$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/45635755-17f2-4b75-ae29-679a6a3dfaf6.roa File: 45635755-17f2-4b75-ae29-679a6a3dfaf6.roa (raw, json) Hash identifier: 8ZHpTqN4w7X2z8jZbD7L+iuvUokLAOduF8iSM6oX/Ak= Subject key identifier: 0A:8E:B2:7D:01:EC:3F:DF:9D:1F:81:5E:89:E7:FD:78:0A:3B:15:35 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6DE0C69144EF5FE9DC60CEA855B3DE9DCD5FEEEF Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/45635755-17f2-4b75-ae29-679a6a3dfaf6.roa Signing time: Sat 18 Oct 2025 11:13:39 +0000 ROA not before: Sat 18 Oct 2025 11:13:39 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.173.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:e0:c6:91:44:ef:5f:e9:dc:60:ce:a8:55:b3:de:9d:cd:5f:ee:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 11:13:39 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=08fbea63865d45ae31be91d5e77bcac5c9f1e315d67379304b3695477e50c83a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ce:7b:c0:e7:fd:4d:dd:77:9b:00:03:fb:3e: 57:2c:3b:fc:7f:55:55:52:86:88:a7:f2:ca:25:21: c0:68:ac:e3:14:85:07:3f:c6:0d:84:3e:77:40:a4: 73:fa:73:f8:0c:1b:65:3d:db:c0:3d:c0:14:2d:ba: ea:ea:fe:95:52:a1:38:15:b2:51:1b:33:59:0a:62: a5:3f:de:5a:46:0c:ff:2b:f9:dc:21:e0:cd:fc:8f: 6c:f1:ba:7d:72:65:52:44:6f:d4:a2:4e:8b:17:9e: ee:49:e8:7a:9f:82:c3:ee:de:42:5a:ef:77:38:3a: 8f:25:d4:77:6b:af:a6:52:f6:19:17:52:05:ec:ce: a6:47:f7:1e:d4:a0:06:f5:6d:16:50:c1:40:58:3a: 97:c1:43:6a:42:3c:ee:00:92:59:49:ca:e0:07:0d: 47:c7:4b:b5:70:a6:f7:cd:29:09:e4:96:cd:f8:a5: 96:c0:ab:0d:9c:5f:66:8b:af:96:6a:9c:bc:f9:ea: 49:de:b7:12:f1:92:20:c6:41:00:2f:d1:f1:c1:f0: 5a:1e:98:11:01:d2:65:6f:d8:59:ab:09:3b:86:43: 32:37:8a:71:bd:e5:d4:95:87:a2:f5:d7:35:7f:37: 03:ab:aa:69:38:34:8a:98:78:12:9d:41:34:32:3c: f2:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:8E:B2:7D:01:EC:3F:DF:9D:1F:81:5E:89:E7:FD:78:0A:3B:15:35 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/45635755-17f2-4b75-ae29-679a6a3dfaf6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.173.63.0/24 Signature Algorithm: sha256WithRSAEncryption 24:55:25:e1:55:07:ae:d3:98:32:f9:3c:3b:ee:32:a0:4e:69: 68:fb:68:9e:14:d7:e2:33:8d:ce:1e:75:34:be:3b:37:26:66: cf:fa:74:48:59:a5:d4:6a:8b:68:11:2a:39:8e:12:5e:d4:d1: 65:ed:fa:39:45:04:bb:b1:30:e2:2a:5a:82:57:0a:d8:02:df: 65:51:d6:94:1b:f5:77:f4:ea:6a:3f:a9:c0:2f:5a:94:8f:dd: f0:8c:6b:13:06:15:37:90:74:86:5d:5c:f5:0e:94:9c:6b:91: 5b:ea:0e:74:b6:a7:e5:14:fb:91:fd:68:7d:9f:47:00:9b:e0: cc:c2:ce:71:97:8b:27:bd:c9:ab:30:64:e5:b9:75:ce:b7:d6: 4a:d0:ea:91:53:55:1a:af:68:a8:14:b8:07:4d:be:4e:9c:34: 19:cc:7e:7d:c3:44:a1:17:83:5a:92:92:f5:33:b6:af:17:79: 75:c4:45:98:5b:d6:1c:c0:c2:99:e1:95:52:94:e1:95:1b:d4: 0d:68:f9:4a:e6:0f:df:a5:1d:db:b6:b8:be:0d:09:a6:ba:c8: b6:a3:4d:e0:2f:ba:ea:dc:56:73:30:33:9d:45:83:6c:fb:89: 21:3c:50:d9:2a:8e:90:75:e8:d7:f3:99:b2:7d:2d:59:9f:ca: 25:90:dd:3c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbeDGkUTvX+ncYM6oVbPenc1f7u8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTExMzM5WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AwOGZiZWE2Mzg2NWQ0NWFlMzFiZTkxZDVlNzdiY2FjNWM5 ZjFlMzE1ZDY3Mzc5MzA0YjM2OTU0NzdlNTBjODNhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+znvA5/1N3XebAAP7PlcsO/x/VVVShoin8solIcBorOMU hQc/xg2EPndApHP6c/gMG2U928A9wBQtuurq/pVSoTgVslEbM1kKYqU/3lpGDP8r +dwh4M38j2zxun1yZVJEb9SiTosXnu5J6HqfgsPu3kJa73c4Oo8l1Hdrr6ZS9hkX UgXszqZH9x7UoAb1bRZQwUBYOpfBQ2pCPO4AkllJyuAHDUfHS7VwpvfNKQnkls34 pZbAqw2cX2aLr5ZqnLz56knetxLxkiDGQQAv0fHB8FoemBEB0mVv2FmrCTuGQzI3 inG95dSVh6L11zV/NwOrqmk4NIqYeBKdQTQyPPIZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUCo6yfQHsP9+dH4Feief9eAo7FTUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQ1NjM1NzU1LTE3ZjItNGI3NS1hZTI5LTY3OWE2YTNkZmFmNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASrT8wDQYJKoZIhvcNAQELBQADggEBACRVJeFVB67TmDL5PDvuMqBOaWj7 aJ4U1+Izjc4edTS+OzcmZs/6dEhZpdRqi2gRKjmOEl7U0WXt+jlFBLuxMOIqWoJX CtgC32VR1pQb9Xf06mo/qcAvWpSP3fCMaxMGFTeQdIZdXPUOlJxrkVvqDnS2p+UU +5H9aH2fRwCb4MzCznGXiye9yaswZOW5dc631krQ6pFTVRqvaKgUuAdNvk6cNBnM fn3DRKEXg1qSkvUztq8XeXXERZhb1hzAwpnhlVKU4ZUb1A1o+UrmD9+lHdu2uL4N Caa6yLajTeAvuurcVnMwM51Fg2z7iSE8UNkqjpB16NfzmbJ9LVmfyiWQ3Tw= -----END CERTIFICATE-----Generated at Mon Oct 20 11:54:52 2025 by rpki-client