$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/288556cd-92b3-4cb4-9681-5b191dfc4283.roa File: 288556cd-92b3-4cb4-9681-5b191dfc4283.roa (raw, json) Hash identifier: 8xWVxKMj3x2AKyg6X579E+TcN93IbSYjLJYAGW3aBbI= Subject key identifier: 39:75:AB:2E:7D:13:BB:BA:CF:30:16:1D:D0:39:A2:69:AC:52:67:3D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: BD71A173B77D2A1B90FC71A931846CBEC4E7AC Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/288556cd-92b3-4cb4-9681-5b191dfc4283.roa Signing time: Sat 18 Oct 2025 07:41:22 +0000 ROA not before: Sat 18 Oct 2025 07:41:22 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.238.26.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: bd:71:a1:73:b7:7d:2a:1b:90:fc:71:a9:31:84:6c:be:c4:e7:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 07:41:22 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=81cb874e4bd33cec9e34e0f0b879449d13988fafaa3ade9c456950f171e7564f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9b:df:53:5f:6e:fa:b8:e5:8e:b9:ba:f4:ea: 72:44:1d:9e:40:6c:cd:fb:2a:64:75:30:a3:b4:a7: a0:3a:ac:b6:70:d3:b4:38:11:22:0e:2e:98:9e:ad: a9:4e:a9:e0:c5:8e:95:e1:0a:5f:a6:fe:5a:ab:5c: 61:69:be:20:b9:ec:c5:7f:58:47:dc:1a:a2:1b:0d: 52:58:32:0a:a2:28:2f:83:d1:b5:1e:76:3b:7a:fd: fd:55:87:57:5f:6b:06:e3:76:a0:c7:7b:21:88:43: 8d:ce:35:95:14:23:23:7e:40:bb:07:ca:c6:44:3c: 44:aa:51:7d:c1:24:0e:43:6e:11:ab:e6:b4:0b:77: c6:cd:cf:49:ff:b0:e8:ca:65:c7:29:85:f7:07:74: 97:5d:5f:b2:a1:e0:00:2c:94:e2:4a:56:e6:6e:e3: 5a:af:9a:e4:d9:5d:ff:6d:46:58:c4:38:71:be:c1: 24:cc:55:ae:ce:dc:46:c3:50:e3:04:5a:07:0a:00: 7d:2b:07:b0:d7:52:9a:02:68:dd:e2:b6:ad:85:6c: cd:98:d7:7e:c0:4e:1f:fb:88:25:5b:6a:f7:b3:ce: a7:5c:d7:c4:f1:9d:ea:85:ef:43:33:8a:58:a9:4a: 10:07:f1:61:f7:1a:45:d1:27:04:24:59:d0:e1:8b: 2f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:75:AB:2E:7D:13:BB:BA:CF:30:16:1D:D0:39:A2:69:AC:52:67:3D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/288556cd-92b3-4cb4-9681-5b191dfc4283.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.238.26.0/23 Signature Algorithm: sha256WithRSAEncryption 81:cc:5c:e2:48:bc:f8:99:6f:64:26:e7:73:a4:89:49:fe:1f: 82:63:a5:31:23:05:15:3e:ac:74:d0:ae:89:55:76:06:7a:85: 75:38:ab:93:36:01:44:56:83:b3:aa:c5:b7:4d:f1:bb:64:3b: 71:06:f3:10:91:9f:a3:7b:28:c0:35:d6:ef:e0:61:83:c1:65: 86:16:9b:d3:0c:e6:a3:81:e6:b3:b5:5c:b5:4f:11:7f:34:4d: ce:89:5b:30:4d:32:e7:e6:dd:80:e1:d7:f1:a9:de:a1:11:a9: 08:79:0f:b9:ba:5d:af:4e:dd:03:cf:57:ca:cf:b7:f5:26:4f: 48:c0:3c:1f:bb:20:b6:42:bc:03:02:5b:e0:58:70:95:2a:bc: 72:ef:20:f5:e9:2c:6d:55:78:c6:15:75:62:94:94:b6:88:5c: ff:a5:92:7a:5c:56:b5:c4:27:7f:a9:4b:cc:c6:97:8d:fa:b7: 8d:5d:3e:40:af:7e:75:1b:89:16:db:6e:3e:fd:8e:73:2c:a6: 40:15:4c:6e:07:cf:34:fc:7c:99:9b:1d:9d:e6:f9:27:43:e4: 50:df:5d:fe:f0:24:55:34:c3:ca:db:22:b6:2b:66:36:b3:06: dd:99:e8:e8:87:ad:a1:75:66:2e:24:ef:fb:93:20:67:96:1f: 2c:98:c1:0b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAL1xoXO3fSobkPxxqTGEbL7E56wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MDc0MTIyWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A4MWNiODc0ZTRiZDMzY2VjOWUzNGUwZjBiODc5NDQ5ZDEz OTg4ZmFmYWEzYWRlOWM0NTY5NTBmMTcxZTc1NjRmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrm99TX276uOWOubr06nJEHZ5AbM37KmR1MKO0p6A6rLZw 07Q4ESIOLpieralOqeDFjpXhCl+m/lqrXGFpviC57MV/WEfcGqIbDVJYMgqiKC+D 0bUedjt6/f1Vh1dfawbjdqDHeyGIQ43ONZUUIyN+QLsHysZEPESqUX3BJA5DbhGr 5rQLd8bNz0n/sOjKZccphfcHdJddX7Kh4AAslOJKVuZu41qvmuTZXf9tRljEOHG+ wSTMVa7O3EbDUOMEWgcKAH0rB7DXUpoCaN3itq2FbM2Y137ATh/7iCVbavezzqdc 18TxneqF70MzilipShAH8WH3GkXRJwQkWdDhiy+LAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUOXWrLn0Tu7rPMBYd0DmiaaxSZz0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzI4ODU1NmNkLTkyYjMtNGNiNC05NjgxLTViMTkxZGZjNDI4My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAES7howDQYJKoZIhvcNAQELBQADggEBAIHMXOJIvPiZb2Qm53OkiUn+H4Jj pTEjBRU+rHTQrolVdgZ6hXU4q5M2AURWg7OqxbdN8btkO3EG8xCRn6N7KMA11u/g YYPBZYYWm9MM5qOB5rO1XLVPEX80Tc6JWzBNMufm3YDh1/Gp3qERqQh5D7m6Xa9O 3QPPV8rPt/UmT0jAPB+7ILZCvAMCW+BYcJUqvHLvIPXpLG1VeMYVdWKUlLaIXP+l knpcVrXEJ3+pS8zGl436t41dPkCvfnUbiRbbbj79jnMspkAVTG4HzzT8fJmbHZ3m +SdD5FDfXf7wJFU0w8rbIrYrZjazBt2Z6OiHraF1Zi4k7/uTIGeWHyyYwQs= -----END CERTIFICATE-----Generated at Mon Oct 20 11:55:33 2025 by rpki-client