$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2d1e18f1-f53c-4ff3-9f19-f8d178236cca.roa File: 2d1e18f1-f53c-4ff3-9f19-f8d178236cca.roa (raw, json) Hash identifier: 4qUuvqtp9BaMIo63L+CrBGYuN/za4DfYg4c1jGxMTJo= Subject key identifier: 38:64:F2:39:C6:81:E5:B2:B9:D6:2E:B2:CF:2C:57:66:74:2D:68:A9 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2F00BDF5CD31349B6F6F52B9D11EFECDF68B631A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2d1e18f1-f53c-4ff3-9f19-f8d178236cca.roa Signing time: Sat 18 Oct 2025 07:20:09 +0000 ROA not before: Sat 18 Oct 2025 07:20:09 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.164.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:00:bd:f5:cd:31:34:9b:6f:6f:52:b9:d1:1e:fe:cd:f6:8b:63:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 07:20:09 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=ca9d5d57379907af93f396dcd1f5ad0cce99b3c515c82ffa7eb4b7af5c393a09, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:79:dc:fe:fd:05:68:51:fa:ea:ce:76:fa:31: d9:a7:8b:f2:62:7a:d0:1f:c7:cc:26:3b:b2:25:a0: 53:f5:52:38:d5:61:06:f6:de:e0:ed:9e:38:fe:47: 7e:83:29:fb:7a:a1:bf:56:d8:cc:5d:21:12:e8:6e: 7d:0e:92:af:99:ce:7a:1c:34:27:86:64:3d:7e:03: 09:ff:f5:0b:a1:1c:44:e4:fc:c0:73:35:a4:c3:0d: 06:24:2a:c3:82:ec:14:f7:fa:cf:db:d5:7c:b2:e9: d4:d0:99:54:a0:bd:19:04:c2:1a:ad:37:8a:df:da: 3c:9e:14:41:a4:88:0f:83:1e:10:78:64:4e:08:d0: 67:63:92:98:40:fc:b1:31:5a:a9:71:30:a1:50:84: eb:86:c6:ae:18:56:3b:7d:a3:ff:cb:1b:b9:5f:36: 61:8d:d2:90:61:a3:07:98:91:62:80:20:c4:b5:9c: c2:07:85:ee:81:6b:f5:64:18:27:80:bc:bc:b9:12: 67:08:ff:e0:bc:5a:0b:73:46:65:66:b1:a9:6e:6f: 2c:06:aa:ee:a5:61:71:ee:4e:e3:98:5d:e7:80:5a: 12:2f:11:0c:b5:9a:e6:06:0a:fc:f5:d4:a1:e7:e2: 30:dd:08:ab:ce:01:80:dd:37:0f:2c:83:9a:c3:91: 25:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:64:F2:39:C6:81:E5:B2:B9:D6:2E:B2:CF:2C:57:66:74:2D:68:A9 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2d1e18f1-f53c-4ff3-9f19-f8d178236cca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.164.208.0/22 Signature Algorithm: sha256WithRSAEncryption 36:02:dc:0d:2d:f9:d5:d6:48:9d:9a:56:24:ab:71:8d:34:fa: 78:5c:5e:ef:32:e3:bd:51:09:41:4e:90:45:92:b7:7d:90:41: 55:a2:f2:e3:d9:fa:24:4a:f8:12:1a:39:c1:e5:be:c0:ce:e3: d0:a9:a4:3e:80:6c:d0:4d:da:be:49:92:1e:ca:90:1b:bf:4c: cf:48:dd:41:67:04:6f:8e:b5:7c:c8:83:e5:8c:a0:ae:73:b5: 80:29:79:05:83:40:34:2e:24:f0:a5:98:1b:2f:a4:f5:89:9f: 6d:53:76:fb:e8:41:55:92:91:67:81:b5:41:69:6d:b4:73:2d: 41:ed:79:dc:1d:d5:86:d8:32:be:3d:22:7d:be:9f:29:b7:53: bc:90:8d:a6:38:e0:51:57:15:58:9e:c4:69:b8:e0:67:29:9e: 25:d9:34:9d:1b:ae:83:3e:79:3c:10:33:41:bc:27:d8:8b:54: d9:74:84:ca:b5:42:0b:28:1c:4a:9f:86:bf:7b:e4:08:11:61: e3:35:22:37:02:74:bb:d0:fe:ed:af:4f:16:8f:67:5e:6d:a3: 47:fc:d0:73:41:bd:6f:a7:6d:10:e2:4c:d2:04:79:df:f0:15: d5:51:bd:c4:bc:81:83:ab:68:8c:31:c3:e3:a8:99:c0:e7:b1: f0:ef:6e:71 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULwC99c0xNJtvb1K50R7+zfaLYxowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MDcyMDA5WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BjYTlkNWQ1NzM3OTkwN2FmOTNmMzk2ZGNkMWY1YWQwY2Nl OTliM2M1MTVjODJmZmE3ZWI0YjdhZjVjMzkzYTA5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4edz+/QVoUfrqznb6Mdmni/JietAfx8wmO7IloFP1UjjV YQb23uDtnjj+R36DKft6ob9W2MxdIRLobn0Okq+ZznocNCeGZD1+Awn/9QuhHETk /MBzNaTDDQYkKsOC7BT3+s/b1Xyy6dTQmVSgvRkEwhqtN4rf2jyeFEGkiA+DHhB4 ZE4I0GdjkphA/LExWqlxMKFQhOuGxq4YVjt9o//LG7lfNmGN0pBhoweYkWKAIMS1 nMIHhe6Ba/VkGCeAvLy5EmcI/+C8WgtzRmVmsalubywGqu6lYXHuTuOYXeeAWhIv EQy1muYGCvz11KHn4jDdCKvOAYDdNw8sg5rDkSWJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUOGTyOcaB5bK51i6yzyxXZnQtaKkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzJkMWUxOGYxLWY1M2MtNGZmMy05ZjE5LWY4ZDE3ODIzNmNjYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAISpNAwDQYJKoZIhvcNAQELBQADggEBADYC3A0t+dXWSJ2aViSrcY00+nhc Xu8y471RCUFOkEWSt32QQVWi8uPZ+iRK+BIaOcHlvsDO49CppD6AbNBN2r5Jkh7K kBu/TM9I3UFnBG+OtXzIg+WMoK5ztYApeQWDQDQuJPClmBsvpPWJn21TdvvoQVWS kWeBtUFpbbRzLUHtedwd1YbYMr49In2+nym3U7yQjaY44FFXFViexGm44GcpniXZ NJ0broM+eTwQM0G8J9iLVNl0hMq1QgsoHEqfhr975AgRYeM1IjcCdLvQ/u2vTxaP Z15to0f80HNBvW+nbRDiTNIEed/wFdVRvcS8gYOraIwxw+OomcDnsfDvbnE= -----END CERTIFICATE-----Generated at Mon Oct 20 17:29:11 2025 by rpki-client