$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fb9de6de-d07b-4398-b9b7-8021d2cbac45.roa File: fb9de6de-d07b-4398-b9b7-8021d2cbac45.roa (raw, json) Hash identifier: tvbfVkWSXUdrjb80OlqmyQLKHkEbDxJ+W1+PXBGz7Ho= Subject key identifier: 56:1F:F6:2A:BF:9A:EF:DD:1F:94:4F:07:73:B5:79:E2:6F:13:F5:08 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 42E9B1D107AE690A3C7B105D5317E31E786943BB Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fb9de6de-d07b-4398-b9b7-8021d2cbac45.roa Signing time: Sat 18 Oct 2025 21:41:24 +0000 ROA not before: Sat 18 Oct 2025 21:41:24 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.245.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:e9:b1:d1:07:ae:69:0a:3c:7b:10:5d:53:17:e3:1e:78:69:43:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 21:41:24 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=f94d1bc2e693a6a8bf02486c2e68c29ded99c2d749c3d7d3a02bda881a8b12a5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c6:aa:d1:24:6b:fe:d6:1d:da:fe:23:28:13: bf:f9:fc:42:22:bf:e9:b2:c5:83:0b:c9:dd:ca:b2: 43:66:9d:38:ca:f1:8c:2d:9d:10:ca:89:59:d5:fb: 93:91:58:b0:69:bd:7d:6a:36:77:23:0f:c6:87:0d: d1:60:65:c3:1a:34:53:27:dc:19:14:ce:23:30:30: d3:fe:53:e7:d9:e2:cc:8f:5b:23:6f:a1:cc:e3:12: d8:42:40:5b:b1:e6:8e:09:5b:ff:f5:c2:5c:12:2c: bc:99:5d:60:6e:0d:ad:fc:ef:7f:5a:cb:64:03:d2: 2d:8b:7a:2a:c1:a2:e3:6d:80:b4:e2:17:1e:2c:dd: 0b:f2:1f:07:a5:ea:49:18:dc:35:5d:5c:cd:ec:12: ab:19:db:54:d0:86:f9:48:00:f1:36:86:1e:9b:50: ed:1a:d1:c6:41:84:64:ce:29:79:61:54:b8:70:67: 8d:46:04:47:5c:06:66:b6:de:bf:3a:81:8d:3b:f5: 97:d9:8a:60:1d:9c:65:a6:f5:f6:78:27:6b:1b:4d: f5:c5:ed:b8:af:4d:80:77:6d:d0:cd:8e:c7:ad:63: 02:ec:d7:b7:ea:44:bd:8b:af:6b:5e:43:85:7e:5c: 16:0c:c3:bc:76:1a:8e:19:0d:c4:6d:de:47:6b:2c: c8:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:1F:F6:2A:BF:9A:EF:DD:1F:94:4F:07:73:B5:79:E2:6F:13:F5:08 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fb9de6de-d07b-4398-b9b7-8021d2cbac45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.245.218.0/24 Signature Algorithm: sha256WithRSAEncryption af:a4:dd:3f:ff:25:18:20:a4:a0:ba:13:4f:ae:53:98:bf:61: e7:a7:af:d9:ab:be:74:b1:a0:95:7c:4f:36:95:d7:11:31:6b: d9:f3:43:f3:a4:2f:ff:4b:ec:8c:d5:b7:3d:64:5c:76:ca:e7: e4:42:16:7d:76:98:6b:c2:cf:38:ea:ab:90:92:76:6d:ed:ac: f9:98:32:b4:0e:ed:0a:bf:af:e2:3b:57:d4:5f:ca:11:6d:1c: aa:0d:46:16:93:cb:94:1f:3a:c3:45:5c:7c:bc:7e:e5:9a:b3: 9f:b8:0f:67:49:14:ad:b2:0d:c8:d8:16:bf:0e:26:35:28:5e: d8:f6:73:b6:cb:56:f6:bf:7f:89:e2:48:ff:e5:11:3b:27:76: 12:cc:b8:d4:8e:5a:51:d0:c5:3c:09:b7:55:34:cd:70:3c:ae: b4:e5:c8:4b:e0:c5:94:98:11:1e:47:4e:bf:bf:f0:28:2d:5f: 76:2f:0b:74:74:03:6a:d5:94:d6:ae:7e:86:1e:28:a4:71:c3: 10:15:6f:2a:29:13:39:31:14:7f:49:59:3e:26:38:8d:59:83: f5:55:cf:69:00:9b:5b:7a:35:60:cd:f3:c2:9e:ad:56:12:cc: 74:1d:7c:38:b8:6a:a5:5e:8b:7c:98:1f:a4:4d:41:a4:9b:43: 82:69:72:33 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQumx0QeuaQo8exBdUxfjHnhpQ7swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MjE0MTI0WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BmOTRkMWJjMmU2OTNhNmE4YmYwMjQ4NmMyZTY4YzI5ZGVk OTljMmQ3NDljM2Q3ZDNhMDJiZGE4ODFhOGIxMmE1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCQxqrRJGv+1h3a/iMoE7/5/EIiv+myxYMLyd3KskNmnTjK 8YwtnRDKiVnV+5ORWLBpvX1qNncjD8aHDdFgZcMaNFMn3BkUziMwMNP+U+fZ4syP WyNvoczjEthCQFux5o4JW//1wlwSLLyZXWBuDa38739ay2QD0i2LeirBouNtgLTi Fx4s3QvyHwel6kkY3DVdXM3sEqsZ21TQhvlIAPE2hh6bUO0a0cZBhGTOKXlhVLhw Z41GBEdcBma23r86gY079ZfZimAdnGWm9fZ4J2sbTfXF7bivTYB3bdDNjsetYwLs 17fqRL2Lr2teQ4V+XBYMw7x2Go4ZDcRt3kdrLMitAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUVh/2Kr+a790flE8Hc7V54m8T9QgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2ZiOWRlNmRlLWQwN2ItNDM5OC1iOWI3LTgwMjFkMmNiYWM0NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAS9dowDQYJKoZIhvcNAQELBQADggEBAK+k3T//JRggpKC6E0+uU5i/Yeen r9mrvnSxoJV8TzaV1xExa9nzQ/OkL/9L7IzVtz1kXHbK5+RCFn12mGvCzzjqq5CS dm3trPmYMrQO7Qq/r+I7V9RfyhFtHKoNRhaTy5QfOsNFXHy8fuWas5+4D2dJFK2y DcjYFr8OJjUoXtj2c7bLVva/f4niSP/lETsndhLMuNSOWlHQxTwJt1U0zXA8rrTl yEvgxZSYER5HTr+/8CgtX3YvC3R0A2rVlNaufoYeKKRxwxAVbyopEzkxFH9JWT4m OI1Zg/VVz2kAm1t6NWDN88KerVYSzHQdfDi4aqVei3yYH6RNQaSbQ4JpcjM= -----END CERTIFICATE-----Generated at Mon Oct 20 18:11:48 2025 by rpki-client