$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5656f903-8849-4232-bfd4-bd01b71bfd1d.roa File: 5656f903-8849-4232-bfd4-bd01b71bfd1d.roa (raw, json) Hash identifier: HMi4xAa8HH7Wtaxo2ea3stwJrmG7E2qKGJ9Kr2t0mEg= Subject key identifier: F8:43:79:56:58:F2:BB:86:BC:0B:13:00:24:A0:F5:7B:C4:63:5B:6B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 374392D1E535E4D2051B44BB4C80C4D916687445 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5656f903-8849-4232-bfd4-bd01b71bfd1d.roa Signing time: Sat 18 Oct 2025 17:33:56 +0000 ROA not before: Sat 18 Oct 2025 17:33:56 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.238.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:43:92:d1:e5:35:e4:d2:05:1b:44:bb:4c:80:c4:d9:16:68:74:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 17:33:56 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=c9bf1c3fd6ffdafe28758d6978deada9bfad78b51fd4e09b2e4822f235adbe27, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:7a:26:55:18:8f:dd:ca:ee:53:62:99:75:30: b9:b1:71:b1:10:71:c3:f0:30:99:ff:03:96:2a:99: 94:76:00:9b:19:76:8b:27:5d:15:d8:34:30:21:e4: 17:30:c7:e1:9f:b9:54:d0:19:56:9e:3a:a6:1c:01: d1:2c:43:ce:aa:b7:5e:b9:80:8d:17:d1:d9:5d:5d: 4b:0d:72:d3:98:f8:60:22:9b:a4:6c:fb:2c:c2:f5: 77:a9:9f:be:d0:48:e1:f1:ef:19:9d:82:bc:c9:2b: 16:db:aa:37:8e:63:41:03:3d:92:91:d8:c5:dc:43: 0a:8a:a6:39:3f:e9:ff:10:48:6d:54:8f:35:a5:1e: 9f:4e:98:56:1e:4e:f7:33:ec:28:0a:29:ff:50:80: 5b:a7:1f:72:e1:fe:fc:88:5f:ab:14:ca:de:da:d4: 2f:fb:27:d0:1b:53:32:5b:ea:c6:ea:fa:29:43:12: 14:80:5e:c8:c1:31:1b:54:c0:d8:e4:f8:01:d5:85: d4:cb:1a:c3:e1:7d:e0:41:3a:1d:05:8d:7e:6c:9c: 69:2e:44:98:00:3c:ac:ca:9b:50:0d:fb:08:eb:12: c2:d0:22:ac:b1:f3:f3:85:49:09:ca:b0:56:b7:b4: ab:93:35:ae:24:db:0d:aa:63:c5:94:36:61:21:9b: ee:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:43:79:56:58:F2:BB:86:BC:0B:13:00:24:A0:F5:7B:C4:63:5B:6B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5656f903-8849-4232-bfd4-bd01b71bfd1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.238.37.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:5f:b4:ff:ff:80:ee:37:d7:76:e2:f0:4b:71:33:43:8a:91: 25:b3:ca:ee:65:03:73:7c:63:f0:92:9f:72:24:f8:36:55:2e: 2e:eb:f9:42:84:99:19:85:ad:4a:a5:51:7b:35:6c:a3:4f:ac: a2:74:7b:a5:0e:3a:38:19:1e:f0:cf:ce:0d:16:a3:78:d0:13: 38:10:53:c9:02:58:83:47:98:00:10:79:e0:c7:36:d0:6b:c4: 86:00:60:a8:33:69:04:d7:f2:a8:47:07:93:0f:c0:8d:b8:68: 17:c3:29:2c:d0:db:2d:4f:bb:ac:5b:67:8d:84:ef:fe:0e:4f: a3:b2:3f:4a:f1:fc:1a:20:b7:ca:fe:c2:89:e3:b4:e4:9c:61: 40:9f:dc:d8:43:58:b8:be:77:c6:39:64:3c:d7:e0:5d:60:7d: ed:65:d8:f4:2e:8b:c2:e1:78:d8:65:90:2d:94:6c:45:c5:3d: 2f:6b:58:be:ae:0c:a0:fe:37:08:dc:7e:1a:f9:40:2a:a6:9c: c4:1e:34:1a:7c:31:b4:94:e1:a1:56:d2:0c:de:59:10:6c:93: 24:60:0e:44:76:1d:56:9b:50:e5:01:ff:1f:37:0f:5c:b1:09: da:73:2f:d9:fe:6b:af:de:75:42:a7:85:e7:a2:cd:ae:56:17: 07:14:1d:b6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUN0OS0eU15NIFG0S7TIDE2RZodEUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTczMzU2WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BjOWJmMWMzZmQ2ZmZkYWZlMjg3NThkNjk3OGRlYWRhOWJm YWQ3OGI1MWZkNGUwOWIyZTQ4MjJmMjM1YWRiZTI3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjeiZVGI/dyu5TYpl1MLmxcbEQccPwMJn/A5YqmZR2AJsZ dosnXRXYNDAh5Bcwx+GfuVTQGVaeOqYcAdEsQ86qt165gI0X0dldXUsNctOY+GAi m6Rs+yzC9Xepn77QSOHx7xmdgrzJKxbbqjeOY0EDPZKR2MXcQwqKpjk/6f8QSG1U jzWlHp9OmFYeTvcz7CgKKf9QgFunH3Lh/vyIX6sUyt7a1C/7J9AbUzJb6sbq+ilD EhSAXsjBMRtUwNjk+AHVhdTLGsPhfeBBOh0FjX5snGkuRJgAPKzKm1AN+wjrEsLQ Iqyx8/OFSQnKsFa3tKuTNa4k2w2qY8WUNmEhm+47AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU+EN5Vljyu4a8CxMAJKD1e8RjW2swHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzU2NTZmOTAzLTg4NDktNDIzMi1iZmQ0LWJkMDFiNzFiZmQxZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAS7iUwDQYJKoZIhvcNAQELBQADggEBAFtftP//gO4313bi8EtxM0OKkSWz yu5lA3N8Y/CSn3Ik+DZVLi7r+UKEmRmFrUqlUXs1bKNPrKJ0e6UOOjgZHvDPzg0W o3jQEzgQU8kCWINHmAAQeeDHNtBrxIYAYKgzaQTX8qhHB5MPwI24aBfDKSzQ2y1P u6xbZ42E7/4OT6OyP0rx/Bogt8r+wonjtOScYUCf3NhDWLi+d8Y5ZDzX4F1gfe1l 2PQui8LheNhlkC2UbEXFPS9rWL6uDKD+Nwjcfhr5QCqmnMQeNBp8MbSU4aFW0gze WRBskyRgDkR2HVabUOUB/x83D1yxCdpzL9n+a6/edUKnheeiza5WFwcUHbY= -----END CERTIFICATE-----Generated at Mon Oct 20 02:56:47 2025 by rpki-client