$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b9260211-7cf7-4569-893a-5dff1e7c3b02.roa File: b9260211-7cf7-4569-893a-5dff1e7c3b02.roa (raw, json) Hash identifier: yoHYLAXDOakKV/Rv3WdIpSVpt+GNQba4zOUd2UymWww= Subject key identifier: C7:7B:08:74:2B:B4:D9:27:F5:A7:A1:8D:E5:99:AF:7B:6A:AD:CE:88 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 10BA70F0CDC31A14A270A0BB5654C29E91C57F19 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b9260211-7cf7-4569-893a-5dff1e7c3b02.roa Signing time: Sat 18 Oct 2025 23:10:08 +0000 ROA not before: Sat 18 Oct 2025 23:10:08 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.161.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:ba:70:f0:cd:c3:1a:14:a2:70:a0:bb:56:54:c2:9e:91:c5:7f:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 23:10:08 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=bb4a5b0ca129f7749a7274a8523c919d43654d84598a14c1f34be4641a8a79a2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:bc:5c:b2:57:e0:50:09:0d:06:b5:de:8d:89: 3c:6d:3f:13:61:40:f1:6d:9c:fd:a6:5f:32:48:9f: 9b:97:17:11:9a:93:f4:a3:7a:79:ce:ea:8e:ae:73: 38:19:01:8c:79:58:13:0e:26:35:31:c0:10:ba:ec: 7a:b5:c9:42:6b:d5:65:ba:8e:28:c4:c6:1b:97:a1: b4:ef:64:57:5a:63:a1:dc:7a:93:d1:2e:74:8c:7c: 72:09:74:4a:ed:24:4f:36:8b:70:b9:b3:7b:f9:5a: 75:38:af:49:8d:b5:c8:ed:97:e8:f4:47:87:4b:3b: e4:a3:27:a3:6e:b0:3b:6e:81:0a:43:a5:f9:49:82: fc:04:10:76:7f:8c:71:c1:65:0e:fe:c9:2d:f2:51: 97:bd:3f:40:a7:ca:d3:fe:b2:ee:1d:30:36:4a:25: 29:9d:3a:a0:de:5f:f9:85:41:ab:00:4d:68:5f:49: 2d:5f:c3:25:35:a7:17:12:4c:0e:a6:c8:47:7a:b7: 8a:1e:c5:cd:71:99:81:98:9d:07:4f:46:6c:82:44: df:15:bc:df:2b:17:c1:73:9d:39:64:29:6c:9c:2d: 7e:59:45:04:2e:e4:4f:73:ad:1f:24:e4:34:92:d6: 64:aa:e6:ab:a8:4a:40:8f:7e:55:c8:4d:c7:59:45: 35:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:7B:08:74:2B:B4:D9:27:F5:A7:A1:8D:E5:99:AF:7B:6A:AD:CE:88 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b9260211-7cf7-4569-893a-5dff1e7c3b02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.161.138.0/24 Signature Algorithm: sha256WithRSAEncryption 03:24:4d:27:81:ba:8a:c8:47:e7:69:5a:9a:58:ed:00:61:f9: d4:19:f2:22:a9:41:c5:e5:96:12:cb:2c:62:91:4b:bb:87:06: a6:23:04:3d:7e:db:61:7e:b0:4e:37:c8:f1:e1:c9:8c:e0:67: 7c:f0:e4:a3:cd:fd:7d:28:e5:f4:5b:d9:93:e0:dd:88:ea:fa: 2d:50:67:da:f6:7b:92:cc:69:da:40:6c:ea:43:c1:b5:d2:a8: c5:70:e5:b5:d1:f6:f3:52:ad:7d:7e:cb:a1:f7:69:f8:18:22: 2f:be:0d:f6:55:b3:35:c5:3c:50:63:99:f9:e2:5f:f1:b9:3d: 69:28:e9:4f:34:de:49:7b:1f:fb:34:aa:b7:98:37:14:81:14: 8d:f0:fc:a3:8e:21:ea:02:97:f6:9d:7b:99:3c:fb:83:2b:aa: 1a:aa:7a:c4:d6:d0:20:e9:69:ac:62:e9:4a:b9:a2:28:38:17: 73:8e:f3:b3:0d:f3:9c:89:7b:e4:64:34:33:6c:e0:30:13:b4: cb:63:e9:e3:fe:aa:fe:7e:52:84:ab:9b:ed:5d:1d:3f:7d:fb: 6f:93:a8:7f:5c:cc:be:ae:61:13:b5:e4:7a:1e:24:f9:ad:8c: 74:93:1b:a3:c6:01:aa:4e:02:c5:7a:7a:73:0d:ea:19:ad:bd: 73:5f:c4:da -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUELpw8M3DGhSicKC7VlTCnpHFfxkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MjMxMDA4WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BiYjRhNWIwY2ExMjlmNzc0OWE3Mjc0YTg1MjNjOTE5ZDQz NjU0ZDg0NTk4YTE0YzFmMzRiZTQ2NDFhOGE3OWEyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyvFyyV+BQCQ0Gtd6NiTxtPxNhQPFtnP2mXzJIn5uXFxGa k/SjennO6o6uczgZAYx5WBMOJjUxwBC67Hq1yUJr1WW6jijExhuXobTvZFdaY6Hc epPRLnSMfHIJdErtJE82i3C5s3v5WnU4r0mNtcjtl+j0R4dLO+SjJ6NusDtugQpD pflJgvwEEHZ/jHHBZQ7+yS3yUZe9P0CnytP+su4dMDZKJSmdOqDeX/mFQasATWhf SS1fwyU1pxcSTA6myEd6t4oexc1xmYGYnQdPRmyCRN8VvN8rF8FznTlkKWycLX5Z RQQu5E9zrR8k5DSS1mSq5quoSkCPflXITcdZRTU9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUx3sIdCu02Sf1p6GN5Zmve2qtzogwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2I5MjYwMjExLTdjZjctNDU2OS04OTNhLTVkZmYxZTdjM2IwMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASoYowDQYJKoZIhvcNAQELBQADggEBAAMkTSeBuorIR+dpWppY7QBh+dQZ 8iKpQcXllhLLLGKRS7uHBqYjBD1+22F+sE43yPHhyYzgZ3zw5KPN/X0o5fRb2ZPg 3Yjq+i1QZ9r2e5LMadpAbOpDwbXSqMVw5bXR9vNSrX1+y6H3afgYIi++DfZVszXF PFBjmfniX/G5PWko6U803kl7H/s0qreYNxSBFI3w/KOOIeoCl/ade5k8+4Mrqhqq esTW0CDpaaxi6Uq5oig4F3OO87MN85yJe+RkNDNs4DATtMtj6eP+qv5+UoSrm+1d HT99+2+TqH9czL6uYRO15HoeJPmtjHSTG6PGAapOAsV6enMN6hmtvXNfxNo= -----END CERTIFICATE-----Generated at Mon Oct 20 10:59:08 2025 by rpki-client