$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2a7a6ddb-3038-4c77-91c5-08c35ac6ed42.roa File: 2a7a6ddb-3038-4c77-91c5-08c35ac6ed42.roa (raw, json) Hash identifier: LoJY0CfDtaL2IyRf1Fg336TiPXK2Lnwpr6GpE/nAd30= Subject key identifier: DE:DB:59:6C:08:B2:F1:2B:D0:00:AF:58:61:C6:6C:5B:BA:11:0A:77 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 17AD47AA11839E22CBBF5CC71844A42D114E8C3D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2a7a6ddb-3038-4c77-91c5-08c35ac6ed42.roa Signing time: Sat 18 Oct 2025 09:31:29 +0000 ROA not before: Sat 18 Oct 2025 09:31:29 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.244.74.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:ad:47:aa:11:83:9e:22:cb:bf:5c:c7:18:44:a4:2d:11:4e:8c:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 09:31:29 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=0aa60331d0702f60b7e96b632ae27692e81bafb7839fc1068825565548e044ff, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:84:54:90:a6:b1:b9:a6:99:ba:36:46:26:2e: b5:52:14:7e:e4:c1:37:f4:92:18:9b:0d:08:ac:16: 83:ef:e6:dd:21:2e:56:2c:12:bc:af:d0:d5:32:90: c7:d7:48:d5:aa:da:dc:82:17:bd:2a:ac:e9:92:b3: f5:bc:70:2b:04:c6:77:89:a5:1d:57:0d:e5:f1:54: a6:4b:d0:9d:23:ab:60:91:b7:51:f1:61:f6:2c:6a: 68:de:ad:a1:47:30:79:65:c3:e2:80:f2:70:a0:a6: 5f:0f:0a:1f:87:26:2e:20:d0:25:a8:7b:f9:cf:6a: 45:79:cf:46:06:39:5a:73:1a:0a:8c:95:13:6f:fe: 0a:cf:72:75:c1:93:05:df:0e:af:d0:8f:87:c4:80: b6:ad:36:97:e4:0b:92:68:a4:ed:10:81:a0:0e:94: ae:f9:fa:cb:42:9a:1e:47:3e:f6:65:6f:bb:19:15: c0:cd:81:84:e7:a4:4d:32:ad:71:b3:9d:45:18:79: 4c:0b:e3:fb:ac:b0:ad:45:d4:10:54:b5:ee:5a:e2: 81:57:28:17:e3:eb:0a:e0:54:ee:a9:55:e0:63:ce: fa:69:77:27:a6:2d:69:3b:c5:f2:44:06:62:b9:51: e7:e6:36:42:0b:4b:7d:76:7b:1d:ad:ec:4d:72:33: 07:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:DB:59:6C:08:B2:F1:2B:D0:00:AF:58:61:C6:6C:5B:BA:11:0A:77 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2a7a6ddb-3038-4c77-91c5-08c35ac6ed42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.244.74.0/23 Signature Algorithm: sha256WithRSAEncryption 8e:7a:51:c7:bc:9c:a4:56:3b:1c:65:5d:d1:8d:26:1a:3c:b6: 72:9c:a7:9b:f9:f7:ac:1c:31:63:96:ea:1b:da:ca:69:f5:ca: f3:dc:d9:c2:05:ac:03:c1:72:e5:3e:59:c4:88:13:2d:15:c9: b6:ff:92:d6:14:e7:82:f2:40:a5:a0:7f:3f:ca:e8:38:20:53: 09:21:68:11:3e:c8:8d:a9:81:02:3c:ca:2c:bd:f9:5a:11:0d: c3:01:8a:10:d0:05:64:19:2e:9b:7d:2c:37:33:f5:59:9b:0d: 6e:0f:73:18:85:2e:0b:cb:a2:96:d7:09:03:99:9a:a1:b6:90: f4:e2:32:be:e8:34:0e:8f:59:32:52:51:74:e7:1d:27:5d:65: 07:e1:1c:b3:87:5c:f9:2f:87:b3:3d:10:38:ff:29:c2:62:2a: 15:8c:a8:51:4a:50:18:9e:c2:3a:7f:19:4c:e9:e6:89:c9:93: 06:7a:83:18:c4:6c:45:c9:5d:95:a2:aa:58:15:27:c1:79:0b: cd:97:48:46:01:c6:ba:57:f6:2e:0b:68:62:13:c7:be:4e:d9: 7a:15:bc:72:36:c5:35:52:d0:1f:25:a5:cb:e8:12:fa:04:4e: cf:ed:bf:01:0f:2a:ed:e2:39:7b:12:13:4d:f9:5b:42:d2:85: 75:7e:b9:b5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUF61HqhGDniLLv1zHGESkLRFOjD0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MDkzMTI5WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AwYWE2MDMzMWQwNzAyZjYwYjdlOTZiNjMyYWUyNzY5MmU4 MWJhZmI3ODM5ZmMxMDY4ODI1NTY1NTQ4ZTA0NGZmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCchFSQprG5ppm6NkYmLrVSFH7kwTf0khibDQisFoPv5t0h LlYsEryv0NUykMfXSNWq2tyCF70qrOmSs/W8cCsExneJpR1XDeXxVKZL0J0jq2CR t1HxYfYsamjeraFHMHllw+KA8nCgpl8PCh+HJi4g0CWoe/nPakV5z0YGOVpzGgqM lRNv/grPcnXBkwXfDq/Qj4fEgLatNpfkC5JopO0QgaAOlK75+stCmh5HPvZlb7sZ FcDNgYTnpE0yrXGznUUYeUwL4/ussK1F1BBUte5a4oFXKBfj6wrgVO6pVeBjzvpp dyemLWk7xfJEBmK5UefmNkILS312ex2t7E1yMwefAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU3ttZbAiy8SvQAK9YYcZsW7oRCncwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzJhN2E2ZGRiLTMwMzgtNGM3Ny05MWM1LTA4YzM1YWM2ZWQ0Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAES9EowDQYJKoZIhvcNAQELBQADggEBAI56Uce8nKRWOxxlXdGNJho8tnKc p5v596wcMWOW6hvaymn1yvPc2cIFrAPBcuU+WcSIEy0Vybb/ktYU54LyQKWgfz/K 6DggUwkhaBE+yI2pgQI8yiy9+VoRDcMBihDQBWQZLpt9LDcz9VmbDW4PcxiFLgvL opbXCQOZmqG2kPTiMr7oNA6PWTJSUXTnHSddZQfhHLOHXPkvh7M9EDj/KcJiKhWM qFFKUBiewjp/GUzp5onJkwZ6gxjEbEXJXZWiqlgVJ8F5C82XSEYBxrpX9i4LaGIT x75O2XoVvHI2xTVS0B8lpcvoEvoETs/tvwEPKu3iOXsSE035W0LShXV+ubU= -----END CERTIFICATE-----Generated at Mon Oct 20 06:03:56 2025 by rpki-client