$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dfc82aac-3b1c-4fb6-82d6-928ad8233af7.roa File: dfc82aac-3b1c-4fb6-82d6-928ad8233af7.roa (raw, json) Hash identifier: no1NjbEhlXxN7caMRyKxu+qfhM1/90feOP1Q0JNGlYA= Subject key identifier: 15:A7:BF:07:8D:C7:D2:16:09:6D:7B:A1:8E:20:5A:EE:41:A8:DF:9F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 72A88350C5DE6FED85A8F46B7E92B2E0BB0EF285 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dfc82aac-3b1c-4fb6-82d6-928ad8233af7.roa Signing time: Sat 18 Oct 2025 12:41:28 +0000 ROA not before: Sat 18 Oct 2025 12:41:28 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.172.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:a8:83:50:c5:de:6f:ed:85:a8:f4:6b:7e:92:b2:e0:bb:0e:f2:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 12:41:28 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=d7b495993ffbe90641d5f27d3a4395a23d00fb31e2203fea93e85ede8058c3a4, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:04:1a:26:b2:f3:26:7d:17:41:fb:7e:63:2a: 73:fe:d0:71:8a:01:2c:fd:e1:65:82:63:3b:30:94: df:da:b5:f9:36:d8:fa:b0:bf:22:0e:49:41:9c:da: 01:b5:13:a6:88:af:05:cf:bd:79:f8:9c:18:36:49: c4:65:9f:24:53:0c:3a:e8:6a:00:2b:c5:e8:a5:87: c8:39:36:00:b9:8c:32:b0:5c:38:dd:1f:b2:4f:18: 91:17:9c:76:9c:33:e0:2c:83:52:b7:9d:44:4e:a2: d4:88:fc:5f:c2:75:1a:9c:44:38:69:97:b1:c0:c8: 58:68:72:0c:dc:93:cc:ef:35:be:df:d4:5b:29:b7: dd:10:6d:62:43:8b:3e:6e:77:68:b1:9f:f6:45:ab: 6d:72:5c:63:2a:00:30:ed:9c:b6:1b:c8:2f:b5:5e: 73:cc:e4:11:d0:0d:c7:b0:c4:76:05:c8:13:bd:55: f7:c9:2f:70:2b:16:4c:eb:ec:88:22:3d:5e:ee:1a: 7b:f2:1d:44:39:43:72:99:12:4b:72:b1:25:95:ac: ee:a2:4c:0f:5f:e2:50:33:7a:97:c7:43:17:e4:aa: 88:d5:59:ab:d4:dd:4c:31:5b:25:c5:8e:2f:53:85: cf:11:e4:d1:92:5c:6c:59:71:80:af:5c:5c:aa:23: 01:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:A7:BF:07:8D:C7:D2:16:09:6D:7B:A1:8E:20:5A:EE:41:A8:DF:9F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dfc82aac-3b1c-4fb6-82d6-928ad8233af7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.172.4.0/24 Signature Algorithm: sha256WithRSAEncryption 28:0a:c2:73:0a:ca:d3:d5:c0:fb:03:de:5d:7f:ec:b0:22:5f: 7c:70:e7:ba:0d:af:db:94:55:4c:44:bf:f5:db:ba:d4:a5:91: 79:c4:52:4f:69:97:28:a3:35:f6:1f:18:19:f0:84:ed:95:65: 15:69:b6:7c:64:d2:3d:c5:56:07:e2:4e:67:b5:5d:f3:6e:3b: f5:4e:5d:d5:89:89:c5:95:13:89:67:e2:98:84:54:ae:e5:25: 67:28:1a:fc:9b:9d:04:71:de:d7:48:29:26:eb:e8:f3:80:8c: ba:a6:a4:37:ad:1a:bb:cf:84:ce:b1:0a:49:82:37:cb:d6:56: 83:1e:82:a8:21:28:3f:f6:d2:7d:a5:78:08:bc:d7:5d:52:c7: a7:12:a9:fa:25:af:40:6e:fc:bb:d4:c7:2b:8a:43:b1:d5:ed: 46:6a:da:6b:05:ee:2e:e7:4b:d6:25:9a:99:00:a6:28:80:59: 17:fd:bb:50:5d:95:1e:ae:2b:e0:18:83:02:44:9a:42:cf:67: f3:56:f7:cb:6a:7f:3f:f5:ca:87:3f:9f:25:1d:6b:95:97:23: af:2e:85:2d:bf:49:79:9a:23:25:96:e2:91:ba:2d:10:38:07: 93:16:35:83:ef:35:10:21:50:8f:5d:bc:41:1b:2c:b3:f9:1f: eb:27:4e:33 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcqiDUMXeb+2FqPRrfpKy4LsO8oUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTI0MTI4WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BkN2I0OTU5OTNmZmJlOTA2NDFkNWYyN2QzYTQzOTVhMjNk MDBmYjMxZTIyMDNmZWE5M2U4NWVkZTgwNThjM2E0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDfBBomsvMmfRdB+35jKnP+0HGKASz94WWCYzswlN/atfk2 2PqwvyIOSUGc2gG1E6aIrwXPvXn4nBg2ScRlnyRTDDroagArxeilh8g5NgC5jDKw XDjdH7JPGJEXnHacM+Asg1K3nUROotSI/F/CdRqcRDhpl7HAyFhocgzck8zvNb7f 1Fspt90QbWJDiz5ud2ixn/ZFq21yXGMqADDtnLYbyC+1XnPM5BHQDcewxHYFyBO9 VffJL3ArFkzr7IgiPV7uGnvyHUQ5Q3KZEktysSWVrO6iTA9f4lAzepfHQxfkqojV WavU3UwxWyXFji9Thc8R5NGSXGxZcYCvXFyqIwHzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUFae/B43H0hYJbXuhjiBa7kGo358wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2RmYzgyYWFjLTNiMWMtNGZiNi04MmQ2LTkyOGFkODIzM2FmNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASrAQwDQYJKoZIhvcNAQELBQADggEBACgKwnMKytPVwPsD3l1/7LAiX3xw 57oNr9uUVUxEv/XbutSlkXnEUk9plyijNfYfGBnwhO2VZRVptnxk0j3FVgfiTme1 XfNuO/VOXdWJicWVE4ln4piEVK7lJWcoGvybnQRx3tdIKSbr6POAjLqmpDetGrvP hM6xCkmCN8vWVoMegqghKD/20n2leAi8111Sx6cSqfolr0Bu/LvUxyuKQ7HV7UZq 2msF7i7nS9YlmpkApiiAWRf9u1BdlR6uK+AYgwJEmkLPZ/NW98tqfz/1yoc/nyUd a5WXI68uhS2/SXmaIyWW4pG6LRA4B5MWNYPvNRAhUI9dvEEbLLP5H+snTjM= -----END CERTIFICATE-----Generated at Mon Oct 20 02:55:33 2025 by rpki-client