$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a1c57db0-56a6-4839-9450-fc23696827af.roa File: a1c57db0-56a6-4839-9450-fc23696827af.roa (raw, json) Hash identifier: vYKOvlRF41GMKmhgKNBin895lK0psqbSbRazdFyV/Eg= Subject key identifier: 2E:A1:49:A0:85:25:35:E5:34:80:A1:00:E5:1C:4D:99:6C:ED:CF:AC Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 29095A899577C013FE3ED0E82BCF0E14DE0FB1EE Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a1c57db0-56a6-4839-9450-fc23696827af.roa Signing time: Sat 18 Oct 2025 06:30:20 +0000 ROA not before: Sat 18 Oct 2025 06:30:20 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.155.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:09:5a:89:95:77:c0:13:fe:3e:d0:e8:2b:cf:0e:14:de:0f:b1:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 06:30:20 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=f6307d77dd55226dc6970aa7c592bbf6a2cde24e19eaae3bf57d0bd55f817fc7, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:27:e1:bc:fb:a5:81:36:1f:c0:3e:0c:f4:a0: 5f:bb:93:9b:7a:40:4a:5d:50:c5:a5:6e:c2:42:78: be:fa:2b:85:96:63:1d:d0:54:b3:05:22:52:14:c5: f9:e2:59:f4:a5:3a:ea:25:26:67:dd:6e:4b:0a:0d: 02:5b:a4:26:0b:20:59:6f:6d:77:4e:ed:5b:2a:2c: fd:83:82:29:b0:46:99:1b:86:28:4e:74:15:cf:e4: 16:59:1a:94:5b:c9:58:72:57:18:05:ed:2b:8b:05: bc:e2:1e:64:db:33:79:7e:25:cf:8c:ff:3b:30:fd: af:af:89:e3:43:f7:29:06:12:a5:bb:c5:3c:09:b1: 7e:6d:14:e7:e2:c5:0d:2a:74:94:c5:05:2d:36:19: 3f:f8:4d:bd:f8:22:3b:52:e8:e1:a3:6f:a2:17:6b: 7e:28:57:57:9b:e2:0c:b7:a0:32:41:35:73:41:40: cc:27:c0:6c:89:d6:2f:31:67:3d:1d:61:9b:87:5a: f0:83:b6:b7:54:89:04:f5:6a:b5:5d:f3:2b:00:51: df:c3:0a:b4:f8:6a:b9:11:e4:cf:a0:0a:64:af:56: ff:35:af:dc:95:de:e1:14:a9:88:36:17:7b:4a:bc: b2:4c:d8:8d:b2:d1:ea:ac:10:4c:70:69:eb:e7:11: 22:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:A1:49:A0:85:25:35:E5:34:80:A1:00:E5:1C:4D:99:6C:ED:CF:AC X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a1c57db0-56a6-4839-9450-fc23696827af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.155.89.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:d1:15:b2:38:25:70:2f:bd:1e:ba:84:2d:a2:0c:43:c0:8d: 5c:6d:ec:fa:3c:08:8b:4b:8a:0e:a9:15:62:47:b3:70:a8:ff: fe:ba:6a:c9:6e:f7:4c:a1:da:66:60:63:83:14:b3:26:b1:39: 53:ac:2b:e3:97:8a:bd:59:e5:ee:7a:46:33:83:31:32:ae:8c: 5f:d3:5c:4e:9d:a5:ed:5e:82:f8:ad:c5:8b:ad:17:b7:f5:93: 8b:03:73:49:73:b8:8c:d8:46:d0:0f:63:60:44:31:bc:01:e7: f3:2f:d1:1d:a0:9d:66:53:7b:76:68:0b:ba:e1:0e:66:b6:9b: 34:65:a3:15:31:d3:33:a4:94:ab:a8:81:6c:4e:05:1d:ef:6b: cf:fa:bd:95:d5:cd:bb:f4:8b:14:cb:56:27:f1:15:76:db:d5: ab:2a:1c:0c:bd:4b:b5:b6:52:0b:81:88:8d:72:69:2e:9e:de: b8:d7:79:9b:24:f0:f5:e1:2d:4c:0f:33:f1:c3:49:43:91:6c: e1:e4:e6:ad:bc:f2:25:2e:31:6d:5e:43:12:c1:12:9f:cf:c3: 57:03:11:22:f7:32:ac:9d:5a:b2:54:7e:9e:22:37:10:10:c8: eb:e2:58:0c:9a:0d:84:72:7c:96:62:e4:44:0f:c4:ac:47:a9: 76:89:1a:15 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKQlaiZV3wBP+PtDoK88OFN4Pse4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MDYzMDIwWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BmNjMwN2Q3N2RkNTUyMjZkYzY5NzBhYTdjNTkyYmJmNmEy Y2RlMjRlMTllYWFlM2JmNTdkMGJkNTVmODE3ZmM3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDaJ+G8+6WBNh/APgz0oF+7k5t6QEpdUMWlbsJCeL76K4WW Yx3QVLMFIlIUxfniWfSlOuolJmfdbksKDQJbpCYLIFlvbXdO7VsqLP2DgimwRpkb hihOdBXP5BZZGpRbyVhyVxgF7SuLBbziHmTbM3l+Jc+M/zsw/a+vieND9ykGEqW7 xTwJsX5tFOfixQ0qdJTFBS02GT/4Tb34IjtS6OGjb6IXa34oV1eb4gy3oDJBNXNB QMwnwGyJ1i8xZz0dYZuHWvCDtrdUiQT1arVd8ysAUd/DCrT4arkR5M+gCmSvVv81 r9yV3uEUqYg2F3tKvLJM2I2y0eqsEExwaevnESIDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQULqFJoIUlNeU0gKEA5RxNmWztz6wwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2ExYzU3ZGIwLTU2YTYtNDgzOS05NDUwLWZjMjM2OTY4MjdhZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASm1kwDQYJKoZIhvcNAQELBQADggEBAGzRFbI4JXAvvR66hC2iDEPAjVxt 7Po8CItLig6pFWJHs3Co//66aslu90yh2mZgY4MUsyaxOVOsK+OXir1Z5e56RjOD MTKujF/TXE6dpe1egvitxYutF7f1k4sDc0lzuIzYRtAPY2BEMbwB5/Mv0R2gnWZT e3ZoC7rhDma2mzRloxUx0zOklKuogWxOBR3va8/6vZXVzbv0ixTLVifxFXbb1asq HAy9S7W2UguBiI1yaS6e3rjXeZsk8PXhLUwPM/HDSUORbOHk5q288iUuMW1eQxLB Ep/Pw1cDESL3MqydWrJUfp4iNxAQyOviWAyaDYRyfJZi5EQPxKxHqXaJGhU= -----END CERTIFICATE-----Generated at Mon Oct 20 06:11:13 2025 by rpki-client