$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2db95ae8-3846-4399-84e2-487f0b038ae7.roa File: 2db95ae8-3846-4399-84e2-487f0b038ae7.roa (raw, json) Hash identifier: 3LOKRL8wgC/sY1dtJvN8smY0Ps+X22kbtoC5hj9FL2Q= Subject key identifier: 0C:50:DF:37:67:C5:39:79:62:5C:4E:A5:21:10:18:C5:AB:08:2E:1E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1A4916C6A4965ECFDEF8FA187DA325B695970138 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2db95ae8-3846-4399-84e2-487f0b038ae7.roa Signing time: Sat 18 Oct 2025 12:32:35 +0000 ROA not before: Sat 18 Oct 2025 12:32:35 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.172.38.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:49:16:c6:a4:96:5e:cf:de:f8:fa:18:7d:a3:25:b6:95:97:01:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 12:32:35 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=73f58e560835e5c0f44d52e76c653152f044f3fedc0ccf88a3210de4228f0a0f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:03:24:4c:08:f8:b2:5d:57:ad:90:d0:f5:f6: 68:06:50:4a:8d:e7:52:92:e5:32:41:49:61:65:1d: 68:03:59:92:26:88:2e:61:f4:86:cc:e3:48:f6:a4: db:13:a3:3f:14:dd:56:aa:d2:03:86:8e:c0:07:42: 12:5f:d6:09:d4:d9:3d:91:32:db:f3:7f:02:f2:e8: 66:1d:95:c9:8e:2a:91:7c:0d:ca:dd:49:da:2e:e9: e8:90:b1:a5:20:88:45:be:45:84:75:33:b1:2e:88: 77:c2:23:11:93:fd:dc:bd:d6:39:e7:a3:92:a3:a0: 9c:d2:36:fc:62:1a:0e:18:4c:cf:10:c5:8d:bb:73: ab:01:23:a7:e3:cc:23:cf:a5:a3:2f:29:43:af:07: 51:da:7d:26:c2:91:88:53:f6:2b:51:f0:7d:f9:ee: e8:42:2f:12:e3:b2:80:e6:f8:ab:a2:37:ad:b0:e0: 43:15:17:04:45:19:1d:17:68:bb:e9:46:d5:a1:5f: 6b:69:fa:ed:2b:f2:0a:bf:42:f3:a3:8a:f5:5a:29: 7c:eb:85:1f:37:d6:e3:dc:cd:12:f2:b1:b9:68:a5: 57:ef:1b:6c:88:d9:76:f7:9d:17:f5:12:09:ea:40: 90:86:09:65:36:64:7e:5d:4a:8e:d7:bb:7f:75:c6: 52:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:50:DF:37:67:C5:39:79:62:5C:4E:A5:21:10:18:C5:AB:08:2E:1E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2db95ae8-3846-4399-84e2-487f0b038ae7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.172.38.0/23 Signature Algorithm: sha256WithRSAEncryption 4f:76:8d:eb:05:7e:1a:15:f4:c6:24:e6:6a:3f:cd:9e:9e:cc: c5:41:e4:f4:85:48:2e:28:f8:15:ea:3b:68:4e:e3:bb:24:04: 57:6b:55:8b:eb:da:85:9b:f2:81:86:f8:35:91:e5:f2:d6:db: 2d:5f:01:3d:e5:3a:f5:97:c9:33:20:23:6e:4d:31:9c:b3:40: d5:7e:d9:1b:04:86:13:32:7a:92:e5:85:b6:ae:12:f9:74:cb: 1b:52:7c:c4:7b:32:8d:23:a7:dc:d3:2b:12:b1:97:1f:06:6d: 13:24:da:03:49:f5:44:d2:60:ec:3b:45:75:32:d7:6c:95:ce: 54:68:03:9a:0b:8c:ef:1b:f1:9a:58:fe:89:44:61:2b:33:6a: b5:7b:2c:f9:41:09:f7:aa:c3:66:20:d8:bd:82:b8:78:8a:8d: d1:b4:b3:73:df:67:a6:28:d1:c0:c4:ed:2e:22:7c:11:e3:a1: 76:f1:04:98:36:9b:01:c9:81:93:ca:ca:67:14:29:53:3d:6b: f3:e1:4c:ba:1f:4a:2f:af:c6:5d:25:9c:bc:9b:dd:33:db:f2: 4a:cd:bc:36:04:cc:7a:7b:86:80:f5:fd:fa:f4:5a:a2:a2:3f: 8f:20:82:87:0d:86:74:2b:e2:7a:74:ac:b9:31:ba:cd:48:37: 1b:21:ce:e2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGkkWxqSWXs/e+PoYfaMltpWXATgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTIzMjM1WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A3M2Y1OGU1NjA4MzVlNWMwZjQ0ZDUyZTc2YzY1MzE1MmYw NDRmM2ZlZGMwY2NmODhhMzIxMGRlNDIyOGYwYTBmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzAyRMCPiyXVetkND19mgGUEqN51KS5TJBSWFlHWgDWZIm iC5h9IbM40j2pNsToz8U3Vaq0gOGjsAHQhJf1gnU2T2RMtvzfwLy6GYdlcmOKpF8 DcrdSdou6eiQsaUgiEW+RYR1M7EuiHfCIxGT/dy91jnno5KjoJzSNvxiGg4YTM8Q xY27c6sBI6fjzCPPpaMvKUOvB1HafSbCkYhT9itR8H357uhCLxLjsoDm+KuiN62w 4EMVFwRFGR0XaLvpRtWhX2tp+u0r8gq/QvOjivVaKXzrhR831uPczRLysblopVfv G2yI2Xb3nRf1EgnqQJCGCWU2ZH5dSo7Xu391xlJjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUDFDfN2fFOXliXE6lIRAYxasILh4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzJkYjk1YWU4LTM4NDYtNDM5OS04NGUyLTQ4N2YwYjAzOGFlNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESrCYwDQYJKoZIhvcNAQELBQADggEBAE92jesFfhoV9MYk5mo/zZ6ezMVB 5PSFSC4o+BXqO2hO47skBFdrVYvr2oWb8oGG+DWR5fLW2y1fAT3lOvWXyTMgI25N MZyzQNV+2RsEhhMyepLlhbauEvl0yxtSfMR7Mo0jp9zTKxKxlx8GbRMk2gNJ9UTS YOw7RXUy12yVzlRoA5oLjO8b8ZpY/olEYSszarV7LPlBCfeqw2Yg2L2CuHiKjdG0 s3PfZ6Yo0cDE7S4ifBHjoXbxBJg2mwHJgZPKymcUKVM9a/PhTLofSi+vxl0lnLyb 3TPb8krNvDYEzHp7hoD1/fr0WqKiP48ggocNhnQr4np0rLkxus1INxshzuI= -----END CERTIFICATE-----Generated at Mon Oct 20 11:55:05 2025 by rpki-client