$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/919ddca7-2c85-4cd0-a64a-b1af82d73e6d.roa File: 919ddca7-2c85-4cd0-a64a-b1af82d73e6d.roa (raw, json) Hash identifier: LC9odTsE9fo8rMl6cwNE03mq6T++k3Lk/HuuOx7aYvc= Subject key identifier: BF:7B:59:AA:25:85:3B:5C:3E:3D:78:CA:A3:3B:BF:EC:E8:EF:D3:6A Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1FDF1A0D4616DB296617D3425C982FEAE65CA516 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/919ddca7-2c85-4cd0-a64a-b1af82d73e6d.roa Signing time: Sun 19 Oct 2025 03:43:48 +0000 ROA not before: Sun 19 Oct 2025 03:43:48 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.173.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:df:1a:0d:46:16:db:29:66:17:d3:42:5c:98:2f:ea:e6:5c:a5:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 03:43:48 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=0d338c1945dde0a26a66ad908745df4e7ac61ee938cf6b4fb80ead359f40c5ec, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:61:cf:ca:69:0c:a4:42:f1:0a:bd:b0:d8:33: f7:07:77:17:90:bc:39:c4:64:2c:55:5b:52:33:c6: d8:82:91:1f:c7:b9:1f:04:80:75:a2:e3:92:d7:a1: 60:2e:60:54:b0:ff:52:33:33:72:31:a8:b7:d5:5a: c6:c9:2b:6d:0a:14:b2:ef:d8:44:4a:e4:60:9e:c4: d9:b4:60:23:72:81:a7:4c:3f:3e:19:1e:aa:3c:de: 5a:69:91:68:90:0b:59:dc:d4:e5:dd:fa:70:d8:1e: f5:d6:e0:ee:9d:8c:81:7d:00:86:42:df:13:be:45: 93:29:9a:4f:ae:46:04:ce:e5:20:b3:43:64:98:fa: c0:a7:4a:a5:65:a3:f1:6b:a1:11:f6:8c:83:8b:2b: 7e:e4:e3:ea:8d:6a:f8:61:de:b2:97:6b:e0:28:28: a5:01:61:c3:6f:d7:8f:17:11:81:33:1f:5e:ac:df: 61:5a:d8:4e:30:64:ef:40:a1:5c:ca:72:17:25:4a: d3:87:24:ac:8d:c2:a6:ec:b7:0c:1d:70:ef:ab:b3: 3e:d3:c3:20:7a:7e:ed:17:2f:24:c4:48:52:80:e0: 3f:2c:75:bb:86:49:87:69:74:ec:a9:d8:ae:04:d9: 83:7b:e9:9c:28:71:45:80:7c:5b:3b:eb:4d:27:c9: 13:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:7B:59:AA:25:85:3B:5C:3E:3D:78:CA:A3:3B:BF:EC:E8:EF:D3:6A X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/919ddca7-2c85-4cd0-a64a-b1af82d73e6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.173.240.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:af:f4:58:e3:dd:4b:2f:09:92:77:b3:ec:b3:18:e5:77:f9: 4d:f0:40:7a:93:48:88:38:a3:9e:30:36:45:df:c7:9d:f5:25: 31:a0:6f:c3:a8:66:ce:d2:94:57:80:c1:60:d6:97:89:c1:b3: a5:09:b3:dd:83:ae:0a:ab:ed:42:cb:f7:36:ca:6a:f5:88:75: ff:a6:1a:dd:5d:f6:90:e4:73:2e:f2:c1:8c:54:bc:8b:38:51: f4:f7:18:94:ea:f0:3e:94:e3:0e:b2:86:b6:5f:d5:d8:28:24: 70:96:41:4d:33:7e:1b:6b:3a:d2:d3:e2:f0:cc:b6:e4:72:07: eb:64:e9:b0:9a:26:23:18:2b:53:fe:ef:8c:5b:86:a6:9c:d6: 67:b7:cd:38:e5:9e:5f:fd:db:76:fd:57:b5:64:c9:46:91:d0: 1c:05:52:cf:0e:a8:d9:c3:fe:d4:b4:cd:a5:d1:c4:c8:71:aa: 85:1e:88:84:e2:21:98:bd:e6:25:12:ac:d0:fc:ae:d2:f5:f6: 44:2c:f4:f1:83:54:a1:d3:2e:5b:8e:f0:f6:de:77:76:0e:e8: 6c:49:e5:87:38:ab:ca:8f:1d:d6:3f:bd:2b:96:9a:75:bc:f4: c6:b5:ae:49:d2:1e:20:ec:84:ed:da:d8:25:87:94:ff:f3:03: 9b:bc:28:45 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUH98aDUYW2ylmF9NCXJgv6uZcpRYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MDM0MzQ4WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AwZDMzOGMxOTQ1ZGRlMGEyNmE2NmFkOTA4NzQ1ZGY0ZTdh YzYxZWU5MzhjZjZiNGZiODBlYWQzNTlmNDBjNWVjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKYc/KaQykQvEKvbDYM/cHdxeQvDnEZCxVW1IzxtiCkR/H uR8EgHWi45LXoWAuYFSw/1IzM3IxqLfVWsbJK20KFLLv2ERK5GCexNm0YCNygadM Pz4ZHqo83lppkWiQC1nc1OXd+nDYHvXW4O6djIF9AIZC3xO+RZMpmk+uRgTO5SCz Q2SY+sCnSqVlo/FroRH2jIOLK37k4+qNavhh3rKXa+AoKKUBYcNv148XEYEzH16s 32Fa2E4wZO9AoVzKchclStOHJKyNwqbstwwdcO+rsz7TwyB6fu0XLyTESFKA4D8s dbuGSYdpdOyp2K4E2YN76ZwocUWAfFs7600nyRN9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUv3tZqiWFO1w+PXjKozu/7Ojv02owHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzkxOWRkY2E3LTJjODUtNGNkMC1hNjRhLWIxYWY4MmQ3M2U2ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASrfAwDQYJKoZIhvcNAQELBQADggEBAIuv9Fjj3UsvCZJ3s+yzGOV3+U3w QHqTSIg4o54wNkXfx531JTGgb8OoZs7SlFeAwWDWl4nBs6UJs92Drgqr7ULL9zbK avWIdf+mGt1d9pDkcy7ywYxUvIs4UfT3GJTq8D6U4w6yhrZf1dgoJHCWQU0zfhtr OtLT4vDMtuRyB+tk6bCaJiMYK1P+74xbhqac1me3zTjlnl/923b9V7VkyUaR0BwF Us8OqNnD/tS0zaXRxMhxqoUeiITiIZi95iUSrND8rtL19kQs9PGDVKHTLluO8Pbe d3YO6GxJ5Yc4q8qPHdY/vSuWmnW89Ma1rknSHiDshO3a2CWHlP/zA5u8KEU= -----END CERTIFICATE-----Generated at Mon Oct 20 15:48:09 2025 by rpki-client