$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c29907c1-f43d-48c9-afff-468ed51aa3ec.roa File: c29907c1-f43d-48c9-afff-468ed51aa3ec.roa (raw, json) Hash identifier: bnYk5RrqqONr854o7kJJS9o2yeDqxwT9700JHGbd72I= Subject key identifier: DC:DA:6D:4F:54:97:CB:DF:18:0A:34:14:73:56:34:88:8E:EE:EB:81 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 02A75AA3EC73CA8C3C87CCFE38C43C18BF7ED2F4 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c29907c1-f43d-48c9-afff-468ed51aa3ec.roa Signing time: Sat 18 Oct 2025 11:03:42 +0000 ROA not before: Sat 18 Oct 2025 11:03:42 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.238.80.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:a7:5a:a3:ec:73:ca:8c:3c:87:cc:fe:38:c4:3c:18:bf:7e:d2:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 11:03:42 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=233fd8bebed36d217b0cd03b771f2fb658cb97341212b4adb5e6d898fd3d4b99, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:70:96:fe:5e:76:98:f6:cc:ef:29:24:18:7e: 0a:9d:15:eb:b5:60:d7:32:76:5b:ee:54:78:fc:45: 86:42:24:e8:2e:0c:9e:47:e6:3a:47:62:94:54:51: 20:06:bb:ac:ec:7b:c7:e5:a6:ab:ab:a9:15:ea:f2: 85:39:cf:f6:ca:06:9b:b6:51:69:52:2c:f0:5d:ff: cf:08:3e:4d:23:ca:68:f4:e8:3c:c5:e4:73:1f:62: 1f:16:73:ea:35:df:96:7d:ab:b4:5c:60:96:51:76: 3d:d6:a9:64:34:12:66:6e:a7:f2:6e:54:4d:ff:91: 55:f8:18:57:ea:30:c3:7f:19:fe:60:78:4e:b2:8c: 2e:8f:df:8b:7b:8f:12:ab:77:d8:75:18:98:f5:cb: 6f:10:c0:c4:86:3c:fa:d8:14:ae:b8:7f:d8:d1:a6: 7d:06:25:4a:b6:26:d6:2f:f4:62:b0:75:4a:c1:52: 3a:8b:45:3c:3d:fc:6f:e4:c8:70:87:59:98:e2:de: b4:b3:55:2e:2b:0f:d0:8c:85:40:b0:28:f7:3f:70: 19:54:58:fc:45:0d:1a:16:78:6c:50:60:30:4f:45: 06:f1:bc:83:b5:5c:75:b9:2b:1e:34:4c:0a:fd:fa: 6e:d0:64:38:7f:c5:5a:34:be:22:17:7f:65:39:b6: 30:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:DA:6D:4F:54:97:CB:DF:18:0A:34:14:73:56:34:88:8E:EE:EB:81 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c29907c1-f43d-48c9-afff-468ed51aa3ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.238.80.0/23 Signature Algorithm: sha256WithRSAEncryption 2d:ac:10:21:10:63:c9:9f:8e:f3:eb:b3:35:db:08:67:1c:e0: 85:53:3f:00:fc:95:3a:32:f0:b4:ab:07:3c:83:be:b2:0c:58: b0:c9:fd:38:82:6c:1a:06:cc:17:29:1f:b0:7d:f7:39:90:f7: a0:c2:b3:f0:e4:cb:47:99:58:11:b3:8e:60:78:b9:46:75:32: 92:02:d3:57:b0:47:9f:2e:ab:10:a0:84:c6:dc:ed:fb:cc:59: 6f:c1:d9:83:60:46:ec:28:1d:66:0f:15:0d:da:ff:40:25:7b: f1:ba:1c:c4:1f:b8:80:d0:e5:49:60:4c:40:8f:33:71:ad:94: 3c:4d:ca:19:f1:94:0d:ab:b7:28:f5:ef:15:71:97:a6:36:3b: 72:20:0e:0d:72:eb:1a:9d:9e:e8:c8:d7:c3:f0:d9:d2:e6:01: 54:af:09:01:8b:3e:11:57:e5:59:66:af:ec:0f:11:90:e4:0d: 26:08:c6:17:d0:2b:c4:c8:dc:54:60:ca:71:3e:de:fa:ca:07: fd:4e:02:b4:51:83:15:00:e7:8b:eb:48:0e:de:18:7b:e4:75: f7:10:e0:fb:96:24:44:8e:55:b9:29:bf:ec:5d:0d:61:63:55: e2:a9:e8:be:c5:c4:df:86:31:92:4d:08:ff:76:a8:51:e9:db: fb:ba:32:73 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAqdao+xzyow8h8z+OMQ8GL9+0vQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTEwMzQyWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AyMzNmZDhiZWJlZDM2ZDIxN2IwY2QwM2I3NzFmMmZiNjU4 Y2I5NzM0MTIxMmI0YWRiNWU2ZDg5OGZkM2Q0Yjk5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxcJb+XnaY9szvKSQYfgqdFeu1YNcydlvuVHj8RYZCJOgu DJ5H5jpHYpRUUSAGu6zse8flpqurqRXq8oU5z/bKBpu2UWlSLPBd/88IPk0jymj0 6DzF5HMfYh8Wc+o135Z9q7RcYJZRdj3WqWQ0EmZup/JuVE3/kVX4GFfqMMN/Gf5g eE6yjC6P34t7jxKrd9h1GJj1y28QwMSGPPrYFK64f9jRpn0GJUq2JtYv9GKwdUrB UjqLRTw9/G/kyHCHWZji3rSzVS4rD9CMhUCwKPc/cBlUWPxFDRoWeGxQYDBPRQbx vIO1XHW5Kx40TAr9+m7QZDh/xVo0viIXf2U5tjBjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU3NptT1SXy98YCjQUc1Y0iI7u64EwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2MyOTkwN2MxLWY0M2QtNDhjOS1hZmZmLTQ2OGVkNTFhYTNlYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAES7lAwDQYJKoZIhvcNAQELBQADggEBAC2sECEQY8mfjvPrszXbCGcc4IVT PwD8lToy8LSrBzyDvrIMWLDJ/TiCbBoGzBcpH7B99zmQ96DCs/Dky0eZWBGzjmB4 uUZ1MpIC01ewR58uqxCghMbc7fvMWW/B2YNgRuwoHWYPFQ3a/0Ale/G6HMQfuIDQ 5UlgTECPM3GtlDxNyhnxlA2rtyj17xVxl6Y2O3IgDg1y6xqdnujI18Pw2dLmAVSv CQGLPhFX5Vlmr+wPEZDkDSYIxhfQK8TI3FRgynE+3vrKB/1OArRRgxUA54vrSA7e GHvkdfcQ4PuWJESOVbkpv+xdDWFjVeKp6L7FxN+GMZJNCP92qFHp2/u6MnM= -----END CERTIFICATE-----Generated at Mon Oct 20 08:30:22 2025 by rpki-client