$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/833a49ed-f6f3-4762-a2f5-938b437f86db.roa File: 833a49ed-f6f3-4762-a2f5-938b437f86db.roa (raw, json) Hash identifier: +v5EJEVTb0nFNEJ2ojFyKPAG0+J8GRZooHvNfINOi+8= Subject key identifier: 8A:AC:CA:D5:3E:98:89:2C:BF:3C:17:C8:C1:57:91:5A:C2:A8:9F:59 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2FE6F005BF8E81DD876545738A95A86A0A2FC666 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/833a49ed-f6f3-4762-a2f5-938b437f86db.roa Signing time: Sat 18 Oct 2025 09:30:20 +0000 ROA not before: Sat 18 Oct 2025 09:30:20 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.172.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:e6:f0:05:bf:8e:81:dd:87:65:45:73:8a:95:a8:6a:0a:2f:c6:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 09:30:20 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=dd16f8c4a780acf383395488e0198f965ec8f28f9447ea8bb19b4e2bdbb609a0, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:08:94:aa:29:b4:c1:aa:25:6e:c0:a9:ab:80: 47:9b:15:a2:ca:fe:3b:ce:e3:df:0e:9d:3a:77:7a: 55:21:da:03:98:4e:72:fb:4b:5c:42:b2:fd:01:46: 22:49:1d:b2:10:20:bd:f9:40:44:44:dd:58:25:5d: 4c:60:08:f6:2e:2b:14:71:e1:71:b5:71:93:3a:52: 64:27:63:42:31:5d:92:de:c9:38:a8:f2:85:59:6e: a0:37:cb:65:1c:58:7f:12:8d:e7:dd:1e:0d:6b:77: 07:9a:42:5d:68:85:e9:98:a5:5b:c0:59:89:4f:2a: 4b:5f:93:b3:6f:e5:3f:be:78:c3:d6:42:6b:6c:fc: 9d:00:dc:f6:3b:ef:3a:ea:8d:80:51:d3:05:bb:54: 30:e1:23:23:2d:9b:2a:e6:f6:eb:67:79:2b:bd:55: 1e:ce:d8:7f:a4:c3:09:94:80:ba:e2:27:13:c8:47: 3a:0b:60:62:65:a3:02:51:2f:92:21:7e:83:d6:9e: 4f:00:dd:cb:1f:35:a2:7c:e4:84:33:0f:58:25:02: 50:3e:e5:cf:72:33:70:2f:ec:b6:2a:70:76:6f:03: 97:e4:e0:b1:ab:c5:b9:fc:a1:e0:ad:45:61:ee:a0: 50:57:1c:d6:61:7d:d7:ef:84:43:07:91:ab:3b:8a: e7:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:AC:CA:D5:3E:98:89:2C:BF:3C:17:C8:C1:57:91:5A:C2:A8:9F:59 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/833a49ed-f6f3-4762-a2f5-938b437f86db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.172.50.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:78:88:ed:1c:7f:a9:0d:c5:3d:50:9e:b5:6a:fb:c1:67:00: 72:cd:f2:14:4e:5c:2f:9f:52:60:35:a8:c7:81:cc:66:b1:99: e9:c2:24:c2:e9:7d:d6:34:95:53:0d:e7:e4:1c:dc:0e:45:f7: 4d:98:0e:d3:21:62:a6:01:90:95:cb:c5:a1:6e:9a:68:b6:4d: f7:a3:38:e2:c2:74:59:35:12:72:d3:35:6c:ef:3b:10:3a:52: a3:38:2e:5e:dc:2f:78:7b:de:fd:f8:ea:4d:c1:31:a4:71:11: 37:4c:55:3d:e1:4e:3e:52:64:3f:0f:0b:90:6f:91:c1:aa:9a: 35:34:07:f8:71:b6:86:39:ae:12:bb:e7:9f:52:38:24:b6:08: 72:a5:e4:4f:a4:77:f8:84:6d:a5:d9:68:bf:fc:bc:e5:81:06: 35:60:40:94:68:b2:4d:25:a0:6d:94:f1:84:8e:53:b2:cf:87: b9:0a:9a:9b:34:a9:39:b3:dd:65:a5:09:9b:7b:60:12:db:7b: dc:e5:1a:8f:d4:fd:2a:2b:3e:0b:16:54:02:71:d8:3c:98:89: 61:0a:a9:65:51:d8:41:be:e1:aa:a1:23:50:b3:30:ee:e7:fc: 74:1c:8a:c4:d7:1a:79:f4:55:eb:f0:f4:1d:2b:88:3f:cc:54: fe:a1:35:08 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUL+bwBb+Ogd2HZUVzipWoagovxmYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MDkzMDIwWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BkZDE2ZjhjNGE3ODBhY2YzODMzOTU0ODhlMDE5OGY5NjVl YzhmMjhmOTQ0N2VhOGJiMTliNGUyYmRiYjYwOWEwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDmCJSqKbTBqiVuwKmrgEebFaLK/jvO498OnTp3elUh2gOY TnL7S1xCsv0BRiJJHbIQIL35QERE3VglXUxgCPYuKxRx4XG1cZM6UmQnY0IxXZLe yTio8oVZbqA3y2UcWH8SjefdHg1rdweaQl1ohemYpVvAWYlPKktfk7Nv5T++eMPW Qmts/J0A3PY77zrqjYBR0wW7VDDhIyMtmyrm9utneSu9VR7O2H+kwwmUgLriJxPI RzoLYGJlowJRL5IhfoPWnk8A3csfNaJ85IQzD1glAlA+5c9yM3Av7LYqcHZvA5fk 4LGrxbn8oeCtRWHuoFBXHNZhfdfvhEMHkas7iuddAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUiqzK1T6YiSy/PBfIwVeRWsKon1kwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzgzM2E0OWVkLWY2ZjMtNDc2Mi1hMmY1LTkzOGI0MzdmODZkYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASrDIwDQYJKoZIhvcNAQELBQADggEBAF14iO0cf6kNxT1QnrVq+8FnAHLN 8hROXC+fUmA1qMeBzGaxmenCJMLpfdY0lVMN5+Qc3A5F902YDtMhYqYBkJXLxaFu mmi2TfejOOLCdFk1EnLTNWzvOxA6UqM4Ll7cL3h73v346k3BMaRxETdMVT3hTj5S ZD8PC5BvkcGqmjU0B/hxtoY5rhK7559SOCS2CHKl5E+kd/iEbaXZaL/8vOWBBjVg QJRosk0loG2U8YSOU7LPh7kKmps0qTmz3WWlCZt7YBLbe9zlGo/U/SorPgsWVAJx 2DyYiWEKqWVR2EG+4aqhI1CzMO7n/HQcisTXGnn0Vevw9B0riD/MVP6hNQg= -----END CERTIFICATE-----Generated at Mon Oct 20 03:02:54 2025 by rpki-client