$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2198d865-6c55-42e9-b327-b2c7282ae3c9.roa File: 2198d865-6c55-42e9-b327-b2c7282ae3c9.roa (raw, json) Hash identifier: uy8lesjteJDI/hFfua9QbYLrh2khYCh8NJMejTfy1mY= Subject key identifier: FE:10:55:0C:1C:23:70:24:55:42:EF:34:3F:82:E3:1B:5F:1D:88:94 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1223851F4E20BC84237F86D6B37C82874F181525 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2198d865-6c55-42e9-b327-b2c7282ae3c9.roa Signing time: Mon 22 Sep 2025 19:00:08 +0000 ROA not before: Mon 22 Sep 2025 19:00:08 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.161.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:23:85:1f:4e:20:bc:84:23:7f:86:d6:b3:7c:82:87:4f:18:15:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 19:00:08 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=d1d89d1bd3152274f440c8fbb27df42f3eecf1fdbaeab6d1c472c4f0f24f2a0e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8b:b8:57:8c:45:81:9d:3b:d7:8e:d6:20:f2: c8:7a:5b:54:3b:6f:2d:49:e3:a3:12:49:59:0c:e1: ff:8f:b6:05:9f:74:25:19:eb:81:a5:71:60:ba:2e: e3:32:2b:97:93:d4:dd:7a:1a:7c:43:50:d9:e2:85: 37:f8:c4:3f:d9:0e:ca:a3:34:90:0c:f2:63:f8:d2: 70:07:98:0a:c6:83:19:5d:d7:1a:2f:ff:a5:c9:bf: 2d:87:1c:20:e5:c4:7e:b9:ca:af:2f:c3:df:27:20: 67:a9:7d:60:ae:7e:ed:f1:d1:4b:bc:1b:5a:b2:4c: 99:ae:56:be:fd:39:7b:98:92:29:78:01:0e:2d:14: 5f:b2:81:6f:ce:88:36:6e:08:2f:e3:80:c9:f1:8e: f2:e9:3a:39:e3:a1:52:cc:9a:21:89:9d:9e:f9:75: 26:7d:0a:05:cc:42:a4:de:6a:3c:6c:82:ca:21:89: f9:00:c8:e7:cd:b9:dc:33:c4:29:9e:c4:59:6a:bb: a7:68:2f:28:14:76:f9:5e:b2:e7:6a:12:e0:08:a1: a2:02:93:47:9a:4a:69:f4:f3:b8:b1:fe:3d:49:74: 10:d9:27:2b:c4:3a:8a:c8:9d:f1:bd:02:7c:0e:88: cd:50:27:51:70:b7:43:e9:bc:66:1c:b1:aa:a8:63: d4:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:10:55:0C:1C:23:70:24:55:42:EF:34:3F:82:E3:1B:5F:1D:88:94 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2198d865-6c55-42e9-b327-b2c7282ae3c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.161.88.0/23 Signature Algorithm: sha256WithRSAEncryption 5d:63:3b:88:33:f5:5b:4d:18:63:19:d1:fb:af:68:bc:8a:dd: 6a:c2:9e:cb:7e:8d:5a:26:b0:d2:84:72:82:75:db:b0:b5:ad: d9:b7:d9:1b:c1:53:6f:89:c1:b9:6b:ee:f1:97:24:f0:c3:45: 8e:cc:09:67:d9:13:5f:d2:ee:17:e1:b0:a7:45:82:33:d5:d3: 9d:01:a8:e8:01:e6:cf:e4:62:c1:16:23:b8:2b:86:d9:c5:c7: a5:72:01:bb:ac:de:3b:c2:6e:bd:27:ba:71:9f:f9:11:2b:6a: 6d:89:45:f4:f7:5f:89:76:02:0d:df:dc:d3:0c:7a:c6:1f:ca: 5c:a2:2d:ad:1f:a1:bb:ab:4e:5e:b9:59:87:cc:dc:b1:d3:d1: e6:de:8b:18:56:57:44:18:a1:b7:06:ea:b7:a9:3e:13:59:3e: ac:c1:fc:31:24:9e:54:ff:4b:08:7b:0d:56:db:e2:a4:72:6a: a8:f8:4b:3c:d8:6b:6d:b1:6d:e3:9a:f7:04:b0:ae:40:c8:39: a3:20:1c:a7:aa:b7:4d:dc:1f:f5:24:03:45:4c:b0:56:57:48: 9e:ff:ad:08:cf:38:2b:42:64:c9:d7:5f:75:40:4d:c3:c4:6e: 29:cb:db:f9:ff:8d:27:c6:4c:2a:57:22:47:40:ba:52:de:12: bd:f6:43:66 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEiOFH04gvIQjf4bWs3yCh08YFSUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMTkwMDA4WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BkMWQ4OWQxYmQzMTUyMjc0ZjQ0MGM4ZmJiMjdkZjQyZjNl ZWNmMWZkYmFlYWI2ZDFjNDcyYzRmMGYyNGYyYTBlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGi7hXjEWBnTvXjtYg8sh6W1Q7by1J46MSSVkM4f+PtgWf dCUZ64GlcWC6LuMyK5eT1N16GnxDUNnihTf4xD/ZDsqjNJAM8mP40nAHmArGgxld 1xov/6XJvy2HHCDlxH65yq8vw98nIGepfWCufu3x0Uu8G1qyTJmuVr79OXuYkil4 AQ4tFF+ygW/OiDZuCC/jgMnxjvLpOjnjoVLMmiGJnZ75dSZ9CgXMQqTeajxsgsoh ifkAyOfNudwzxCmexFlqu6doLygUdvlesudqEuAIoaICk0eaSmn087ix/j1JdBDZ JyvEOorInfG9AnwOiM1QJ1Fwt0PpvGYcsaqoY9QLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU/hBVDBwjcCRVQu80P4LjG18diJQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzIxOThkODY1LTZjNTUtNDJlOS1iMzI3LWIyYzcyODJhZTNjOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESoVgwDQYJKoZIhvcNAQELBQADggEBAF1jO4gz9VtNGGMZ0fuvaLyK3WrC nst+jVomsNKEcoJ127C1rdm32RvBU2+Jwblr7vGXJPDDRY7MCWfZE1/S7hfhsKdF gjPV050BqOgB5s/kYsEWI7grhtnFx6VyAbus3jvCbr0nunGf+REram2JRfT3X4l2 Ag3f3NMMesYfylyiLa0foburTl65WYfM3LHT0ebeixhWV0QYobcG6repPhNZPqzB /DEknlT/Swh7DVbb4qRyaqj4SzzYa22xbeOa9wSwrkDIOaMgHKeqt03cH/UkA0VM sFZXSJ7/rQjPOCtCZMnXX3VATcPEbinL2/n/jSfGTCpXIkdAulLeEr32Q2Y= -----END CERTIFICATE-----Generated at Sat Oct 18 05:12:27 2025 by rpki-client