$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a63d3ea1-3a5d-4f24-adf8-e81bee2912ba.roa File: a63d3ea1-3a5d-4f24-adf8-e81bee2912ba.roa (raw, json) Hash identifier: Wk4m8vDBU8iqlxYWWl/eGy1mOvN5aH3XLCIl4IxUiEw= Subject key identifier: 51:E4:AE:E5:91:D3:D2:2F:D2:E0:26:E5:1F:1D:C9:B1:10:5D:09:20 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 287842D20077E7B5FAADAA77AD42674D659A641E Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a63d3ea1-3a5d-4f24-adf8-e81bee2912ba.roa Signing time: Sat 18 Oct 2025 08:01:20 +0000 ROA not before: Sat 18 Oct 2025 08:01:20 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.154.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:78:42:d2:00:77:e7:b5:fa:ad:aa:77:ad:42:67:4d:65:9a:64:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 08:01:20 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=5ede60c8de36a67d138390afb5b0a7cd6f8c24971f032842eddd863b70453f5c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:02:9b:01:28:76:e5:b7:9c:61:61:dc:dd:85: 79:53:ad:01:fa:cd:a7:c7:23:1c:26:85:71:25:0d: 01:84:22:48:f2:b5:6e:00:56:77:c3:25:92:b3:28: e5:72:d2:9f:84:6c:b6:fc:75:23:69:e4:1b:b6:d8: 0c:43:24:bb:7c:df:30:0a:5d:75:61:cc:25:03:56: d8:53:80:57:1d:58:67:13:21:a9:71:0c:fa:37:b0: 00:d0:c6:43:1e:9b:0b:c9:34:c3:bd:ac:44:e9:a4: 27:c7:07:53:76:c2:e7:dd:9e:ed:b0:02:44:9c:6c: ce:08:aa:f8:53:78:2e:17:78:32:ee:df:99:a9:44: 5e:47:00:ae:76:e7:2b:3c:f0:57:57:77:34:3a:14: 2b:96:f7:51:7a:b2:f8:e0:36:9f:ba:ac:56:aa:1d: ef:a6:44:27:ac:4e:37:05:44:2d:65:7d:51:22:cb: a5:93:c4:06:18:6a:3a:56:f9:88:db:1c:8d:77:41: f8:3b:b5:61:45:85:be:8f:14:af:77:2c:b1:0a:dc: b5:0f:77:e5:f7:d1:8b:55:af:60:da:ce:46:3b:e4: be:f0:1a:5a:3f:04:23:48:e1:f4:ab:58:a3:d6:cc: fd:98:15:ff:73:6d:99:b6:9f:89:06:dd:00:e3:6d: de:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:E4:AE:E5:91:D3:D2:2F:D2:E0:26:E5:1F:1D:C9:B1:10:5D:09:20 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a63d3ea1-3a5d-4f24-adf8-e81bee2912ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.154.172.0/24 Signature Algorithm: sha256WithRSAEncryption ad:a2:20:f8:11:30:4a:97:44:b9:83:0b:3d:39:3b:6f:c6:df: b0:a0:f1:69:31:4c:fb:d8:d3:7f:18:5a:6e:c6:62:1b:88:cc: 60:25:05:d2:de:a3:09:bd:db:5e:92:a3:fb:78:b9:90:41:d5: 47:94:6f:c8:3c:88:bd:06:90:85:9c:53:c1:bd:42:de:8a:10: 84:86:d0:3a:e0:09:2a:b9:1d:0c:5c:1a:1e:9a:6e:69:95:aa: 42:db:0b:f8:51:44:b1:12:a1:03:48:1b:cf:e7:db:fe:d4:f4: 08:91:b7:ff:fc:7c:34:db:d4:16:02:4b:61:5d:ff:2a:06:62: 0e:65:21:f0:05:cc:98:08:d5:c0:92:10:7f:eb:d4:61:0f:99: db:06:12:87:6c:79:98:95:84:ec:76:8c:84:cf:96:83:d0:80: 67:0b:9d:c5:d0:72:d3:f5:fe:d9:9a:2d:8c:10:a6:db:f7:7e: dc:ba:d2:6d:77:05:03:3f:8c:60:8c:09:20:70:e2:e2:9f:2a: 05:93:bc:7c:7c:a8:86:02:80:a3:cf:7a:3b:6b:78:bd:6c:ec: af:79:37:16:9f:7a:89:d1:3b:07:26:57:4a:3d:92:dc:84:3e: 27:32:23:82:f4:ec:2a:f8:0a:0c:96:b6:e5:8a:34:32:bd:b2: dc:f0:54:2e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKHhC0gB357X6rap3rUJnTWWaZB4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MDgwMTIwWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZWRlNjBjOGRlMzZhNjdkMTM4MzkwYWZiNWIwYTdjZDZm OGMyNDk3MWYwMzI4NDJlZGRkODYzYjcwNDUzZjVjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQClApsBKHblt5xhYdzdhXlTrQH6zafHIxwmhXElDQGEIkjy tW4AVnfDJZKzKOVy0p+EbLb8dSNp5Bu22AxDJLt83zAKXXVhzCUDVthTgFcdWGcT IalxDPo3sADQxkMemwvJNMO9rETppCfHB1N2wufdnu2wAkScbM4IqvhTeC4XeDLu 35mpRF5HAK525ys88FdXdzQ6FCuW91F6svjgNp+6rFaqHe+mRCesTjcFRC1lfVEi y6WTxAYYajpW+YjbHI13Qfg7tWFFhb6PFK93LLEK3LUPd+X30YtVr2DazkY75L7w Glo/BCNI4fSrWKPWzP2YFf9zbZm2n4kG3QDjbd6NAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUUeSu5ZHT0i/S4CblHx3JsRBdCSAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2E2M2QzZWExLTNhNWQtNGYyNC1hZGY4LWU4MWJlZTI5MTJiYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASmqwwDQYJKoZIhvcNAQELBQADggEBAK2iIPgRMEqXRLmDCz05O2/G37Cg 8WkxTPvY038YWm7GYhuIzGAlBdLeowm9216So/t4uZBB1UeUb8g8iL0GkIWcU8G9 Qt6KEISG0DrgCSq5HQxcGh6abmmVqkLbC/hRRLESoQNIG8/n2/7U9AiRt//8fDTb 1BYCS2Fd/yoGYg5lIfAFzJgI1cCSEH/r1GEPmdsGEodseZiVhOx2jITPloPQgGcL ncXQctP1/tmaLYwQptv3fty60m13BQM/jGCMCSBw4uKfKgWTvHx8qIYCgKPPejtr eL1s7K95NxafeonROwcmV0o9ktyEPicyI4L07Cr4CgyWtuWKNDK9stzwVC4= -----END CERTIFICATE-----Generated at Mon Oct 20 17:29:43 2025 by rpki-client