$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e479a39c-390c-44c5-9824-4f6bb0e41df8.roa File: e479a39c-390c-44c5-9824-4f6bb0e41df8.roa (raw, json) Hash identifier: HP57R5/Mz9y7TmqMYsWBWMqEq49uqNXIYmHCEmITqdk= Subject key identifier: 35:60:12:F5:53:6F:DE:C8:FB:CE:03:FA:94:A7:92:F6:7C:51:A1:7B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 17C886EF2A1390BA40BC56CB4B1D5EB616FA60FC Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e479a39c-390c-44c5-9824-4f6bb0e41df8.roa Signing time: Sat 18 Oct 2025 17:51:17 +0000 ROA not before: Sat 18 Oct 2025 17:51:17 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.173.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:c8:86:ef:2a:13:90:ba:40:bc:56:cb:4b:1d:5e:b6:16:fa:60:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 17:51:17 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=c6de3c4c6bc287b95745dbd4eae7d3a3d4f32196d00498dd9c76a21213629988, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:98:41:f9:af:ff:e5:2c:4b:8e:a7:93:21:88: a4:9e:26:3a:0c:98:0e:76:9a:fa:50:32:35:9e:52: 86:2d:63:1a:eb:7c:00:69:2e:db:f5:bd:23:bd:f9: 11:ec:2f:c6:b3:d5:c7:48:df:ff:b6:1a:5f:4e:d4: d6:f4:d4:38:78:90:80:ca:76:bd:1f:c1:5f:39:0e: dd:36:67:4c:44:24:11:58:f5:84:2e:e3:8c:33:a3: 13:dd:47:9c:9a:ac:d9:91:a6:ba:5a:0e:c7:d9:cd: 95:c0:69:42:08:04:88:5e:b5:77:a7:b2:ed:2a:57: cd:bc:74:08:48:2d:1a:2d:a7:1c:2b:84:12:95:d8: 25:a0:12:c1:58:11:44:7f:8f:7f:92:78:07:31:c8: 31:59:98:73:dc:c0:fb:95:7a:21:df:59:fa:ca:47: 14:bf:39:0f:24:a9:c7:61:b7:3b:91:61:e2:20:c4: 95:f0:61:eb:07:53:60:4d:fc:c3:6f:61:61:55:9e: 27:96:e0:26:69:b2:0a:e8:8e:8c:2f:ee:22:c7:be: ea:01:53:ab:c9:2e:0f:4a:c7:26:e8:87:6a:d0:41: 12:31:d0:e6:6f:a6:a6:18:0c:da:72:c2:88:8d:3b: c8:f7:5e:2e:98:58:ad:be:9b:b4:92:68:96:30:1b: f1:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:60:12:F5:53:6F:DE:C8:FB:CE:03:FA:94:A7:92:F6:7C:51:A1:7B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e479a39c-390c-44c5-9824-4f6bb0e41df8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.173.57.0/24 Signature Algorithm: sha256WithRSAEncryption ac:ce:d5:f8:a9:2a:76:45:c1:70:07:45:00:05:e8:43:0b:c7: fc:5f:92:c2:c7:90:98:27:cd:0d:77:32:2f:81:9b:15:4b:4b: 1d:f9:a7:27:50:c4:3c:98:d1:fc:4c:bd:c8:d4:db:f0:cf:c1: da:40:1d:8c:52:94:2d:24:cd:c2:b2:d0:35:a9:d7:7f:95:75: 27:15:e7:48:aa:d8:16:6e:91:f2:74:7a:0d:2d:4e:fc:67:da: 4c:04:79:8b:d2:30:30:91:82:b2:28:07:88:20:7f:66:57:74: 6b:8e:3a:02:eb:f1:bc:fa:40:97:f0:73:6a:3a:19:b6:34:50: 5e:27:e1:6c:6d:03:08:10:b3:f1:a8:4c:6f:22:4c:27:95:4d: a2:09:51:b8:9e:0e:cc:99:22:5f:9e:9e:ba:c2:a4:ad:de:47: f1:83:14:ff:0d:dd:2e:a1:8f:d3:e6:32:5a:67:a2:06:ac:81: 8a:24:0f:9c:e1:fa:b7:02:7d:98:d9:95:b5:78:aa:7a:19:0e: ab:7c:47:77:d8:e6:f5:a6:38:df:2b:16:4c:90:ed:57:8d:fa: fe:06:40:21:6f:af:ec:f4:2f:1b:6e:3b:5e:21:63:60:99:c1: 18:42:0f:7d:aa:4a:62:19:f8:4a:bd:16:c2:eb:f0:66:3c:25: 69:c4:27:75 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUF8iG7yoTkLpAvFbLSx1ethb6YPwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTc1MTE3WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BjNmRlM2M0YzZiYzI4N2I5NTc0NWRiZDRlYWU3ZDNhM2Q0 ZjMyMTk2ZDAwNDk4ZGQ5Yzc2YTIxMjEzNjI5OTg4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCJmEH5r//lLEuOp5MhiKSeJjoMmA52mvpQMjWeUoYtYxrr fABpLtv1vSO9+RHsL8az1cdI3/+2Gl9O1Nb01Dh4kIDKdr0fwV85Dt02Z0xEJBFY 9YQu44wzoxPdR5yarNmRprpaDsfZzZXAaUIIBIhetXensu0qV828dAhILRotpxwr hBKV2CWgEsFYEUR/j3+SeAcxyDFZmHPcwPuVeiHfWfrKRxS/OQ8kqcdhtzuRYeIg xJXwYesHU2BN/MNvYWFVnieW4CZpsgrojowv7iLHvuoBU6vJLg9Kxyboh2rQQRIx 0OZvpqYYDNpywoiNO8j3Xi6YWK2+m7SSaJYwG/G7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUNWAS9VNv3sj7zgP6lKeS9nxRoXswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2U0NzlhMzljLTM5MGMtNDRjNS05ODI0LTRmNmJiMGU0MWRmOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASrTkwDQYJKoZIhvcNAQELBQADggEBAKzO1fipKnZFwXAHRQAF6EMLx/xf ksLHkJgnzQ13Mi+BmxVLSx35pydQxDyY0fxMvcjU2/DPwdpAHYxSlC0kzcKy0DWp 13+VdScV50iq2BZukfJ0eg0tTvxn2kwEeYvSMDCRgrIoB4ggf2ZXdGuOOgLr8bz6 QJfwc2o6GbY0UF4n4WxtAwgQs/GoTG8iTCeVTaIJUbieDsyZIl+enrrCpK3eR/GD FP8N3S6hj9PmMlpnogasgYokD5zh+rcCfZjZlbV4qnoZDqt8R3fY5vWmON8rFkyQ 7VeN+v4GQCFvr+z0LxtuO14hY2CZwRhCD32qSmIZ+Eq9FsLr8GY8JWnEJ3U= -----END CERTIFICATE-----Generated at Mon Oct 20 17:29:40 2025 by rpki-client