$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f07f8ef6-cebd-4d02-9c15-de5c0ff865f8.roa File: f07f8ef6-cebd-4d02-9c15-de5c0ff865f8.roa (raw, json) Hash identifier: yr2Dyn8ahkotjGl0ySWG/J+akD92dLuBHHtD8T6GGkA= Subject key identifier: CD:B4:94:76:07:C6:DD:5D:2C:33:22:ED:6D:89:F7:A1:04:79:A5:BE Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4BEB7686789AB4C098E5BAE6DFE900FCA094F174 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f07f8ef6-cebd-4d02-9c15-de5c0ff865f8.roa Signing time: Sat 18 Oct 2025 16:50:11 +0000 ROA not before: Sat 18 Oct 2025 16:50:11 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.172.18.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:eb:76:86:78:9a:b4:c0:98:e5:ba:e6:df:e9:00:fc:a0:94:f1:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 16:50:11 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=d4f6ff237b26e9749e19e92adaa24d1f67495ec2970417994ac8b9f8a78af22b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d0:60:bf:be:12:d9:2f:34:75:ce:b7:2e:14: ae:17:5a:01:eb:43:7a:34:50:51:f6:e2:20:75:d2: 68:4e:0a:72:6f:e9:5f:ee:0b:a0:95:5f:cb:08:ba: cf:3b:c0:5f:d1:9e:d6:fc:11:fb:1c:b9:4c:41:2d: ae:b8:f8:39:3f:44:27:89:b9:6e:fe:03:d5:3b:e8: b2:7e:a5:f0:3b:92:c2:25:81:7e:50:70:ca:72:ba: c1:ee:5d:3c:fb:5f:82:cb:0d:8c:9f:b4:31:98:eb: 3d:af:fc:17:01:49:6e:65:b5:da:5d:cb:73:e8:4f: b8:04:9a:63:6e:93:5c:81:77:62:e1:7b:46:8f:86: 8a:47:0f:fe:a7:46:ba:55:07:d2:62:3c:97:e1:90: 04:cd:6e:8a:b3:09:5e:4a:20:10:19:21:7f:83:ab: bf:31:6b:8f:ab:78:a5:28:a2:d7:94:f5:27:06:cc: 80:30:70:bf:74:f8:98:ce:c7:15:d2:b8:4e:12:ba: 59:be:bb:77:10:db:2b:53:97:f3:bd:62:4f:c5:2f: 48:7a:45:17:71:dc:a4:5b:37:5d:c0:c5:a5:f4:31: de:12:42:50:46:81:bf:a4:b9:d2:f3:19:61:e0:98: 02:da:2d:5b:8a:5e:cd:1f:fc:bd:08:3c:4c:67:99: 6d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:B4:94:76:07:C6:DD:5D:2C:33:22:ED:6D:89:F7:A1:04:79:A5:BE X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f07f8ef6-cebd-4d02-9c15-de5c0ff865f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.172.18.0/23 Signature Algorithm: sha256WithRSAEncryption 14:a9:a8:f4:16:28:27:26:cf:d5:d7:9a:82:b9:98:d9:86:91: 89:7d:90:cc:34:52:be:76:20:26:f3:39:c7:7d:cb:42:e9:9e: a3:b0:d8:cf:b8:a4:dd:52:9b:fd:dd:46:99:a9:85:d2:de:5f: 57:73:e8:a0:1a:93:93:40:ec:5d:1f:df:42:2b:c9:54:47:0b: c9:25:40:1a:bd:8e:da:a8:b6:f7:01:81:27:c8:0b:a3:8c:c7: 3b:3b:28:d5:b7:2f:61:dd:3e:0b:36:79:7b:6f:93:87:51:39: 97:bb:bd:56:0c:8f:40:cd:55:18:66:8e:62:55:ef:f6:8d:3d: dc:2a:fb:b8:eb:b8:31:20:51:b6:e9:3d:5f:98:4e:e3:23:9e: 0d:62:72:20:55:46:d4:5f:5c:3d:44:b4:25:8c:21:44:b9:ec: f9:c3:b3:79:af:29:45:1f:31:58:04:46:e1:ba:68:39:94:f7: b6:80:e4:da:7f:3b:9f:9b:5f:16:56:6f:2b:94:1a:f2:d2:b3: 0f:bf:96:bc:a4:4a:b9:cf:37:84:eb:4d:82:60:86:c7:d2:0f: 3b:a1:87:36:f5:5a:9a:6c:42:f2:21:a7:bf:3e:c9:45:3e:f7: 59:9f:5a:07:44:c3:18:c0:bd:c9:ad:cd:48:97:89:d6:f2:02: e3:c5:d0:9f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUS+t2hniatMCY5brm3+kA/KCU8XQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTY1MDExWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BkNGY2ZmYyMzdiMjZlOTc0OWUxOWU5MmFkYWEyNGQxZjY3 NDk1ZWMyOTcwNDE3OTk0YWM4YjlmOGE3OGFmMjJiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCl0GC/vhLZLzR1zrcuFK4XWgHrQ3o0UFH24iB10mhOCnJv 6V/uC6CVX8sIus87wF/Rntb8EfscuUxBLa64+Dk/RCeJuW7+A9U76LJ+pfA7ksIl gX5QcMpyusHuXTz7X4LLDYyftDGY6z2v/BcBSW5ltdpdy3PoT7gEmmNuk1yBd2Lh e0aPhopHD/6nRrpVB9JiPJfhkATNboqzCV5KIBAZIX+Dq78xa4+reKUooteU9ScG zIAwcL90+JjOxxXSuE4Sulm+u3cQ2ytTl/O9Yk/FL0h6RRdx3KRbN13AxaX0Md4S QlBGgb+kudLzGWHgmALaLVuKXs0f/L0IPExnmW3rAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUzbSUdgfG3V0sMyLtbYn3oQR5pb4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2YwN2Y4ZWY2LWNlYmQtNGQwMi05YzE1LWRlNWMwZmY4NjVmOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESrBIwDQYJKoZIhvcNAQELBQADggEBABSpqPQWKCcmz9XXmoK5mNmGkYl9 kMw0Ur52ICbzOcd9y0LpnqOw2M+4pN1Sm/3dRpmphdLeX1dz6KAak5NA7F0f30Ir yVRHC8klQBq9jtqotvcBgSfIC6OMxzs7KNW3L2HdPgs2eXtvk4dROZe7vVYMj0DN VRhmjmJV7/aNPdwq+7jruDEgUbbpPV+YTuMjng1iciBVRtRfXD1EtCWMIUS57PnD s3mvKUUfMVgERuG6aDmU97aA5Np/O5+bXxZWbyuUGvLSsw+/lrykSrnPN4TrTYJg hsfSDzuhhzb1WppsQvIhp78+yUU+91mfWgdEwxjAvcmtzUiXidbyAuPF0J8= -----END CERTIFICATE-----Generated at Mon Oct 20 02:57:33 2025 by rpki-client