$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e4c111db-dbbc-477f-841f-e1f4b9fe0c22.roa File: e4c111db-dbbc-477f-841f-e1f4b9fe0c22.roa (raw, json) Hash identifier: WnnJf1SLb43U8XWDD+A+AVAn9WA0p+H1hu0hS2egcA0= Subject key identifier: 9D:17:A0:C0:9C:DA:64:61:9E:6F:DB:2C:6F:50:7D:16:43:37:CE:A2 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 44E81C76B9171011E8239D6A73C38F3DDEB44F11 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e4c111db-dbbc-477f-841f-e1f4b9fe0c22.roa Signing time: Sat 18 Oct 2025 09:31:29 +0000 ROA not before: Sat 18 Oct 2025 09:31:29 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.238.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:e8:1c:76:b9:17:10:11:e8:23:9d:6a:73:c3:8f:3d:de:b4:4f:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 09:31:29 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=f4ca39359814a1ebb1ca3bf83e8f063135f0180ef320f1ae897a52d3f0fab778, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:71:c3:35:60:70:a3:dc:c8:51:c8:8f:78:79: 3b:c6:d1:d9:3c:88:1b:94:f4:4e:48:02:4b:e8:37: 66:c1:7e:a9:51:5d:9a:98:64:80:41:1e:de:f4:e1: fa:4c:e7:22:8b:05:a4:24:f0:5a:2c:5c:3b:9a:3e: 0d:1d:57:dd:f0:56:c5:20:d8:e5:29:71:df:2a:68: 1f:30:d8:a6:30:12:64:83:6f:95:77:00:13:b8:5a: 7f:4d:29:94:b6:59:7e:0b:52:14:d6:15:3e:62:d7: 75:7f:ab:ec:c6:83:da:c6:3c:c4:c6:31:94:2c:61: 7e:27:ed:36:8b:6f:c9:5f:92:c9:52:ca:a3:56:6e: 9b:06:81:d9:fb:f4:c6:65:17:af:44:5c:29:97:58: cc:31:26:32:06:2d:9d:0e:a6:89:e0:b7:54:b3:1c: 1f:e4:7e:90:a6:6f:dc:cb:e7:d6:f5:ee:60:14:18: 5b:58:0a:66:f8:86:4d:90:ed:d3:fd:89:e7:bb:af: 55:29:ab:71:71:81:10:b6:32:3c:b2:2a:05:0e:61: bf:69:e9:b7:59:1b:09:6d:73:ab:5b:3d:e7:31:19: ae:83:18:98:b1:40:e2:f1:d1:bc:00:79:33:b6:75: b9:a7:0a:34:89:53:51:f1:7c:bf:fe:a7:0c:4e:17: 96:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:17:A0:C0:9C:DA:64:61:9E:6F:DB:2C:6F:50:7D:16:43:37:CE:A2 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e4c111db-dbbc-477f-841f-e1f4b9fe0c22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.238.108.0/23 Signature Algorithm: sha256WithRSAEncryption 24:8e:d3:dd:6a:b6:ca:00:e0:f4:8e:0a:93:c7:5b:24:d9:9e: aa:08:98:ea:5d:03:38:d1:3a:47:97:1c:d4:d2:b3:90:b9:4d: f9:66:00:bc:0e:25:df:ff:b1:e1:46:ef:d5:9f:ad:d3:1f:c0: 25:27:d7:a0:78:ba:80:1c:d7:07:2f:61:09:98:75:01:67:d1: 27:6a:6f:ac:10:82:74:b0:cd:bc:6f:a1:10:a5:c2:4f:1b:a6: 9a:0f:95:5c:27:3a:1a:e0:95:26:66:be:32:69:97:68:bd:9a: 86:57:a0:24:29:f7:ad:72:d6:b6:3d:b1:2f:f0:06:e2:70:b3: 6d:c3:18:fb:1c:f0:9d:3d:80:72:d4:62:9a:a6:db:f5:61:5c: 6f:6a:70:cc:3a:ee:de:81:77:9f:08:a4:95:e9:62:3c:c9:a6: 42:0d:a6:1f:32:32:14:1b:3c:f0:0b:26:99:36:51:f3:5b:97: 7c:f6:6e:60:ab:63:af:66:65:35:10:e2:7e:33:1d:fc:8e:97: 6c:9c:78:c8:4f:a6:4d:de:53:5f:5e:27:8e:2b:34:7d:3d:9a: 48:96:00:be:dc:ba:7c:5b:35:e0:9e:6c:5c:7b:da:f7:15:7f: 9d:f4:0b:1d:3d:37:74:fe:7f:79:bd:ad:a0:35:78:0f:d4:df: 43:b7:91:6c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUROgcdrkXEBHoI51qc8OPPd60TxEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MDkzMTI5WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BmNGNhMzkzNTk4MTRhMWViYjFjYTNiZjgzZThmMDYzMTM1 ZjAxODBlZjMyMGYxYWU4OTdhNTJkM2YwZmFiNzc4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+ccM1YHCj3MhRyI94eTvG0dk8iBuU9E5IAkvoN2bBfqlR XZqYZIBBHt704fpM5yKLBaQk8FosXDuaPg0dV93wVsUg2OUpcd8qaB8w2KYwEmSD b5V3ABO4Wn9NKZS2WX4LUhTWFT5i13V/q+zGg9rGPMTGMZQsYX4n7TaLb8lfkslS yqNWbpsGgdn79MZlF69EXCmXWMwxJjIGLZ0Opongt1SzHB/kfpCmb9zL59b17mAU GFtYCmb4hk2Q7dP9iee7r1Upq3FxgRC2MjyyKgUOYb9p6bdZGwltc6tbPecxGa6D GJixQOLx0bwAeTO2dbmnCjSJU1HxfL/+pwxOF5YRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUnRegwJzaZGGeb9ssb1B9FkM3zqIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2U0YzExMWRiLWRiYmMtNDc3Zi04NDFmLWUxZjRiOWZlMGMyMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAES7mwwDQYJKoZIhvcNAQELBQADggEBACSO091qtsoA4PSOCpPHWyTZnqoI mOpdAzjROkeXHNTSs5C5TflmALwOJd//seFG79WfrdMfwCUn16B4uoAc1wcvYQmY dQFn0Sdqb6wQgnSwzbxvoRClwk8bppoPlVwnOhrglSZmvjJpl2i9moZXoCQp961y 1rY9sS/wBuJws23DGPsc8J09gHLUYpqm2/VhXG9qcMw67t6Bd58IpJXpYjzJpkIN ph8yMhQbPPALJpk2UfNbl3z2bmCrY69mZTUQ4n4zHfyOl2yceMhPpk3eU19eJ44r NH09mkiWAL7cunxbNeCebFx72vcVf530Cx09N3T+f3m9raA1eA/U30O3kWw= -----END CERTIFICATE-----Generated at Mon Oct 20 17:30:14 2025 by rpki-client