$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c80c98ad-4177-4bc1-9dfb-9fb1081f3bff.roa File: c80c98ad-4177-4bc1-9dfb-9fb1081f3bff.roa (raw, json) Hash identifier: FCPXfyHocQwYfOzAZX3uB5EdRShP6dzwLbchgWvgjpc= Subject key identifier: 32:A9:88:5C:CD:81:E0:60:09:A5:0A:80:D7:1B:27:71:FC:99:E2:6E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 20A4568EB840F1F2D1DBC8B64A33429C261C21B2 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c80c98ad-4177-4bc1-9dfb-9fb1081f3bff.roa Signing time: Sat 18 Oct 2025 11:33:48 +0000 ROA not before: Sat 18 Oct 2025 11:33:48 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.245.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:a4:56:8e:b8:40:f1:f2:d1:db:c8:b6:4a:33:42:9c:26:1c:21:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 11:33:48 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=1226afef58ffcd31ae176df2af0604d7ff1897b9304ab0eb38e5bf1d2ea7adc7, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:03:37:8d:8d:cc:cf:15:ab:71:67:ba:0f:da: 26:dc:0e:e8:da:35:fc:9b:19:05:3b:ea:13:f0:39: 5e:76:3b:d5:e6:32:88:45:8d:4f:c0:77:3f:fa:6f: 56:00:e0:78:ae:70:d5:ae:d2:57:6e:41:08:3b:7b: 99:61:e4:41:5d:37:67:85:7d:20:b2:e7:d7:70:26: d4:a0:bc:23:00:a0:ef:b7:e1:51:e0:03:f1:2b:4b: 9f:da:03:72:b4:3a:e2:31:f9:97:0c:0c:66:ee:f8: dc:3b:c4:be:f6:49:a2:ef:e4:45:8a:0e:e9:c7:a0: ee:c3:f0:e3:d5:68:76:e3:f4:46:8b:5f:33:b7:c7: 4d:a3:21:9c:9a:ea:43:fd:b3:45:0a:72:14:3d:96: f1:63:33:a2:8d:b6:02:e1:58:7f:02:da:a7:64:12: 80:fd:9b:03:b4:62:ed:95:62:a3:f5:4a:62:36:9a: ae:dd:78:ea:02:70:09:38:59:59:e0:68:29:c7:7c: ce:43:26:9a:6a:4d:1e:03:68:59:bd:c3:68:43:58: ab:89:7e:10:8f:ad:82:98:fd:77:e7:99:2e:a3:55: 08:f3:8a:74:4e:31:ba:6b:ab:b4:42:1e:72:f8:97: 47:8f:3e:d9:23:81:86:5e:c8:41:ba:6e:f9:d9:da: c2:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:A9:88:5C:CD:81:E0:60:09:A5:0A:80:D7:1B:27:71:FC:99:E2:6E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c80c98ad-4177-4bc1-9dfb-9fb1081f3bff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.245.99.0/24 Signature Algorithm: sha256WithRSAEncryption 43:2d:66:6a:73:c0:bc:19:61:66:05:b6:8b:dc:11:57:53:0b: 67:15:a0:fd:ee:3d:24:f2:d4:7e:fc:e1:4a:cc:c5:00:19:f2: 40:b3:79:b8:51:42:02:c5:dd:87:a6:8c:2c:48:8f:33:d1:f2: 8d:e1:e7:2b:c2:72:ce:c7:79:65:45:ec:1c:3e:bb:f0:7d:12: 73:b4:e3:cf:ef:22:0d:ea:44:6e:ba:48:1f:d4:c3:4e:39:3a: 95:24:f6:8a:0e:d6:07:d2:12:d4:ee:0a:e2:e4:fb:5b:9c:fc: 4a:3a:18:9c:f5:8a:2c:fb:97:b5:03:dd:43:d4:f4:4c:5f:5b: 2c:82:ba:3e:89:16:cd:77:14:46:41:59:db:f5:f2:9e:61:ed: a8:a3:91:52:cf:49:21:06:79:1b:65:51:bf:df:6a:48:50:4e: 52:18:d4:a0:40:c8:c6:be:b3:ee:0b:42:0e:2b:18:c3:dd:7d: ea:4d:27:e0:31:71:32:d6:ee:63:2d:30:c1:6b:ec:26:3b:ce: 07:a7:e2:84:a6:d4:43:f2:62:44:a0:7a:6d:d6:c6:f8:99:a2: e2:9c:1f:c5:54:08:92:7a:27:b7:b6:47:13:0a:52:c2:03:24: 3c:0f:f7:11:ee:67:25:ec:67:27:cc:15:da:c2:9c:6f:6a:c1: 44:bb:f8:c5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIKRWjrhA8fLR28i2SjNCnCYcIbIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTEzMzQ4WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AxMjI2YWZlZjU4ZmZjZDMxYWUxNzZkZjJhZjA2MDRkN2Zm MTg5N2I5MzA0YWIwZWIzOGU1YmYxZDJlYTdhZGM3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDSAzeNjczPFatxZ7oP2ibcDujaNfybGQU76hPwOV52O9Xm MohFjU/Adz/6b1YA4HiucNWu0lduQQg7e5lh5EFdN2eFfSCy59dwJtSgvCMAoO+3 4VHgA/ErS5/aA3K0OuIx+ZcMDGbu+Nw7xL72SaLv5EWKDunHoO7D8OPVaHbj9EaL XzO3x02jIZya6kP9s0UKchQ9lvFjM6KNtgLhWH8C2qdkEoD9mwO0Yu2VYqP1SmI2 mq7deOoCcAk4WVngaCnHfM5DJppqTR4DaFm9w2hDWKuJfhCPrYKY/XfnmS6jVQjz inROMbprq7RCHnL4l0ePPtkjgYZeyEG6bvnZ2sI3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUMqmIXM2B4GAJpQqA1xsncfyZ4m4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2M4MGM5OGFkLTQxNzctNGJjMS05ZGZiLTlmYjEwODFmM2JmZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAS9WMwDQYJKoZIhvcNAQELBQADggEBAEMtZmpzwLwZYWYFtovcEVdTC2cV oP3uPSTy1H784UrMxQAZ8kCzebhRQgLF3YemjCxIjzPR8o3h5yvCcs7HeWVF7Bw+ u/B9EnO048/vIg3qRG66SB/Uw045OpUk9ooO1gfSEtTuCuLk+1uc/Eo6GJz1iiz7 l7UD3UPU9ExfWyyCuj6JFs13FEZBWdv18p5h7aijkVLPSSEGeRtlUb/fakhQTlIY 1KBAyMa+s+4LQg4rGMPdfepNJ+AxcTLW7mMtMMFr7CY7zgen4oSm1EPyYkSgem3W xviZouKcH8VUCJJ6J7e2RxMKUsIDJDwP9xHuZyXsZyfMFdrCnG9qwUS7+MU= -----END CERTIFICATE-----Generated at Mon Oct 20 02:55:11 2025 by rpki-client