$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f29fd780-c084-4a61-9268-b25369d9e6cc.roa File: f29fd780-c084-4a61-9268-b25369d9e6cc.roa (raw, json) Hash identifier: APa+rdC4bt0KEWbAhibIn7zow6xnRfDwatDc029R+fg= Subject key identifier: 29:77:BD:CD:8F:F9:48:A5:E4:33:B4:78:E7:EB:3A:B7:1C:9B:A0:2E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 405C3C277AB3A54FB94BDBD80D417DBDE34EF5F5 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f29fd780-c084-4a61-9268-b25369d9e6cc.roa Signing time: Sat 18 Oct 2025 21:40:13 +0000 ROA not before: Sat 18 Oct 2025 21:40:13 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.173.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:5c:3c:27:7a:b3:a5:4f:b9:4b:db:d8:0d:41:7d:bd:e3:4e:f5:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 21:40:13 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=62b34cf1386e0c5a57a0356fe05482f368dcafa9b37903917c4839c28ada0492, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fa:d2:8b:93:0d:ce:16:59:6e:6f:58:ba:1a: df:f2:6d:f9:0d:f7:58:62:77:64:02:4e:61:a5:5c: cc:09:c6:54:3f:14:ee:6b:cd:e2:c7:d5:ae:0b:55: 43:b8:95:43:51:12:71:57:d8:f2:28:c2:99:51:af: 3e:a7:66:d9:31:f9:c7:c9:30:a2:c9:55:6d:b9:2d: 4c:c0:e2:9d:27:ca:ea:0e:97:f5:72:bc:ca:87:c4: 32:39:75:28:31:05:c2:54:3f:f1:da:2c:f3:5d:34: ac:88:5e:36:b6:0a:ec:ee:0b:f9:32:65:c8:b0:ac: 7a:e9:d1:ec:63:91:ba:47:f0:95:c6:0e:70:48:fc: b9:0d:1f:f6:f4:41:9a:2a:63:72:72:cf:7b:ca:bc: 4e:7a:25:d8:12:25:31:1d:0d:21:bf:2b:c9:4f:5c: 35:25:a2:6f:33:ab:13:de:5e:9d:3e:b5:3f:38:f7: 05:b9:2d:37:45:2f:ca:41:dc:ed:46:de:0d:14:ca: 84:0c:50:3b:5c:8d:4e:fb:32:ff:b7:0f:01:46:0c: 44:15:fc:80:a6:f2:b1:28:62:2a:c4:9a:95:b8:ab: 7e:67:40:42:05:94:41:ba:d7:e2:7c:ca:41:78:25: 50:aa:92:b0:af:5b:30:b7:55:4f:13:95:5e:e7:9d: 8c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:77:BD:CD:8F:F9:48:A5:E4:33:B4:78:E7:EB:3A:B7:1C:9B:A0:2E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f29fd780-c084-4a61-9268-b25369d9e6cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.173.45.0/24 Signature Algorithm: sha256WithRSAEncryption 95:f0:0e:e4:3b:35:fe:64:2a:0b:df:3b:ed:03:81:7a:20:47: 15:8e:a8:6b:35:fd:b3:21:62:17:0f:68:4d:c1:35:d9:fc:38: 6d:2b:6b:b5:4a:55:df:9e:df:c7:ee:19:b4:fb:cb:0e:92:d7: ab:1b:b0:df:e9:f7:c3:97:dd:e8:50:48:26:a8:87:39:51:31: f9:52:36:57:1b:9b:48:2b:8e:43:3a:47:4f:1a:25:e2:59:06: ab:fe:e1:92:27:bb:bf:43:c0:01:18:40:64:1b:c1:9b:1e:f0: 2c:72:f8:b0:19:1e:57:4e:fa:85:21:55:bd:66:e8:47:ba:f7: 01:4d:0f:de:dc:7c:80:e0:2b:8a:fd:fc:64:c2:a6:51:ec:0b: 67:30:e8:c3:7a:45:6d:10:c2:4b:9a:e7:94:66:a4:7d:f5:59: e5:b7:82:3e:8a:ce:4c:cc:23:ab:0e:2b:4f:a6:e6:af:76:1c: c0:89:6e:d5:a6:cb:16:42:82:53:e7:a6:6b:be:37:56:44:9c: e4:fd:ce:09:0f:a1:d9:27:52:4a:db:ea:8a:25:96:d1:2b:77: c4:ff:f9:37:c9:09:89:0f:bf:fc:fd:3e:be:88:e0:40:c0:9b: 86:31:6c:95:d2:47:8f:a8:6c:25:07:cf:d0:8b:36:7c:fc:a7: 92:65:70:74 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQFw8J3qzpU+5S9vYDUF9veNO9fUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MjE0MDEzWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A2MmIzNGNmMTM4NmUwYzVhNTdhMDM1NmZlMDU0ODJmMzY4 ZGNhZmE5YjM3OTAzOTE3YzQ4MzljMjhhZGEwNDkyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7+tKLkw3OFllub1i6Gt/ybfkN91hid2QCTmGlXMwJxlQ/ FO5rzeLH1a4LVUO4lUNREnFX2PIowplRrz6nZtkx+cfJMKLJVW25LUzA4p0nyuoO l/VyvMqHxDI5dSgxBcJUP/HaLPNdNKyIXja2CuzuC/kyZciwrHrp0exjkbpH8JXG DnBI/LkNH/b0QZoqY3Jyz3vKvE56JdgSJTEdDSG/K8lPXDUlom8zqxPeXp0+tT84 9wW5LTdFL8pB3O1G3g0UyoQMUDtcjU77Mv+3DwFGDEQV/ICm8rEoYirEmpW4q35n QEIFlEG61+J8ykF4JVCqkrCvWzC3VU8TlV7nnYwjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUKXe9zY/5SKXkM7R45+s6txyboC4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2YyOWZkNzgwLWMwODQtNGE2MS05MjY4LWIyNTM2OWQ5ZTZjYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASrS0wDQYJKoZIhvcNAQELBQADggEBAJXwDuQ7Nf5kKgvfO+0DgXogRxWO qGs1/bMhYhcPaE3BNdn8OG0ra7VKVd+e38fuGbT7yw6S16sbsN/p98OX3ehQSCao hzlRMflSNlcbm0grjkM6R08aJeJZBqv+4ZInu79DwAEYQGQbwZse8Cxy+LAZHldO +oUhVb1m6Ee69wFND97cfIDgK4r9/GTCplHsC2cw6MN6RW0Qwkua55RmpH31WeW3 gj6KzkzMI6sOK0+m5q92HMCJbtWmyxZCglPnpmu+N1ZEnOT9zgkPodknUkrb6ool ltErd8T/+TfJCYkPv/z9Pr6I4EDAm4YxbJXSR4+obCUHz9CLNnz8p5JlcHQ= -----END CERTIFICATE-----Generated at Mon Oct 20 06:06:14 2025 by rpki-client