$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ab483678-a5a3-4c15-a332-c6eba7afd79f.roa File: ab483678-a5a3-4c15-a332-c6eba7afd79f.roa (raw, json) Hash identifier: 8u77d3qYNBbp7Hn6D+euBJR7l+Im5rwtzfKN5goGzic= Subject key identifier: AE:3E:1C:63:7C:4B:01:30:6E:DA:5C:39:DD:35:E5:78:2F:43:E5:96 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1DE0B52B986A1C9E7A21B1AE79A011190A91F92A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ab483678-a5a3-4c15-a332-c6eba7afd79f.roa Signing time: Sat 18 Oct 2025 09:20:13 +0000 ROA not before: Sat 18 Oct 2025 09:20:13 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.239.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:e0:b5:2b:98:6a:1c:9e:7a:21:b1:ae:79:a0:11:19:0a:91:f9:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 09:20:13 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=7f040ddaf6e64a4572d0ca4582fd26d966e2b647045a5cdd53e9dfdbdde3984c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:17:8c:9f:c1:f5:8a:f7:44:b4:bd:2b:8d:5d: 6c:39:89:f6:1b:98:23:3c:f1:8c:59:6b:05:9f:13: fe:d0:57:f7:7b:3f:ab:8e:ee:fc:03:19:d2:b7:08: 8b:25:d4:3e:09:98:36:63:73:6d:c3:30:9b:7a:f4: 46:37:66:bf:25:3d:18:a5:8b:23:b7:e8:d2:58:a7: 95:fd:0b:c3:15:55:7e:58:b3:59:9c:5f:b5:90:6f: 3e:1b:91:ba:00:29:29:9d:8b:71:4b:7c:e0:ba:95: 10:93:76:36:c6:c0:25:02:20:83:19:50:73:38:2b: 64:f0:d9:37:4b:1a:4f:11:f1:77:56:ad:cc:0d:7a: 5e:d9:21:2f:18:5a:06:5c:a7:d3:e6:f1:07:f1:17: 4d:fb:95:78:99:b6:57:95:c9:2e:93:c0:1b:26:f1: e0:4d:04:36:c1:68:19:d7:b7:03:bc:f0:84:d6:62: 8b:5b:06:f9:63:0b:94:c4:82:5d:ac:91:73:82:07: 7d:4f:ae:78:37:d6:dc:f5:36:b2:c2:3f:78:fc:25: bc:84:e9:e5:20:47:4c:d4:11:ca:0b:6f:fa:21:26: 47:d8:8f:9d:38:41:36:a2:ed:89:d6:bf:28:6c:bd: 49:64:89:22:94:48:0d:4d:6c:5b:b7:8f:44:56:ec: 36:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:3E:1C:63:7C:4B:01:30:6E:DA:5C:39:DD:35:E5:78:2F:43:E5:96 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ab483678-a5a3-4c15-a332-c6eba7afd79f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.239.100.0/22 Signature Algorithm: sha256WithRSAEncryption 23:14:c9:40:85:58:57:95:1b:10:61:15:58:9e:7f:d9:3e:57: de:ea:55:aa:1a:66:61:66:90:a3:24:54:19:59:0c:05:7f:ac: 23:cc:f7:38:be:dd:c3:de:6a:d9:21:06:4c:23:91:84:4e:77: d9:b1:56:cd:af:4c:9e:db:b0:f7:90:5e:96:38:2c:ac:4e:fa: 56:ef:dc:c0:a1:05:44:fc:c4:ef:08:0e:04:a2:19:18:d1:bc: e3:83:80:5b:5d:75:46:03:ae:fc:80:26:70:5e:da:aa:21:ae: c7:f2:ab:1d:c5:1f:c2:ad:38:bf:b2:91:c2:16:45:f2:9f:9b: 22:d7:48:31:08:65:bf:bd:40:2f:9b:39:ca:81:1d:a5:e4:a5: bd:b7:35:bc:c5:b0:4b:08:2d:59:3d:4c:57:83:3a:a8:f0:4c: fa:91:b6:98:0f:2d:d2:f7:9f:29:fa:9a:7a:68:c1:a1:91:5c: 8e:6d:d9:fd:fc:95:7e:c3:41:fa:4b:e7:ed:e9:cf:5c:e1:e1: 0f:f9:b0:d9:c6:37:0d:5b:6b:44:31:ff:49:a0:c6:28:7b:4d: 3d:6a:f2:56:51:6f:1e:bd:f2:c1:cd:dd:84:df:00:ea:2c:47: f1:4a:88:23:ca:f8:1a:60:fd:2d:f0:03:d4:42:b3:2d:97:1a: 3b:8e:22:5e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHeC1K5hqHJ56IbGueaARGQqR+SowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MDkyMDEzWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZjA0MGRkYWY2ZTY0YTQ1NzJkMGNhNDU4MmZkMjZkOTY2 ZTJiNjQ3MDQ1YTVjZGQ1M2U5ZGZkYmRkZTM5ODRjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDYF4yfwfWK90S0vSuNXWw5ifYbmCM88YxZawWfE/7QV/d7 P6uO7vwDGdK3CIsl1D4JmDZjc23DMJt69EY3Zr8lPRiliyO36NJYp5X9C8MVVX5Y s1mcX7WQbz4bkboAKSmdi3FLfOC6lRCTdjbGwCUCIIMZUHM4K2Tw2TdLGk8R8XdW rcwNel7ZIS8YWgZcp9Pm8QfxF037lXiZtleVyS6TwBsm8eBNBDbBaBnXtwO88ITW YotbBvljC5TEgl2skXOCB31Prng31tz1NrLCP3j8JbyE6eUgR0zUEcoLb/ohJkfY j504QTai7YnWvyhsvUlkiSKUSA1NbFu3j0RW7DbbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUrj4cY3xLATBu2lw53TXleC9D5ZYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2FiNDgzNjc4LWE1YTMtNGMxNS1hMzMyLWM2ZWJhN2FmZDc5Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIS72QwDQYJKoZIhvcNAQELBQADggEBACMUyUCFWFeVGxBhFVief9k+V97q VaoaZmFmkKMkVBlZDAV/rCPM9zi+3cPeatkhBkwjkYROd9mxVs2vTJ7bsPeQXpY4 LKxO+lbv3MChBUT8xO8IDgSiGRjRvOODgFtddUYDrvyAJnBe2qohrsfyqx3FH8Kt OL+ykcIWRfKfmyLXSDEIZb+9QC+bOcqBHaXkpb23NbzFsEsILVk9TFeDOqjwTPqR tpgPLdL3nyn6mnpowaGRXI5t2f38lX7DQfpL5+3pz1zh4Q/5sNnGNw1ba0Qx/0mg xih7TT1q8lZRbx698sHN3YTfAOosR/FKiCPK+Bpg/S3wA9RCsy2XGjuOIl4= -----END CERTIFICATE-----Generated at Mon Oct 20 18:12:03 2025 by rpki-client