$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2853b4f0-9720-4fe8-a7e4-5cc2239b0463.roa File: 2853b4f0-9720-4fe8-a7e4-5cc2239b0463.roa (raw, json) Hash identifier: Kr7m1Un6njbcFQcHG44cLFV50GsjglaubdUFgE2bku8= Subject key identifier: 91:84:FB:91:64:D9:A1:F6:E1:75:4D:FC:39:D4:94:94:08:06:AD:91 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4D3ADF0224F9BC486ECBD153B2275D5CA63D8056 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2853b4f0-9720-4fe8-a7e4-5cc2239b0463.roa Signing time: Mon 22 Sep 2025 20:08:48 +0000 ROA not before: Mon 22 Sep 2025 20:08:48 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.164.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:3a:df:02:24:f9:bc:48:6e:cb:d1:53:b2:27:5d:5c:a6:3d:80:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 20:08:48 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=113fd4365660f43ed920dff09190302f8721f7cd8d49801ffa2b7dcabb6386b4, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:99:df:80:01:68:84:71:90:b7:63:ac:16:28: 1a:12:3c:4a:c2:98:91:cf:5f:7f:49:77:27:eb:44: 2b:fb:9f:df:5d:f9:48:11:84:9d:08:ab:cb:dd:d8: e0:3c:c1:ef:a1:fd:fa:89:35:5f:13:2f:36:02:5c: 3d:c9:2f:7e:ba:1d:34:6d:b0:dc:56:e5:59:32:39: e5:bb:e0:7c:3d:37:b1:4c:af:9c:8d:bc:86:d8:a2: c2:36:2c:e6:66:b2:99:40:b6:0b:ab:a4:87:e4:9b: fa:8f:9c:7a:77:fa:18:65:97:b5:a8:54:98:65:63: a8:d0:d3:46:eb:f8:50:32:72:e2:93:d1:00:11:8b: 1f:68:84:39:7b:0f:e2:9c:be:07:a0:d4:c5:16:26: 98:ec:90:2d:c6:54:8d:53:fc:85:b5:2a:0c:78:2a: 97:c9:a9:05:cb:c1:7d:3e:88:8d:17:c9:35:c5:22: 34:9e:64:f3:9d:3b:ea:51:e1:b3:d0:93:2c:6f:f2: 44:a3:f3:99:d1:c7:89:ad:09:79:eb:6f:13:e5:10: 63:ea:55:cb:57:f0:62:27:cc:a9:82:39:82:ce:28: 1e:fc:0b:f5:21:61:e2:7d:30:0b:01:08:45:d4:5b: 88:98:18:cc:f4:1e:15:39:d4:8d:45:e6:3b:38:cd: 48:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:84:FB:91:64:D9:A1:F6:E1:75:4D:FC:39:D4:94:94:08:06:AD:91 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2853b4f0-9720-4fe8-a7e4-5cc2239b0463.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.164.224.0/22 Signature Algorithm: sha256WithRSAEncryption 86:0b:12:80:3a:21:20:32:c9:8d:4b:83:cd:92:01:0f:ee:d6: 0e:cc:3c:47:c9:ab:79:54:21:c4:bb:93:23:b0:a4:66:af:94: 5e:65:a4:26:30:f7:dd:c0:30:cf:29:47:59:78:0b:93:7d:bc: 52:10:a1:38:51:29:8c:1e:14:a2:6d:ce:a1:c1:7f:8a:70:6e: 6e:fc:5a:c1:36:44:94:49:f2:46:ee:e8:68:85:45:27:2a:26: df:f0:1b:3d:00:51:31:3f:08:63:2f:ef:d4:f1:12:d2:98:ca: d3:47:f8:ab:8a:5d:4d:0f:e0:b0:44:0e:34:9e:b9:17:5d:66: 42:66:d9:29:d8:3f:ad:64:d7:a3:05:d2:12:75:9f:6c:bd:a2: a2:c4:fc:b9:d6:c8:59:84:cb:49:34:0f:f6:fb:e7:34:41:20: ca:84:f0:cd:63:98:60:6d:16:1a:e8:3f:73:68:05:a1:59:6f: d7:6c:72:02:56:a6:2d:86:75:a9:16:27:f2:cf:d2:91:a7:34: 1a:77:1c:8d:b3:2f:4b:15:fa:e8:84:0e:ff:e8:f1:94:ff:7d: f6:e6:33:87:98:27:11:8e:cf:a7:7c:1f:57:e6:62:cd:82:f1: 19:2b:1d:23:95:46:c7:60:a3:bf:f3:76:a1:27:8f:31:5b:fa: 4a:33:80:6d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTTrfAiT5vEhuy9FTsiddXKY9gFYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjAwODQ4WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AxMTNmZDQzNjU2NjBmNDNlZDkyMGRmZjA5MTkwMzAyZjg3 MjFmN2NkOGQ0OTgwMWZmYTJiN2RjYWJiNjM4NmI0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0md+AAWiEcZC3Y6wWKBoSPErCmJHPX39JdyfrRCv7n99d +UgRhJ0Iq8vd2OA8we+h/fqJNV8TLzYCXD3JL366HTRtsNxW5VkyOeW74Hw9N7FM r5yNvIbYosI2LOZmsplAtgurpIfkm/qPnHp3+hhll7WoVJhlY6jQ00br+FAycuKT 0QARix9ohDl7D+Kcvgeg1MUWJpjskC3GVI1T/IW1Kgx4KpfJqQXLwX0+iI0XyTXF IjSeZPOdO+pR4bPQkyxv8kSj85nRx4mtCXnrbxPlEGPqVctX8GInzKmCOYLOKB78 C/UhYeJ9MAsBCEXUW4iYGMz0HhU51I1F5js4zUj7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUkYT7kWTZofbhdU38OdSUlAgGrZEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzI4NTNiNGYwLTk3MjAtNGZlOC1hN2U0LTVjYzIyMzliMDQ2My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAISpOAwDQYJKoZIhvcNAQELBQADggEBAIYLEoA6ISAyyY1Lg82SAQ/u1g7M PEfJq3lUIcS7kyOwpGavlF5lpCYw993AMM8pR1l4C5N9vFIQoThRKYweFKJtzqHB f4pwbm78WsE2RJRJ8kbu6GiFRScqJt/wGz0AUTE/CGMv79TxEtKYytNH+KuKXU0P 4LBEDjSeuRddZkJm2SnYP61k16MF0hJ1n2y9oqLE/LnWyFmEy0k0D/b75zRBIMqE 8M1jmGBtFhroP3NoBaFZb9dscgJWpi2GdakWJ/LP0pGnNBp3HI2zL0sV+uiEDv/o 8ZT/ffbmM4eYJxGOz6d8H1fmYs2C8RkrHSOVRsdgo7/zdqEnjzFb+kozgG0= -----END CERTIFICATE-----Generated at Fri Oct 17 22:19:00 2025 by rpki-client