$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aab3b266-1ae0-47e0-ab7d-57dbeb9485e3.roa File: aab3b266-1ae0-47e0-ab7d-57dbeb9485e3.roa (raw, json) Hash identifier: yDEcMKwvwukQN2QPnW7OMKNaxe1BR1YHEWrpH5yvv8M= Subject key identifier: 24:41:6F:E0:94:EF:E7:55:A8:D0:3D:00:E3:4D:95:4B:47:2B:9A:0F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 34D292E6CD54C4604C3907994EA7B957175B341B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aab3b266-1ae0-47e0-ab7d-57dbeb9485e3.roa Signing time: Mon 15 Sep 2025 15:41:52 +0000 ROA not before: Mon 15 Sep 2025 15:41:52 +0000 ROA not after: Mon 20 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 18.88.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:d2:92:e6:cd:54:c4:60:4c:39:07:99:4e:a7:b9:57:17:5b:34:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 15 15:41:52 2025 GMT Not After : Oct 20 23:59:59 2025 GMT Subject: serialNumber=f5cfebadbab33d09547904bceabaa7ddb91c6b883de834b02de6d152a459c904, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6c:90:bb:70:eb:84:97:71:70:6f:db:33:40: 5e:d2:30:eb:16:83:32:6a:65:1c:d3:49:38:8f:c1: a9:5d:22:c9:fd:7a:f8:57:ee:3f:af:24:6f:f5:63: dc:f5:8a:2c:42:66:35:77:27:d1:9a:41:2f:1b:0a: fc:f8:5f:fc:27:a8:2a:bb:3b:5e:9d:10:16:7a:ac: 1c:63:80:b0:9f:41:39:1d:c5:8c:68:42:ae:88:b3: 26:04:df:bb:50:93:64:f9:b9:8c:58:c8:32:79:23: fe:98:60:e1:94:84:d7:0c:38:17:41:c3:09:d0:75: 77:11:fd:cc:de:18:03:13:06:6a:4e:c0:98:f0:9a: a6:55:89:40:1d:59:8d:ed:7b:54:eb:57:ea:0c:f7: 88:6d:5c:d1:0b:f6:55:ab:04:eb:f9:6a:e9:1d:a0: cf:b9:9f:43:51:72:97:90:ef:50:8d:11:ec:78:5f: ab:ec:8c:74:0f:1f:03:07:b4:7f:8a:a4:55:d2:00: 68:d4:ce:39:d3:c2:ac:72:f7:71:ef:85:44:38:bb: 74:32:32:83:e1:50:f8:46:5a:4a:29:63:d8:75:5d: 42:2c:59:c9:e8:38:56:77:fb:a7:61:7f:78:13:2b: 1d:c8:90:22:11:eb:5d:c1:0e:c8:b7:d7:a7:41:a8: a6:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:41:6F:E0:94:EF:E7:55:A8:D0:3D:00:E3:4D:95:4B:47:2B:9A:0F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aab3b266-1ae0-47e0-ab7d-57dbeb9485e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.88.0.0/18 Signature Algorithm: sha256WithRSAEncryption 27:38:da:5e:94:33:e7:57:bc:58:58:d9:5e:24:da:57:7e:1e: ce:5e:45:6c:39:6c:8c:d8:d3:69:c8:7e:12:81:6b:cb:5d:11: 7b:1b:03:fc:de:93:d6:09:8d:4a:1c:33:19:5f:6e:5d:de:74: d8:01:5d:9a:83:8c:b8:3a:84:2b:97:a9:fc:3a:e8:4e:6b:b6: bb:45:34:3c:f4:8a:0e:1a:28:9a:12:29:a3:6f:8f:4b:08:5f: 95:1e:20:5e:11:99:74:a5:87:44:10:92:d9:4f:ef:6e:52:6f: 3d:ec:52:86:a8:ed:9a:b4:9b:f6:c1:b0:25:ae:b4:05:15:0b: 49:a6:7c:97:03:78:06:da:36:71:20:ef:3a:78:13:a0:d3:99: 22:3e:c9:6c:3a:79:1f:bf:93:15:0a:40:9b:7b:94:86:9b:84: 58:c1:18:ab:a2:6e:37:29:52:3b:22:ea:38:b8:ab:74:4d:0d: 0b:ba:fb:10:2a:dc:de:a4:7b:d8:99:93:eb:80:cc:f6:48:40: 05:39:61:66:23:6c:97:28:1c:6f:0c:18:c4:54:a3:72:ae:35: c9:ac:9b:e0:e8:8e:d6:a2:72:3a:8d:7d:64:d0:78:cb:21:ac: b2:d9:1b:35:92:f0:96:52:0c:8d:a6:78:00:ee:2d:9e:9d:a7: 00:df:94:d5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNNKS5s1UxGBMOQeZTqe5VxdbNBswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTE1MTU0MTUyWhcNMjUxMDIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BmNWNmZWJhZGJhYjMzZDA5NTQ3OTA0YmNlYWJhYTdkZGI5 MWM2Yjg4M2RlODM0YjAyZGU2ZDE1MmE0NTljOTA0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2bJC7cOuEl3Fwb9szQF7SMOsWgzJqZRzTSTiPwaldIsn9 evhX7j+vJG/1Y9z1iixCZjV3J9GaQS8bCvz4X/wnqCq7O16dEBZ6rBxjgLCfQTkd xYxoQq6IsyYE37tQk2T5uYxYyDJ5I/6YYOGUhNcMOBdBwwnQdXcR/czeGAMTBmpO wJjwmqZViUAdWY3te1TrV+oM94htXNEL9lWrBOv5aukdoM+5n0NRcpeQ71CNEex4 X6vsjHQPHwMHtH+KpFXSAGjUzjnTwqxy93HvhUQ4u3QyMoPhUPhGWkopY9h1XUIs WcnoOFZ3+6dhf3gTKx3IkCIR613BDsi316dBqKYLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJEFv4JTv51Wo0D0A402VS0crmg8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2FhYjNiMjY2LTFhZTAtNDdlMC1hYjdkLTU3ZGJlYjk0ODVlMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYSWAAwDQYJKoZIhvcNAQELBQADggEBACc42l6UM+dXvFhY2V4k2ld+Hs5e RWw5bIzY02nIfhKBa8tdEXsbA/zek9YJjUocMxlfbl3edNgBXZqDjLg6hCuXqfw6 6E5rtrtFNDz0ig4aKJoSKaNvj0sIX5UeIF4RmXSlh0QQktlP725Sbz3sUoao7Zq0 m/bBsCWutAUVC0mmfJcDeAbaNnEg7zp4E6DTmSI+yWw6eR+/kxUKQJt7lIabhFjB GKuibjcpUjsi6ji4q3RNDQu6+xAq3N6ke9iZk+uAzPZIQAU5YWYjbJcoHG8MGMRU o3KuNcmsm+DojtaicjqNfWTQeMshrLLZGzWS8JZSDI2meADuLZ6dpwDflNU= -----END CERTIFICATE-----Generated at Wed Oct 8 21:14:54 2025 by rpki-client