$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/24628954-b2f1-4a76-867f-261550ab0b42.roa File: 24628954-b2f1-4a76-867f-261550ab0b42.roa (raw, json) Hash identifier: DkbJq8j04jhKlgNfqeore6GKrDLlwKQiuJlj5T/0X6s= Subject key identifier: 2E:8D:54:77:46:C1:D5:C1:E4:64:9D:D3:5D:CD:F3:09:0D:27:62:9F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 72BDEF2A0BA6ACB4DD88F7D9E3B8F51420F4B3FE Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/24628954-b2f1-4a76-867f-261550ab0b42.roa Signing time: Mon 22 Sep 2025 22:44:48 +0000 ROA not before: Mon 22 Sep 2025 22:44:48 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.244.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:bd:ef:2a:0b:a6:ac:b4:dd:88:f7:d9:e3:b8:f5:14:20:f4:b3:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 22:44:48 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=2a140942cecc061fec149833d3df96172fe4063100985a1cfdee44c3ef29b732, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:38:48:98:6f:f9:38:b6:50:4e:56:62:dd:cc: f6:41:79:db:05:72:83:2d:12:13:75:a6:54:00:ab: a7:34:26:44:cb:cb:a5:df:01:14:e5:28:bc:21:be: 68:aa:dc:b1:32:4f:eb:8a:49:4d:e1:d7:c3:85:b6: c4:e1:4b:7e:4e:08:d6:a6:f9:ba:98:aa:80:9a:38: 38:44:53:30:18:ed:66:27:fa:bc:40:d1:d6:9a:97: 79:40:19:6e:6b:b8:6a:17:6f:de:f7:7b:09:56:d3: e2:d6:5c:9a:98:14:f9:2b:cb:1d:08:b9:6e:fa:84: e5:77:75:98:ea:97:79:a0:d5:a0:1a:86:5d:4d:30: 81:00:a3:8f:19:2f:46:65:d3:f7:f7:05:dd:ba:4c: b0:8e:9c:5a:b5:f0:9a:46:5a:97:f9:d7:10:f6:46: be:7b:ad:43:e5:0e:98:22:95:dc:d0:58:c0:a8:c9: 5c:13:20:63:f7:5d:cf:99:fb:d8:3b:f8:3a:c6:ab: ec:41:37:a8:4f:82:f5:f8:ae:c9:01:16:b9:46:82: f0:08:50:16:5d:09:75:50:01:2b:79:26:ab:3a:e7: 97:f0:5e:f8:31:e0:c5:9e:ac:28:54:38:d6:fd:19: da:42:31:d2:1b:03:53:8d:be:da:e7:5c:7d:a5:6b: a9:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:8D:54:77:46:C1:D5:C1:E4:64:9D:D3:5D:CD:F3:09:0D:27:62:9F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/24628954-b2f1-4a76-867f-261550ab0b42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.244.64.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:3f:f5:42:4e:90:05:d8:de:cc:b4:10:19:15:0e:a1:87:eb: fa:17:9f:24:70:69:8d:37:eb:ed:00:93:ea:73:de:a3:84:fc: a3:54:d6:e5:82:2f:a4:98:eb:d2:a5:5c:ed:2b:32:43:13:f7: 32:c3:82:70:d9:77:68:7f:06:95:6a:96:5e:9b:21:07:de:c8: b0:6a:2a:68:78:d5:be:56:f6:eb:df:54:98:6b:12:f1:c3:20: 9d:56:53:7a:97:a8:b2:bc:ba:e0:26:23:ee:99:7d:30:7d:d7: 4d:1b:f8:53:8f:27:73:fc:12:2a:a9:3e:cd:ca:df:d3:c3:f6: ad:d8:0f:b5:ed:55:8f:d6:d4:00:f3:5e:4f:12:b6:58:9b:e6: 4d:67:ce:3f:f6:4f:97:fb:e6:ba:0d:f0:4a:7f:c9:4f:f7:61: 62:6e:30:09:17:7f:90:e5:e1:65:52:4e:be:57:99:8d:e3:a1: b0:80:e5:24:e1:ef:2f:c8:9f:16:60:01:07:2a:25:d3:de:0f: 5f:21:c6:66:76:28:88:25:c9:40:be:45:81:d9:8d:59:a4:ff: 24:7a:c8:d3:32:a6:3c:7a:97:90:73:7a:9c:1f:b2:cf:ef:33: ea:3b:13:cc:f8:63:8e:ec:cb:a3:dc:a6:81:6c:37:33:fa:58: e8:b8:60:fa -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcr3vKgumrLTdiPfZ47j1FCD0s/4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjI0NDQ4WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AyYTE0MDk0MmNlY2MwNjFmZWMxNDk4MzNkM2RmOTYxNzJm ZTQwNjMxMDA5ODVhMWNmZGVlNDRjM2VmMjliNzMyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCLOEiYb/k4tlBOVmLdzPZBedsFcoMtEhN1plQAq6c0JkTL y6XfARTlKLwhvmiq3LEyT+uKSU3h18OFtsThS35OCNam+bqYqoCaODhEUzAY7WYn +rxA0daal3lAGW5ruGoXb973ewlW0+LWXJqYFPkryx0IuW76hOV3dZjql3mg1aAa hl1NMIEAo48ZL0Zl0/f3Bd26TLCOnFq18JpGWpf51xD2Rr57rUPlDpgildzQWMCo yVwTIGP3Xc+Z+9g7+DrGq+xBN6hPgvX4rskBFrlGgvAIUBZdCXVQASt5Jqs655fw Xvgx4MWerChUONb9GdpCMdIbA1ONvtrnXH2la6kNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQULo1Ud0bB1cHkZJ3TXc3zCQ0nYp8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzI0NjI4OTU0LWIyZjEtNGE3Ni04NjdmLTI2MTU1MGFiMGI0Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAS9EAwDQYJKoZIhvcNAQELBQADggEBAJ8/9UJOkAXY3sy0EBkVDqGH6/oX nyRwaY036+0Ak+pz3qOE/KNU1uWCL6SY69KlXO0rMkMT9zLDgnDZd2h/BpVqll6b IQfeyLBqKmh41b5W9uvfVJhrEvHDIJ1WU3qXqLK8uuAmI+6ZfTB9100b+FOPJ3P8 EiqpPs3K39PD9q3YD7XtVY/W1ADzXk8Stlib5k1nzj/2T5f75roN8Ep/yU/3YWJu MAkXf5Dl4WVSTr5XmY3jobCA5STh7y/InxZgAQcqJdPeD18hxmZ2KIglyUC+RYHZ jVmk/yR6yNMypjx6l5Bzepwfss/vM+o7E8z4Y47sy6PcpoFsNzP6WOi4YPo= -----END CERTIFICATE-----Generated at Sat Oct 18 00:16:39 2025 by rpki-client