$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e9fd17a1-b004-420a-a5bf-3b0daa1b4c46.roa File: e9fd17a1-b004-420a-a5bf-3b0daa1b4c46.roa (raw, json) Hash identifier: ghWrCXk2jzZY3sv2VLeL+CaNlUit9VwtgvVk8hxgGxo= Subject key identifier: B0:79:A0:FA:7C:F1:0F:88:C2:2F:36:ED:08:EA:C1:0D:10:7B:64:E5 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7D8E5114E1E0CC58B36D1134B34252E4ACCA3E2D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e9fd17a1-b004-420a-a5bf-3b0daa1b4c46.roa Signing time: Sat 18 Oct 2025 17:03:21 +0000 ROA not before: Sat 18 Oct 2025 17:03:21 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.154.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:8e:51:14:e1:e0:cc:58:b3:6d:11:34:b3:42:52:e4:ac:ca:3e:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 17:03:21 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=57b5aead5817ae8964d62d7ae86c73c1a25de099344056f5c4ae97b6ec08e527, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:cf:cf:cd:9a:77:45:eb:09:b1:2d:bb:bc:42: 30:52:1e:b0:63:ad:11:d9:9b:b2:3b:3a:15:f3:e1: a6:10:5a:37:3e:32:29:77:22:cc:64:4e:e2:3a:83: 8d:21:d7:cd:6a:64:64:9d:ba:06:cd:cc:89:72:b6: 0a:c6:ab:1d:44:95:4b:9c:e1:5b:13:96:29:ed:1a: b6:05:1f:dc:43:bd:bc:9c:1b:eb:78:4b:ce:fb:b3: 09:7f:95:48:1b:b0:9e:bc:80:ad:ce:04:16:e5:e3: cd:50:df:93:65:90:5e:70:42:28:fd:17:e5:e4:84: 4c:01:79:1f:c8:7b:49:e8:36:81:f2:c0:de:fe:d3: 88:1c:19:8f:b1:22:e9:53:29:a3:52:c4:92:e8:a0: cc:1b:31:65:f4:c7:8f:53:65:9f:d3:e8:42:2b:8f: 12:5f:e6:09:5a:e2:22:f0:0a:bc:e8:df:e9:dd:55: a1:e1:c6:20:d3:d0:14:71:f2:88:2c:2c:d3:39:68: 9b:37:d6:0a:a3:40:08:80:cc:d5:e7:57:b3:1f:52: 74:64:58:20:ff:de:fb:fb:fc:7a:03:5e:45:86:90: 2b:3c:db:8b:5d:da:bc:c5:2b:f5:8e:51:f2:5c:88: 9e:67:d9:11:b7:9b:21:e0:dc:88:9e:8d:ab:ba:3b: 87:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:79:A0:FA:7C:F1:0F:88:C2:2F:36:ED:08:EA:C1:0D:10:7B:64:E5 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e9fd17a1-b004-420a-a5bf-3b0daa1b4c46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.154.96.0/21 Signature Algorithm: sha256WithRSAEncryption 8b:15:7c:44:15:12:46:42:ba:5c:ff:ba:0e:54:cd:56:05:15: 97:47:4a:ce:fa:25:d6:b2:e0:fa:18:0a:9a:c9:cb:48:67:0b: b2:d1:8a:28:cb:e7:10:af:0c:06:23:5a:40:ae:b9:db:b1:c6: c4:10:90:0a:85:24:dd:c3:cf:d6:4c:17:9a:ef:23:26:66:f1: 63:9e:e7:22:dd:73:91:36:68:58:f2:20:a6:79:ea:e4:ec:51: 58:5d:7c:ba:c3:bc:82:f2:d8:a8:80:e8:db:62:18:43:b7:2f: 07:57:7b:e0:fb:d4:e4:38:21:6b:d9:8e:48:77:75:c7:18:76: 82:64:f2:bc:02:79:46:08:aa:0d:10:d4:6b:83:29:42:5e:b4: c8:f7:09:cc:9f:e2:04:32:f3:92:a7:f8:5c:09:d2:3d:37:fb: 8a:3c:b0:ee:d2:4f:58:2f:20:64:3d:69:bd:b0:d7:9e:d8:47: 86:4b:d4:5c:d4:ed:2c:f4:dd:dd:39:0f:99:f3:23:42:d4:55: 40:cd:ba:c1:8b:e3:e2:39:94:44:fa:cc:48:92:a5:d1:58:e1: c0:ff:8e:04:78:5a:29:e5:8b:77:ea:99:fb:40:df:ac:3a:8a: 33:72:00:fb:83:8b:12:d3:70:71:81:f1:7c:92:61:1c:b9:fb: 15:28:75:fb -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfY5RFOHgzFizbRE0s0JS5KzKPi0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTcwMzIxWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A1N2I1YWVhZDU4MTdhZTg5NjRkNjJkN2FlODZjNzNjMWEy NWRlMDk5MzQ0MDU2ZjVjNGFlOTdiNmVjMDhlNTI3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQz8/NmndF6wmxLbu8QjBSHrBjrRHZm7I7OhXz4aYQWjc+ Mil3IsxkTuI6g40h181qZGSdugbNzIlytgrGqx1ElUuc4VsTlintGrYFH9xDvbyc G+t4S877swl/lUgbsJ68gK3OBBbl481Q35NlkF5wQij9F+XkhEwBeR/Ie0noNoHy wN7+04gcGY+xIulTKaNSxJLooMwbMWX0x49TZZ/T6EIrjxJf5gla4iLwCrzo3+nd VaHhxiDT0BRx8ogsLNM5aJs31gqjQAiAzNXnV7MfUnRkWCD/3vv7/HoDXkWGkCs8 24td2rzFK/WOUfJciJ5n2RG3myHg3Iiejau6O4dfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUsHmg+nzxD4jCLzbtCOrBDRB7ZOUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2U5ZmQxN2ExLWIwMDQtNDIwYS1hNWJmLTNiMGRhYTFiNGM0Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMSmmAwDQYJKoZIhvcNAQELBQADggEBAIsVfEQVEkZCulz/ug5UzVYFFZdH Ss76Jday4PoYCprJy0hnC7LRiijL5xCvDAYjWkCuuduxxsQQkAqFJN3Dz9ZMF5rv IyZm8WOe5yLdc5E2aFjyIKZ56uTsUVhdfLrDvILy2KiA6NtiGEO3LwdXe+D71OQ4 IWvZjkh3dccYdoJk8rwCeUYIqg0Q1GuDKUJetMj3Ccyf4gQy85Kn+FwJ0j03+4o8 sO7ST1gvIGQ9ab2w157YR4ZL1FzU7Sz03d05D5nzI0LUVUDNusGL4+I5lET6zEiS pdFY4cD/jgR4Winli3fqmftA36w6ijNyAPuDixLTcHGB8XySYRy5+xUodfs= -----END CERTIFICATE-----Generated at Mon Oct 20 02:59:41 2025 by rpki-client