$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/edcb6282-dde2-437a-be8f-266d709e5364.roa File: edcb6282-dde2-437a-be8f-266d709e5364.roa (raw, json) Hash identifier: dP+RBKD91ulBmXDESZA/D8lu3OUcLSDMh3yJCjUr6hs= Subject key identifier: 7B:1F:02:26:2F:CC:5E:44:88:E1:47:8E:38:5B:9D:A3:F2:6E:F0:43 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7E80A1DD84B8AEB5F8FB2F02000166A1936AF6B5 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/edcb6282-dde2-437a-be8f-266d709e5364.roa Signing time: Sat 18 Oct 2025 16:20:12 +0000 ROA not before: Sat 18 Oct 2025 16:20:12 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.238.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:80:a1:dd:84:b8:ae:b5:f8:fb:2f:02:00:01:66:a1:93:6a:f6:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 16:20:12 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=8e641e6e5d5d2ce4b17e622c1dd55103325a9cc6077b1fb6893da7df03e5a337, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f3:9c:a3:e5:23:24:03:0c:00:c6:da:82:51: d8:e8:c0:10:89:b5:e1:2c:90:d6:dd:8e:8f:4b:e1: e6:fa:d2:e3:97:fe:be:8f:15:ab:7b:94:b3:70:b9: 36:91:30:bc:5d:4c:a1:c8:80:28:5c:3a:c3:3c:44: e9:10:a4:1b:35:b3:10:63:b2:1e:b1:e0:39:87:e8: c3:12:5e:c6:89:0e:4d:65:ac:83:67:b3:d0:53:21: d2:87:06:6b:6c:90:e0:10:e0:8f:8a:e8:11:b0:1b: 37:52:45:37:69:26:b2:01:ff:38:e0:5c:b4:8b:11: 74:0e:e7:47:c8:b9:e8:f5:fe:3a:c4:3d:27:30:f0: 73:90:9c:54:5e:73:3c:3b:39:3b:43:19:cd:99:da: 81:26:73:77:64:6f:1e:c4:91:9b:32:e5:6f:58:54: 9b:87:bb:9f:28:3f:f5:b0:52:4f:74:0b:cc:01:ec: 43:b9:d8:d0:e3:00:a3:92:72:75:51:42:07:52:fd: 2b:0e:57:6c:ad:35:90:92:0a:63:bb:9f:c8:ac:49: 11:eb:e7:73:4e:4e:4f:64:6c:81:ca:6b:85:83:12: 06:98:83:de:8f:80:86:26:2f:6e:15:24:80:e9:d5: 02:36:4c:73:18:37:be:61:f8:da:01:5b:28:cc:82: 22:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:1F:02:26:2F:CC:5E:44:88:E1:47:8E:38:5B:9D:A3:F2:6E:F0:43 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/edcb6282-dde2-437a-be8f-266d709e5364.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.238.235.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:78:a1:86:f5:55:35:8f:b0:bf:b4:66:a9:b5:fa:a7:1b:ab: e9:78:2f:9a:46:5d:fd:f8:78:0c:63:72:d4:af:fc:95:c1:19: 45:c1:84:ef:6e:64:a7:c0:39:98:ad:21:f3:12:e6:dc:8c:a9: cc:f7:29:b0:81:ca:32:8c:4d:dc:e4:6b:8b:2a:a0:ac:7c:13: db:d2:46:59:ba:95:9a:b4:ac:67:0b:61:62:da:96:f8:79:eb: a8:ce:97:ee:2e:29:7b:ba:00:6d:3b:ab:34:a3:8b:29:c2:a1: be:0c:67:51:eb:09:4c:79:6f:b3:fd:a7:92:74:56:95:3d:99: 73:85:91:ac:86:9f:a4:da:24:9b:b5:97:d8:06:0c:3c:b3:91: f6:26:9c:96:a3:b1:61:62:2e:21:57:f3:8a:ec:3a:c5:e9:4d: 60:47:58:e4:fe:d2:5a:81:2d:cb:7e:ff:c5:bd:82:d7:ac:99: d8:a3:82:e5:1f:2e:51:a7:ce:1a:18:70:38:54:bb:2b:ab:71: 69:7b:9e:fa:d8:6f:60:7d:fc:68:ae:cd:49:ba:70:db:0b:ff: 6b:dc:eb:bd:56:34:62:b0:37:04:6c:f5:61:e6:4f:f9:0c:f4: 0b:5e:39:e6:f2:3f:ef:78:91:a4:a4:2d:1a:a9:88:a5:86:15: e4:e2:0f:b6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfoCh3YS4rrX4+y8CAAFmoZNq9rUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTYyMDEyWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZTY0MWU2ZTVkNWQyY2U0YjE3ZTYyMmMxZGQ1NTEwMzMy NWE5Y2M2MDc3YjFmYjY4OTNkYTdkZjAzZTVhMzM3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC985yj5SMkAwwAxtqCUdjowBCJteEskNbdjo9L4eb60uOX /r6PFat7lLNwuTaRMLxdTKHIgChcOsM8ROkQpBs1sxBjsh6x4DmH6MMSXsaJDk1l rINns9BTIdKHBmtskOAQ4I+K6BGwGzdSRTdpJrIB/zjgXLSLEXQO50fIuej1/jrE PScw8HOQnFReczw7OTtDGc2Z2oEmc3dkbx7EkZsy5W9YVJuHu58oP/WwUk90C8wB 7EO52NDjAKOScnVRQgdS/SsOV2ytNZCSCmO7n8isSRHr53NOTk9kbIHKa4WDEgaY g96PgIYmL24VJIDp1QI2THMYN75h+NoBWyjMgiKPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUex8CJi/MXkSI4UeOOFudo/Ju8EMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2VkY2I2MjgyLWRkZTItNDM3YS1iZThmLTI2NmQ3MDllNTM2NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAS7uswDQYJKoZIhvcNAQELBQADggEBAEp4oYb1VTWPsL+0Zqm1+qcbq+l4 L5pGXf34eAxjctSv/JXBGUXBhO9uZKfAOZitIfMS5tyMqcz3KbCByjKMTdzka4sq oKx8E9vSRlm6lZq0rGcLYWLalvh566jOl+4uKXu6AG07qzSjiynCob4MZ1HrCUx5 b7P9p5J0VpU9mXOFkayGn6TaJJu1l9gGDDyzkfYmnJajsWFiLiFX84rsOsXpTWBH WOT+0lqBLct+/8W9gtesmdijguUfLlGnzhoYcDhUuyurcWl7nvrYb2B9/GiuzUm6 cNsL/2vc671WNGKwNwRs9WHmT/kM9AteOebyP+94kaSkLRqpiKWGFeTiD7Y= -----END CERTIFICATE-----Generated at Mon Oct 20 08:29:38 2025 by rpki-client