$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6881303a-6552-46bc-b228-e30c067f2bde.roa File: 6881303a-6552-46bc-b228-e30c067f2bde.roa (raw, json) Hash identifier: CNv2UQCVsQk7dcubGmXADqFWpOEMSQN51C2cW3ocso0= Subject key identifier: 75:1B:73:80:09:5D:C0:16:84:77:0F:83:7A:1D:D6:E9:0B:C4:9B:4F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0DDE3C55E81A5370762489120DE958779E21C40A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6881303a-6552-46bc-b228-e30c067f2bde.roa Signing time: Sat 18 Oct 2025 11:10:12 +0000 ROA not before: Sat 18 Oct 2025 11:10:12 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.238.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:de:3c:55:e8:1a:53:70:76:24:89:12:0d:e9:58:77:9e:21:c4:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 11:10:12 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=5e90b6979b85c14ff0da765c99a6e582229f04bb16a635bff325ad7595ea7c6c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:05:7d:4c:97:ac:3c:e4:50:b0:84:ad:fc:5a: 0b:f8:41:0e:86:7b:f4:97:d4:4c:e7:0f:97:11:ca: 3b:60:24:0c:ef:79:0d:a6:86:09:ad:8b:83:dc:5a: d3:a5:1f:39:33:f7:f4:9a:e5:05:7a:9f:cd:8f:45: 53:b4:1c:f5:ee:73:e1:ca:d3:11:b4:e8:06:7c:51: a2:4e:c4:22:1f:27:f7:e3:0d:42:d5:b6:d0:79:46: 29:30:ab:47:d4:ec:03:f8:a0:d6:bd:3a:c7:36:df: e8:97:cd:96:83:a8:be:c1:b2:99:15:f9:03:7b:ca: 18:a2:58:fa:d4:5e:33:45:0b:21:7a:63:cf:cb:6c: 8e:30:35:71:c4:c6:95:51:85:c4:35:be:e1:57:2b: 86:60:52:3f:d7:32:64:7d:ed:98:b0:b4:e9:ba:df: a6:f0:3c:b8:52:9e:5a:4d:cb:c0:05:9b:56:4d:8c: 8e:b8:a6:09:fa:17:72:b5:65:9d:d5:25:2c:20:36: 28:2e:3f:6a:c6:82:ab:dd:7b:31:3c:43:63:19:1d: 35:90:51:82:27:fc:d5:c1:ea:c6:0f:df:ba:e4:0f: 68:5d:84:cc:d3:71:24:b2:0a:3a:93:d7:4d:16:53: 71:1b:e4:2e:17:33:1f:01:ef:34:28:31:1f:0a:b8: 53:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:1B:73:80:09:5D:C0:16:84:77:0F:83:7A:1D:D6:E9:0B:C4:9B:4F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6881303a-6552-46bc-b228-e30c067f2bde.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.238.38.0/24 Signature Algorithm: sha256WithRSAEncryption 92:ab:0c:86:90:42:7f:a1:a6:e6:33:06:a6:5c:56:af:43:cd: eb:68:1d:6f:b5:67:20:72:d8:58:4f:47:39:3e:36:80:35:2f: 5e:2b:e5:c2:f1:a7:9c:9a:7d:94:0d:0c:0e:53:60:76:9e:86: 8e:d8:bb:c7:18:92:31:2c:0b:61:e7:f5:a1:07:b1:e8:f4:9c: 30:14:97:f0:fa:50:1a:d2:d8:92:79:48:9d:e4:86:49:87:17: 64:bb:7d:72:2e:62:0f:a2:a0:37:9f:07:f6:e3:10:9f:79:55: 05:ed:05:bd:07:62:85:99:8c:d5:14:c1:d4:40:cd:48:93:09: 63:0e:54:e0:5d:43:71:26:32:1b:9b:38:01:00:c3:0e:e6:fb: be:31:0b:dd:c4:1c:16:fc:b5:e2:ce:d8:b9:24:2c:c0:ab:7c: 86:9a:20:8a:4a:c5:c0:8d:4d:83:27:d8:74:6f:9d:87:51:ba: 42:b2:1a:bf:75:c5:e6:9d:a0:b5:00:6e:15:f8:4c:6c:c9:27: 9e:74:89:67:97:78:c0:1d:2d:57:68:43:19:6e:67:82:dc:e2: b6:a2:3d:78:08:6e:34:ea:68:ff:61:63:42:c7:86:7d:fc:aa: 62:eb:0b:16:d0:fd:78:29:39:f5:a1:20:ee:61:7a:e2:81:b3: 4b:36:64:4c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDd48VegaU3B2JIkSDelYd54hxAowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTExMDEyWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZTkwYjY5NzliODVjMTRmZjBkYTc2NWM5OWE2ZTU4MjIy OWYwNGJiMTZhNjM1YmZmMzI1YWQ3NTk1ZWE3YzZjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDwBX1Ml6w85FCwhK38Wgv4QQ6Ge/SX1EznD5cRyjtgJAzv eQ2mhgmti4PcWtOlHzkz9/Sa5QV6n82PRVO0HPXuc+HK0xG06AZ8UaJOxCIfJ/fj DULVttB5Rikwq0fU7AP4oNa9Osc23+iXzZaDqL7BspkV+QN7yhiiWPrUXjNFCyF6 Y8/LbI4wNXHExpVRhcQ1vuFXK4ZgUj/XMmR97ZiwtOm636bwPLhSnlpNy8AFm1ZN jI64pgn6F3K1ZZ3VJSwgNiguP2rGgqvdezE8Q2MZHTWQUYIn/NXB6sYP37rkD2hd hMzTcSSyCjqT100WU3Eb5C4XMx8B7zQoMR8KuFNxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUdRtzgAldwBaEdw+Deh3W6QvEm08wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzY4ODEzMDNhLTY1NTItNDZiYy1iMjI4LWUzMGMwNjdmMmJkZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAS7iYwDQYJKoZIhvcNAQELBQADggEBAJKrDIaQQn+hpuYzBqZcVq9Dzeto HW+1ZyBy2FhPRzk+NoA1L14r5cLxp5yafZQNDA5TYHaeho7Yu8cYkjEsC2Hn9aEH sej0nDAUl/D6UBrS2JJ5SJ3khkmHF2S7fXIuYg+ioDefB/bjEJ95VQXtBb0HYoWZ jNUUwdRAzUiTCWMOVOBdQ3EmMhubOAEAww7m+74xC93EHBb8teLO2LkkLMCrfIaa IIpKxcCNTYMn2HRvnYdRukKyGr91xeadoLUAbhX4TGzJJ550iWeXeMAdLVdoQxlu Z4Lc4raiPXgIbjTqaP9hY0LHhn38qmLrCxbQ/XgpOfWhIO5heuKBs0s2ZEw= -----END CERTIFICATE-----Generated at Mon Oct 20 03:14:14 2025 by rpki-client