$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e28c2225-a649-4ebc-adb3-d3574324d394.roa File: e28c2225-a649-4ebc-adb3-d3574324d394.roa (raw, json) Hash identifier: w0iqohgg/T6/BlIEx4jvnuiC7SioASWDLkfNNAUWXAE= Subject key identifier: D4:10:31:97:D6:A9:76:84:BC:8D:AB:0B:0F:4E:E5:99:1E:4D:94:58 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 022563450F84C2DD7FA17C01EE71249E5C553096 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e28c2225-a649-4ebc-adb3-d3574324d394.roa Signing time: Sat 18 Oct 2025 20:32:36 +0000 ROA not before: Sat 18 Oct 2025 20:32:36 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.173.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:25:63:45:0f:84:c2:dd:7f:a1:7c:01:ee:71:24:9e:5c:55:30:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 20:32:36 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=6085bc7d9605092aee55787bdb4b37b8b526dcefc75542e6c1368c4a37665b1d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:3d:da:e7:bc:d4:55:84:db:8b:68:66:2f:4d: a5:e6:52:88:36:66:f8:34:5e:df:7c:85:31:90:3e: e9:1c:19:9d:ce:b4:ca:3b:07:e8:f2:77:4b:3e:35: 4c:24:0c:60:0d:78:88:82:7f:dd:e6:54:51:c2:fe: 64:36:7b:c0:4c:4b:ba:6b:99:50:e2:2d:bd:42:e0: ac:73:30:12:34:9f:8e:54:95:bf:a0:0e:f5:58:43: e5:52:47:88:e8:09:75:a9:0d:1f:f9:f0:8c:63:bc: f2:22:5c:12:cc:a4:84:de:53:8d:cf:4c:17:d3:bf: 0d:f7:3b:5b:35:55:bd:04:82:84:27:5c:58:b7:be: 94:e6:99:2c:4e:38:28:08:8e:12:4b:1a:fa:41:51: e1:64:ad:92:fd:c1:af:55:03:dc:29:16:67:96:c0: 04:94:f1:0e:be:50:7d:d6:8a:ef:fa:a0:2d:5e:15: 68:21:0e:b6:84:18:88:34:3e:98:e0:88:a2:b5:a8: 3c:b4:f1:04:e9:d8:11:37:05:df:61:51:66:2a:b1: 9f:c0:90:43:1d:94:eb:b4:66:b0:6c:bd:d0:4f:ab: 5f:7b:0d:bd:44:f7:54:98:b0:03:1f:c3:0c:7c:65: b4:fb:75:67:ea:4b:ee:dd:8e:14:14:ae:43:d6:1b: 17:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:10:31:97:D6:A9:76:84:BC:8D:AB:0B:0F:4E:E5:99:1E:4D:94:58 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e28c2225-a649-4ebc-adb3-d3574324d394.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.173.247.0/24 Signature Algorithm: sha256WithRSAEncryption 01:5f:43:aa:98:e1:83:97:3c:a9:b9:41:36:fa:47:87:dd:92: 06:56:42:f6:20:a3:15:a0:59:ce:16:69:65:ee:9e:f3:d2:77: 23:fa:0c:2f:5d:ad:e8:c2:16:09:e6:5e:ae:17:7f:e3:a1:58: 4f:b4:b2:94:c6:6e:71:b9:b1:81:ab:61:c4:2d:d0:72:cc:8b: 14:43:22:3d:3a:11:08:7f:a6:bd:eb:51:50:71:89:b9:e1:c8: ab:df:28:da:48:f1:81:d7:57:8a:f3:62:d4:23:2a:c5:7a:72: f2:f9:59:4a:3d:69:a5:c9:21:cf:55:c6:e1:ba:38:f7:1a:0d: bc:6e:30:01:b5:f4:d9:f5:a1:f0:33:bc:36:e9:7f:0f:fc:56: 0c:64:48:34:8b:ae:70:c4:37:5f:a1:eb:b0:0f:28:4e:6c:70: a7:6e:50:55:8b:3e:33:35:2f:54:af:16:ff:c2:33:4d:64:8f: 83:cd:d4:41:87:8f:a0:69:a6:6f:60:d8:52:36:f7:5b:35:b8: 25:9c:06:aa:a5:93:77:8b:99:85:f2:c3:64:ab:dd:79:74:02: 3c:ab:49:64:b4:85:98:d6:60:25:8e:d6:d4:c8:c2:9d:5b:1c: ae:de:79:d3:95:ea:58:a7:6e:de:99:68:f5:65:99:3c:49:4b: da:49:23:7c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAiVjRQ+Ewt1/oXwB7nEknlxVMJYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MjAzMjM2WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A2MDg1YmM3ZDk2MDUwOTJhZWU1NTc4N2JkYjRiMzdiOGI1 MjZkY2VmYzc1NTQyZTZjMTM2OGM0YTM3NjY1YjFkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCgPdrnvNRVhNuLaGYvTaXmUog2Zvg0Xt98hTGQPukcGZ3O tMo7B+jyd0s+NUwkDGANeIiCf93mVFHC/mQ2e8BMS7prmVDiLb1C4KxzMBI0n45U lb+gDvVYQ+VSR4joCXWpDR/58IxjvPIiXBLMpITeU43PTBfTvw33O1s1Vb0EgoQn XFi3vpTmmSxOOCgIjhJLGvpBUeFkrZL9wa9VA9wpFmeWwASU8Q6+UH3Wiu/6oC1e FWghDraEGIg0PpjgiKK1qDy08QTp2BE3Bd9hUWYqsZ/AkEMdlOu0ZrBsvdBPq197 Db1E91SYsAMfwwx8ZbT7dWfqS+7djhQUrkPWGxdPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU1BAxl9apdoS8jasLD07lmR5NlFgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2UyOGMyMjI1LWE2NDktNGViYy1hZGIzLWQzNTc0MzI0ZDM5NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASrfcwDQYJKoZIhvcNAQELBQADggEBAAFfQ6qY4YOXPKm5QTb6R4fdkgZW QvYgoxWgWc4WaWXunvPSdyP6DC9drejCFgnmXq4Xf+OhWE+0spTGbnG5sYGrYcQt 0HLMixRDIj06EQh/pr3rUVBxibnhyKvfKNpI8YHXV4rzYtQjKsV6cvL5WUo9aaXJ Ic9VxuG6OPcaDbxuMAG19Nn1ofAzvDbpfw/8VgxkSDSLrnDEN1+h67APKE5scKdu UFWLPjM1L1SvFv/CM01kj4PN1EGHj6Bppm9g2FI291s1uCWcBqqlk3eLmYXyw2Sr 3Xl0AjyrSWS0hZjWYCWO1tTIwp1bHK7eedOV6linbt6ZaPVlmTxJS9pJI3w= -----END CERTIFICATE-----Generated at Mon Oct 20 05:18:01 2025 by rpki-client