$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2cdb437b-fe8a-4c75-b9ad-e3b39e2e1cfc.roa File: 2cdb437b-fe8a-4c75-b9ad-e3b39e2e1cfc.roa (raw, json) Hash identifier: 5Rjyv/NeFMEx6NSTK+/QPkVYMcdyml7n3FpRCZNIsCQ= Subject key identifier: 3B:C7:9E:93:C0:4B:C7:A0:05:B6:4D:BD:6C:28:2B:A7:94:B8:31:90 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1D4E00D95C166D6E70BD87291B83D18A30816366 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2cdb437b-fe8a-4c75-b9ad-e3b39e2e1cfc.roa Signing time: Mon 22 Sep 2025 18:55:38 +0000 ROA not before: Mon 22 Sep 2025 18:55:38 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.161.184.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:4e:00:d9:5c:16:6d:6e:70:bd:87:29:1b:83:d1:8a:30:81:63:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 18:55:38 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=6712016d7c53b88ea1e039def17e69fca4ea5c9f14187198047d7368bf790a7c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5d:8e:5b:58:97:10:0e:2a:8b:f9:26:49:bf: cb:07:29:04:2d:5a:c4:a0:17:45:e7:23:a6:fe:8f: 24:80:7b:12:8b:e2:a0:c8:83:aa:22:0e:cd:49:0c: d8:68:b9:e7:93:04:6b:b2:64:08:58:7f:fc:1e:f0: 2e:36:35:ef:81:b6:3f:9c:27:1f:60:75:43:95:58: c7:96:41:8f:57:c3:c8:e8:36:3a:89:c1:33:4a:73: 74:9f:d3:21:78:96:95:41:e8:98:2b:28:21:43:9d: 6e:76:03:41:70:ec:55:93:a2:1d:e9:7c:ef:46:dc: 92:f9:49:55:e8:8c:d6:96:44:19:87:f1:37:e1:07: 13:5f:5d:06:d8:ab:25:31:b2:54:cf:af:fc:1c:07: 9c:29:10:18:e1:24:31:fb:41:ae:34:ae:1b:6a:07: 6b:c5:33:ed:63:58:c3:3a:a3:d6:3d:0a:6e:ca:a2: 1c:c7:df:22:fc:9e:62:b0:b4:31:04:e1:07:a4:30: 69:d9:f3:34:3a:40:40:fa:66:5c:ad:f3:e5:87:ed: a9:11:e0:c1:f3:b2:f9:b2:85:3e:d8:9e:5c:2f:f6: 59:8e:8a:49:63:b5:5b:f7:40:95:02:16:7d:9b:89: d8:b8:4c:c8:7f:dc:97:81:57:33:e1:f8:5c:b1:d0: f8:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:C7:9E:93:C0:4B:C7:A0:05:B6:4D:BD:6C:28:2B:A7:94:B8:31:90 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2cdb437b-fe8a-4c75-b9ad-e3b39e2e1cfc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.161.184.0/23 Signature Algorithm: sha256WithRSAEncryption 81:be:96:4a:d5:90:37:b7:23:f2:48:a9:10:cd:85:b6:64:31: b4:02:26:eb:94:8a:c7:92:4a:fb:a7:fd:35:1f:40:1e:d7:bf: bc:a3:e9:88:ee:09:33:de:26:24:fe:66:7b:b6:45:65:a1:4c: a6:08:93:d0:31:50:72:d1:bf:22:ca:95:c1:1f:65:d5:ac:4c: 7b:09:85:9a:9f:4e:77:d3:50:70:ed:23:9c:7d:b2:56:97:fe: b5:f0:7c:c4:61:85:99:58:fe:c5:7b:fa:fb:2b:12:f2:a5:9c: 90:ad:49:1f:dd:69:de:5b:0b:71:8e:06:d6:de:e3:22:9a:91: 98:c5:58:b1:2b:31:61:8f:89:af:f4:35:4b:8a:86:48:c4:7a: ea:8e:8a:b9:3b:de:5a:25:6d:37:d8:f7:71:75:8c:36:2b:3a: 28:5b:94:8f:9f:ce:16:eb:b7:aa:81:6c:aa:01:df:99:f6:bd: 70:0a:05:49:52:91:f0:6d:55:c0:15:ac:ae:72:f0:1b:c8:1d: 4a:10:a6:3d:c8:50:cc:4a:1f:ef:68:76:60:60:0b:31:6d:0c: ad:c8:cf:ac:42:77:37:f3:49:b7:91:3f:d8:fa:56:d1:4a:6e: 2f:4c:0b:3e:a8:9a:e0:9a:73:6d:2e:e3:6d:f0:fe:72:67:de: 05:ef:fb:9e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHU4A2VwWbW5wvYcpG4PRijCBY2YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMTg1NTM4WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A2NzEyMDE2ZDdjNTNiODhlYTFlMDM5ZGVmMTdlNjlmY2E0 ZWE1YzlmMTQxODcxOTgwNDdkNzM2OGJmNzkwYTdjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+XY5bWJcQDiqL+SZJv8sHKQQtWsSgF0XnI6b+jySAexKL 4qDIg6oiDs1JDNhoueeTBGuyZAhYf/we8C42Ne+Btj+cJx9gdUOVWMeWQY9Xw8jo NjqJwTNKc3Sf0yF4lpVB6JgrKCFDnW52A0Fw7FWToh3pfO9G3JL5SVXojNaWRBmH 8TfhBxNfXQbYqyUxslTPr/wcB5wpEBjhJDH7Qa40rhtqB2vFM+1jWMM6o9Y9Cm7K ohzH3yL8nmKwtDEE4QekMGnZ8zQ6QED6Zlyt8+WH7akR4MHzsvmyhT7Ynlwv9lmO ikljtVv3QJUCFn2bidi4TMh/3JeBVzPh+Fyx0PhRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUO8eek8BLx6AFtk29bCgrp5S4MZAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzJjZGI0MzdiLWZlOGEtNGM3NS1iOWFkLWUzYjM5ZTJlMWNmYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESobgwDQYJKoZIhvcNAQELBQADggEBAIG+lkrVkDe3I/JIqRDNhbZkMbQC JuuUiseSSvun/TUfQB7Xv7yj6YjuCTPeJiT+Znu2RWWhTKYIk9AxUHLRvyLKlcEf ZdWsTHsJhZqfTnfTUHDtI5x9slaX/rXwfMRhhZlY/sV7+vsrEvKlnJCtSR/dad5b C3GOBtbe4yKakZjFWLErMWGPia/0NUuKhkjEeuqOirk73lolbTfY93F1jDYrOihb lI+fzhbrt6qBbKoB35n2vXAKBUlSkfBtVcAVrK5y8BvIHUoQpj3IUMxKH+9odmBg CzFtDK3Iz6xCdzfzSbeRP9j6VtFKbi9MCz6omuCac20u423w/nJn3gXv+54= -----END CERTIFICATE-----Generated at Sat Oct 18 02:16:43 2025 by rpki-client