$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2500d225-0544-45d7-9a33-5498d225a1ce.roa File: 2500d225-0544-45d7-9a33-5498d225a1ce.roa (raw, json) Hash identifier: tKh9obZmkA7AQKp/YR/5x3CGBdJPtCAnBqcGbyWhofo= Subject key identifier: 53:C8:0C:08:A5:85:8C:E6:9F:9D:BA:B1:4A:12:C3:74:27:DE:DB:0B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 254AC27C658618E2BDAAC38AA59A12181980FEE1 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2500d225-0544-45d7-9a33-5498d225a1ce.roa Signing time: Mon 22 Sep 2025 22:21:49 +0000 ROA not before: Mon 22 Sep 2025 22:21:49 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.239.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:4a:c2:7c:65:86:18:e2:bd:aa:c3:8a:a5:9a:12:18:19:80:fe:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 22:21:49 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=cd2e2be46ccaee372ee3455f5de543266c34bdd13e34e4e4675c1e1273d34345, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8d:be:78:8f:31:e5:a8:44:fc:d5:03:47:a9: 81:f6:4c:35:d7:cd:46:ee:35:fb:71:57:22:eb:ef: 86:31:51:52:38:83:87:91:47:19:97:90:66:55:be: 57:ea:12:74:47:87:ef:4b:17:5d:00:1a:72:67:a7: b5:f8:a1:eb:85:99:07:10:06:0f:d4:5a:97:bd:ab: 68:3f:c6:cf:e0:b4:ea:4a:bc:06:e7:c0:61:cc:53: 63:7c:10:c2:b4:0a:06:fc:9d:5c:cb:8b:fc:d9:f4: cd:e5:6d:66:78:4d:46:97:fe:44:77:35:3e:4f:e7: 5f:2f:39:f5:f4:5f:6a:94:ec:11:24:d5:7b:9f:01: 8d:90:6d:25:7e:2d:f5:b2:1a:c8:41:d2:3e:b9:86: 7d:62:f0:47:ae:51:fe:de:ff:65:11:8f:1f:c6:71: 63:b9:09:76:e8:97:dd:8e:a2:51:9c:21:79:3b:23: 0e:6b:36:11:d1:15:92:51:f9:ce:94:b0:ad:40:a9: 3b:2d:fb:83:17:7e:34:83:13:7d:4a:39:f0:4b:3d: 99:6c:db:db:8a:dc:92:60:21:8d:0c:48:6c:9d:18: aa:35:ff:e8:40:dd:f2:1a:6f:57:c5:88:c8:82:f4: 0a:81:51:aa:7e:4e:3c:74:83:e1:73:15:e3:29:f2: 7c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:C8:0C:08:A5:85:8C:E6:9F:9D:BA:B1:4A:12:C3:74:27:DE:DB:0B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2500d225-0544-45d7-9a33-5498d225a1ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.239.200.0/22 Signature Algorithm: sha256WithRSAEncryption 5f:ca:18:14:25:01:46:af:a1:b9:40:cf:dd:58:ab:40:b8:eb: ce:ee:23:0b:08:1f:80:1c:0f:13:40:16:1e:0d:e2:66:b0:ec: f9:3e:10:8b:18:71:c1:7e:4e:de:5f:04:d7:b0:d9:b1:ac:56: 22:cc:d4:fb:36:5f:f2:44:ea:1d:75:c9:42:bf:1b:3e:63:81: 95:53:28:df:64:5a:33:ce:7b:eb:76:ab:f2:ca:bc:15:fd:3c: c5:ff:93:0b:a1:21:83:c9:2d:85:6f:a8:4b:60:44:7f:f1:30: 0b:8f:db:b3:77:20:6e:58:c0:9f:d3:48:f7:c7:53:09:13:65: a8:6c:2a:3b:b5:8a:2c:0d:f6:9c:38:4e:30:5c:f0:69:50:e3: 61:1c:2e:67:5d:e2:49:96:bb:33:16:9b:2d:29:15:df:f6:72: f8:02:ed:fb:16:74:01:cc:c7:f1:6a:85:15:5b:eb:7e:b8:96: bf:34:4b:69:c0:ca:a2:0d:7b:3e:7f:61:4d:64:9b:ed:d7:3f: 9d:b5:1d:ef:46:ca:de:0f:2c:ce:62:c2:05:bf:d3:be:fe:6b: ad:b7:61:69:d6:08:db:8f:8e:6b:4e:10:6c:ce:74:b0:10:5a: 5d:8e:a9:34:0c:c0:45:15:99:75:a4:85:87:a6:95:f2:cd:46: df:07:c5:3d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJUrCfGWGGOK9qsOKpZoSGBmA/uEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjIyMTQ5WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BjZDJlMmJlNDZjY2FlZTM3MmVlMzQ1NWY1ZGU1NDMyNjZj MzRiZGQxM2UzNGU0ZTQ2NzVjMWUxMjczZDM0MzQ1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDIjb54jzHlqET81QNHqYH2TDXXzUbuNftxVyLr74YxUVI4 g4eRRxmXkGZVvlfqEnRHh+9LF10AGnJnp7X4oeuFmQcQBg/UWpe9q2g/xs/gtOpK vAbnwGHMU2N8EMK0Cgb8nVzLi/zZ9M3lbWZ4TUaX/kR3NT5P518vOfX0X2qU7BEk 1XufAY2QbSV+LfWyGshB0j65hn1i8EeuUf7e/2URjx/GcWO5CXbol92OolGcIXk7 Iw5rNhHRFZJR+c6UsK1AqTst+4MXfjSDE31KOfBLPZls29uK3JJgIY0MSGydGKo1 /+hA3fIab1fFiMiC9AqBUap+Tjx0g+FzFeMp8nx5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUU8gMCKWFjOafnbqxShLDdCfe2wswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzI1MDBkMjI1LTA1NDQtNDVkNy05YTMzLTU0OThkMjI1YTFjZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIS78gwDQYJKoZIhvcNAQELBQADggEBAF/KGBQlAUavoblAz91Yq0C4687u IwsIH4AcDxNAFh4N4maw7Pk+EIsYccF+Tt5fBNew2bGsViLM1Ps2X/JE6h11yUK/ Gz5jgZVTKN9kWjPOe+t2q/LKvBX9PMX/kwuhIYPJLYVvqEtgRH/xMAuP27N3IG5Y wJ/TSPfHUwkTZahsKju1iiwN9pw4TjBc8GlQ42EcLmdd4kmWuzMWmy0pFd/2cvgC 7fsWdAHMx/FqhRVb6364lr80S2nAyqINez5/YU1km+3XP521He9Gyt4PLM5iwgW/ 077+a623YWnWCNuPjmtOEGzOdLAQWl2OqTQMwEUVmXWkhYemlfLNRt8HxT0= -----END CERTIFICATE-----Generated at Sat Oct 18 02:36:30 2025 by rpki-client