$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/71c80c1d-bb98-4727-88e7-f0dab898cca7.roa File: 71c80c1d-bb98-4727-88e7-f0dab898cca7.roa (raw, json) Hash identifier: KCRlTu7buQwjdk5xuh1QQ/YKKks9vP9knZyFkIafdBI= Subject key identifier: EC:BB:7C:9F:DE:62:AC:CB:8D:5C:3F:72:DF:D8:BC:3E:72:B5:ED:69 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3008F7FB35EFA58161EB685208E210360C3E351D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/71c80c1d-bb98-4727-88e7-f0dab898cca7.roa Signing time: Sat 18 Oct 2025 08:12:21 +0000 ROA not before: Sat 18 Oct 2025 08:12:21 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.173.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:08:f7:fb:35:ef:a5:81:61:eb:68:52:08:e2:10:36:0c:3e:35:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 08:12:21 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=f374d80647e767d6cdddf9cf1ab8e7b995806cd0b36fc5e28ef02a7562725969, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:19:bf:95:60:1a:70:de:ec:b8:30:71:e5:87: e2:c2:6c:1c:08:1c:87:06:b1:7d:be:f8:03:b6:a0: 3a:86:70:d0:1d:b2:fa:c5:66:23:09:3f:bd:12:ce: 1e:d4:33:66:55:ae:f1:68:3a:f6:6b:d9:8c:40:28: 90:99:ff:3d:7b:63:3b:e5:cf:2c:52:9e:b2:62:9f: eb:dd:6d:97:a1:61:5b:1a:03:01:51:1e:a3:7f:6d: 07:03:ca:27:25:2f:e9:b8:ae:47:4f:57:df:83:7e: c3:b0:0d:2f:19:9a:7a:6d:86:d1:ff:13:65:58:7d: ca:2d:42:39:77:cb:95:41:86:95:b4:2f:95:98:4a: 58:42:2a:08:21:c2:19:f1:b3:bc:36:72:1b:35:bd: c4:e5:18:9d:2d:fc:e7:14:f8:9c:46:3b:e2:e1:58: a6:49:00:00:34:b8:4d:19:ba:ec:13:77:5e:f6:c5: 91:59:3c:38:98:2f:57:91:23:42:9d:03:43:32:6d: a9:e2:80:d8:39:e7:31:ff:cf:5f:54:bb:b1:f4:47: 25:b5:13:ce:ca:1a:7d:52:3d:9c:a8:88:69:c8:89: fb:b2:05:af:8c:b6:4d:de:4c:48:aa:8b:83:23:7f: 89:31:2c:43:94:42:ae:7c:5f:8f:cf:11:9f:5f:86: 19:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:BB:7C:9F:DE:62:AC:CB:8D:5C:3F:72:DF:D8:BC:3E:72:B5:ED:69 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/71c80c1d-bb98-4727-88e7-f0dab898cca7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.173.200.0/24 Signature Algorithm: sha256WithRSAEncryption b2:a0:c0:1f:eb:c3:3e:30:19:69:2b:f6:df:d3:d2:ee:3e:24: e3:8f:b5:83:28:c5:68:6c:74:4b:b9:d4:f6:72:b4:70:b4:b1: 57:41:51:f9:ea:4a:90:6e:5d:25:d0:bf:04:fd:56:97:06:3d: d5:ff:96:7b:54:ec:0e:5b:fd:71:8f:4a:19:2d:33:90:c9:07: 96:f3:e9:1e:0d:90:25:dc:0d:3d:66:68:bc:8b:3c:ef:4c:4e: fd:c3:86:23:8f:6a:38:ee:9b:1d:70:87:7b:f5:cd:c8:99:fd: e2:42:46:e1:46:a6:1d:ac:ae:74:cb:f1:9f:f6:3e:07:0c:bb: 64:34:b8:a6:68:39:08:2f:ec:f9:6c:a0:e1:b9:76:1c:ab:85: 98:08:53:a8:71:b3:b9:2e:c7:1a:40:e7:47:ee:20:ac:ee:a8: e4:39:c3:4a:0c:e0:22:b9:87:7c:2d:89:67:d1:d1:18:19:3e: 8b:9e:79:b8:d6:14:25:dc:55:07:de:4a:d9:3d:20:7d:7a:96: c3:54:e3:f6:f0:d8:12:22:9b:c2:4d:30:e7:b9:ba:9f:7f:ad: 6e:45:c0:ca:40:00:d8:e0:99:59:1b:a9:05:11:e2:5a:d5:e0: 2b:d6:bf:8d:0e:89:19:18:fa:58:42:ae:ea:0b:53:37:c0:bd: 8f:24:40:d9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMAj3+zXvpYFh62hSCOIQNgw+NR0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MDgxMjIxWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BmMzc0ZDgwNjQ3ZTc2N2Q2Y2RkZGY5Y2YxYWI4ZTdiOTk1 ODA2Y2QwYjM2ZmM1ZTI4ZWYwMmE3NTYyNzI1OTY5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvGb+VYBpw3uy4MHHlh+LCbBwIHIcGsX2++AO2oDqGcNAd svrFZiMJP70Szh7UM2ZVrvFoOvZr2YxAKJCZ/z17YzvlzyxSnrJin+vdbZehYVsa AwFRHqN/bQcDyiclL+m4rkdPV9+DfsOwDS8ZmnpthtH/E2VYfcotQjl3y5VBhpW0 L5WYSlhCKgghwhnxs7w2chs1vcTlGJ0t/OcU+JxGO+LhWKZJAAA0uE0ZuuwTd172 xZFZPDiYL1eRI0KdA0MybanigNg55zH/z19Uu7H0RyW1E87KGn1SPZyoiGnIifuy Ba+Mtk3eTEiqi4Mjf4kxLEOUQq58X4/PEZ9fhhkJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU7Lt8n95irMuNXD9y39i8PnK17WkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzcxYzgwYzFkLWJiOTgtNDcyNy04OGU3LWYwZGFiODk4Y2NhNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASrcgwDQYJKoZIhvcNAQELBQADggEBALKgwB/rwz4wGWkr9t/T0u4+JOOP tYMoxWhsdEu51PZytHC0sVdBUfnqSpBuXSXQvwT9VpcGPdX/lntU7A5b/XGPShkt M5DJB5bz6R4NkCXcDT1maLyLPO9MTv3DhiOPajjumx1wh3v1zciZ/eJCRuFGph2s rnTL8Z/2PgcMu2Q0uKZoOQgv7PlsoOG5dhyrhZgIU6hxs7kuxxpA50fuIKzuqOQ5 w0oM4CK5h3wtiWfR0RgZPoueebjWFCXcVQfeStk9IH16lsNU4/bw2BIim8JNMOe5 up9/rW5FwMpAANjgmVkbqQUR4lrV4CvWv40OiRkY+lhCruoLUzfAvY8kQNk= -----END CERTIFICATE-----Generated at Mon Oct 20 08:29:28 2025 by rpki-client