$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c9489e91-b565-4354-bb51-5d98f200538e.roa File: c9489e91-b565-4354-bb51-5d98f200538e.roa (raw, json) Hash identifier: xnCbvcaKbetnCpMMA0Ij8Bx9NMN+aURVhSqUfM7AwP0= Subject key identifier: 5B:FE:7F:3F:71:83:B0:51:95:08:52:5E:0B:CE:EF:9B:DF:97:D6:57 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 175D1B5BB260258BEE168ED10E5931A7ABA8A020 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c9489e91-b565-4354-bb51-5d98f200538e.roa Signing time: Sat 18 Oct 2025 19:12:29 +0000 ROA not before: Sat 18 Oct 2025 19:12:29 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.155.210.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:5d:1b:5b:b2:60:25:8b:ee:16:8e:d1:0e:59:31:a7:ab:a8:a0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 19:12:29 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=59daff4cdc70ca0f6676fc996b04ca470b3f01f5bd1ed63a8eb7730fc50091e4, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4a:1e:c8:10:63:2e:f2:38:f1:91:2e:0e:e1: 39:98:85:45:bc:92:fa:0a:41:70:3b:30:26:ab:3a: a0:eb:d1:5e:7f:d3:5d:ba:e9:14:f3:43:e0:cb:1e: 7b:30:46:f4:25:91:bb:49:b6:b6:a2:2f:fa:11:a9: e4:29:fa:cb:6b:70:54:95:3c:ed:93:de:59:ef:bd: 78:69:af:b6:57:3c:bd:23:4f:6e:72:1f:ff:0c:d0: b5:d3:91:50:f5:f1:e1:af:09:43:3f:ea:34:d5:e0: 4c:4e:68:1b:64:ea:96:4a:33:2e:92:a4:ee:5d:75: be:89:22:d2:51:02:7d:89:a5:24:19:2f:27:f8:33: a8:48:35:0f:dc:7f:ee:01:05:b9:f9:f9:04:20:fd: 30:f2:56:97:5d:bc:61:07:9e:c9:27:39:cd:41:80: d0:16:32:c5:c6:c9:31:4f:5a:71:48:37:06:f3:23: 88:83:65:2e:d9:18:fd:9b:81:73:27:db:e9:af:16: fe:44:03:b4:49:fa:d7:b7:b5:ad:cc:25:9a:6f:33: 0e:e3:cf:07:1e:32:4b:4a:8c:bb:e2:f3:cb:e3:c5: 5b:3a:71:b5:b5:7c:75:ff:cc:70:e1:4d:b6:e5:d2: 2c:b7:19:b2:c5:0a:0c:aa:6c:51:12:69:55:3a:73: 0a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:FE:7F:3F:71:83:B0:51:95:08:52:5E:0B:CE:EF:9B:DF:97:D6:57 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c9489e91-b565-4354-bb51-5d98f200538e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.155.210.0/23 Signature Algorithm: sha256WithRSAEncryption 95:78:66:e7:6b:93:51:41:b2:f1:72:cc:f5:67:6f:a6:df:8b: a2:42:46:15:06:8d:bd:49:76:eb:b7:9d:15:aa:4c:2f:02:7e: 86:57:1b:e9:e1:4e:66:c8:68:83:f4:01:ba:1e:98:52:60:94: 7c:8e:5b:27:7b:c2:10:ad:24:2d:48:e0:10:92:17:41:f6:b1: 22:02:1a:9a:d6:eb:fd:8e:f3:57:9f:bf:07:06:2d:d6:62:65: 36:44:65:c5:ee:82:7f:c0:7e:36:ba:83:e1:1d:4f:16:e4:87: 85:a3:b0:a8:86:39:c5:d4:3f:36:63:ae:0a:54:7a:d8:03:6a: e2:ba:97:83:f2:d2:62:74:f8:a0:61:18:4c:f8:f6:73:c9:bb: 17:dd:ed:c1:24:bc:2a:b6:da:32:d5:c6:e8:fa:3a:e2:c9:c6: 7d:96:92:6f:63:14:81:9b:4b:5f:02:75:d2:26:6c:a4:69:13: 16:7a:d6:d9:22:f1:11:0c:6b:96:79:4c:47:2e:4b:6a:4e:39: 48:c0:cf:fe:6f:74:fd:08:80:8f:26:9a:58:b4:b1:c6:2b:ea: a0:2e:30:f6:25:ce:f1:44:46:1e:04:61:71:d1:e8:51:23:f7: cc:03:79:6b:17:be:5e:05:88:55:c5:82:b1:9f:4e:a3:79:ce: 03:b8:84:09 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUF10bW7JgJYvuFo7RDlkxp6uooCAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTkxMjI5WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A1OWRhZmY0Y2RjNzBjYTBmNjY3NmZjOTk2YjA0Y2E0NzBi M2YwMWY1YmQxZWQ2M2E4ZWI3NzMwZmM1MDA5MWU0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3Sh7IEGMu8jjxkS4O4TmYhUW8kvoKQXA7MCarOqDr0V5/ 01266RTzQ+DLHnswRvQlkbtJtraiL/oRqeQp+strcFSVPO2T3lnvvXhpr7ZXPL0j T25yH/8M0LXTkVD18eGvCUM/6jTV4ExOaBtk6pZKMy6SpO5ddb6JItJRAn2JpSQZ Lyf4M6hINQ/cf+4BBbn5+QQg/TDyVpddvGEHnsknOc1BgNAWMsXGyTFPWnFINwbz I4iDZS7ZGP2bgXMn2+mvFv5EA7RJ+te3ta3MJZpvMw7jzwceMktKjLvi88vjxVs6 cbW1fHX/zHDhTbbl0iy3GbLFCgyqbFESaVU6cwpXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUW/5/P3GDsFGVCFJeC87vm9+X1lcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2M5NDg5ZTkxLWI1NjUtNDM1NC1iYjUxLTVkOThmMjAwNTM4ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESm9IwDQYJKoZIhvcNAQELBQADggEBAJV4Zudrk1FBsvFyzPVnb6bfi6JC RhUGjb1Jduu3nRWqTC8CfoZXG+nhTmbIaIP0AboemFJglHyOWyd7whCtJC1I4BCS F0H2sSICGprW6/2O81efvwcGLdZiZTZEZcXugn/Afja6g+EdTxbkh4WjsKiGOcXU PzZjrgpUetgDauK6l4Py0mJ0+KBhGEz49nPJuxfd7cEkvCq22jLVxuj6OuLJxn2W km9jFIGbS18CddImbKRpExZ61tki8REMa5Z5TEcuS2pOOUjAz/5vdP0IgI8mmli0 scYr6qAuMPYlzvFERh4EYXHR6FEj98wDeWsXvl4FiFXFgrGfTqN5zgO4hAk= -----END CERTIFICATE-----Generated at Mon Oct 20 03:11:09 2025 by rpki-client