk67Mc7u+ZMI5+q06LcHMsO+LfxltCo0Onv+y2LizrAf dpdI4mlg31DDuRWMGOyH+GeK8JYvBTosuBbC/YvQHZNdmTu3Fmq0bpDSZsUTCZfl 0jsOVMDvBP8FEacd19ZSbnDAcuzdkgn8Oaex99wiS2fQqbgMlmPZFRFrFIDcpHfh sNXmi2vi5c1UxRdz2UHFF14pry0o+GqDIuX5iWn+4Lw8fndxuA93MNTyd2wiGYoM kK2nQTVeCC2cgAiWMNmkNb9W+LFLNk8BClkkMabertkrheXspsT7AxS2l3o= -----END CERTIFICATE-----Generated at Mon Oct 20 06:09:07 2025 by rpki-client