$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2ef6e23a-4caf-42fc-a077-ad415559901f.roa File: 2ef6e23a-4caf-42fc-a077-ad415559901f.roa (raw, json) Hash identifier: RB8r6IkZ0sfpj6QE6qkPPfS34aTD+xyldadZgXNn8Jw= Subject key identifier: 9E:68:B9:17:35:85:73:5C:22:55:74:F6:D3:07:B5:3A:4A:3B:87:6A Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5F8B4724DF4FCF119877C05A9FAC4DF9450A0434 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2ef6e23a-4caf-42fc-a077-ad415559901f.roa Signing time: Sat 18 Oct 2025 19:13:32 +0000 ROA not before: Sat 18 Oct 2025 19:13:32 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.161.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:8b:47:24:df:4f:cf:11:98:77:c0:5a:9f:ac:4d:f9:45:0a:04:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 19:13:32 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=dcfbcdc01eb92610f47dc7a3aae898de4f649a3b5a706588db954a46d0eddb73, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:50:c9:3e:f4:23:7c:f9:f4:13:f8:94:5c:cf: 76:d0:03:7e:49:3c:97:ad:f1:8f:a1:15:64:73:a0: 91:ce:9d:e9:48:75:7d:b6:cc:9b:53:09:40:43:bd: 55:08:5a:5b:1e:9a:29:21:00:dc:2b:9c:e8:11:70: 8d:a7:06:49:36:27:f9:fb:ad:bf:75:93:d1:e7:40: c4:29:34:ad:13:b6:fb:7a:80:b6:3c:6e:2f:ca:fc: 0e:34:7c:ef:d7:52:1b:23:3c:17:60:6a:7d:3b:83: 69:44:1b:40:88:5d:3b:4c:2e:83:c9:4d:e6:30:13: 83:9f:d2:c4:a3:85:63:6d:97:5f:40:70:23:92:19: b0:50:12:c6:e6:ce:e3:00:b4:0f:48:ae:0a:29:20: f3:ae:cd:27:c4:5c:f3:a7:c0:32:63:46:7b:20:1d: da:a5:49:89:85:d8:57:f4:05:2b:ed:12:29:2a:23: 65:1c:2d:80:19:7f:a5:cb:47:b3:71:fa:06:1a:8d: 70:78:80:eb:c3:42:72:78:6b:54:d1:95:6f:ef:c2: 10:e5:7d:54:2d:5b:fa:6b:db:ad:e3:2b:9b:c3:85: f1:a5:3c:11:30:7c:fa:ab:52:c0:60:5f:a1:77:bb: c8:3f:6b:7e:16:85:f9:b0:bb:f6:7c:8a:fb:b7:5f: 30:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:68:B9:17:35:85:73:5C:22:55:74:F6:D3:07:B5:3A:4A:3B:87:6A X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2ef6e23a-4caf-42fc-a077-ad415559901f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.161.155.0/24 Signature Algorithm: sha256WithRSAEncryption 65:20:3e:ec:78:a8:1a:5c:d3:ee:63:c6:54:da:28:3e:79:41: 5e:cc:7b:dd:da:74:24:35:f8:82:af:88:9b:b0:aa:b5:7c:f3: 9f:0d:ef:a4:5a:94:f1:ef:28:20:35:04:65:bc:66:3f:8f:23: 82:6b:3d:22:fb:13:92:7c:57:5a:ce:08:e0:e9:18:37:00:d3: 8c:5c:e2:27:e8:c3:d0:14:ae:d3:71:36:53:85:57:30:ed:a6: 76:43:f6:5a:45:1c:56:5f:d3:98:01:08:d6:f4:47:ed:52:b6: e8:18:6b:79:81:28:8c:a3:b3:8f:15:bc:c8:a5:6c:e8:39:71: c0:11:d6:66:c4:88:d2:2c:33:10:5d:27:83:ab:51:3c:15:ce: a1:5f:21:ab:58:95:71:41:d9:83:55:97:5a:8d:75:02:96:cd: c1:10:fb:36:80:e7:ae:51:7b:8d:e9:36:23:a0:ec:0b:9e:5f: f1:ff:ba:9b:a3:d4:1f:98:e0:89:29:c4:09:fb:3d:8a:c7:f2: d5:c1:2d:b7:e5:b2:54:2d:b3:24:83:84:5f:9d:cd:16:73:f1: c8:bc:ac:ce:04:fa:33:77:d2:68:83:91:04:37:16:39:cd:4f: 1f:8a:8d:47:82:b1:c8:d9:b7:fc:c1:ee:dd:94:72:4d:6f:4a: 11:15:ed:31 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUX4tHJN9PzxGYd8Ban6xN+UUKBDQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTkxMzMyWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BkY2ZiY2RjMDFlYjkyNjEwZjQ3ZGM3YTNhYWU4OThkZTRm NjQ5YTNiNWE3MDY1ODhkYjk1NGE0NmQwZWRkYjczMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCgUMk+9CN8+fQT+JRcz3bQA35JPJet8Y+hFWRzoJHOnelI dX22zJtTCUBDvVUIWlsemikhANwrnOgRcI2nBkk2J/n7rb91k9HnQMQpNK0Ttvt6 gLY8bi/K/A40fO/XUhsjPBdgan07g2lEG0CIXTtMLoPJTeYwE4Of0sSjhWNtl19A cCOSGbBQEsbmzuMAtA9IrgopIPOuzSfEXPOnwDJjRnsgHdqlSYmF2Ff0BSvtEikq I2UcLYAZf6XLR7Nx+gYajXB4gOvDQnJ4a1TRlW/vwhDlfVQtW/pr263jK5vDhfGl PBEwfPqrUsBgX6F3u8g/a34Whfmwu/Z8ivu3XzApAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUnmi5FzWFc1wiVXT20we1Oko7h2owHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzJlZjZlMjNhLTRjYWYtNDJmYy1hMDc3LWFkNDE1NTU5OTAxZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASoZswDQYJKoZIhvcNAQELBQADggEBAGUgPux4qBpc0+5jxlTaKD55QV7M e93adCQ1+IKviJuwqrV8858N76RalPHvKCA1BGW8Zj+PI4JrPSL7E5J8V1rOCODp GDcA04xc4ifow9AUrtNxNlOFVzDtpnZD9lpFHFZf05gBCNb0R+1StugYa3mBKIyj s48VvMilbOg5ccAR1mbEiNIsMxBdJ4OrUTwVzqFfIatYlXFB2YNVl1qNdQKWzcEQ +zaA565Re43pNiOg7AueX/H/upuj1B+Y4IkpxAn7PYrH8tXBLbflslQtsySDhF+d zRZz8ci8rM4E+jN30miDkQQ3FjnNTx+KjUeCscjZt/zB7t2Uck1vShEV7TE= -----END CERTIFICATE-----Generated at Mon Oct 20 08:30:11 2025 by rpki-client