$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a335dc82-8ffa-4ec2-820a-212bf8782a39.roa File: a335dc82-8ffa-4ec2-820a-212bf8782a39.roa (raw, json) Hash identifier: PN5Pe9DzkiL77zwPRYyU+2qQ4p8iRNXKuMycZWmlqUY= Subject key identifier: 21:50:2B:48:D3:36:AC:7F:7D:71:07:70:84:33:BE:8E:55:50:AA:92 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0DCB3E50A70BE1A8A63AB1D5EF6823026ED47095 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a335dc82-8ffa-4ec2-820a-212bf8782a39.roa Signing time: Sat 18 Oct 2025 08:33:46 +0000 ROA not before: Sat 18 Oct 2025 08:33:46 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.172.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:cb:3e:50:a7:0b:e1:a8:a6:3a:b1:d5:ef:68:23:02:6e:d4:70:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 08:33:46 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=056c4aeb786ea41d7eef7e002bd4adc270f46557ecfa1392acb1c22c345d40f5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b8:4a:7c:a4:58:e7:a5:cf:5e:67:66:ea:f5: 60:ad:fe:4b:7e:df:ff:be:35:68:40:d6:91:ec:83: ab:46:83:a7:b0:3f:1f:45:d2:8c:b3:c4:0c:67:41: ba:3b:34:91:bf:b5:64:28:d7:e2:11:25:16:66:5b: 2f:bb:5a:22:44:75:12:ac:92:2c:d9:34:df:99:bb: f5:24:74:37:eb:44:62:53:c9:61:09:16:27:3c:25: de:a3:c9:a0:5e:10:43:be:d8:7c:95:30:fd:00:c2: 5e:68:77:27:66:6d:09:16:90:96:aa:b3:f4:00:95: 02:68:89:34:5b:f0:7e:38:30:5e:1d:de:98:87:ad: 07:15:40:9a:1a:57:9b:b6:7e:14:e9:6d:14:15:59: 47:ae:31:db:7f:8c:fe:b5:cd:33:b6:27:39:d2:e9: b7:51:f4:26:41:da:72:aa:9b:eb:56:11:0f:a7:84: 3c:83:d3:25:7c:11:92:65:35:ba:f4:c2:d8:9a:5f: 09:89:b8:06:4a:dd:c6:5c:c5:72:df:b7:83:0d:67: e9:4c:de:6f:ee:6b:ff:32:4d:d5:4b:e6:ce:04:da: 65:1b:67:03:d7:f7:cb:86:1d:90:f2:70:bd:4e:4c: 42:38:e0:35:a2:b0:e7:81:d2:c8:06:1c:39:9a:75: a7:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:50:2B:48:D3:36:AC:7F:7D:71:07:70:84:33:BE:8E:55:50:AA:92 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a335dc82-8ffa-4ec2-820a-212bf8782a39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.172.99.0/24 Signature Algorithm: sha256WithRSAEncryption 00:fa:d1:1e:06:93:6d:e6:f2:3c:04:93:28:1c:aa:e8:98:9a: 8c:c4:70:06:d0:2b:67:db:34:2b:77:e4:cc:d7:80:80:5e:a0: 42:78:20:af:02:06:a2:9c:05:9a:93:ac:75:a6:72:2a:fb:84: 00:98:1b:4a:8b:ba:70:72:4e:36:65:ca:61:a0:f3:0d:7e:27: 3b:42:01:8c:ad:a8:20:eb:78:46:02:c1:85:af:2a:0b:d2:9e: 39:db:4f:b7:c4:a8:76:5d:12:23:4f:aa:43:e6:69:46:3b:28: 3d:be:62:69:3f:06:ad:ca:6f:10:f8:4d:d0:f8:7d:29:fe:29: ec:be:d5:f4:86:a7:38:ff:3a:b8:e1:fd:84:57:a7:23:92:45: eb:f3:fd:83:3a:35:be:16:05:b7:ce:db:ae:74:67:43:9b:28: 88:c8:d4:9f:ba:f9:bc:e4:b9:be:39:0a:94:f2:16:a2:59:e1: cc:38:47:0d:10:9e:21:fb:7d:d4:fc:86:fc:77:d0:15:85:90: 18:09:19:77:73:ce:f1:c2:34:a7:92:aa:62:86:11:90:63:fd: c0:9c:b0:92:9f:8c:57:cc:51:95:2d:be:56:89:4d:0a:3e:c5: 29:e2:07:86:3c:a2:05:c2:24:2d:31:01:1c:c3:18:95:e3:e4: 21:8a:d8:e8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDcs+UKcL4aimOrHV72gjAm7UcJUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MDgzMzQ2WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AwNTZjNGFlYjc4NmVhNDFkN2VlZjdlMDAyYmQ0YWRjMjcw ZjQ2NTU3ZWNmYTEzOTJhY2IxYzIyYzM0NWQ0MGY1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCauEp8pFjnpc9eZ2bq9WCt/kt+3/++NWhA1pHsg6tGg6ew Px9F0oyzxAxnQbo7NJG/tWQo1+IRJRZmWy+7WiJEdRKskizZNN+Zu/UkdDfrRGJT yWEJFic8Jd6jyaBeEEO+2HyVMP0Awl5odydmbQkWkJaqs/QAlQJoiTRb8H44MF4d 3piHrQcVQJoaV5u2fhTpbRQVWUeuMdt/jP61zTO2JznS6bdR9CZB2nKqm+tWEQ+n hDyD0yV8EZJlNbr0wtiaXwmJuAZK3cZcxXLft4MNZ+lM3m/ua/8yTdVL5s4E2mUb ZwPX98uGHZDycL1OTEI44DWisOeB0sgGHDmadaedAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUIVArSNM2rH99cQdwhDO+jlVQqpIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2EzMzVkYzgyLThmZmEtNGVjMi04MjBhLTIxMmJmODc4MmEzOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASrGMwDQYJKoZIhvcNAQELBQADggEBAAD60R4Gk23m8jwEkygcquiYmozE cAbQK2fbNCt35MzXgIBeoEJ4IK8CBqKcBZqTrHWmcir7hACYG0qLunByTjZlymGg 8w1+JztCAYytqCDreEYCwYWvKgvSnjnbT7fEqHZdEiNPqkPmaUY7KD2+Ymk/Bq3K bxD4TdD4fSn+Key+1fSGpzj/Orjh/YRXpyOSRevz/YM6Nb4WBbfO2650Z0ObKIjI 1J+6+bzkub45CpTyFqJZ4cw4Rw0QniH7fdT8hvx30BWFkBgJGXdzzvHCNKeSqmKG EZBj/cCcsJKfjFfMUZUtvlaJTQo+xSniB4Y8ogXCJC0xARzDGJXj5CGK2Og= -----END CERTIFICATE-----Generated at Mon Oct 20 21:12:11 2025 by rpki-client