$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2ca70294-5b54-4aa9-8d30-123261e7060f.roa File: 2ca70294-5b54-4aa9-8d30-123261e7060f.roa (raw, json) Hash identifier: E1HBfUxAkZWjWQhAHlc79LVuHcX8g0oeweoGJwuz2Mo= Subject key identifier: F6:3F:55:25:7A:26:79:BD:72:DC:FB:85:04:54:33:B5:90:BF:8F:C7 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 65FDE23F5B0F1703BAF66D475611CDAB9CBD4FE7 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2ca70294-5b54-4aa9-8d30-123261e7060f.roa Signing time: Mon 22 Sep 2025 22:06:40 +0000 ROA not before: Mon 22 Sep 2025 22:06:40 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.238.50.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:fd:e2:3f:5b:0f:17:03:ba:f6:6d:47:56:11:cd:ab:9c:bd:4f:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 22:06:40 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=0f198791a75c83e2ec42e68423048a07fe8a27c5ca2a349d075eae815d0c7a43, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0a:ab:8e:91:7d:6e:bf:80:07:12:5e:4d:9d: 47:25:0f:05:18:44:24:b0:05:db:db:7f:74:ce:06: c5:04:91:53:41:7a:07:4c:48:9a:b4:f5:c0:e0:26: ae:00:fb:9e:6a:4c:8b:69:23:0a:f8:90:f0:22:2c: 61:cd:fc:41:55:01:d8:9f:b7:e2:38:0b:a7:65:12: 93:08:97:1a:47:f5:ea:be:17:9e:33:97:95:e5:d3: 7e:25:ff:5e:76:23:ff:66:3b:56:0b:a5:62:59:6d: 08:d5:c6:da:63:b3:11:3f:ab:e9:20:d2:37:ca:76: ff:ec:1f:84:97:ac:fb:79:b0:74:fa:73:bb:a4:72: e0:43:e5:9e:d6:26:99:ff:8e:1d:34:cf:0a:59:d4: 7f:d2:92:8f:da:e4:d8:00:ad:ec:92:0e:02:ee:ea: 01:91:7e:d7:d2:02:15:d3:ec:74:d3:7e:a9:36:0d: 2f:63:f7:30:33:75:16:05:29:32:4d:07:05:50:1f: 89:f8:a9:91:3b:af:6b:4b:5b:ee:56:5b:5e:1d:4b: 0d:db:c0:fd:aa:ab:81:15:09:ae:cb:b1:a9:9f:fe: 52:0f:7a:17:1d:23:88:93:2a:15:f9:da:b7:66:ad: ec:d4:61:87:3f:e2:4e:23:10:0a:f7:e7:22:03:af: 7e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:3F:55:25:7A:26:79:BD:72:DC:FB:85:04:54:33:B5:90:BF:8F:C7 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2ca70294-5b54-4aa9-8d30-123261e7060f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.238.50.0/23 Signature Algorithm: sha256WithRSAEncryption 87:f9:7e:13:14:83:a2:81:07:c2:34:0a:44:4e:39:f0:f5:bd: 6b:61:0f:2a:ea:32:9e:43:ab:b5:4e:d3:71:cd:f1:98:43:50: 7b:1e:dc:df:05:33:64:25:fb:d1:24:ec:99:2a:21:45:cd:ee: 7c:b6:8d:86:00:44:ae:72:fb:58:99:2e:cb:87:b1:fb:1f:28: 57:10:3e:59:e6:5f:08:8b:04:53:88:f9:90:85:3d:12:67:9e: 02:1e:bc:eb:fa:75:ae:94:4a:01:3e:f3:99:69:63:49:fa:ff: b2:a2:38:ed:54:b3:10:ae:65:38:e0:ab:c4:58:f8:3b:63:8d: eb:91:93:66:a1:87:27:51:ff:55:0c:ef:09:30:bd:94:1d:c4: 2d:dc:0e:c9:2c:82:78:f2:1d:28:6a:b5:d4:dd:8a:1f:f1:c1: 20:2e:74:26:2c:e9:97:87:81:5e:19:58:ad:aa:50:46:b6:31: 8e:35:92:c9:20:c0:e1:7f:25:a9:ca:25:4b:3d:1a:d6:8a:e5: 8d:f6:12:6a:db:29:34:d9:a9:d9:0c:09:27:61:6d:c2:96:36: 1a:ce:32:58:8f:17:8d:6b:4d:d6:dc:65:d9:16:0b:de:3f:ed: fa:a8:8f:ea:8d:51:fb:4c:5a:e5:94:e7:18:63:40:16:f9:3d: 51:0b:17:b6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZf3iP1sPFwO69m1HVhHNq5y9T+cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjIwNjQwWhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AwZjE5ODc5MWE3NWM4M2UyZWM0MmU2ODQyMzA0OGEwN2Zl OGEyN2M1Y2EyYTM0OWQwNzVlYWU4MTVkMGM3YTQzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5CquOkX1uv4AHEl5NnUclDwUYRCSwBdvbf3TOBsUEkVNB egdMSJq09cDgJq4A+55qTItpIwr4kPAiLGHN/EFVAdift+I4C6dlEpMIlxpH9eq+ F54zl5Xl034l/152I/9mO1YLpWJZbQjVxtpjsxE/q+kg0jfKdv/sH4SXrPt5sHT6 c7ukcuBD5Z7WJpn/jh00zwpZ1H/Sko/a5NgAreySDgLu6gGRftfSAhXT7HTTfqk2 DS9j9zAzdRYFKTJNBwVQH4n4qZE7r2tLW+5WW14dSw3bwP2qq4EVCa7Lsamf/lIP ehcdI4iTKhX52rdmrezUYYc/4k4jEAr35yIDr36hAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU9j9VJXomeb1y3PuFBFQztZC/j8cwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzJjYTcwMjk0LTViNTQtNGFhOS04ZDMwLTEyMzI2MWU3MDYwZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAES7jIwDQYJKoZIhvcNAQELBQADggEBAIf5fhMUg6KBB8I0CkROOfD1vWth DyrqMp5Dq7VO03HN8ZhDUHse3N8FM2Ql+9Ek7JkqIUXN7ny2jYYARK5y+1iZLsuH sfsfKFcQPlnmXwiLBFOI+ZCFPRJnngIevOv6da6USgE+85lpY0n6/7KiOO1UsxCu ZTjgq8RY+DtjjeuRk2ahhydR/1UM7wkwvZQdxC3cDsksgnjyHShqtdTdih/xwSAu dCYs6ZeHgV4ZWK2qUEa2MY41kskgwOF/JanKJUs9GtaK5Y32EmrbKTTZqdkMCSdh bcKWNhrOMliPF41rTdbcZdkWC94/7fqoj+qNUftMWuWU5xhjQBb5PVELF7Y= -----END CERTIFICATE-----Generated at Sat Oct 18 05:11:44 2025 by rpki-client