$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/44c0b9e0-ab80-40c4-a872-581de5dd0ec8.roa File: 44c0b9e0-ab80-40c4-a872-581de5dd0ec8.roa (raw, json) Hash identifier: bKkOaVPIAZ0j6OR9lFBVOGP0emXRxOdgv2pOM6Ns+8o= Subject key identifier: 82:E5:A8:24:DB:51:4A:ED:F3:FD:93:4C:4C:F1:C1:8F:CA:8C:49:11 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1241F58428D82963C80F074CC94A2EB72E383FE0 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/44c0b9e0-ab80-40c4-a872-581de5dd0ec8.roa Signing time: Sat 18 Oct 2025 10:21:27 +0000 ROA not before: Sat 18 Oct 2025 10:21:27 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.165.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:41:f5:84:28:d8:29:63:c8:0f:07:4c:c9:4a:2e:b7:2e:38:3f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 10:21:27 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=189c802302f9ae264b6871db0e718d1eaabbcf38715442bb5260f22a9e578939, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:11:8e:31:38:ec:b8:98:b5:d6:d1:1f:56:e5: 00:6a:32:69:76:da:78:59:f2:1d:5e:9e:a6:d1:b1: ed:45:fa:eb:8e:83:ee:9f:c1:9b:7d:39:29:8d:f1: 0a:db:c3:2f:1c:28:82:80:be:77:0d:fa:7e:3b:46: 69:b1:26:f1:09:cb:fc:f5:fb:7e:18:41:e1:a2:bd: 66:05:45:b5:db:87:7e:bc:02:a3:75:41:bb:6b:25: ef:dc:12:fc:6a:43:c4:33:b4:46:95:ac:b3:b7:26: d4:c0:35:73:7a:61:6a:58:97:64:df:fa:9a:1e:8c: 2a:f8:64:f1:9b:eb:d0:11:d0:d5:a0:d0:42:19:9c: 3b:49:d7:ec:3c:84:c1:93:7a:2b:80:e3:e1:d3:6b: 14:10:7c:b2:e4:e9:34:1d:fb:3b:54:2e:b6:d5:83: ec:12:1e:d5:56:81:d7:c9:78:15:99:92:83:fb:12: a0:8d:7d:6a:03:27:ae:2d:cb:1a:1f:fe:eb:41:d1: 79:9a:d3:04:26:f5:af:49:d1:b1:81:ef:c3:1d:44: 00:fc:ae:ed:b0:78:81:e9:a8:59:62:8e:b1:84:4c: 86:26:a1:2f:b9:a7:15:94:45:99:35:62:df:ec:f0: a1:b4:a0:f7:0b:7d:11:e7:23:18:af:52:56:3c:0b: 89:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:E5:A8:24:DB:51:4A:ED:F3:FD:93:4C:4C:F1:C1:8F:CA:8C:49:11 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/44c0b9e0-ab80-40c4-a872-581de5dd0ec8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.165.244.0/22 Signature Algorithm: sha256WithRSAEncryption 85:0d:03:b1:a4:73:1a:35:51:9a:d3:a1:a7:76:72:8b:0e:1e: a7:0d:78:10:43:e4:5f:e9:93:76:5b:30:e2:e9:aa:01:29:06: d5:dd:60:34:3e:7e:3f:ff:64:fc:57:5e:ad:d2:17:d1:3c:00: b7:61:87:73:fe:1e:f2:02:17:b0:18:20:92:da:86:6d:3b:cb: 95:b2:10:fc:1d:16:13:b4:43:4a:77:a8:c7:3e:81:a0:5b:15: 72:a2:6f:23:77:91:3e:c4:fb:9d:51:3a:24:56:b9:98:25:a9: 50:4a:9e:ae:c2:0e:c6:f9:f6:a0:5a:44:17:8a:b5:1a:a3:4e: c1:f7:16:18:34:cf:e2:10:ff:02:74:9e:bb:3e:22:af:a9:c3: 20:b2:3e:44:c8:42:53:c6:dc:1a:6b:d0:92:a2:10:ce:37:77: be:da:94:2a:29:81:f4:82:a6:42:ee:64:f6:9c:34:f7:2b:ac: 14:d8:9c:52:f0:2c:e7:51:50:3e:9e:21:8d:81:17:03:07:f6: 2b:f8:24:cb:20:3d:7f:d0:16:d0:a1:fb:b7:f4:6d:e9:aa:1e: c6:84:19:10:71:74:c2:1b:45:ae:c5:88:5d:82:e6:4a:f3:74: be:b3:b0:58:67:7a:69:f1:cc:c2:86:d5:1b:89:31:f6:f4:c0: 26:92:27:62 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEkH1hCjYKWPIDwdMyUouty44P+AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTAyMTI3WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AxODljODAyMzAyZjlhZTI2NGI2ODcxZGIwZTcxOGQxZWFh YmJjZjM4NzE1NDQyYmI1MjYwZjIyYTllNTc4OTM5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCiEY4xOOy4mLXW0R9W5QBqMml22nhZ8h1enqbRse1F+uuO g+6fwZt9OSmN8Qrbwy8cKIKAvncN+n47RmmxJvEJy/z1+34YQeGivWYFRbXbh368 AqN1QbtrJe/cEvxqQ8QztEaVrLO3JtTANXN6YWpYl2Tf+poejCr4ZPGb69AR0NWg 0EIZnDtJ1+w8hMGTeiuA4+HTaxQQfLLk6TQd+ztULrbVg+wSHtVWgdfJeBWZkoP7 EqCNfWoDJ64tyxof/utB0Xma0wQm9a9J0bGB78MdRAD8ru2weIHpqFlijrGETIYm oS+5pxWURZk1Yt/s8KG0oPcLfRHnIxivUlY8C4nLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUguWoJNtRSu3z/ZNMTPHBj8qMSREwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQ0YzBiOWUwLWFiODAtNDBjNC1hODcyLTU4MWRlNWRkMGVjOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAISpfQwDQYJKoZIhvcNAQELBQADggEBAIUNA7Gkcxo1UZrToad2cosOHqcN eBBD5F/pk3ZbMOLpqgEpBtXdYDQ+fj//ZPxXXq3SF9E8ALdhh3P+HvICF7AYIJLa hm07y5WyEPwdFhO0Q0p3qMc+gaBbFXKibyN3kT7E+51ROiRWuZglqVBKnq7CDsb5 9qBaRBeKtRqjTsH3Fhg0z+IQ/wJ0nrs+Iq+pwyCyPkTIQlPG3Bpr0JKiEM43d77a lCopgfSCpkLuZPacNPcrrBTYnFLwLOdRUD6eIY2BFwMH9iv4JMsgPX/QFtCh+7f0 bemqHsaEGRBxdMIbRa7FiF2C5krzdL6zsFhnemnxzMKG1RuJMfb0wCaSJ2I= -----END CERTIFICATE-----Generated at Mon Oct 20 06:03:55 2025 by rpki-client