$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d095c9bc-ab62-4133-b5a4-e03fd87305ab.roa File: d095c9bc-ab62-4133-b5a4-e03fd87305ab.roa (raw, json) Hash identifier: CC43YlAoriAo03asqOH/+xuc0SQ8Q34aUdky+BupV04= Subject key identifier: 99:71:90:69:BD:1D:AA:61:D3:6B:0C:62:E0:FE:7B:F2:2A:E4:BD:7D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2A39F5022227B6A5A2436E1C2C7A46084A4F9B75 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d095c9bc-ab62-4133-b5a4-e03fd87305ab.roa Signing time: Sun 19 Oct 2025 03:40:14 +0000 ROA not before: Sun 19 Oct 2025 03:40:14 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.173.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:39:f5:02:22:27:b6:a5:a2:43:6e:1c:2c:7a:46:08:4a:4f:9b:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 03:40:14 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=82bdb7861afeb0368ba61cee7e7b88844c4a33995ef6557643b828056f170744, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a7:18:fb:53:21:36:0d:5a:7c:b3:47:fb:4b: 88:2d:20:60:20:ed:a2:74:3a:1c:f1:4c:c4:99:f9: dd:42:b0:d5:41:88:6b:b4:7f:e8:a7:93:85:40:ad: 58:16:49:7f:49:d7:e6:b7:aa:a5:b1:bc:7c:38:c0: e0:2e:6b:1f:3e:95:f9:ee:0d:b5:cf:a0:57:3f:a8: 00:27:b0:64:71:e6:20:7e:e0:b2:e0:df:e4:f6:5e: 88:98:32:cc:65:a2:f7:89:fc:cb:f4:12:3a:17:30: 6b:54:d4:38:52:5d:00:0a:63:af:cb:b3:4b:cb:ab: 8f:75:a7:bc:9f:1b:a7:d8:2e:32:ba:5b:51:b6:cd: 23:db:1b:67:71:a6:e0:07:78:6c:47:46:65:8c:95: 00:60:6d:0f:34:f2:6a:da:87:12:8a:73:14:5b:ff: 9a:87:19:6f:e2:15:36:56:03:47:77:08:6e:c3:7d: a2:e3:c8:ce:7e:81:1f:75:e8:37:74:aa:85:5e:a4: 71:8a:df:76:8f:0f:ac:4c:84:ff:e1:ed:8a:62:30: 0a:9d:ce:ed:1f:f8:f2:2b:d5:81:2b:02:69:23:5d: 63:41:f2:53:6c:fc:81:46:33:82:51:d0:e2:92:fe: 3e:f1:e3:42:13:e3:28:44:92:75:e6:06:26:b6:3d: 97:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:71:90:69:BD:1D:AA:61:D3:6B:0C:62:E0:FE:7B:F2:2A:E4:BD:7D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d095c9bc-ab62-4133-b5a4-e03fd87305ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.173.119.0/24 Signature Algorithm: sha256WithRSAEncryption 87:8d:ea:88:c9:8d:36:39:a0:2f:4c:8d:b2:66:84:98:b0:f1: fa:75:d7:8c:05:1b:31:04:82:d0:8a:57:1c:42:37:0e:16:8f: 3d:cc:19:a8:b6:a0:e5:99:c1:82:80:a9:8c:63:1b:a8:85:56: 7f:3b:3a:b1:84:89:2f:6f:c7:c7:4c:ab:84:2d:32:26:41:99: d6:f8:09:3c:a7:c1:55:b6:24:af:db:46:4e:48:4d:88:54:33: 52:e1:7d:e6:4c:a9:03:0c:05:c8:c6:c7:3f:a4:9d:00:da:26: 37:a0:cc:83:cb:62:6c:29:0a:08:8d:f9:41:3b:f0:fa:bc:06: 89:a3:10:ed:bc:5e:08:8b:53:0e:40:90:b2:f5:13:e3:cc:c9: e1:37:12:28:12:d0:07:67:19:d7:83:a2:82:02:af:57:f5:42: f0:e5:ab:32:15:da:9b:bb:17:f7:73:f4:c8:8c:69:a3:1c:cf: 66:7d:19:46:07:6f:08:9c:e6:e5:37:99:5a:4d:f9:43:33:ca: 65:7d:26:ce:ea:ef:eb:cd:77:9c:9e:d6:db:22:91:2b:88:e4: aa:fe:d8:51:b1:f1:da:5c:fa:f6:18:3c:ff:8f:4c:91:60:37: b1:fb:26:a7:04:63:aa:56:8b:f6:65:18:d1:88:c9:00:61:6a: b4:7e:60:da -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKjn1AiIntqWiQ24cLHpGCEpPm3UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MDM0MDE0WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A4MmJkYjc4NjFhZmViMDM2OGJhNjFjZWU3ZTdiODg4NDRj NGEzMzk5NWVmNjU1NzY0M2I4MjgwNTZmMTcwNzQ0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCpxj7UyE2DVp8s0f7S4gtIGAg7aJ0OhzxTMSZ+d1CsNVB iGu0f+ink4VArVgWSX9J1+a3qqWxvHw4wOAuax8+lfnuDbXPoFc/qAAnsGRx5iB+ 4LLg3+T2XoiYMsxloveJ/Mv0EjoXMGtU1DhSXQAKY6/Ls0vLq491p7yfG6fYLjK6 W1G2zSPbG2dxpuAHeGxHRmWMlQBgbQ808mrahxKKcxRb/5qHGW/iFTZWA0d3CG7D faLjyM5+gR916Dd0qoVepHGK33aPD6xMhP/h7YpiMAqdzu0f+PIr1YErAmkjXWNB 8lNs/IFGM4JR0OKS/j7x40IT4yhEknXmBia2PZdnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUmXGQab0dqmHTawxi4P578irkvX0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2QwOTVjOWJjLWFiNjItNDEzMy1iNWE0LWUwM2ZkODczMDVhYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASrXcwDQYJKoZIhvcNAQELBQADggEBAIeN6ojJjTY5oC9MjbJmhJiw8fp1 14wFGzEEgtCKVxxCNw4Wjz3MGai2oOWZwYKAqYxjG6iFVn87OrGEiS9vx8dMq4Qt MiZBmdb4CTynwVW2JK/bRk5ITYhUM1LhfeZMqQMMBcjGxz+knQDaJjegzIPLYmwp CgiN+UE78Pq8BomjEO28XgiLUw5AkLL1E+PMyeE3EigS0AdnGdeDooICr1f1QvDl qzIV2pu7F/dz9MiMaaMcz2Z9GUYHbwic5uU3mVpN+UMzymV9Js7q7+vNd5ye1tsi kSuI5Kr+2FGx8dpc+vYYPP+PTJFgN7H7JqcEY6pWi/ZlGNGIyQBharR+YNo= -----END CERTIFICATE-----Generated at Mon Oct 20 21:11:27 2025 by rpki-client