$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d2030544-0c82-471b-bfe1-0bd97ed70d65.roa File: d2030544-0c82-471b-bfe1-0bd97ed70d65.roa (raw, json) Hash identifier: CWWlZM7/0lif32FpIf2YZGaPZkb2R4lA4gcXgREYZJQ= Subject key identifier: BB:D9:10:88:D8:9D:7E:58:05:3C:8F:CD:9C:AC:7F:3C:4C:78:D2:7E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 721CFF8F7471CACA359962C2B20D1CB1D767C53D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d2030544-0c82-471b-bfe1-0bd97ed70d65.roa Signing time: Fri 19 Sep 2025 00:37:18 +0000 ROA not before: Fri 19 Sep 2025 00:37:18 +0000 ROA not after: Fri 24 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.68.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:1c:ff:8f:74:71:ca:ca:35:99:62:c2:b2:0d:1c:b1:d7:67:c5:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 19 00:37:18 2025 GMT Not After : Oct 24 23:59:59 2025 GMT Subject: serialNumber=5084f55e82096dfa03b21dad2c231aae3280a2fabadd01572f6bb37a02c72f31, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:bf:61:78:a6:e4:3c:77:cc:61:f2:05:4f:c7: 84:a6:be:ae:5d:73:99:d6:a3:2e:bb:8d:7b:87:73: 94:66:d6:43:ef:48:b6:ff:dc:c5:f7:ee:5d:5c:e1: a5:1b:ca:3e:26:f7:00:25:6d:16:88:c3:c0:c4:c0: c2:5a:fd:0c:9a:47:13:bb:0b:97:e0:16:35:d0:60: d4:df:c4:71:35:9e:ea:ea:9f:c5:41:81:23:bc:5b: c3:61:b1:89:65:79:a7:36:bb:d2:09:0b:cd:56:2a: 19:e3:4a:e3:51:52:6c:52:ae:b7:eb:6c:69:21:f4: 4c:09:1b:5b:af:21:42:55:94:82:f8:e6:24:ca:1b: f3:c2:87:e2:68:41:0d:4d:c1:3e:74:86:9a:75:8f: f9:ee:c4:74:89:3b:a6:fb:70:c1:47:f0:0f:f6:4e: 0e:5b:5a:f6:a0:c5:cb:71:a5:b6:42:c0:de:1d:7a: 4d:0c:8e:52:5c:f7:0c:04:ab:f1:08:0e:ab:ca:38: 2c:89:03:1f:be:fc:ee:06:fa:3b:de:43:f1:57:4a: 30:61:80:37:ab:56:fc:c6:f5:b7:c6:27:40:bd:ff: 65:33:65:c1:28:c7:60:12:61:20:4c:ff:a5:85:fd: 89:b9:6c:8c:78:21:02:cd:0d:37:80:7e:f7:36:94: 0a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:D9:10:88:D8:9D:7E:58:05:3C:8F:CD:9C:AC:7F:3C:4C:78:D2:7E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d2030544-0c82-471b-bfe1-0bd97ed70d65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.68.222.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:2f:22:d3:2f:3f:92:9c:cd:df:eb:60:fb:54:09:aa:39:92: 6d:a3:f7:b2:ab:7a:02:f8:a2:a6:94:c1:fb:5f:28:cd:95:89: 8b:16:00:00:72:64:0a:c3:04:14:c5:7a:bc:77:07:a2:50:f7: 71:47:f4:93:55:15:fd:7f:5d:83:a4:7d:da:a6:49:4c:c8:8b: 38:9c:7f:47:62:ce:8d:22:4c:4b:95:20:f5:af:1d:07:9c:7b: d3:5f:83:c2:05:9e:70:b7:85:50:98:18:21:c6:60:51:28:62: 56:48:ff:7d:ae:3e:74:6c:4b:4d:79:8f:00:cf:4c:84:15:f6: fa:c4:42:d5:54:44:12:b1:7e:6c:50:3d:5e:7f:be:c2:38:d9: 53:3a:fb:1b:a9:d5:d9:18:7b:86:81:07:80:69:31:ee:2d:34: 68:e0:0a:6f:86:bc:e0:cf:4d:64:cb:b9:b5:64:51:9a:1d:a9: 7b:f4:5d:ef:e1:9f:95:15:a1:c9:c3:ae:66:ed:26:91:9f:fa: db:12:c0:80:67:d4:94:46:97:c5:69:0d:73:63:af:6a:9d:20: b8:16:e1:13:5f:40:03:5d:54:c1:d4:aa:9f:63:63:61:d0:b1: 80:81:8a:83:11:52:50:f0:f5:ab:5b:4f:48:9f:e9:65:b8:1f: d2:42:e1:13 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUchz/j3Rxyso1mWLCsg0csddnxT0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTE5MDAzNzE4WhcNMjUxMDI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A1MDg0ZjU1ZTgyMDk2ZGZhMDNiMjFkYWQyYzIzMWFhZTMy ODBhMmZhYmFkZDAxNTcyZjZiYjM3YTAyYzcyZjMxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDOv2F4puQ8d8xh8gVPx4Smvq5dc5nWoy67jXuHc5Rm1kPv SLb/3MX37l1c4aUbyj4m9wAlbRaIw8DEwMJa/QyaRxO7C5fgFjXQYNTfxHE1nurq n8VBgSO8W8NhsYlleac2u9IJC81WKhnjSuNRUmxSrrfrbGkh9EwJG1uvIUJVlIL4 5iTKG/PCh+JoQQ1NwT50hpp1j/nuxHSJO6b7cMFH8A/2Tg5bWvagxctxpbZCwN4d ek0MjlJc9wwEq/EIDqvKOCyJAx++/O4G+jveQ/FXSjBhgDerVvzG9bfGJ0C9/2Uz ZcEox2ASYSBM/6WF/Ym5bIx4IQLNDTeAfvc2lAq5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUu9kQiNidflgFPI/NnKx/PEx40n4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2QyMDMwNTQ0LTBjODItNDcxYi1iZmUxLTBiZDk3ZWQ3MGQ2NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASRN4wDQYJKoZIhvcNAQELBQADggEBAG4vItMvP5Kczd/rYPtUCao5km2j 97KregL4oqaUwftfKM2ViYsWAAByZArDBBTFerx3B6JQ93FH9JNVFf1/XYOkfdqm SUzIizicf0dizo0iTEuVIPWvHQece9Nfg8IFnnC3hVCYGCHGYFEoYlZI/32uPnRs S015jwDPTIQV9vrEQtVURBKxfmxQPV5/vsI42VM6+xup1dkYe4aBB4BpMe4tNGjg Cm+GvODPTWTLubVkUZodqXv0Xe/hn5UVocnDrmbtJpGf+tsSwIBn1JRGl8VpDXNj r2qdILgW4RNfQANdVMHUqp9jY2HQsYCBioMRUlDw9atbT0if6WW4H9JC4RM= -----END CERTIFICATE-----Generated at Fri Sep 19 03:14:06 2025 by rpki-client