$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/795f44b1-e68b-476d-a0be-f57f86632a37.roa File: 795f44b1-e68b-476d-a0be-f57f86632a37.roa (raw, json) Hash identifier: RcLgPCX7xe2DX+Hxera+Px0tCailrEMkatpmQft+leU= Subject key identifier: 34:39:9B:E4:47:45:F5:31:9C:B6:05:22:71:6D:0D:AD:08:AF:62:D0 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2CF8EAB82265E80376EBB5B3B0386A43FCD06E9B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/795f44b1-e68b-476d-a0be-f57f86632a37.roa Signing time: Fri 19 Sep 2025 00:39:05 +0000 ROA not before: Fri 19 Sep 2025 00:39:05 +0000 ROA not after: Fri 24 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.68.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:f8:ea:b8:22:65:e8:03:76:eb:b5:b3:b0:38:6a:43:fc:d0:6e:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 19 00:39:05 2025 GMT Not After : Oct 24 23:59:59 2025 GMT Subject: serialNumber=2918f274ec98287f31956b7245826694c94316642f03e8588adc1ad5570d12d9, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:dc:70:27:07:18:ab:c4:69:d1:4e:f2:53:d4: 06:28:16:83:95:30:02:b6:62:eb:f4:54:53:09:a8: f2:b1:e3:a0:73:3c:f3:3c:48:6d:06:99:7f:9c:3b: d0:87:07:fc:1a:56:bb:63:de:4b:c5:d8:e4:2e:3f: a7:e1:9a:8a:22:8d:2f:8b:d0:c1:32:7a:0b:0b:25: f4:e2:9a:eb:a7:5e:d7:cb:f0:39:73:4d:d7:5c:73: 2c:9e:6e:be:6d:24:2a:c4:0f:c0:6c:dd:dc:7d:dc: 79:32:15:e0:2b:fb:7e:d6:61:72:9e:d4:55:02:8c: 74:2d:79:66:90:22:d9:81:e3:b4:c5:fd:b0:a3:c9: ec:24:e0:1e:0e:96:92:07:dc:24:1d:41:d5:93:e4: 9c:aa:fc:bb:16:3a:dc:d4:7a:82:90:e0:cc:f9:ba: 00:78:ae:b2:51:c5:99:54:5e:c1:91:e7:7e:d2:07: 42:f6:70:06:ff:4b:fb:74:35:bd:e4:d4:38:75:43: 5e:24:b7:34:56:47:1a:d2:0a:1f:eb:b9:2b:05:59: f8:ef:46:44:a9:e2:b7:bd:a8:8a:e5:7b:16:d7:67: 29:70:a2:2b:64:04:b4:a2:72:db:09:74:ee:10:0b: 61:fb:fb:6e:b1:9b:e9:79:bf:ad:4e:ad:a6:bc:83: a1:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:39:9B:E4:47:45:F5:31:9C:B6:05:22:71:6D:0D:AD:08:AF:62:D0 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/795f44b1-e68b-476d-a0be-f57f86632a37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.68.50.0/24 Signature Algorithm: sha256WithRSAEncryption 74:d8:b6:7d:c4:30:e2:69:06:42:8f:57:59:b6:00:19:58:d8: c7:81:ec:06:81:b5:da:f9:d6:17:0c:53:36:c7:fc:7b:c6:f7: fc:3e:4b:a3:16:56:fa:11:f2:ff:40:6b:c5:eb:f3:f8:66:4c: 9d:b4:1a:8f:2b:a1:48:24:ae:7e:d7:81:a5:5b:35:3a:a0:ef: 1e:bf:cb:5e:00:9b:f0:3a:e0:5a:f6:30:88:93:3c:98:f6:58: b8:e0:39:5b:c3:b5:ed:55:f8:61:e7:1e:f8:7e:60:a4:65:03: e9:c3:7a:89:22:fe:eb:41:ea:64:81:15:4d:01:fb:c3:fc:ba: 8a:f2:74:d4:c6:f1:dc:90:43:0c:c2:ea:5f:6a:42:d9:ad:87: 77:5d:b2:d4:44:66:02:87:52:73:91:07:cd:bb:5b:4a:1b:75: 20:25:fe:df:8e:5f:ac:28:83:58:b7:29:cc:db:be:82:47:da: 69:fc:d9:57:49:d4:a7:b1:c0:ad:5f:45:bb:85:8a:de:11:6e: 8e:6b:49:83:90:b2:fa:f5:d8:cb:43:1d:c4:e7:4c:37:20:38: 2f:47:08:73:83:11:39:47:08:ab:f9:87:94:1c:4c:b4:70:d5: fa:69:ff:f1:54:0f:41:84:6c:63:bf:e4:a7:26:8e:57:f5:f9: b1:09:9a:dc -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULPjquCJl6AN267WzsDhqQ/zQbpswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTE5MDAzOTA1WhcNMjUxMDI0MjM1OTU5 WjB6MUkwRwYDVQQFE0AyOTE4ZjI3NGVjOTgyODdmMzE5NTZiNzI0NTgyNjY5NGM5 NDMxNjY0MmYwM2U4NTg4YWRjMWFkNTU3MGQxMmQ5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCP3HAnBxirxGnRTvJT1AYoFoOVMAK2Yuv0VFMJqPKx46Bz PPM8SG0GmX+cO9CHB/waVrtj3kvF2OQuP6fhmooijS+L0MEyegsLJfTimuunXtfL 8DlzTddccyyebr5tJCrED8Bs3dx93HkyFeAr+37WYXKe1FUCjHQteWaQItmB47TF /bCjyewk4B4OlpIH3CQdQdWT5Jyq/LsWOtzUeoKQ4Mz5ugB4rrJRxZlUXsGR537S B0L2cAb/S/t0Nb3k1Dh1Q14ktzRWRxrSCh/ruSsFWfjvRkSp4re9qIrlexbXZylw oitkBLSictsJdO4QC2H7+26xm+l5v61Oraa8g6HTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUNDmb5EdF9TGctgUicW0NrQivYtAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzc5NWY0NGIxLWU2OGItNDc2ZC1hMGJlLWY1N2Y4NjYzMmEzNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASRDIwDQYJKoZIhvcNAQELBQADggEBAHTYtn3EMOJpBkKPV1m2ABlY2MeB 7AaBtdr51hcMUzbH/HvG9/w+S6MWVvoR8v9Aa8Xr8/hmTJ20Go8roUgkrn7XgaVb NTqg7x6/y14Am/A64Fr2MIiTPJj2WLjgOVvDte1V+GHnHvh+YKRlA+nDeoki/utB 6mSBFU0B+8P8uorydNTG8dyQQwzC6l9qQtmth3ddstREZgKHUnORB827W0obdSAl /t+OX6wog1i3KczbvoJH2mn82VdJ1KexwK1fRbuFit4Rbo5rSYOQsvr12MtDHcTn TDcgOC9HCHODETlHCKv5h5QcTLRw1fpp//FUD0GEbGO/5Kcmjlf1+bEJmtw= -----END CERTIFICATE-----Generated at Fri Sep 19 11:15:03 2025 by rpki-client