$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0d35d022-94c2-4e6a-b52a-73401815fe75.roa File: 0d35d022-94c2-4e6a-b52a-73401815fe75.roa (raw, json) Hash identifier: LOZL+7JY/8A6CJMxqlmq5s1nyItKYu73I8g+Z/9IglQ= Subject key identifier: 6E:D2:F4:93:00:38:07:CA:E5:8A:36:FA:F7:4E:FC:4F:18:C9:81:87 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5B7CECAEA3332E21BDDDE375A5347ACF770D42EE Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0d35d022-94c2-4e6a-b52a-73401815fe75.roa Signing time: Mon 22 Sep 2025 22:06:50 +0000 ROA not before: Mon 22 Sep 2025 22:06:50 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.238.70.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:7c:ec:ae:a3:33:2e:21:bd:dd:e3:75:a5:34:7a:cf:77:0d:42:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 22:06:50 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=af3199ea90bc9d25d3ac06d78b6bc1a58e0bd06ad810ec9c08731c15b6d0c8ba, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c3:d4:23:47:74:5e:43:ec:02:0f:68:b4:4e: f7:f9:06:dc:d3:c8:37:87:d3:f9:b6:67:53:7c:f3: f0:f5:40:c5:7e:c6:04:ec:db:11:b3:2e:1f:c3:d6: ce:df:18:14:26:24:d8:c7:9b:d2:2c:34:4d:e7:01: 63:72:9a:3d:3f:29:a4:47:57:1b:7b:85:f7:40:f6: ff:01:56:0a:18:b4:ad:b7:2c:89:6f:46:44:dc:a0: d5:eb:ff:82:81:e7:5c:93:e4:7c:4a:80:02:78:b6: 2b:61:64:dc:a4:0b:09:1e:2c:cb:f5:e8:4e:c6:73: d5:ae:61:e2:41:6e:54:15:65:56:57:26:a1:c0:a9: ef:27:ba:c5:9a:e2:fc:c2:f2:8a:61:9a:59:a1:3f: e6:b5:1a:3a:bc:58:55:64:22:7f:ee:9f:46:18:95: e0:10:25:f8:e0:b7:c7:1f:f0:96:37:06:63:88:24: ae:12:cb:09:aa:3c:02:c6:12:ae:f7:2d:38:c8:88: d3:20:b5:dc:2c:df:f8:17:82:a8:41:ff:cf:e2:fe: 84:4d:11:f5:03:d0:92:f7:ed:7a:36:cb:4e:3e:a7: 47:de:30:62:bc:aa:e6:de:a3:4a:ed:ba:d3:b1:17: 79:a7:90:bb:30:92:0f:a1:c3:ce:66:ee:96:10:be: 9a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:D2:F4:93:00:38:07:CA:E5:8A:36:FA:F7:4E:FC:4F:18:C9:81:87 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0d35d022-94c2-4e6a-b52a-73401815fe75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.238.70.0/23 Signature Algorithm: sha256WithRSAEncryption 85:fd:0b:58:36:76:6a:94:a1:29:39:51:23:48:b3:37:49:8c: 8a:f2:ed:ca:68:fe:fc:11:72:c4:b5:5e:5a:dd:d1:f0:77:15: ce:7b:6d:9e:6a:17:b9:22:a8:fe:69:87:cf:63:aa:cf:73:a4: 1e:50:6b:6a:92:bd:35:c2:b6:0f:53:10:65:c8:d0:0c:04:6f: 28:f7:e6:b0:e8:aa:88:73:e1:07:a2:cd:56:ee:a2:c0:bf:da: 24:50:72:07:5f:34:01:a9:8f:86:b0:2a:fe:c8:18:ac:3b:65: 7b:ff:f7:a4:e0:76:f8:82:5e:f9:e0:2f:e2:f5:16:e3:88:18: 9c:cc:62:cc:a9:d5:25:e7:7e:12:b9:cc:bb:b7:73:e6:b7:1b: 2c:2a:66:07:a0:c9:34:8b:2b:a2:88:c9:8e:ed:72:0f:f1:29: 3a:b1:c9:81:14:0b:3d:b8:1b:de:2f:a2:de:7d:ff:48:5d:c2: 41:37:5a:ae:4e:62:32:12:62:0c:b8:e1:93:55:38:25:d2:5a: ef:f0:d7:72:d3:61:95:ff:3c:86:a8:06:e9:d3:0e:bc:0d:a0: a2:6b:23:14:96:52:c1:b6:f7:8c:ce:15:37:7a:97:1a:74:3f: 5e:db:f5:18:a5:14:b6:d1:fd:f9:2a:19:0d:5d:22:d3:76:7d: f5:85:f5:35 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUW3zsrqMzLiG93eN1pTR6z3cNQu4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjIwNjUwWhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BhZjMxOTllYTkwYmM5ZDI1ZDNhYzA2ZDc4YjZiYzFhNThl MGJkMDZhZDgxMGVjOWMwODczMWMxNWI2ZDBjOGJhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDVw9QjR3ReQ+wCD2i0Tvf5BtzTyDeH0/m2Z1N88/D1QMV+ xgTs2xGzLh/D1s7fGBQmJNjHm9IsNE3nAWNymj0/KaRHVxt7hfdA9v8BVgoYtK23 LIlvRkTcoNXr/4KB51yT5HxKgAJ4tithZNykCwkeLMv16E7Gc9WuYeJBblQVZVZX JqHAqe8nusWa4vzC8ophmlmhP+a1Gjq8WFVkIn/un0YYleAQJfjgt8cf8JY3BmOI JK4SywmqPALGEq73LTjIiNMgtdws3/gXgqhB/8/i/oRNEfUD0JL37Xo2y04+p0fe MGK8qubeo0rtutOxF3mnkLswkg+hw85m7pYQvprBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUbtL0kwA4B8rlijb69078TxjJgYcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzBkMzVkMDIyLTk0YzItNGU2YS1iNTJhLTczNDAxODE1ZmU3NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAES7kYwDQYJKoZIhvcNAQELBQADggEBAIX9C1g2dmqUoSk5USNIszdJjIry 7cpo/vwRcsS1Xlrd0fB3Fc57bZ5qF7kiqP5ph89jqs9zpB5Qa2qSvTXCtg9TEGXI 0AwEbyj35rDoqohz4QeizVbuosC/2iRQcgdfNAGpj4awKv7IGKw7ZXv/96TgdviC XvngL+L1FuOIGJzMYsyp1SXnfhK5zLu3c+a3GywqZgegyTSLK6KIyY7tcg/xKTqx yYEUCz24G94vot59/0hdwkE3Wq5OYjISYgy44ZNVOCXSWu/w13LTYZX/PIaoBunT DrwNoKJrIxSWUsG294zOFTd6lxp0P17b9RilFLbR/fkqGQ1dItN2ffWF9TU= -----END CERTIFICATE-----Generated at Sat Oct 18 02:35:20 2025 by rpki-client