$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/203bc59d-b3ad-4d30-a669-45ec9ce3f507.roa File: 203bc59d-b3ad-4d30-a669-45ec9ce3f507.roa (raw, json) Hash identifier: 04H6w3YA7h9CESuHeUS4zMhpYEeSmBs0Jh6YOR+u7d4= Subject key identifier: 3F:42:F8:93:0A:41:1B:98:9D:96:FC:2C:E5:1C:CC:17:E4:13:FC:87 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 04E4BAE8D712A84859D2A50AF109D95AA78C27E8 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/203bc59d-b3ad-4d30-a669-45ec9ce3f507.roa Signing time: Mon 22 Sep 2025 22:44:56 +0000 ROA not before: Mon 22 Sep 2025 22:44:56 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.244.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:e4:ba:e8:d7:12:a8:48:59:d2:a5:0a:f1:09:d9:5a:a7:8c:27:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 22:44:56 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=e1686f66c6aad1702d1f100390be69e8df492d3a4c72169e9e8f7a35c7495f10, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:4d:08:2f:8a:f2:63:b2:cc:41:cb:90:3b:f6: a4:bb:9c:a9:67:97:52:6d:9f:e5:26:a2:65:e8:39: 02:82:0d:d2:f0:5c:af:91:bd:9b:4f:b2:58:d7:64: 96:1b:b8:ea:33:53:7d:78:ea:eb:be:70:16:1d:fd: 30:48:6c:68:c9:f5:e8:b9:af:17:d3:7e:6b:e4:8c: 9c:72:96:b1:55:cf:e3:fa:23:c4:5d:42:b9:b7:c3: 30:66:89:30:5a:4d:2d:c1:35:b9:41:ec:7b:69:01: 30:e3:ba:44:14:e6:a9:66:06:2e:8b:e7:50:ca:96: 18:0e:5f:59:9b:e7:bf:c8:dc:9b:f1:45:36:74:42: fd:7e:89:be:c3:07:13:46:d1:b2:d8:e6:c9:fe:b9: 76:13:02:b3:d5:72:ae:48:8b:d2:de:60:f0:7e:48: 70:af:d3:a7:4c:11:e8:b6:30:2a:be:be:6e:bf:18: 46:9d:61:fa:6f:bc:ec:18:15:16:a6:b4:8f:0c:0e: b7:ea:de:69:f8:3d:72:c1:47:12:5a:f9:53:de:57: 5f:6f:6a:61:e0:f3:ca:46:e1:0b:4c:26:56:9f:81: 5a:3c:98:b9:30:0c:14:31:77:e5:5d:a0:6a:ce:e5: 24:ce:d0:d8:dd:e7:d3:44:0e:f1:63:18:79:b6:8c: 5d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:42:F8:93:0A:41:1B:98:9D:96:FC:2C:E5:1C:CC:17:E4:13:FC:87 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/203bc59d-b3ad-4d30-a669-45ec9ce3f507.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.244.72.0/24 Signature Algorithm: sha256WithRSAEncryption a9:6d:30:8d:61:a1:9b:27:64:97:a6:ac:0d:ca:5d:6b:e6:50: 05:74:f9:cd:42:64:63:50:94:24:d0:e6:e2:d5:39:d7:6e:a8: c1:40:c4:3e:a2:01:ec:f3:ee:d7:fc:5e:19:5d:16:26:91:72: ef:09:c6:6b:fa:65:42:f7:2a:35:ac:52:73:40:65:36:5f:65: 1d:cd:79:2d:2f:39:22:97:14:4d:6a:6f:c9:a0:e7:1b:2b:61: dc:19:84:f7:e4:1c:00:46:7b:6a:40:14:9e:66:78:3e:e7:ab: 08:1f:cc:2b:3c:ed:79:e1:7c:43:4d:17:0b:c2:71:9f:de:26: 54:47:87:34:d1:75:61:64:b8:1f:35:e5:bf:a9:df:80:54:cb: f9:16:a8:e6:ad:8a:65:0e:f3:38:dc:ce:f6:01:ee:d4:9e:79: 4b:83:41:f9:19:81:dd:e8:e0:c4:0d:35:c2:73:da:06:5e:4b: 72:ff:45:bb:f1:ba:34:0f:b9:a1:fc:e7:18:1a:e0:ae:bd:fb: 49:97:a1:67:dc:cc:f8:ec:71:b0:9b:09:af:65:ad:33:9c:a8: 3e:22:3a:8c:5d:75:da:5a:22:af:03:8b:c2:0f:28:42:a2:cf: 65:88:84:ea:d1:e0:83:23:01:b8:db:6a:56:93:93:5b:39:ae: c4:d7:5a:6c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBOS66NcSqEhZ0qUK8QnZWqeMJ+gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjI0NDU2WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BlMTY4NmY2NmM2YWFkMTcwMmQxZjEwMDM5MGJlNjllOGRm NDkyZDNhNGM3MjE2OWU5ZThmN2EzNWM3NDk1ZjEwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCRTQgvivJjssxBy5A79qS7nKlnl1Jtn+UmomXoOQKCDdLw XK+RvZtPsljXZJYbuOozU3146uu+cBYd/TBIbGjJ9ei5rxfTfmvkjJxylrFVz+P6 I8RdQrm3wzBmiTBaTS3BNblB7HtpATDjukQU5qlmBi6L51DKlhgOX1mb57/I3Jvx RTZ0Qv1+ib7DBxNG0bLY5sn+uXYTArPVcq5Ii9LeYPB+SHCv06dMEei2MCq+vm6/ GEadYfpvvOwYFRamtI8MDrfq3mn4PXLBRxJa+VPeV19vamHg88pG4QtMJlafgVo8 mLkwDBQxd+VdoGrO5STO0Njd59NEDvFjGHm2jF2hAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUP0L4kwpBG5idlvws5RzMF+QT/IcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzIwM2JjNTlkLWIzYWQtNGQzMC1hNjY5LTQ1ZWM5Y2UzZjUwNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAS9EgwDQYJKoZIhvcNAQELBQADggEBAKltMI1hoZsnZJemrA3KXWvmUAV0 +c1CZGNQlCTQ5uLVOdduqMFAxD6iAezz7tf8XhldFiaRcu8Jxmv6ZUL3KjWsUnNA ZTZfZR3NeS0vOSKXFE1qb8mg5xsrYdwZhPfkHABGe2pAFJ5meD7nqwgfzCs87Xnh fENNFwvCcZ/eJlRHhzTRdWFkuB815b+p34BUy/kWqOatimUO8zjczvYB7tSeeUuD QfkZgd3o4MQNNcJz2gZeS3L/RbvxujQPuaH85xga4K69+0mXoWfczPjscbCbCa9l rTOcqD4iOoxdddpaIq8Di8IPKEKiz2WIhOrR4IMjAbjbalaTk1s5rsTXWmw= -----END CERTIFICATE-----Generated at Fri Oct 17 22:17:41 2025 by rpki-client