$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/caa9cac1-a6fb-4b2b-aaec-843807d29721.roa File: caa9cac1-a6fb-4b2b-aaec-843807d29721.roa (raw, json) Hash identifier: 3ZNQfeKa/7AVfpTJLpt6I0JfhGhxuclKCUnU+RBIGkU= Subject key identifier: 27:D2:74:10:94:7A:8C:CD:6C:EB:AA:5B:49:07:5C:C4:3D:1B:C4:63 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 73E1F179EFDC5A5B0D664DC7CA25F2E809559059 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/caa9cac1-a6fb-4b2b-aaec-843807d29721.roa Signing time: Sat 18 Oct 2025 22:33:51 +0000 ROA not before: Sat 18 Oct 2025 22:33:51 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.154.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:e1:f1:79:ef:dc:5a:5b:0d:66:4d:c7:ca:25:f2:e8:09:55:90:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 22:33:51 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=40a9e6bd1abea476c05d15382b8268ef96c0e4300baac251298b21fce9db7c7f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:5c:11:21:e3:ef:81:6c:2e:e4:d4:5b:41:b9: 30:d5:83:3a:74:55:aa:4c:34:ce:0e:8a:80:3e:67: 64:54:a6:bd:6d:42:15:85:f5:a7:25:db:38:88:b0: 98:91:9e:8b:ee:00:ae:63:ca:c3:32:4d:1e:20:85: 63:ae:1f:f2:28:17:1c:f1:04:0f:5d:32:80:54:8e: bc:0b:b2:ed:b6:dd:70:18:1d:6c:d2:bf:73:10:d5: 27:66:ec:cf:4e:61:fd:41:bc:b2:c5:2a:26:06:6e: 0e:cc:a8:fa:41:9b:91:6c:72:1b:21:9d:d6:71:42: d5:51:5e:4e:ba:30:0a:de:b9:0b:f9:59:96:f4:00: 00:f3:05:c3:5a:e9:dd:71:06:7a:1f:25:17:ad:fe: d1:3f:11:7f:ff:4d:fd:6b:7b:85:cd:4d:ff:76:74: f7:f5:61:01:57:81:0a:04:9d:c1:b8:12:eb:41:6c: ab:c9:66:e6:d1:6c:f2:0e:d4:bb:03:f7:61:8c:3d: 12:bd:1e:17:d2:49:4c:59:43:66:6f:a6:f8:93:3c: 32:0d:16:b5:51:63:9b:37:a2:65:d4:23:85:62:34: 3d:3c:a2:89:d1:cd:02:9d:3a:05:2c:d8:b3:c8:57: a1:20:07:7a:cd:63:a8:83:ff:e9:5a:e3:6c:82:25: 3c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:D2:74:10:94:7A:8C:CD:6C:EB:AA:5B:49:07:5C:C4:3D:1B:C4:63 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/caa9cac1-a6fb-4b2b-aaec-843807d29721.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.154.248.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:0e:59:c8:86:3c:aa:fb:f9:c4:94:cd:44:53:95:be:5d:65: fc:38:0a:34:87:cc:58:3e:3d:60:bb:13:f4:43:49:86:9f:e5: 2d:be:24:43:4d:c7:02:b9:09:a7:5e:95:33:17:aa:23:6c:83: 79:f8:43:5e:17:86:09:21:08:5d:ce:93:29:c2:18:fc:b8:b4: 74:ea:70:d4:e9:43:55:d0:fd:91:d7:1b:6f:59:91:7f:ab:4c: cd:19:9a:d9:8b:79:b5:56:29:95:d3:7b:2e:8e:be:4f:2e:f0: 59:1a:cd:28:79:91:b1:e2:56:b6:b8:14:ce:3a:c7:b9:d2:6b: bd:bb:00:37:4a:a4:c9:72:7a:ae:5c:65:10:a3:89:88:8c:61: 74:e8:30:f8:41:94:ed:70:11:17:f5:69:d1:73:23:4d:9b:90: c0:ee:94:77:09:f5:83:34:31:1e:f1:43:10:ee:33:8f:02:af: a5:70:5a:7b:f4:8a:72:a8:8c:48:1c:c6:16:0f:99:c3:83:f9: f8:fa:b1:01:de:10:22:5f:52:6d:16:20:d8:2c:df:dd:7c:94: 7e:f0:40:07:80:bd:fd:65:40:db:d6:0c:d8:8f:57:34:30:bd: 84:17:7c:e0:91:6c:85:f8:1c:b8:2a:6e:e8:f8:91:ab:35:7e: 14:55:d1:fb -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUc+Hxee/cWlsNZk3HyiXy6AlVkFkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MjIzMzUxWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A0MGE5ZTZiZDFhYmVhNDc2YzA1ZDE1MzgyYjgyNjhlZjk2 YzBlNDMwMGJhYWMyNTEyOThiMjFmY2U5ZGI3YzdmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDjXBEh4++BbC7k1FtBuTDVgzp0VapMNM4OioA+Z2RUpr1t QhWF9acl2ziIsJiRnovuAK5jysMyTR4ghWOuH/IoFxzxBA9dMoBUjrwLsu223XAY HWzSv3MQ1Sdm7M9OYf1BvLLFKiYGbg7MqPpBm5FschshndZxQtVRXk66MAreuQv5 WZb0AADzBcNa6d1xBnofJRet/tE/EX//Tf1re4XNTf92dPf1YQFXgQoEncG4EutB bKvJZubRbPIO1LsD92GMPRK9HhfSSUxZQ2ZvpviTPDINFrVRY5s3omXUI4ViND08 oonRzQKdOgUs2LPIV6EgB3rNY6iD/+la42yCJTxNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJ9J0EJR6jM1s66pbSQdcxD0bxGMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2NhYTljYWMxLWE2ZmItNGIyYi1hYWVjLTg0MzgwN2QyOTcyMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASmvgwDQYJKoZIhvcNAQELBQADggEBAI0OWciGPKr7+cSUzURTlb5dZfw4 CjSHzFg+PWC7E/RDSYaf5S2+JENNxwK5CadelTMXqiNsg3n4Q14XhgkhCF3OkynC GPy4tHTqcNTpQ1XQ/ZHXG29ZkX+rTM0ZmtmLebVWKZXTey6Ovk8u8FkazSh5kbHi Vra4FM46x7nSa727ADdKpMlyeq5cZRCjiYiMYXToMPhBlO1wERf1adFzI02bkMDu lHcJ9YM0MR7xQxDuM48Cr6VwWnv0inKojEgcxhYPmcOD+fj6sQHeECJfUm0WINgs 3918lH7wQAeAvf1lQNvWDNiPVzQwvYQXfOCRbIX4HLgqbuj4kas1fhRV0fs= -----END CERTIFICATE-----Generated at Mon Oct 20 18:12:16 2025 by rpki-client