$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2ffa0ec7-c11f-4926-95bc-d2f2f25227bb.roa File: 2ffa0ec7-c11f-4926-95bc-d2f2f25227bb.roa (raw, json) Hash identifier: 9Z1Mg2na16o36LAXFwfSuZnLOEL2x0q0GiA+v4OYY0Y= Subject key identifier: 6E:0C:1E:43:10:6B:85:38:80:AC:C6:E1:1E:E4:79:C1:79:D1:5E:31 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 65AAEF8449C72B1E883828A75EA7DB9BB2E348C9 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2ffa0ec7-c11f-4926-95bc-d2f2f25227bb.roa Signing time: Sat 18 Oct 2025 17:01:17 +0000 ROA not before: Sat 18 Oct 2025 17:01:17 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.245.124.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:aa:ef:84:49:c7:2b:1e:88:38:28:a7:5e:a7:db:9b:b2:e3:48:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 17:01:17 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=3f30e5b72fb3724fa87835efb15e29f28e058e35437277b66b802d0d8bd8f431, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:36:1f:e5:69:4c:89:b2:31:bc:76:18:62:32: dc:2d:d3:9f:d8:be:ab:21:ef:8f:d0:cc:df:ad:51: 1e:bc:56:31:37:48:f6:01:cf:88:bf:e3:af:05:ca: 67:17:2f:50:ce:f6:05:c7:2e:bc:fc:06:f9:2f:a4: 7b:a1:4c:06:e1:2a:f6:ce:59:6b:2f:e6:02:b6:d8: a1:dd:b0:7c:60:dd:68:8a:a8:4c:0d:f3:55:f0:b6: a2:93:19:0b:15:04:9b:cb:af:c1:d0:32:b0:d5:2e: 35:25:3d:79:a2:d9:05:f6:d4:1d:62:e5:14:8f:2d: 45:83:74:e3:06:47:c8:8e:f2:2f:ad:89:ab:9b:42: 1c:d6:3a:44:b0:e0:ee:11:5e:9d:40:6f:3a:5c:8b: 55:82:67:34:95:d1:c6:60:02:6a:ac:f6:b0:f8:de: e1:9d:e5:35:4d:e2:5b:38:59:3c:2b:f0:fb:48:90: 76:68:96:40:87:81:c1:cd:95:b5:04:4e:50:00:19: 03:83:2f:f2:40:3d:45:7e:44:60:bc:33:32:6e:a5: 5d:ea:92:26:8c:a4:9d:f2:4e:e1:42:db:ed:6b:e2: 21:5f:dd:04:73:2c:31:59:d8:b8:21:72:f3:54:ca: 17:21:de:ab:fb:52:6c:79:73:9a:42:00:97:6f:24: 9b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:0C:1E:43:10:6B:85:38:80:AC:C6:E1:1E:E4:79:C1:79:D1:5E:31 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2ffa0ec7-c11f-4926-95bc-d2f2f25227bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.245.124.0/23 Signature Algorithm: sha256WithRSAEncryption 53:f4:97:75:a6:dd:7d:44:60:28:9e:f5:01:d3:bd:ae:d3:b6: f4:7d:77:a3:c1:39:96:6e:f3:1f:66:c8:75:d3:61:de:37:46: d7:05:fe:86:a5:22:ca:2b:03:aa:a5:69:4e:b6:9d:ed:ff:8c: 9f:87:fd:f8:d0:8f:44:43:0e:30:2a:c6:cd:d6:20:b5:2c:a2: 30:53:f9:a9:24:8d:92:61:3a:57:7b:66:76:ad:bb:0e:4a:4e: 6a:0a:24:7d:55:57:d0:ae:51:9a:0e:cd:e0:a2:4c:14:da:e6: 61:18:1a:30:a0:b7:46:bd:d7:7b:01:47:a0:af:4d:4a:95:00: 64:34:d1:32:17:02:7c:42:d7:85:70:b6:c6:a5:4a:7f:fb:c2: 8e:15:01:60:22:3b:b7:ca:21:e1:47:52:93:a3:a9:4c:36:23: 60:71:59:10:e8:a1:ca:76:5a:a6:a6:49:5c:f5:28:ef:a9:b9: d3:e0:27:5c:d5:aa:9d:7e:38:93:7e:0a:5a:35:21:7a:8f:3f: f8:0a:0f:f7:77:c8:aa:e4:c9:dd:a0:e9:34:66:b5:2d:24:db: 90:a7:88:49:f8:ac:2b:b0:ba:56:0d:8d:d9:a7:ab:61:a6:76: b8:ff:ad:94:10:3b:e1:38:e6:2a:10:ad:3a:8b:cf:97:ff:18: 9e:f1:04:98 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZarvhEnHKx6IOCinXqfbm7LjSMkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTcwMTE3WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AzZjMwZTViNzJmYjM3MjRmYTg3ODM1ZWZiMTVlMjlmMjhl MDU4ZTM1NDM3Mjc3YjY2YjgwMmQwZDhiZDhmNDMxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCiNh/laUyJsjG8dhhiMtwt05/Yvqsh74/QzN+tUR68VjE3 SPYBz4i/468FymcXL1DO9gXHLrz8BvkvpHuhTAbhKvbOWWsv5gK22KHdsHxg3WiK qEwN81XwtqKTGQsVBJvLr8HQMrDVLjUlPXmi2QX21B1i5RSPLUWDdOMGR8iO8i+t iaubQhzWOkSw4O4RXp1Abzpci1WCZzSV0cZgAmqs9rD43uGd5TVN4ls4WTwr8PtI kHZolkCHgcHNlbUETlAAGQODL/JAPUV+RGC8MzJupV3qkiaMpJ3yTuFC2+1r4iFf 3QRzLDFZ2LghcvNUyhch3qv7Umx5c5pCAJdvJJtZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUbgweQxBrhTiArMbhHuR5wXnRXjEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzJmZmEwZWM3LWMxMWYtNDkyNi05NWJjLWQyZjJmMjUyMjdiYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAES9XwwDQYJKoZIhvcNAQELBQADggEBAFP0l3Wm3X1EYCie9QHTva7TtvR9 d6PBOZZu8x9myHXTYd43RtcF/oalIsorA6qlaU62ne3/jJ+H/fjQj0RDDjAqxs3W ILUsojBT+akkjZJhOld7Znatuw5KTmoKJH1VV9CuUZoOzeCiTBTa5mEYGjCgt0a9 13sBR6CvTUqVAGQ00TIXAnxC14VwtsalSn/7wo4VAWAiO7fKIeFHUpOjqUw2I2Bx WRDoocp2WqamSVz1KO+pudPgJ1zVqp1+OJN+Clo1IXqPP/gKD/d3yKrkyd2g6TRm tS0k25CniEn4rCuwulYNjdmnq2Gmdrj/rZQQO+E45ioQrTqLz5f/GJ7xBJg= -----END CERTIFICATE-----Generated at Mon Oct 20 02:58:48 2025 by rpki-client