$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/84f74f1e-60f6-4b9d-8c1c-c495c6582a72.roa File: 84f74f1e-60f6-4b9d-8c1c-c495c6582a72.roa (raw, json) Hash identifier: /sNPWjiCBYxUN0KS9vTjqWrsV2gF0YRUER7+c7XZdIw= Subject key identifier: 5D:FB:7F:43:00:73:DC:54:A6:D6:44:8E:34:42:C1:82:6E:17:85:FC Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 30B92A46C9AF7EE67BEEFC024CF4570A4337AABE Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/84f74f1e-60f6-4b9d-8c1c-c495c6582a72.roa Signing time: Sat 18 Oct 2025 08:03:34 +0000 ROA not before: Sat 18 Oct 2025 08:03:34 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.245.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:b9:2a:46:c9:af:7e:e6:7b:ee:fc:02:4c:f4:57:0a:43:37:aa:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 08:03:34 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=3983564c8eae296b3b6626a94d639490a5d91ef4df0ffd3a04490951908acd57, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b8:cf:61:05:ab:e1:e9:bc:7e:a9:74:7e:3e: 0c:48:43:c9:8e:f1:b9:20:bb:d8:de:54:4d:c2:a8: ad:b7:a5:03:5b:4e:41:6e:7c:ff:20:0b:96:74:7d: 58:ba:34:86:48:7b:57:f0:54:05:04:20:34:25:f4: 48:3e:fa:7f:07:08:ae:ec:90:49:98:22:e8:2e:87: 80:43:08:9f:7c:ff:4f:9e:7b:15:35:cc:79:09:e0: cf:9c:9a:33:fb:fa:a5:a8:f3:c2:ed:78:82:04:a6: 2c:9a:a4:2f:49:ac:ee:85:e6:0a:dc:10:1a:ce:87: fd:0d:9e:50:b4:ee:dd:0a:83:c0:32:45:50:0b:05: f2:fc:ea:c8:db:fd:93:18:27:25:bc:ac:3c:df:53: c0:cd:05:22:2c:25:a5:e8:ef:b3:74:6a:b2:8a:b3: 8e:96:39:58:52:39:d1:f0:51:67:b1:36:ef:d4:59: 6e:3d:d1:e2:02:a2:e8:33:71:f9:13:0b:f6:fe:c8: 53:cb:c7:74:e3:e7:f7:4f:c5:21:d2:1c:bb:eb:ba: 2b:56:49:54:d4:36:ed:7f:68:97:ad:c3:94:db:97: 92:75:ed:0b:88:53:56:e4:17:53:3e:f1:1b:6a:18: 20:c5:b8:c6:35:48:1e:f8:83:41:09:7b:8f:9a:7f: 13:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:FB:7F:43:00:73:DC:54:A6:D6:44:8E:34:42:C1:82:6E:17:85:FC X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/84f74f1e-60f6-4b9d-8c1c-c495c6582a72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.245.150.0/24 Signature Algorithm: sha256WithRSAEncryption 11:f9:63:4a:14:51:bb:ae:4f:75:91:c1:ae:de:65:b7:43:92: 35:f2:21:fa:01:fa:54:0c:ed:f4:d7:a2:97:8b:b1:c9:f3:8d: ee:8b:87:51:be:e4:76:87:ca:6f:4f:d9:f1:21:f4:44:0d:c0: cf:3c:64:77:4d:e8:89:69:56:70:82:76:8e:3b:37:46:b0:93: 87:37:cb:ea:f1:c1:bb:89:bb:d3:01:db:06:5d:ca:d1:0c:5c: 38:78:36:95:b7:32:22:72:21:73:49:c2:4f:ab:07:5d:9b:9a: 19:44:72:34:e3:7b:1e:d9:97:72:3a:e0:2b:d2:6a:e8:46:5a: 7f:cf:d3:cc:d1:23:45:e0:70:39:b0:52:65:1c:a9:3a:4e:69: b3:a2:d2:57:42:98:62:d6:d0:b3:63:bd:0e:5a:30:e9:a9:3c: e8:f4:a1:21:b0:fe:82:27:cc:cb:aa:cc:09:0e:78:96:16:15: 0a:01:8f:33:08:09:fc:29:1f:32:59:f1:46:48:78:d3:82:2f: 2d:d8:7a:0b:e7:4e:9e:51:63:cf:55:9b:fc:3a:97:37:90:77: 88:0c:12:9d:fc:5b:7f:ad:63:f5:89:a1:b8:69:48:7c:f8:4d: 12:c9:df:c1:a0:46:df:a6:6d:3b:3b:92:84:80:46:ea:38:92: 6d:95:7a:77 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMLkqRsmvfuZ77vwCTPRXCkM3qr4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MDgwMzM0WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AzOTgzNTY0YzhlYWUyOTZiM2I2NjI2YTk0ZDYzOTQ5MGE1 ZDkxZWY0ZGYwZmZkM2EwNDQ5MDk1MTkwOGFjZDU3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCuM9hBavh6bx+qXR+PgxIQ8mO8bkgu9jeVE3CqK23pQNb TkFufP8gC5Z0fVi6NIZIe1fwVAUEIDQl9Eg++n8HCK7skEmYIuguh4BDCJ98/0+e exU1zHkJ4M+cmjP7+qWo88LteIIEpiyapC9JrO6F5grcEBrOh/0NnlC07t0Kg8Ay RVALBfL86sjb/ZMYJyW8rDzfU8DNBSIsJaXo77N0arKKs46WOVhSOdHwUWexNu/U WW490eICougzcfkTC/b+yFPLx3Tj5/dPxSHSHLvruitWSVTUNu1/aJetw5Tbl5J1 7QuIU1bkF1M+8RtqGCDFuMY1SB74g0EJe4+afxMrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUXft/QwBz3FSm1kSONELBgm4XhfwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzg0Zjc0ZjFlLTYwZjYtNGI5ZC04YzFjLWM0OTVjNjU4MmE3Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAS9ZYwDQYJKoZIhvcNAQELBQADggEBABH5Y0oUUbuuT3WRwa7eZbdDkjXy IfoB+lQM7fTXopeLscnzje6Lh1G+5HaHym9P2fEh9EQNwM88ZHdN6IlpVnCCdo47 N0awk4c3y+rxwbuJu9MB2wZdytEMXDh4NpW3MiJyIXNJwk+rB12bmhlEcjTjex7Z l3I64CvSauhGWn/P08zRI0XgcDmwUmUcqTpOabOi0ldCmGLW0LNjvQ5aMOmpPOj0 oSGw/oInzMuqzAkOeJYWFQoBjzMICfwpHzJZ8UZIeNOCLy3YegvnTp5RY89Vm/w6 lzeQd4gMEp38W3+tY/WJobhpSHz4TRLJ38GgRt+mbTs7koSARuo4km2Venc= -----END CERTIFICATE-----Generated at Mon Oct 20 18:12:14 2025 by rpki-client