$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c8ce6326-6dfd-4b34-b3de-6831c7f9caee.roa File: c8ce6326-6dfd-4b34-b3de-6831c7f9caee.roa (raw, json) Hash identifier: atgjF28TIEEUN8Q3cLMl7UK4ACus0DRjLasZe4dVIpo= Subject key identifier: A4:1F:60:FA:77:9B:77:51:B0:D1:46:39:34:03:B2:3F:87:82:AC:E9 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 36F2D442E6369E15F1FE79F1F2F853A6BE2CC595 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c8ce6326-6dfd-4b34-b3de-6831c7f9caee.roa Signing time: Sat 18 Oct 2025 16:03:28 +0000 ROA not before: Sat 18 Oct 2025 16:03:28 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.164.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:f2:d4:42:e6:36:9e:15:f1:fe:79:f1:f2:f8:53:a6:be:2c:c5:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 16:03:28 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=aaa7bce1a859b06035b488525dacb910f960bc5d1614348577d3d3768ce062ab, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ff:a4:b2:96:e8:71:a6:f1:04:5f:c9:23:55: 2a:8a:36:0e:89:a1:53:60:7e:a5:41:18:90:3b:9a: 36:4e:dd:3b:7d:3b:aa:08:ee:3d:b6:91:06:ea:90: e0:c2:cb:d4:12:e1:d5:0a:77:40:72:0a:ee:5b:c1: 4e:d6:cd:05:ad:4e:48:e8:af:0f:f5:a0:a5:cd:22: 9d:1b:f5:bf:62:87:ba:79:5f:44:30:d3:21:1c:16: e5:4a:6d:c4:66:f2:da:b9:83:9a:1f:e1:ab:25:7f: 2c:db:37:a1:d9:2a:2e:9f:fb:54:44:bb:fa:64:f5: 87:45:9e:2b:25:5c:b1:4e:a8:a1:0e:66:d8:cb:e2: 78:fb:f5:aa:99:b6:83:70:07:e6:92:ac:e6:38:c8: d2:ac:b8:63:c9:03:9e:a2:54:b2:d5:53:b4:50:b3: 18:eb:23:97:7f:9d:c1:bf:30:87:00:97:a1:db:eb: 03:c8:4b:4c:41:bf:a0:de:e8:6f:df:81:76:bc:1a: e1:be:38:bd:0d:da:02:33:19:09:6a:c1:55:06:05: f3:52:3e:68:c6:c7:06:be:67:88:76:85:1f:67:55: 42:25:b1:75:c2:33:0c:7d:a6:7c:ff:c0:a5:a7:94: 24:18:7a:34:cd:58:89:0d:ca:a4:4d:f0:1e:59:5c: 8f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:1F:60:FA:77:9B:77:51:B0:D1:46:39:34:03:B2:3F:87:82:AC:E9 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c8ce6326-6dfd-4b34-b3de-6831c7f9caee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.164.228.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:18:7e:ec:89:61:cc:ed:11:90:1a:4e:88:04:da:1c:07:f3: f3:7a:58:e2:58:ef:73:33:f8:19:da:e7:91:8d:d2:4b:a7:f7: 77:40:6b:fa:b4:50:a1:45:d6:91:a7:23:c3:6b:78:95:2e:3d: fc:c5:ad:f9:c2:f0:fa:3e:97:58:c2:8a:2a:52:57:04:ea:a8: 2b:a5:5e:de:1a:6f:fa:4a:de:b3:dd:7c:5d:69:44:f3:ee:3b: ff:ed:c8:4a:d5:7c:4a:19:ee:73:14:1f:9b:a1:52:2f:76:73: 0e:20:73:c8:45:ac:f0:42:f5:35:53:c9:32:8f:82:9a:bb:4e: 5b:77:3c:2d:c5:f6:5b:7a:48:49:23:da:eb:8a:f3:d3:61:5d: 55:a4:53:cc:45:05:8d:e5:a1:5d:79:d5:46:7f:c3:4e:7e:f4: 46:2d:b5:eb:86:b6:31:78:b8:3a:91:ee:74:7b:de:41:6b:93: c1:e6:16:39:4f:50:09:3a:bb:eb:54:a0:3d:c7:96:6d:5a:59: 7a:00:2e:0f:61:5a:a6:01:c8:b2:e3:30:69:e3:eb:a2:7c:60: 51:8c:df:f5:3c:32:27:41:5f:d8:7b:ec:22:f4:0d:82:21:5b: ff:ae:5a:73:93:18:4f:fd:c1:00:e0:ad:87:8f:ed:10:be:1b: 67:ea:89:23 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNvLUQuY2nhXx/nnx8vhTpr4sxZUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTYwMzI4WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BhYWE3YmNlMWE4NTliMDYwMzViNDg4NTI1ZGFjYjkxMGY5 NjBiYzVkMTYxNDM0ODU3N2QzZDM3NjhjZTA2MmFiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDW/6SyluhxpvEEX8kjVSqKNg6JoVNgfqVBGJA7mjZO3Tt9 O6oI7j22kQbqkODCy9QS4dUKd0ByCu5bwU7WzQWtTkjorw/1oKXNIp0b9b9ih7p5 X0Qw0yEcFuVKbcRm8tq5g5of4aslfyzbN6HZKi6f+1REu/pk9YdFnislXLFOqKEO ZtjL4nj79aqZtoNwB+aSrOY4yNKsuGPJA56iVLLVU7RQsxjrI5d/ncG/MIcAl6Hb 6wPIS0xBv6De6G/fgXa8GuG+OL0N2gIzGQlqwVUGBfNSPmjGxwa+Z4h2hR9nVUIl sXXCMwx9pnz/wKWnlCQYejTNWIkNyqRN8B5ZXI+zAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUpB9g+nebd1Gw0UY5NAOyP4eCrOkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2M4Y2U2MzI2LTZkZmQtNGIzNC1iM2RlLTY4MzFjN2Y5Y2FlZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASpOQwDQYJKoZIhvcNAQELBQADggEBAB8YfuyJYcztEZAaTogE2hwH8/N6 WOJY73Mz+Bna55GN0kun93dAa/q0UKFF1pGnI8NreJUuPfzFrfnC8Po+l1jCiipS VwTqqCulXt4ab/pK3rPdfF1pRPPuO//tyErVfEoZ7nMUH5uhUi92cw4gc8hFrPBC 9TVTyTKPgpq7Tlt3PC3F9lt6SEkj2uuK89NhXVWkU8xFBY3loV151UZ/w05+9EYt teuGtjF4uDqR7nR73kFrk8HmFjlPUAk6u+tUoD3Hlm1aWXoALg9hWqYByLLjMGnj 66J8YFGM3/U8MidBX9h77CL0DYIhW/+uWnOTGE/9wQDgrYeP7RC+G2fqiSM= -----END CERTIFICATE-----Generated at Mon Oct 20 02:57:16 2025 by rpki-client