$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bbceb781-91f6-435f-99a6-bd173eac25f1.roa File: bbceb781-91f6-435f-99a6-bd173eac25f1.roa (raw, json) Hash identifier: sdclJxiZahD4g6VClHLSKHX4m15QInc229ghUISs+dc= Subject key identifier: 8B:3E:F8:AE:81:D1:5B:C7:7C:50:48:82:60:76:D8:D1:96:75:65:54 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3CB5BAD8A4B4E1DCC1ECB4464D59C0059FF26AB8 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bbceb781-91f6-435f-99a6-bd173eac25f1.roa Signing time: Fri 19 Sep 2025 00:23:38 +0000 ROA not before: Fri 19 Sep 2025 00:23:38 +0000 ROA not after: Fri 24 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.68.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:b5:ba:d8:a4:b4:e1:dc:c1:ec:b4:46:4d:59:c0:05:9f:f2:6a:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 19 00:23:38 2025 GMT Not After : Oct 24 23:59:59 2025 GMT Subject: serialNumber=eb1f61fe6d9a14b818d0896eddf46a457f5180591c02d636164a6224f492912d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:3e:d1:c1:fd:70:21:8b:08:af:1a:05:a0:3c: f0:33:0f:db:ee:9a:a0:7e:25:34:5b:79:3a:6e:97: 93:41:69:44:37:d0:87:67:46:f5:9a:82:0e:40:fa: 0c:0f:ae:d0:4d:3a:7a:91:94:81:ec:e1:1a:1f:17: e3:fc:c1:39:98:43:3c:34:ab:33:21:20:9a:18:c4: 69:54:94:d4:53:76:33:83:45:17:a4:cf:70:4f:a5: c6:d4:76:97:be:9f:f3:04:ee:26:17:6d:2d:65:5e: 43:56:d1:cb:27:5d:bd:2c:ab:6c:f8:62:a7:f5:f3: 93:3e:46:7c:bd:88:dd:3c:eb:e1:df:5e:c1:45:9b: b5:dd:42:56:1f:fe:17:38:cf:ec:9a:00:00:10:f9: cf:f9:e0:4f:7c:49:68:f2:3d:30:54:73:35:f7:89: 46:39:b9:2a:6c:9a:89:50:48:ab:58:81:ac:ec:09: dc:72:1c:d5:1e:a1:3d:43:de:13:2e:d3:f3:a7:18: d7:b3:cf:6d:46:2f:c7:d2:8a:aa:7c:e6:39:42:8e: b5:0e:96:34:c0:77:9f:ba:0b:a5:a4:cf:83:fd:ca: 03:f0:25:aa:bd:91:a3:17:00:33:c6:94:18:2c:8c: 1c:06:97:17:28:42:5a:df:75:6f:76:9b:6f:82:78: 77:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:3E:F8:AE:81:D1:5B:C7:7C:50:48:82:60:76:D8:D1:96:75:65:54 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bbceb781-91f6-435f-99a6-bd173eac25f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.68.109.0/24 Signature Algorithm: sha256WithRSAEncryption ac:2c:1a:4f:a9:16:70:1d:f7:ff:64:42:48:a2:be:f6:2f:b8: bf:73:73:bf:a7:31:d7:35:e1:71:4e:bc:b8:22:88:40:b3:a3: 4d:ea:19:2e:5e:7d:be:ff:13:c9:5d:46:6b:2a:e1:d2:47:78: 34:35:ef:54:bb:ca:a4:26:ae:ec:5a:88:42:40:59:dc:b0:a9: c0:90:f2:bf:ab:bd:03:d0:d2:76:10:af:49:ee:10:aa:d3:9a: e8:c8:c8:07:2a:0a:1c:94:00:fe:fa:69:81:36:8f:c9:47:16: 8f:56:88:96:76:57:24:af:f8:af:c5:f9:67:13:74:17:42:07: a0:b2:27:6a:4d:21:cf:70:13:99:bb:94:aa:45:f8:92:18:83: d9:d7:3e:c7:42:c3:ec:b6:12:e8:dc:7f:51:ee:9e:96:1b:71: a5:0b:fa:e0:6f:c1:69:8e:00:1c:6a:e7:6b:ec:23:21:f8:d5: 8a:bb:99:97:af:2a:3d:b5:7a:9f:23:2d:2b:a8:4f:54:c0:e7: 92:95:71:01:62:a0:53:ad:3a:32:69:a2:91:6a:76:1f:70:32: f9:e2:38:b3:ff:d9:f1:c2:3d:dd:61:ac:35:26:c5:0d:ed:e6: c4:01:e7:78:af:a1:ff:34:71:9c:d9:c8:30:31:a7:52:32:a7: 01:60:ce:9d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPLW62KS04dzB7LRGTVnABZ/yargwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTE5MDAyMzM4WhcNMjUxMDI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BlYjFmNjFmZTZkOWExNGI4MThkMDg5NmVkZGY0NmE0NTdm NTE4MDU5MWMwMmQ2MzYxNjRhNjIyNGY0OTI5MTJkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCXPtHB/XAhiwivGgWgPPAzD9vumqB+JTRbeTpul5NBaUQ3 0IdnRvWagg5A+gwPrtBNOnqRlIHs4RofF+P8wTmYQzw0qzMhIJoYxGlUlNRTdjOD RRekz3BPpcbUdpe+n/ME7iYXbS1lXkNW0csnXb0sq2z4Yqf185M+Rny9iN086+Hf XsFFm7XdQlYf/hc4z+yaAAAQ+c/54E98SWjyPTBUczX3iUY5uSpsmolQSKtYgazs CdxyHNUeoT1D3hMu0/OnGNezz21GL8fSiqp85jlCjrUOljTAd5+6C6Wkz4P9ygPw Jaq9kaMXADPGlBgsjBwGlxcoQlrfdW92m2+CeHd9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUiz74roHRW8d8UEiCYHbY0ZZ1ZVQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2JiY2ViNzgxLTkxZjYtNDM1Zi05OWE2LWJkMTczZWFjMjVmMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASRG0wDQYJKoZIhvcNAQELBQADggEBAKwsGk+pFnAd9/9kQkiivvYvuL9z c7+nMdc14XFOvLgiiECzo03qGS5efb7/E8ldRmsq4dJHeDQ171S7yqQmruxaiEJA WdywqcCQ8r+rvQPQ0nYQr0nuEKrTmujIyAcqChyUAP76aYE2j8lHFo9WiJZ2VySv +K/F+WcTdBdCB6CyJ2pNIc9wE5m7lKpF+JIYg9nXPsdCw+y2Eujcf1HunpYbcaUL +uBvwWmOABxq52vsIyH41Yq7mZevKj21ep8jLSuoT1TA55KVcQFioFOtOjJpopFq dh9wMvniOLP/2fHCPd1hrDUmxQ3t5sQB53ivof80cZzZyDAxp1IypwFgzp0= -----END CERTIFICATE-----Generated at Fri Sep 19 08:02:24 2025 by rpki-client