$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e2d04d2b-48f7-4939-aed8-589f0a0ccd35.roa File: e2d04d2b-48f7-4939-aed8-589f0a0ccd35.roa (raw, json) Hash identifier: dCHvk1cWYXhZbZkiLLMtQsxPZrnqQEHZSDvn/7Xy+04= Subject key identifier: 2F:15:E6:D7:FB:08:E1:B1:F1:05:33:42:E1:8B:2D:43:78:49:5A:98 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 47BFED458B2EF88234D27D4156519BD1E92C3465 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e2d04d2b-48f7-4939-aed8-589f0a0ccd35.roa Signing time: Sat 18 Oct 2025 20:01:24 +0000 ROA not before: Sat 18 Oct 2025 20:01:24 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.244.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:bf:ed:45:8b:2e:f8:82:34:d2:7d:41:56:51:9b:d1:e9:2c:34:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 20:01:24 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=e69d8a4e28a90469a96cf78a4fe8fd2b6746dac4a5bb1c6ace37ca5128866430, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:4d:a4:0c:ef:5e:b2:29:c8:c1:f2:b2:5c:a2: 1a:b3:3e:6a:ee:8e:6b:f4:c1:34:39:9c:1e:30:1b: ec:29:db:79:a2:aa:66:25:fb:dd:3b:f6:d5:fd:3d: 70:ca:d3:ef:39:fa:a6:c4:72:ac:f8:fc:6f:7b:ae: 65:3c:6c:3c:21:d2:c8:66:69:da:2e:53:1d:c7:88: 19:4e:3b:83:ca:28:a2:4b:16:07:57:d8:8e:89:b5: f6:d3:1f:7b:02:b6:0d:14:70:6e:da:f3:46:36:d1: d8:81:7f:0e:26:23:54:6c:9d:77:fd:47:a7:0e:ec: cf:73:7e:1f:e9:78:4e:ae:95:e0:8d:54:a0:29:84: ce:68:81:fe:5e:64:e3:22:49:6c:4b:81:90:21:2e: 4c:d4:37:ed:27:fa:a6:7c:72:cd:1f:ea:68:cf:97: 78:4e:af:f4:70:db:87:b9:19:9a:ad:b4:42:34:42: 28:3f:71:03:19:e3:55:50:a8:ec:17:a4:2f:f1:e8: ef:c6:be:8e:f8:ec:86:54:68:16:b1:43:47:52:81: 86:0b:4e:e1:15:9f:b7:f0:9d:40:8e:31:27:09:4b: 8a:ca:96:ec:cd:ca:2f:76:cd:ba:c7:b3:cd:84:e1: c9:e9:d5:ac:62:bf:a2:50:f7:3e:c2:94:a1:d5:80: 59:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:15:E6:D7:FB:08:E1:B1:F1:05:33:42:E1:8B:2D:43:78:49:5A:98 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e2d04d2b-48f7-4939-aed8-589f0a0ccd35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.244.152.0/22 Signature Algorithm: sha256WithRSAEncryption 41:40:e3:62:62:c1:dd:13:04:68:fc:90:9f:7b:fb:de:a2:29: 03:79:0c:ac:f9:83:24:ac:40:c3:89:03:45:f5:c6:da:34:4b: 49:a2:97:03:e1:23:25:dc:e5:b3:b6:bf:23:8a:91:74:7f:7e: 91:e7:8d:45:5d:16:bd:8b:a9:4f:76:08:32:18:9e:f8:f2:2f: 7b:49:27:0e:28:69:51:f0:e4:f9:24:7c:91:98:c4:f0:94:84: 15:b0:07:64:e9:e9:ed:c3:85:bb:e3:31:02:9c:97:c8:07:8a: 6d:e0:44:7c:06:44:6d:e2:d8:b0:1d:69:5e:eb:7c:34:d6:fe: a2:8b:12:3b:4a:dc:6c:5f:57:0f:2f:df:9e:90:c5:e7:fd:b1: 66:a3:30:e5:4e:3e:68:1c:94:1b:f9:ca:49:79:32:2f:bd:9e: bc:f2:17:e8:c3:23:9d:85:ee:e9:bb:6a:e4:b6:a7:3c:c6:c1: ac:48:43:e9:54:63:34:0b:22:bd:1c:d3:93:b2:b1:f7:32:8a: df:ef:9d:47:f6:84:4c:2a:04:0a:c8:02:ca:80:e2:ed:74:b2: 91:1e:2a:ec:9e:12:da:d0:ea:40:d5:20:db:72:fa:05:5a:7c: 04:d6:ea:3a:76:7e:6f:b4:93:94:f3:4b:79:86:1d:dd:21:ad: aa:7b:9c:fa -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUR7/tRYsu+II00n1BVlGb0eksNGUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MjAwMTI0WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BlNjlkOGE0ZTI4YTkwNDY5YTk2Y2Y3OGE0ZmU4ZmQyYjY3 NDZkYWM0YTViYjFjNmFjZTM3Y2E1MTI4ODY2NDMwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDUTaQM716yKcjB8rJcohqzPmrujmv0wTQ5nB4wG+wp23mi qmYl+9079tX9PXDK0+85+qbEcqz4/G97rmU8bDwh0shmadouUx3HiBlOO4PKKKJL FgdX2I6JtfbTH3sCtg0UcG7a80Y20diBfw4mI1RsnXf9R6cO7M9zfh/peE6uleCN VKAphM5ogf5eZOMiSWxLgZAhLkzUN+0n+qZ8cs0f6mjPl3hOr/Rw24e5GZqttEI0 Qig/cQMZ41VQqOwXpC/x6O/Gvo747IZUaBaxQ0dSgYYLTuEVn7fwnUCOMScJS4rK luzNyi92zbrHs82E4cnp1axiv6JQ9z7ClKHVgFlvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQULxXm1/sI4bHxBTNC4YstQ3hJWpgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2UyZDA0ZDJiLTQ4ZjctNDkzOS1hZWQ4LTU4OWYwYTBjY2QzNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIS9JgwDQYJKoZIhvcNAQELBQADggEBAEFA42Jiwd0TBGj8kJ97+96iKQN5 DKz5gySsQMOJA0X1xto0S0milwPhIyXc5bO2vyOKkXR/fpHnjUVdFr2LqU92CDIY nvjyL3tJJw4oaVHw5PkkfJGYxPCUhBWwB2Tp6e3DhbvjMQKcl8gHim3gRHwGRG3i 2LAdaV7rfDTW/qKLEjtK3GxfVw8v356Qxef9sWajMOVOPmgclBv5ykl5Mi+9nrzy F+jDI52F7um7auS2pzzGwaxIQ+lUYzQLIr0c05Oysfcyit/vnUf2hEwqBArIAsqA 4u10spEeKuyeEtrQ6kDVINty+gVafATW6jp2fm+0k5TzS3mGHd0hrap7nPo= -----END CERTIFICATE-----Generated at Tue Oct 21 04:21:10 2025 by rpki-client