$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a377b8af-f9cd-4f5f-b48a-907b5c95f22e.roa File: a377b8af-f9cd-4f5f-b48a-907b5c95f22e.roa (raw, json) Hash identifier: MPwc62/dAIaYC4QZPyJjjqYXudZ6uTt5g9O4vkm65/Y= Subject key identifier: 4A:DA:05:7C:1D:C0:9E:62:0E:7E:D8:CE:DD:B5:79:AC:2D:E4:EB:FF Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 18E92B5CA2B3892A9D1670A83EEB201B71A17F45 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a377b8af-f9cd-4f5f-b48a-907b5c95f22e.roa Signing time: Sat 18 Oct 2025 07:00:12 +0000 ROA not before: Sat 18 Oct 2025 07:00:12 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.238.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:e9:2b:5c:a2:b3:89:2a:9d:16:70:a8:3e:eb:20:1b:71:a1:7f:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 07:00:12 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=4d71ef11c4f8e18271ef75a925065fc3a858ba201b59d78b9a0f58aab127bb30, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:79:3b:5a:2d:b2:7c:63:63:68:f6:8e:a2:1e: 80:ad:e5:90:4f:d6:0a:ee:99:ac:85:c8:56:4f:39: ba:ee:0e:09:6b:1a:df:58:64:42:54:4b:75:0d:29: eb:6f:c7:0b:89:83:f2:c1:85:34:3b:d3:ed:01:3d: b8:38:4e:7c:5a:89:26:52:19:c8:3d:5c:01:05:b9: 30:71:f9:bc:ee:9e:63:0f:a4:d9:66:68:7a:5f:19: 5a:e5:bf:a4:38:55:4c:4b:f9:5b:9b:dd:49:3a:7a: fb:8a:c7:db:05:a8:ef:3b:e4:1e:f5:c6:27:3d:0a: 9a:8e:64:47:ac:5f:e5:88:6e:1f:99:96:73:78:64: 4f:dc:d8:5a:1a:d0:06:91:df:97:a6:bd:4b:e8:3e: b3:66:f4:91:5a:59:11:08:22:67:ba:2a:9c:ce:cc: da:71:22:9e:2c:67:f1:89:ef:89:5c:27:26:80:42: 96:36:60:20:41:29:bf:13:df:50:f1:ee:19:e5:e7: f2:92:20:0b:ef:6c:c8:27:7a:b1:c8:19:ce:8e:05: 6f:08:89:11:a3:83:cf:36:3e:c7:ce:12:60:48:84: 82:cd:45:0f:e8:6e:c0:27:8e:78:4f:f1:d8:13:e3: e3:e2:85:c7:0f:91:53:0a:13:e5:44:d9:bc:25:08: d1:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:DA:05:7C:1D:C0:9E:62:0E:7E:D8:CE:DD:B5:79:AC:2D:E4:EB:FF X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a377b8af-f9cd-4f5f-b48a-907b5c95f22e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.238.105.0/24 Signature Algorithm: sha256WithRSAEncryption 90:8d:51:58:a3:c9:b1:57:b2:a8:2d:bb:29:65:af:d6:ab:d2: 4d:02:8b:5b:43:19:f0:11:69:59:a5:95:6e:5c:d1:be:b2:c7: f7:e5:ff:79:07:bb:d4:65:ce:4e:62:75:98:84:d6:5e:85:ab: 5f:47:c8:13:19:ce:9e:85:a0:80:d5:0d:6d:5b:56:90:c9:7e: c6:18:22:eb:1d:8a:dd:bc:12:1b:88:6c:20:5c:a5:52:c8:bc: 14:80:14:df:80:68:dc:a6:d1:f9:47:6a:d4:c0:d9:cf:d4:11: 8d:c5:27:11:1b:95:f2:71:b5:d4:08:2b:7d:7a:e0:e5:e3:24: 8b:a7:d7:73:b4:00:45:58:c7:a4:e5:d5:9d:37:09:8c:f5:43: 6d:e9:55:38:8a:98:49:87:d7:19:c3:d4:fe:a3:a6:75:78:3f: f5:43:ac:a1:fc:28:aa:e3:1a:03:85:5a:9f:d5:70:24:b4:83: d7:86:5b:09:72:3a:c7:69:68:f8:0b:20:05:cd:9c:f9:f4:41: 66:e9:f0:49:b0:0e:82:3b:df:ea:01:a3:4a:0c:6b:57:80:e4: 80:cd:09:c1:7b:29:18:d2:d3:02:02:2d:b7:13:fd:c0:16:3c: 31:87:79:31:db:99:f9:b6:65:3c:0c:fe:18:91:0d:eb:d4:93: ff:28:2e:82 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGOkrXKKziSqdFnCoPusgG3Ghf0UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MDcwMDEyWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZDcxZWYxMWM0ZjhlMTgyNzFlZjc1YTkyNTA2NWZjM2E4 NThiYTIwMWI1OWQ3OGI5YTBmNThhYWIxMjdiYjMwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQeTtaLbJ8Y2No9o6iHoCt5ZBP1grumayFyFZPObruDglr Gt9YZEJUS3UNKetvxwuJg/LBhTQ70+0BPbg4TnxaiSZSGcg9XAEFuTBx+bzunmMP pNlmaHpfGVrlv6Q4VUxL+Vub3Uk6evuKx9sFqO875B71xic9CpqOZEesX+WIbh+Z lnN4ZE/c2Foa0AaR35emvUvoPrNm9JFaWREIIme6KpzOzNpxIp4sZ/GJ74lcJyaA QpY2YCBBKb8T31Dx7hnl5/KSIAvvbMgnerHIGc6OBW8IiRGjg882PsfOEmBIhILN RQ/obsAnjnhP8dgT4+PihccPkVMKE+VE2bwlCNERAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUStoFfB3AnmIOftjO3bV5rC3k6/8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2EzNzdiOGFmLWY5Y2QtNGY1Zi1iNDhhLTkwN2I1Yzk1ZjIyZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAS7mkwDQYJKoZIhvcNAQELBQADggEBAJCNUVijybFXsqgtuyllr9ar0k0C i1tDGfARaVmllW5c0b6yx/fl/3kHu9Rlzk5idZiE1l6Fq19HyBMZzp6FoIDVDW1b VpDJfsYYIusdit28EhuIbCBcpVLIvBSAFN+AaNym0flHatTA2c/UEY3FJxEblfJx tdQIK3164OXjJIun13O0AEVYx6Tl1Z03CYz1Q23pVTiKmEmH1xnD1P6jpnV4P/VD rKH8KKrjGgOFWp/VcCS0g9eGWwlyOsdpaPgLIAXNnPn0QWbp8EmwDoI73+oBo0oM a1eA5IDNCcF7KRjS0wICLbcT/cAWPDGHeTHbmfm2ZTwM/hiRDevUk/8oLoI= -----END CERTIFICATE-----Generated at Mon Oct 20 15:48:01 2025 by rpki-client