$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/201e5d44-d9ef-4029-bc67-cd4bcd31578c.roa File: 201e5d44-d9ef-4029-bc67-cd4bcd31578c.roa (raw, json) Hash identifier: 3mrSGpGugnQ2/eZR2LAyh3MuzGcK578VV2NSHuvwFY8= Subject key identifier: 9C:14:A8:D7:D3:EE:73:DA:19:54:22:C2:0E:CF:26:6C:65:7C:48:2F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2D6AEE25E08332A653FB27A1D6653C54DDAC7EA1 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/201e5d44-d9ef-4029-bc67-cd4bcd31578c.roa Signing time: Fri 19 Sep 2025 00:39:21 +0000 ROA not before: Fri 19 Sep 2025 00:39:21 +0000 ROA not after: Fri 24 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.68.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:6a:ee:25:e0:83:32:a6:53:fb:27:a1:d6:65:3c:54:dd:ac:7e:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 19 00:39:21 2025 GMT Not After : Oct 24 23:59:59 2025 GMT Subject: serialNumber=7090891a87934c7eff814c1ca438224dec86683397e8b65e1f7f092088060321, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:55:5f:1c:7e:3a:65:e4:fc:25:0f:72:44:10: ac:c8:3a:4e:5d:c5:b7:2c:98:6a:30:21:d4:b7:7b: 39:39:72:18:45:5d:e8:80:f7:7d:13:eb:f4:78:ce: 1c:03:75:51:48:fa:1b:0f:33:c4:6b:91:fa:48:ab: 29:05:d1:35:ae:dd:52:28:78:00:8b:bc:eb:4b:5d: f8:50:42:82:90:7d:db:87:fd:1c:02:67:47:0f:2b: b6:1b:50:24:92:ce:0d:ef:a7:d2:85:b4:73:85:72: 48:f8:37:6f:6d:33:05:4b:80:87:7f:55:5f:a4:e2: e9:2f:19:23:4a:3e:e1:b4:83:e5:e8:cb:82:d9:29: cb:0c:f3:54:a2:f1:e2:31:9a:a1:b7:69:15:23:37: 2a:b9:bf:ba:5d:03:42:da:d5:bc:da:8e:37:2b:92: cc:00:4f:69:df:93:16:3b:ec:3b:92:5e:25:47:f0: 7a:d2:6a:9f:8b:36:4e:41:9c:cc:7c:21:5c:f5:2e: 1d:51:58:ed:4c:fd:a7:09:1a:25:76:db:8b:28:ce: 6e:f9:3e:21:c0:23:d4:8c:a2:e6:dd:52:af:30:b9: 91:c2:2e:e5:e5:de:58:ca:b2:e6:72:61:fe:fb:c7: 0c:88:51:e7:53:f8:a0:3b:a1:f3:b4:e0:98:71:ef: de:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:14:A8:D7:D3:EE:73:DA:19:54:22:C2:0E:CF:26:6C:65:7C:48:2F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/201e5d44-d9ef-4029-bc67-cd4bcd31578c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.68.68.0/24 Signature Algorithm: sha256WithRSAEncryption 06:eb:87:a2:62:97:3d:57:7a:1b:f5:da:5f:73:c4:92:88:00: eb:d2:b8:a7:c9:09:96:d0:2a:7b:75:5f:a8:49:86:8f:7f:3f: 30:ab:b2:f8:80:0b:56:16:8f:e8:48:a3:50:6b:2c:7c:71:06: 7c:6d:c9:06:df:23:25:e9:44:9d:a6:e2:2d:c2:39:24:23:18: eb:95:b2:c9:59:ad:6e:cb:36:f1:71:3d:f7:6b:ac:d6:f8:c9: 29:4e:ac:75:71:fe:6f:5b:42:b6:03:08:8f:c7:3d:ec:0f:42: 44:db:d5:03:a0:32:51:ea:d5:e7:56:cc:73:d7:bf:09:14:b3: 67:27:da:8e:49:16:26:a1:5a:13:77:7e:2c:9d:29:9c:59:b2: 9b:4a:4c:d7:1e:8f:fd:47:3a:6d:23:32:25:1e:de:2d:94:f1: 5e:cf:60:5c:a3:a2:41:07:fa:b9:25:b0:ea:1c:3f:83:e3:4d: 60:0a:a7:0c:e6:07:cc:2a:7e:31:3b:c4:e2:bf:c4:b0:5d:9f: 06:90:99:b3:c6:35:ac:d6:91:3e:ff:83:67:ac:62:91:f8:aa: be:c8:b0:a7:e0:ce:1f:c7:b9:14:0f:1b:17:27:99:03:95:e9: 05:f8:97:84:a2:db:56:62:1b:55:7d:be:2e:7f:2b:cd:4b:53: 4f:e3:12:8f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULWruJeCDMqZT+yeh1mU8VN2sfqEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTE5MDAzOTIxWhcNMjUxMDI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A3MDkwODkxYTg3OTM0YzdlZmY4MTRjMWNhNDM4MjI0ZGVj ODY2ODMzOTdlOGI2NWUxZjdmMDkyMDg4MDYwMzIxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDvVV8cfjpl5PwlD3JEEKzIOk5dxbcsmGowIdS3ezk5chhF XeiA930T6/R4zhwDdVFI+hsPM8RrkfpIqykF0TWu3VIoeACLvOtLXfhQQoKQfduH /RwCZ0cPK7YbUCSSzg3vp9KFtHOFckj4N29tMwVLgId/VV+k4ukvGSNKPuG0g+Xo y4LZKcsM81Si8eIxmqG3aRUjNyq5v7pdA0La1bzajjcrkswAT2nfkxY77DuSXiVH 8HrSap+LNk5BnMx8IVz1Lh1RWO1M/acJGiV224sozm75PiHAI9SMoubdUq8wuZHC LuXl3ljKsuZyYf77xwyIUedT+KA7ofO04Jhx794hAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUnBSo19Puc9oZVCLCDs8mbGV8SC8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzIwMWU1ZDQ0LWQ5ZWYtNDAyOS1iYzY3LWNkNGJjZDMxNTc4Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASREQwDQYJKoZIhvcNAQELBQADggEBAAbrh6Jilz1Xehv12l9zxJKIAOvS uKfJCZbQKnt1X6hJho9/PzCrsviAC1YWj+hIo1BrLHxxBnxtyQbfIyXpRJ2m4i3C OSQjGOuVsslZrW7LNvFxPfdrrNb4ySlOrHVx/m9bQrYDCI/HPewPQkTb1QOgMlHq 1edWzHPXvwkUs2cn2o5JFiahWhN3fiydKZxZsptKTNcej/1HOm0jMiUe3i2U8V7P YFyjokEH+rklsOocP4PjTWAKpwzmB8wqfjE7xOK/xLBdnwaQmbPGNazWkT7/g2es YpH4qr7IsKfgzh/HuRQPGxcnmQOV6QX4l4Si21ZiG1V9vi5/K81LU0/jEo8= -----END CERTIFICATE-----Generated at Fri Sep 19 10:59:09 2025 by rpki-client