$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dc730441-3a32-4327-815d-a1ca8200005a.roa File: dc730441-3a32-4327-815d-a1ca8200005a.roa (raw, json) Hash identifier: oZFYJACoH2poBk6LUcZDpBkTzZStRxfeGD1m2RBEpEc= Subject key identifier: 0E:69:3E:8B:9D:D1:83:C8:AB:12:78:FB:36:96:65:20:27:18:50:03 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 394AA41843D91A8A2E7FED773AB5510D51DAA8A6 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dc730441-3a32-4327-815d-a1ca8200005a.roa Signing time: Sat 18 Oct 2025 23:00:11 +0000 ROA not before: Sat 18 Oct 2025 23:00:11 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.238.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:4a:a4:18:43:d9:1a:8a:2e:7f:ed:77:3a:b5:51:0d:51:da:a8:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 23:00:11 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=087fba31967e08ee535b2a827e0cd8e125e0a41c5784bd3a06c17820fb68d3ba, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3e:cd:96:50:21:02:89:5c:c0:60:29:a0:ea: f7:a4:91:3a:ed:e1:2f:6c:e2:b4:64:59:c2:04:b3: 8b:b6:f1:a4:05:fe:52:50:c8:c8:0a:73:74:ac:02: a3:58:ec:24:05:b7:ef:1d:e0:a1:0f:2f:96:3d:7f: 99:fb:c9:df:29:0b:44:34:47:bf:61:de:cd:10:9d: f3:72:24:eb:dd:e2:0d:a9:65:6b:5f:30:fd:ce:86: 14:90:2e:b0:9d:b7:84:ec:2f:fa:bb:ea:48:0b:20: e2:3b:1c:09:ea:b7:be:d7:e3:ab:6d:45:d8:d1:cd: 5a:84:51:99:93:80:6f:3c:d9:10:e9:f9:fe:99:85: 02:90:a2:eb:46:72:e0:c2:b3:7b:35:0c:39:3e:d1: 86:83:80:14:4b:73:9f:20:57:9c:f9:0c:bf:d8:47: b8:3f:aa:76:a0:13:6d:b9:89:4f:45:d7:5c:25:15: 8e:9e:70:39:17:5c:c2:28:ba:35:f7:69:8d:5b:00: 15:67:c1:95:3b:a1:c5:a8:34:9d:63:a9:cd:6f:f1: d6:b2:f3:3f:d8:6b:dc:24:c7:eb:58:d7:8e:81:34: 17:79:15:53:d5:43:7d:34:34:59:ee:0b:ef:b2:3b: 43:05:e5:49:d7:30:66:7f:5b:7b:cd:72:c7:16:2f: fb:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:69:3E:8B:9D:D1:83:C8:AB:12:78:FB:36:96:65:20:27:18:50:03 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dc730441-3a32-4327-815d-a1ca8200005a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.238.120.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:6e:2f:ea:21:9e:a8:c8:23:c3:d4:dd:c5:b0:78:55:96:82: 7e:91:1e:c7:37:b2:ae:34:a9:14:13:b6:40:19:cc:f1:3b:b6: 53:40:8d:3f:23:64:6a:f6:77:dc:09:43:38:1c:19:2d:60:5d: 34:cc:74:ac:02:75:dd:df:0b:95:34:6b:fb:5e:b7:fd:ad:b6: b4:41:d0:b4:8f:19:00:0b:15:9b:0b:2a:09:42:d4:f3:d9:7f: 13:c6:a4:e8:e4:db:23:89:a9:35:fa:f6:ad:a8:8a:82:e6:77: fb:5b:42:b7:5c:e2:1a:4d:ed:b2:ad:b8:5b:55:cb:d3:42:72: 36:a1:8f:94:5d:e4:f6:3c:6f:9e:dd:d9:e8:8d:f4:1a:4f:d1: c6:d3:2f:7a:fa:4c:6c:96:e1:7c:3a:66:a5:c0:e9:07:6b:76: bd:01:eb:37:dc:88:94:a1:be:9b:a8:a0:09:eb:63:a7:de:2e: ca:a3:f4:d1:48:92:e7:bc:99:10:e4:6d:19:f0:af:c5:10:8f: 05:5a:ec:7d:1d:2c:aa:6f:ac:53:9b:89:16:9f:a1:2d:3f:80: 6c:b6:ee:3f:e1:55:34:d6:85:db:3f:8b:27:fc:e2:b0:ef:b5: 9c:a2:d8:43:bc:38:c3:c1:d5:e1:5d:2e:3b:42:96:3c:4e:04: 83:50:f0:3a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOUqkGEPZGoouf+13OrVRDVHaqKYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MjMwMDExWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AwODdmYmEzMTk2N2UwOGVlNTM1YjJhODI3ZTBjZDhlMTI1 ZTBhNDFjNTc4NGJkM2EwNmMxNzgyMGZiNjhkM2JhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCoPs2WUCECiVzAYCmg6vekkTrt4S9s4rRkWcIEs4u28aQF /lJQyMgKc3SsAqNY7CQFt+8d4KEPL5Y9f5n7yd8pC0Q0R79h3s0QnfNyJOvd4g2p ZWtfMP3OhhSQLrCdt4TsL/q76kgLIOI7HAnqt77X46ttRdjRzVqEUZmTgG882RDp +f6ZhQKQoutGcuDCs3s1DDk+0YaDgBRLc58gV5z5DL/YR7g/qnagE225iU9F11wl FY6ecDkXXMIoujX3aY1bABVnwZU7ocWoNJ1jqc1v8day8z/Ya9wkx+tY146BNBd5 FVPVQ300NFnuC++yO0MF5UnXMGZ/W3vNcscWL/uxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUDmk+i53Rg8irEnj7NpZlICcYUAMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2RjNzMwNDQxLTNhMzItNDMyNy04MTVkLWExY2E4MjAwMDA1YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAS7ngwDQYJKoZIhvcNAQELBQADggEBAGpuL+ohnqjII8PU3cWweFWWgn6R Hsc3sq40qRQTtkAZzPE7tlNAjT8jZGr2d9wJQzgcGS1gXTTMdKwCdd3fC5U0a/te t/2ttrRB0LSPGQALFZsLKglC1PPZfxPGpOjk2yOJqTX69q2oioLmd/tbQrdc4hpN 7bKtuFtVy9NCcjahj5Rd5PY8b57d2eiN9BpP0cbTL3r6TGyW4Xw6ZqXA6Qdrdr0B 6zfciJShvpuooAnrY6feLsqj9NFIkue8mRDkbRnwr8UQjwVa7H0dLKpvrFObiRaf oS0/gGy27j/hVTTWhds/iyf84rDvtZyi2EO8OMPB1eFdLjtCljxOBINQ8Do= -----END CERTIFICATE-----Generated at Mon Oct 20 03:00:29 2025 by rpki-client