$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7111a91a-78ce-4522-960b-5ef601c42dc5.roa File: 7111a91a-78ce-4522-960b-5ef601c42dc5.roa (raw, json) Hash identifier: xbmMbS8Hu32Ugacd6/wssdLHNX7XX1d0vaZ++iUfZEE= Subject key identifier: A8:90:90:41:A7:AC:C7:F0:ED:1B:7D:8C:07:9C:A4:73:23:99:5A:67 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 44DEBAB51F5B012FCD61DA66FD5021070FDD6DCA Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7111a91a-78ce-4522-960b-5ef601c42dc5.roa Signing time: Sat 18 Oct 2025 11:32:37 +0000 ROA not before: Sat 18 Oct 2025 11:32:37 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.155.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:de:ba:b5:1f:5b:01:2f:cd:61:da:66:fd:50:21:07:0f:dd:6d:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 11:32:37 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=ef11beff244bcfc25abf71ec54f7799ae16d22a32d293e2c81f9a5a91a09399b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ff:bb:5d:96:7f:95:a7:9e:2c:ac:04:03:dc: f6:a5:08:71:84:82:be:37:5e:69:6a:0f:0b:e0:64: 4f:a0:84:99:94:8c:2e:06:10:45:37:bd:a2:df:f9: dc:61:56:9d:5a:22:fe:77:90:5b:a0:68:d4:88:3a: 44:5c:66:14:7a:4e:41:2f:d4:92:2c:f5:33:e3:76: 6f:6e:4e:63:41:40:e7:d5:10:e0:7e:9d:8d:44:f4: 37:7f:ae:73:bb:4d:59:35:e4:55:5e:5e:3b:7e:a9: 28:37:58:8c:d1:e4:db:e9:3e:d1:0d:95:44:bf:91: 5a:81:ea:a0:95:94:f0:95:ff:82:71:34:ac:91:dd: a0:91:79:ec:71:b7:82:46:93:e2:5a:67:e8:a2:49: 15:4b:4f:52:ff:5f:3b:b3:27:a4:f5:84:ab:2d:31: 74:5a:49:e8:73:3c:30:bf:7f:51:e3:ff:10:71:4e: e8:8a:f8:b1:13:d4:b1:76:b5:7c:ab:0f:b7:7c:fc: 99:c7:31:36:b8:b1:36:81:f4:b3:bf:95:ee:83:31: 24:ca:9d:42:9a:a1:8a:ca:8a:66:c5:67:94:93:ec: 2e:a1:36:30:6a:9b:3e:55:6c:42:3d:2a:b6:3f:f1: de:c6:d3:71:a2:80:c2:cf:ff:91:36:21:ad:a5:a4: 15:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:90:90:41:A7:AC:C7:F0:ED:1B:7D:8C:07:9C:A4:73:23:99:5A:67 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7111a91a-78ce-4522-960b-5ef601c42dc5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.155.57.0/24 Signature Algorithm: sha256WithRSAEncryption 33:1b:b9:d5:7d:f2:8e:4e:24:97:44:f2:73:8f:eb:52:4a:12: f9:a4:a7:8a:95:b9:23:b8:ad:b1:fc:7e:4a:84:9b:07:3b:3f: 17:45:da:7b:ea:dc:34:b2:ea:a2:54:9e:83:1c:ff:80:62:97: 2e:02:df:7e:30:d5:be:38:cd:a9:f1:1a:1b:6a:00:e6:30:e9: 25:ab:39:b4:13:f5:39:76:58:57:4e:05:4d:57:0e:dc:ea:f6: af:f3:a6:7d:5a:4f:89:8d:08:46:3e:11:85:cc:d2:01:7b:09: 11:b7:7d:fe:3e:f5:8a:62:26:87:76:66:af:2b:53:41:f4:5f: 1a:de:3e:ea:3c:d1:83:84:da:0d:68:60:8c:a1:0d:44:7a:c4: b6:8b:b3:cf:1a:a6:3f:c8:d0:ba:34:26:1a:e2:f0:43:6e:b1: 38:3d:02:89:6b:56:e7:e7:4e:01:ac:88:94:81:ce:a8:12:f5: 2a:01:2b:a3:f7:56:69:b7:a0:24:bc:eb:fa:83:78:88:d1:89: 08:5a:94:5f:f9:54:04:61:f1:d7:33:01:90:3f:bb:cc:9c:2c: 9a:d8:b4:90:d4:21:1c:e9:a6:22:4c:33:49:34:a3:2e:06:b5: 01:5e:fd:25:82:9c:55:0f:91:55:85:e2:d2:2e:e2:5e:54:bb: e0:00:3a:51 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURN66tR9bAS/NYdpm/VAhBw/dbcowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTEzMjM3WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BlZjExYmVmZjI0NGJjZmMyNWFiZjcxZWM1NGY3Nzk5YWUx NmQyMmEzMmQyOTNlMmM4MWY5YTVhOTFhMDkzOTliMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7/7tdln+Vp54srAQD3PalCHGEgr43XmlqDwvgZE+ghJmU jC4GEEU3vaLf+dxhVp1aIv53kFugaNSIOkRcZhR6TkEv1JIs9TPjdm9uTmNBQOfV EOB+nY1E9Dd/rnO7TVk15FVeXjt+qSg3WIzR5NvpPtENlUS/kVqB6qCVlPCV/4Jx NKyR3aCReexxt4JGk+JaZ+iiSRVLT1L/XzuzJ6T1hKstMXRaSehzPDC/f1Hj/xBx TuiK+LET1LF2tXyrD7d8/JnHMTa4sTaB9LO/le6DMSTKnUKaoYrKimbFZ5ST7C6h NjBqmz5VbEI9KrY/8d7G03GigMLP/5E2Ia2lpBV1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUqJCQQaesx/DtG32MB5ykcyOZWmcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzcxMTFhOTFhLTc4Y2UtNDUyMi05NjBiLTVlZjYwMWM0MmRjNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASmzkwDQYJKoZIhvcNAQELBQADggEBADMbudV98o5OJJdE8nOP61JKEvmk p4qVuSO4rbH8fkqEmwc7PxdF2nvq3DSy6qJUnoMc/4Bily4C334w1b44zanxGhtq AOYw6SWrObQT9Tl2WFdOBU1XDtzq9q/zpn1aT4mNCEY+EYXM0gF7CRG3ff4+9Ypi Jod2Zq8rU0H0XxrePuo80YOE2g1oYIyhDUR6xLaLs88apj/I0Lo0Jhri8ENusTg9 AolrVufnTgGsiJSBzqgS9SoBK6P3Vmm3oCS86/qDeIjRiQhalF/5VARh8dczAZA/ u8ycLJrYtJDUIRzppiJMM0k0oy4GtQFe/SWCnFUPkVWF4tIu4l5Uu+AAOlE= -----END CERTIFICATE-----Generated at Mon Oct 20 03:07:45 2025 by rpki-client