$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/845d547d-ea7d-48d8-a234-84af07763899.roa File: 845d547d-ea7d-48d8-a234-84af07763899.roa (raw, json) Hash identifier: grOFG4yYSNztYHBsbsDzUgp2cBzktXolnPa4GXprvnY= Subject key identifier: B3:7C:AD:B5:FD:47:2E:47:AD:84:77:F4:11:EC:3E:67:2A:E1:EA:57 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2AE82F40A4A0D1AE95729B9324FEE6CE989DF2DE Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/845d547d-ea7d-48d8-a234-84af07763899.roa Signing time: Sat 18 Oct 2025 21:52:33 +0000 ROA not before: Sat 18 Oct 2025 21:52:33 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.245.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:e8:2f:40:a4:a0:d1:ae:95:72:9b:93:24:fe:e6:ce:98:9d:f2:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 21:52:33 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=4de004e73dfdd3a99df857597d0d6777c3ea31444f331e81f98f85b9a07b5bfd, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:45:96:a9:0b:eb:50:d8:d6:16:bb:a7:49:ac: 17:b1:90:bd:16:3a:59:46:6b:40:b7:0e:7d:5a:dc: 75:44:ca:1f:63:24:da:a5:52:54:72:c4:f6:55:54: 35:4d:b6:87:5d:cc:49:a6:23:8e:73:69:d0:55:53: a0:1c:c8:ef:2a:d7:1d:d9:bf:55:e0:82:0d:39:19: 31:f1:c8:8e:60:b7:57:de:27:84:97:44:31:39:fd: 18:97:77:85:17:a4:68:c7:57:46:7a:13:d8:4c:8e: 83:53:66:62:73:14:57:bd:4f:4d:0a:9b:cd:92:84: d5:5b:fb:7d:e2:e5:c2:d8:1d:31:76:be:ba:f6:d7: e2:ca:96:88:cc:1b:0c:37:5f:48:de:3a:06:c0:4d: d4:72:3c:74:14:9d:df:59:0b:4f:84:a0:b2:65:63: 51:ca:bf:f0:b1:c0:08:e0:fc:bf:1f:df:07:bd:62: f2:91:43:5b:01:70:24:4d:0f:15:27:ee:c4:81:a1: d3:35:63:8c:66:fa:40:ce:41:e9:62:41:dd:5b:d6: 9c:b1:5c:11:7e:25:38:aa:0b:18:17:42:01:4c:df: 39:29:52:bd:aa:46:00:d2:84:0f:b6:ae:f2:d7:87: 41:7d:a5:95:b6:d6:79:5e:66:34:65:8c:7c:56:24: d5:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:7C:AD:B5:FD:47:2E:47:AD:84:77:F4:11:EC:3E:67:2A:E1:EA:57 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/845d547d-ea7d-48d8-a234-84af07763899.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.245.129.0/24 Signature Algorithm: sha256WithRSAEncryption 22:de:dc:65:7c:f6:35:2f:1a:61:1d:68:6f:6e:97:53:48:1e: c7:2c:c8:f8:44:6f:5a:bc:0f:39:e7:a3:d1:48:74:2d:41:51: 28:51:40:13:9c:60:f7:f4:d0:3d:5e:19:81:a8:5a:db:a4:46: e0:c9:ba:16:5b:5e:10:3e:ad:60:a1:db:60:de:48:75:56:fc: c5:d9:c2:8f:b6:81:21:f5:da:f6:ed:7b:5e:d7:79:92:4a:60: 97:ee:38:39:28:2c:e2:fa:6d:77:ab:3c:49:a2:73:82:80:fc: 3d:62:d7:b5:a7:d8:c8:0d:0b:38:96:9f:51:35:e1:b3:c8:cb: fb:6a:88:8e:27:93:b2:1a:0d:94:f0:4d:cd:33:80:93:81:2a: 0a:30:df:2a:3e:77:4d:c4:5d:6e:9f:ad:6c:a9:8e:44:34:3e: 2e:b3:d0:c7:f6:83:44:dd:8f:b8:2f:63:6d:d2:25:71:9b:6f: 2d:6e:07:78:7b:0a:b9:66:2c:3b:24:eb:d2:52:f7:37:15:fb: a6:36:ee:25:ae:fa:07:28:2c:26:c6:87:d3:bd:cd:e0:60:a0: c5:ef:cf:9e:ef:f4:35:0c:cf:5d:f6:ae:2e:97:b9:ff:d3:19: 0f:5f:47:25:e0:dc:a6:1a:1f:c7:66:97:cd:a8:8f:5b:10:e1: 97:94:a6:b4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKugvQKSg0a6VcpuTJP7mzpid8t4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MjE1MjMzWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZGUwMDRlNzNkZmRkM2E5OWRmODU3NTk3ZDBkNjc3N2Mz ZWEzMTQ0NGYzMzFlODFmOThmODViOWEwN2I1YmZkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDRZapC+tQ2NYWu6dJrBexkL0WOllGa0C3Dn1a3HVEyh9j JNqlUlRyxPZVVDVNtoddzEmmI45zadBVU6AcyO8q1x3Zv1Xggg05GTHxyI5gt1fe J4SXRDE5/RiXd4UXpGjHV0Z6E9hMjoNTZmJzFFe9T00Km82ShNVb+33i5cLYHTF2 vrr21+LKlojMGww3X0jeOgbATdRyPHQUnd9ZC0+EoLJlY1HKv/CxwAjg/L8f3we9 YvKRQ1sBcCRNDxUn7sSBodM1Y4xm+kDOQeliQd1b1pyxXBF+JTiqCxgXQgFM3zkp Ur2qRgDShA+2rvLXh0F9pZW21nleZjRljHxWJNURAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUs3yttf1HLkethHf0Eew+Zyrh6lcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzg0NWQ1NDdkLWVhN2QtNDhkOC1hMjM0LTg0YWYwNzc2Mzg5OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAS9YEwDQYJKoZIhvcNAQELBQADggEBACLe3GV89jUvGmEdaG9ul1NIHscs yPhEb1q8Dznno9FIdC1BUShRQBOcYPf00D1eGYGoWtukRuDJuhZbXhA+rWCh22De SHVW/MXZwo+2gSH12vbte17XeZJKYJfuODkoLOL6bXerPEmic4KA/D1i17Wn2MgN CziWn1E14bPIy/tqiI4nk7IaDZTwTc0zgJOBKgow3yo+d03EXW6frWypjkQ0Pi6z 0Mf2g0Tdj7gvY23SJXGbby1uB3h7CrlmLDsk69JS9zcV+6Y27iWu+gcoLCbGh9O9 zeBgoMXvz57v9DUMz132ri6Xuf/TGQ9fRyXg3KYaH8dml82oj1sQ4ZeUprQ= -----END CERTIFICATE-----Generated at Mon Oct 20 16:19:59 2025 by rpki-client