$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a24ff1fb-eb3a-41bf-86b6-af88e72e5ae6.roa File: a24ff1fb-eb3a-41bf-86b6-af88e72e5ae6.roa (raw, json) Hash identifier: mBIK6cKwpKIEi+wLyZp+xWjXCnZoH/Qq9e94KBTLhaQ= Subject key identifier: 70:8D:E9:B9:39:D0:2D:7D:B7:32:55:97:67:DB:0A:C9:21:BD:D7:48 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2C2F33CC69EF3434B8AA172096C3952B13A5E8C8 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a24ff1fb-eb3a-41bf-86b6-af88e72e5ae6.roa Signing time: Sat 18 Oct 2025 17:28:00 +0000 ROA not before: Sat 18 Oct 2025 17:28:00 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.155.118.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:2f:33:cc:69:ef:34:34:b8:aa:17:20:96:c3:95:2b:13:a5:e8:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 17:28:00 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=978133f23efca36ac19dd43f8bd575ef9912730f7f81e7c9c1d5e504c1b0336f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:00:c5:ea:72:ad:1a:73:6c:ae:d6:6d:e6:8c: 26:b3:c7:db:c6:2f:e7:76:dd:f8:1a:ce:55:bb:dc: bb:e0:1b:4c:49:43:89:74:8a:05:b3:81:37:44:b9: 51:56:5d:f0:5c:73:91:f7:a1:5d:23:ad:38:fb:a1: 28:71:18:a8:cf:a5:46:5a:66:0d:86:5a:82:b3:9f: 65:7c:2f:26:e0:ff:d1:bd:30:8e:b2:09:82:e9:d8: c1:54:53:2c:ec:d8:f1:94:44:73:6a:b9:20:c9:a0: 66:85:ae:6c:7a:92:9b:1e:32:71:b4:6a:3c:63:3b: e7:d4:89:d3:8d:ff:e6:ea:61:7b:dc:d3:8a:f3:d7: 61:88:f2:1f:cf:be:d5:26:d2:24:73:4e:7d:f4:7c: 6f:67:22:18:75:b6:5a:dc:a4:84:9a:35:2c:b0:95: 50:5f:6d:c1:1d:c4:98:8e:ac:c2:d8:a2:6e:bf:c9: f1:c5:a8:40:f8:0e:0d:84:96:db:da:f3:2f:93:7c: d3:4c:2f:1f:ed:4d:2d:be:18:d1:be:46:be:02:6b: 90:ee:6d:9f:11:bf:68:0c:4a:81:2a:7a:4e:7e:22: ae:2a:dc:f5:25:e8:3a:22:14:27:74:63:55:c6:1d: 25:3f:86:32:dd:70:95:ed:ef:ab:e9:b5:14:39:1f: 8e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:8D:E9:B9:39:D0:2D:7D:B7:32:55:97:67:DB:0A:C9:21:BD:D7:48 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a24ff1fb-eb3a-41bf-86b6-af88e72e5ae6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.155.118.0/23 Signature Algorithm: sha256WithRSAEncryption a5:86:8c:9a:21:08:81:06:34:31:20:4e:df:90:cc:ca:54:f1: 35:1f:b2:67:69:aa:d2:42:58:38:c0:2e:34:0b:a6:2b:18:03: 87:26:e5:6d:74:8f:c6:32:1f:27:6d:f6:c4:f1:38:e8:b5:51: 82:0f:a4:62:d4:18:55:22:58:08:bf:09:96:73:0b:ed:16:1b: 1f:fd:ce:34:f3:69:c9:b5:b1:cf:51:a7:ef:87:a2:cd:59:d8: 0a:bf:e9:1b:37:03:64:5c:f7:3b:60:1d:75:1c:f2:f6:44:97: 34:70:3c:82:cd:5b:1e:98:06:12:5c:fb:b0:7e:b3:a9:38:ab: d0:8d:aa:67:c6:f5:8f:fb:19:ee:41:53:ea:02:9c:ac:ef:48: 3f:e7:49:8d:42:de:48:b1:37:be:7f:47:2a:75:94:01:b7:4b: 78:17:7b:7a:ea:87:6a:a8:e0:c1:45:2a:96:9c:8d:11:21:36: 2d:31:01:b2:64:23:21:a0:03:aa:34:b8:0e:ba:6d:cf:20:8e: 52:ef:03:ff:76:6f:0f:06:2e:a8:33:d3:e0:68:cf:c9:86:e9: 70:c5:d7:ff:7c:0b:9e:32:4c:a3:65:94:5a:c4:1a:68:89:94: f6:88:0b:8e:55:59:93:f3:41:0b:19:18:fa:d9:b3:92:c7:01: 57:a8:be:80 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULC8zzGnvNDS4qhcglsOVKxOl6MgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTcyODAwWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A5NzgxMzNmMjNlZmNhMzZhYzE5ZGQ0M2Y4YmQ1NzVlZjk5 MTI3MzBmN2Y4MWU3YzljMWQ1ZTUwNGMxYjAzMzZmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCAMXqcq0ac2yu1m3mjCazx9vGL+d23fgazlW73LvgG0xJ Q4l0igWzgTdEuVFWXfBcc5H3oV0jrTj7oShxGKjPpUZaZg2GWoKzn2V8Lybg/9G9 MI6yCYLp2MFUUyzs2PGURHNquSDJoGaFrmx6kpseMnG0ajxjO+fUidON/+bqYXvc 04rz12GI8h/PvtUm0iRzTn30fG9nIhh1tlrcpISaNSywlVBfbcEdxJiOrMLYom6/ yfHFqED4Dg2Eltva8y+TfNNMLx/tTS2+GNG+Rr4Ca5DubZ8Rv2gMSoEqek5+Iq4q 3PUl6DoiFCd0Y1XGHSU/hjLdcJXt76vptRQ5H47RAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUcI3puTnQLX23MlWXZ9sKySG910gwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2EyNGZmMWZiLWViM2EtNDFiZi04NmI2LWFmODhlNzJlNWFlNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESm3YwDQYJKoZIhvcNAQELBQADggEBAKWGjJohCIEGNDEgTt+QzMpU8TUf smdpqtJCWDjALjQLpisYA4cm5W10j8YyHydt9sTxOOi1UYIPpGLUGFUiWAi/CZZz C+0WGx/9zjTzacm1sc9Rp++Hos1Z2Aq/6Rs3A2Rc9ztgHXUc8vZElzRwPILNWx6Y BhJc+7B+s6k4q9CNqmfG9Y/7Ge5BU+oCnKzvSD/nSY1C3kixN75/Ryp1lAG3S3gX e3rqh2qo4MFFKpacjREhNi0xAbJkIyGgA6o0uA66bc8gjlLvA/92bw8GLqgz0+Bo z8mG6XDF1/98C54yTKNllFrEGmiJlPaIC45VWZPzQQsZGPrZs5LHAVeovoA= -----END CERTIFICATE-----Generated at Mon Oct 20 18:12:03 2025 by rpki-client