$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2924edf4-0662-47b9-9314-78eb79c9af4b.roa File: 2924edf4-0662-47b9-9314-78eb79c9af4b.roa (raw, json) Hash identifier: TlDiGQyLv7jKieKhzPVk27n+r5qesDm0hB0zdOjRxyA= Subject key identifier: 1D:51:8B:52:AA:42:DD:06:9E:BA:98:6D:2B:30:B5:9E:A1:4F:DF:E1 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 38CD33B1637F4A6AFFC1A78F36C9CCFC9F031962 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2924edf4-0662-47b9-9314-78eb79c9af4b.roa Signing time: Mon 22 Sep 2025 20:32:01 +0000 ROA not before: Mon 22 Sep 2025 20:32:01 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.172.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:cd:33:b1:63:7f:4a:6a:ff:c1:a7:8f:36:c9:cc:fc:9f:03:19:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 20:32:01 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=0098433a9bb4e2a014d90eb0e0cead52557dc76c593e65bf410e8570444fc2c7, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:10:04:ff:9b:8f:58:41:15:16:2c:aa:47:33: e8:ff:53:87:d9:57:d7:5d:98:2f:b1:21:51:cf:4c: 6f:fd:8c:2c:69:c8:a9:92:cd:c5:7d:40:29:13:09: e5:f8:7a:e8:ae:93:92:88:fe:aa:e5:8a:2d:b5:36: ba:1f:8f:d6:c1:9d:02:a6:bb:19:16:e0:3b:88:7b: 34:5c:8f:c7:87:7b:99:0a:7e:f7:05:e0:5b:76:ac: 09:aa:11:52:5e:cf:0d:7f:6c:5b:3e:d1:00:38:7c: 4c:22:d9:f5:07:2a:4a:f0:70:e7:fe:61:85:d1:c0: 94:8f:ff:1e:e3:cf:6e:c0:90:5f:5d:3a:3a:62:0c: 48:83:6d:e1:98:e2:9d:71:95:80:90:1b:be:84:4d: ce:d1:7d:21:01:99:2c:89:0a:0a:36:a9:55:d6:54: ba:f2:60:bd:83:fa:b4:74:90:a7:e7:07:81:d3:4e: 47:59:22:ad:8c:1f:b4:98:f2:94:c9:b4:27:89:5b: 8a:ba:87:c0:de:3b:74:75:5e:ee:0c:83:a3:e8:3e: 3f:58:56:8a:dc:bd:5c:13:eb:d1:a6:4b:2c:20:ee: 29:7c:59:7d:09:16:21:84:68:9d:8a:5c:dc:d4:2a: 27:95:6a:0b:da:f4:82:a0:3b:54:f7:5f:0d:4a:3e: d4:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:51:8B:52:AA:42:DD:06:9E:BA:98:6D:2B:30:B5:9E:A1:4F:DF:E1 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2924edf4-0662-47b9-9314-78eb79c9af4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.172.253.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:1e:b8:14:4f:f1:8e:3e:a7:84:93:49:74:7e:c5:5c:62:48: c0:06:ae:34:37:ec:96:21:65:61:ae:fb:02:13:f3:6d:c0:8a: 48:fb:cb:b4:f5:00:1e:bb:02:64:a3:a7:03:ca:6c:52:2c:f7: 8d:a7:9b:89:c4:8b:6c:37:7a:4a:0a:e8:63:69:d7:ff:46:c7: be:cf:2b:c7:34:b3:e7:ca:35:3b:b3:d3:ab:bb:d6:16:f1:63: 49:47:43:27:a5:6a:05:ab:76:d3:c4:d1:8a:14:89:64:7f:0e: d4:da:98:7b:48:66:3c:02:ec:4c:07:52:83:b1:d3:d1:60:36: ab:33:1c:00:dd:0c:e6:d4:fa:bf:ee:f4:86:28:81:42:97:b4: 74:2a:71:6e:fe:13:b3:e4:34:91:0f:95:f9:f5:eb:cd:9e:26: 28:db:23:27:ee:b8:c5:25:b8:18:ce:60:8a:ca:d0:7e:be:5c: 4c:ef:11:fc:55:4a:61:a5:d3:85:be:14:42:cc:6b:cc:e5:b6: 74:2c:b1:1a:6e:6e:23:4a:be:ca:98:f7:b7:ed:1f:a7:7f:54: 85:50:9b:e0:14:b6:e4:09:cf:00:6e:7c:8e:bf:fb:8a:18:7c: 5c:9d:d8:0a:43:80:50:f1:3d:b6:a0:22:90:e6:7a:66:fb:d0: 1e:99:e0:a1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOM0zsWN/Smr/waePNsnM/J8DGWIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjAzMjAxWhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AwMDk4NDMzYTliYjRlMmEwMTRkOTBlYjBlMGNlYWQ1MjU1 N2RjNzZjNTkzZTY1YmY0MTBlODU3MDQ0NGZjMmM3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzEAT/m49YQRUWLKpHM+j/U4fZV9ddmC+xIVHPTG/9jCxp yKmSzcV9QCkTCeX4euiuk5KI/qrlii21Nrofj9bBnQKmuxkW4DuIezRcj8eHe5kK fvcF4Ft2rAmqEVJezw1/bFs+0QA4fEwi2fUHKkrwcOf+YYXRwJSP/x7jz27AkF9d OjpiDEiDbeGY4p1xlYCQG76ETc7RfSEBmSyJCgo2qVXWVLryYL2D+rR0kKfnB4HT TkdZIq2MH7SY8pTJtCeJW4q6h8DeO3R1Xu4Mg6PoPj9YVorcvVwT69GmSywg7il8 WX0JFiGEaJ2KXNzUKieVagva9IKgO1T3Xw1KPtRZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUHVGLUqpC3QaeuphtKzC1nqFP3+EwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzI5MjRlZGY0LTA2NjItNDdiOS05MzE0LTc4ZWI3OWM5YWY0Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASrP0wDQYJKoZIhvcNAQELBQADggEBAF8euBRP8Y4+p4STSXR+xVxiSMAG rjQ37JYhZWGu+wIT823Aikj7y7T1AB67AmSjpwPKbFIs942nm4nEi2w3ekoK6GNp 1/9Gx77PK8c0s+fKNTuz06u71hbxY0lHQyelagWrdtPE0YoUiWR/DtTamHtIZjwC 7EwHUoOx09FgNqszHADdDObU+r/u9IYogUKXtHQqcW7+E7PkNJEPlfn1682eJijb IyfuuMUluBjOYIrK0H6+XEzvEfxVSmGl04W+FELMa8zltnQssRpubiNKvsqY97ft H6d/VIVQm+AUtuQJzwBufI6/+4oYfFyd2ApDgFDxPbagIpDmemb70B6Z4KE= -----END CERTIFICATE-----Generated at Fri Oct 17 22:18:06 2025 by rpki-client