$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/83b0a857-da31-4a4d-bd40-da58f79e338d.roa File: 83b0a857-da31-4a4d-bd40-da58f79e338d.roa (raw, json) Hash identifier: 3SHD9xjNJSasNdqPteDsDcGT/R7ZNrsh12lPvwpxtbg= Subject key identifier: 97:5D:77:27:DB:68:C6:F0:2A:F2:8E:B2:7F:67:24:88:00:CC:52:7B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 58B376ED8C8CFDC7FF57A7DFAF260BE63B8AB795 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/83b0a857-da31-4a4d-bd40-da58f79e338d.roa Signing time: Sat 18 Oct 2025 17:52:29 +0000 ROA not before: Sat 18 Oct 2025 17:52:29 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.173.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:b3:76:ed:8c:8c:fd:c7:ff:57:a7:df:af:26:0b:e6:3b:8a:b7:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 17:52:29 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=b167c3f723dc093c53b211d2db16402e3894f5c037a2b493bc888877708276c5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:31:f2:52:3c:21:a9:97:e0:a7:6b:3a:0a:f7: de:da:ad:d5:bb:02:ad:6a:d3:50:7c:ad:af:05:20: 40:dd:14:fa:02:9a:07:d9:1d:d6:ef:8c:40:9b:70: 2a:83:6d:e4:a1:97:33:f0:c5:62:cd:52:2a:99:d9: 6b:c2:60:b6:57:07:6e:f9:83:64:88:64:2d:f6:fb: a4:10:5b:00:54:a5:62:89:0b:45:68:f2:6c:c4:02: 18:64:da:bf:56:0c:47:0e:68:2a:7c:b1:99:b6:74: 70:d4:0f:31:5b:b5:cf:4b:31:68:02:fc:bc:f6:e4: 33:66:e8:e7:e5:82:b5:66:6e:66:bf:5b:7b:dd:e3: 69:90:6c:5a:aa:07:7a:bf:d5:01:45:ad:f8:aa:55: 30:5c:60:92:13:26:24:ac:4e:66:85:83:e2:9d:5a: 9f:f7:3f:f5:66:e5:69:a4:4c:df:f3:21:c2:8c:d9: 5f:1c:58:87:bb:c0:40:15:26:ed:73:a5:17:be:5a: d6:ae:03:03:65:d0:1a:e7:74:83:8f:7c:dd:63:68: 15:60:a0:c7:b0:12:03:0f:12:31:74:ae:b9:1a:4b: 20:a3:7f:c4:a7:7b:ac:b2:ef:0b:c1:33:85:5e:c6: 06:6f:51:e6:3b:77:cc:d0:72:10:b3:2b:e7:68:83: 29:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:5D:77:27:DB:68:C6:F0:2A:F2:8E:B2:7F:67:24:88:00:CC:52:7B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/83b0a857-da31-4a4d-bd40-da58f79e338d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.173.140.0/24 Signature Algorithm: sha256WithRSAEncryption 44:60:64:60:76:e3:aa:bc:73:98:22:41:04:ac:23:91:82:98: b3:8d:4c:c0:ef:fa:95:4a:96:27:6d:9d:1f:80:b1:77:b2:fe: 18:9e:ea:bd:f4:64:51:ab:c4:f4:ef:62:be:a4:14:b4:8c:00: ab:87:21:59:4f:c3:d6:3a:77:da:08:48:c0:ea:3f:5d:07:b5: dd:67:cb:f3:3f:96:db:e1:96:b7:14:5c:9f:36:85:f7:be:cb: c4:d5:0a:40:4e:8a:cf:69:d5:c0:c3:0e:f7:c6:2e:5f:aa:0f: b3:af:3c:17:5a:74:36:ed:28:8e:9c:fe:9e:c0:fe:c0:2e:58: aa:2c:8b:92:a8:77:1a:eb:b7:0d:54:62:86:a2:27:60:d6:65: a1:98:e8:15:6a:14:95:ac:c4:c8:07:b4:f6:cb:87:4b:f1:1b: 58:bf:79:4f:ef:41:8e:09:23:a8:5d:a1:bb:df:fb:99:1d:92: 56:37:bf:e9:df:98:48:61:c8:2e:27:b4:f7:f8:e5:f4:7a:e1: 99:e7:68:e5:99:25:cb:fe:00:20:a7:b4:fe:7e:48:de:96:1c: 72:5f:55:b4:3e:08:9d:95:9d:a6:3a:d2:18:a4:a2:90:55:3c: 78:cc:76:84:2a:06:0f:d4:ab:c8:56:a0:20:39:ec:75:06:2b: c7:6c:11:ff -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWLN27YyM/cf/V6ffryYL5juKt5UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTc1MjI5WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BiMTY3YzNmNzIzZGMwOTNjNTNiMjExZDJkYjE2NDAyZTM4 OTRmNWMwMzdhMmI0OTNiYzg4ODg3NzcwODI3NmM1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQMfJSPCGpl+CnazoK997ardW7Aq1q01B8ra8FIEDdFPoC mgfZHdbvjECbcCqDbeShlzPwxWLNUiqZ2WvCYLZXB275g2SIZC32+6QQWwBUpWKJ C0Vo8mzEAhhk2r9WDEcOaCp8sZm2dHDUDzFbtc9LMWgC/Lz25DNm6OflgrVmbma/ W3vd42mQbFqqB3q/1QFFrfiqVTBcYJITJiSsTmaFg+KdWp/3P/Vm5WmkTN/zIcKM 2V8cWIe7wEAVJu1zpRe+WtauAwNl0BrndIOPfN1jaBVgoMewEgMPEjF0rrkaSyCj f8Sne6yy7wvBM4VexgZvUeY7d8zQchCzK+dogykDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUl113J9toxvAq8o6yf2ckiADMUnswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzgzYjBhODU3LWRhMzEtNGE0ZC1iZDQwLWRhNThmNzllMzM4ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASrYwwDQYJKoZIhvcNAQELBQADggEBAERgZGB246q8c5giQQSsI5GCmLON TMDv+pVKlidtnR+AsXey/hie6r30ZFGrxPTvYr6kFLSMAKuHIVlPw9Y6d9oISMDq P10Htd1ny/M/ltvhlrcUXJ82hfe+y8TVCkBOis9p1cDDDvfGLl+qD7OvPBdadDbt KI6c/p7A/sAuWKosi5Kodxrrtw1UYoaiJ2DWZaGY6BVqFJWsxMgHtPbLh0vxG1i/ eU/vQY4JI6hdobvf+5kdklY3v+nfmEhhyC4ntPf45fR64ZnnaOWZJcv+ACCntP5+ SN6WHHJfVbQ+CJ2VnaY60hikopBVPHjMdoQqBg/Uq8hWoCA57HUGK8dsEf8= -----END CERTIFICATE-----Generated at Mon Oct 20 06:08:43 2025 by rpki-client