$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e723c350-ac1b-4773-a3ce-280a65de5d84.roa File: e723c350-ac1b-4773-a3ce-280a65de5d84.roa (raw, json) Hash identifier: +SB9hfKc4j5iAKFTdfignkxuA8ptfNyU10KgxU0AfDM= Subject key identifier: FD:B9:13:A7:5D:DA:3E:49:7F:D6:2F:58:07:6A:A6:ED:7B:CA:26:3F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7EF991F481EBE8581A984F4731FDCC98709F20E7 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e723c350-ac1b-4773-a3ce-280a65de5d84.roa Signing time: Sat 18 Oct 2025 15:20:11 +0000 ROA not before: Sat 18 Oct 2025 15:20:11 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.172.146.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:f9:91:f4:81:eb:e8:58:1a:98:4f:47:31:fd:cc:98:70:9f:20:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 15:20:11 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=3b8156e868833d6a3e13856601ace9fee0c94df717babdd7f8cf265ff0bfdd35, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ac:c4:b9:b1:d9:6d:dc:bd:bc:2a:b0:5e:3a: 8a:96:08:80:f0:04:3d:a8:47:61:30:67:6d:62:9b: a2:c9:fc:40:4c:9f:fd:51:68:24:6b:93:9f:b4:f0: 3a:c2:2a:46:c4:88:e9:81:41:7d:ae:35:72:5d:ed: 6f:b6:74:71:0c:27:58:dc:15:fa:64:9f:71:15:39: 11:c1:79:a8:fa:48:1d:c9:75:0c:a9:21:d7:9d:b0: 10:76:72:79:69:89:08:5f:55:8d:ed:dc:24:b0:0b: ce:a9:ec:de:57:7b:85:31:02:2d:57:73:1a:0a:42: 00:a6:8d:f8:ea:20:72:2b:1f:7c:6b:9f:f1:97:52: 3d:62:ba:7e:6b:d0:f9:c1:eb:83:71:1e:21:59:21: ad:4e:82:01:3d:df:5f:fa:ae:13:eb:5b:fe:fb:c7: f3:da:94:9f:50:00:f0:bf:d0:19:8e:4d:89:55:36: ae:18:21:00:8b:b2:19:8d:d3:b8:68:24:74:b9:0c: 26:27:6a:54:aa:68:87:24:ed:a8:37:38:36:80:6f: 66:df:45:1b:2a:54:8f:66:62:c4:5e:12:3f:84:f0: a3:b4:e9:df:d1:fa:29:dc:e6:c2:b5:23:28:a0:0d: 15:79:fb:b9:90:77:54:e3:55:08:dd:1d:44:ab:a5: 00:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:B9:13:A7:5D:DA:3E:49:7F:D6:2F:58:07:6A:A6:ED:7B:CA:26:3F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e723c350-ac1b-4773-a3ce-280a65de5d84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.172.146.0/23 Signature Algorithm: sha256WithRSAEncryption 99:8d:1d:75:11:b1:4e:67:48:aa:6e:a1:aa:79:12:f0:37:21: ed:75:a7:15:e6:90:5d:0b:69:6f:c3:24:64:91:da:26:69:d8: 53:db:06:6e:d1:d9:90:59:b5:f5:4c:17:02:a2:ed:61:e5:6a: 44:fc:c4:f0:a1:b5:b9:4b:e0:9c:7b:a4:4a:63:f5:0f:69:ed: 0e:b3:9b:e0:ef:46:f3:70:f6:b7:03:bd:51:ed:f0:1e:4d:67: bc:ce:ae:da:79:a8:11:54:be:1e:db:f9:93:89:cb:0a:ea:82: f1:37:b1:c7:00:b0:0a:dc:e2:5f:33:be:50:1f:ae:97:2d:f2: 2d:76:c2:4d:0c:bc:85:f6:83:7e:bb:55:b9:1c:1b:7d:f0:ca: 1a:44:e1:23:74:0c:f7:02:bd:f3:fa:c9:d9:96:b0:57:b0:5b: 56:37:d3:26:c5:9d:47:cf:66:42:9a:d9:aa:c9:c6:53:fe:91: 3b:43:4c:48:14:96:e3:ed:dd:d2:37:60:c5:36:23:b0:5e:76: a8:4a:2a:67:39:6b:91:b0:c2:5c:df:b0:8f:87:a8:db:d2:2f: 52:1b:cb:7a:18:3e:db:48:a0:44:5f:c0:fa:c8:2a:65:65:b5: 67:c9:c1:b6:dc:45:10:8a:59:4a:b0:2d:75:ca:da:ba:17:da: ca:6e:18:73 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfvmR9IHr6FgamE9HMf3MmHCfIOcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTUyMDExWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AzYjgxNTZlODY4ODMzZDZhM2UxMzg1NjYwMWFjZTlmZWUw Yzk0ZGY3MTdiYWJkZDdmOGNmMjY1ZmYwYmZkZDM1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDArMS5sdlt3L28KrBeOoqWCIDwBD2oR2EwZ21im6LJ/EBM n/1RaCRrk5+08DrCKkbEiOmBQX2uNXJd7W+2dHEMJ1jcFfpkn3EVORHBeaj6SB3J dQypIdedsBB2cnlpiQhfVY3t3CSwC86p7N5Xe4UxAi1XcxoKQgCmjfjqIHIrH3xr n/GXUj1iun5r0PnB64NxHiFZIa1OggE931/6rhPrW/77x/PalJ9QAPC/0BmOTYlV Nq4YIQCLshmN07hoJHS5DCYnalSqaIck7ag3ODaAb2bfRRsqVI9mYsReEj+E8KO0 6d/R+inc5sK1IyigDRV5+7mQd1TjVQjdHUSrpQArAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU/bkTp13aPkl/1i9YB2qm7XvKJj8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2U3MjNjMzUwLWFjMWItNDc3My1hM2NlLTI4MGE2NWRlNWQ4NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESrJIwDQYJKoZIhvcNAQELBQADggEBAJmNHXURsU5nSKpuoap5EvA3Ie11 pxXmkF0LaW/DJGSR2iZp2FPbBm7R2ZBZtfVMFwKi7WHlakT8xPChtblL4Jx7pEpj 9Q9p7Q6zm+DvRvNw9rcDvVHt8B5NZ7zOrtp5qBFUvh7b+ZOJywrqgvE3sccAsArc 4l8zvlAfrpct8i12wk0MvIX2g367VbkcG33wyhpE4SN0DPcCvfP6ydmWsFewW1Y3 0ybFnUfPZkKa2arJxlP+kTtDTEgUluPt3dI3YMU2I7BedqhKKmc5a5GwwlzfsI+H qNvSL1Iby3oYPttIoERfwPrIKmVltWfJwbbcRRCKWUqwLXXK2roX2spuGHM= -----END CERTIFICATE-----Generated at Mon Oct 20 03:06:33 2025 by rpki-client