$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2df8acd9-7911-4742-b64f-43c495eaf076.roa File: 2df8acd9-7911-4742-b64f-43c495eaf076.roa (raw, json) Hash identifier: SeSO1yBqt09bU/JRY4eNlUUMjJKsMoMh7PLrlXXh15c= Subject key identifier: F0:57:D4:C3:44:FF:48:78:55:A1:96:05:15:01:A1:F3:00:59:B4:45 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 057F543D7C212166FC2B7F3E15E6E2BF94B2369C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2df8acd9-7911-4742-b64f-43c495eaf076.roa Signing time: Mon 22 Sep 2025 23:17:41 +0000 ROA not before: Mon 22 Sep 2025 23:17:41 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.245.38.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:7f:54:3d:7c:21:21:66:fc:2b:7f:3e:15:e6:e2:bf:94:b2:36:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 23:17:41 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=afc8098701f7750fadc7f9b402fe304cf755a232892d34ff608f58d976c1c124, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a3:22:cd:be:8a:5a:5c:64:12:c8:6f:26:03: 2f:33:fb:d6:46:a4:29:1d:a1:30:11:4d:d4:4a:b5: cc:4a:4c:3f:ec:8f:17:70:8f:89:25:6b:a4:a0:de: e4:62:da:a2:7f:8c:5c:ae:46:70:fb:6f:32:7d:d3: 35:63:5c:17:64:5d:12:66:fe:72:6b:85:fa:a7:a5: 61:41:30:a0:04:7f:16:21:0b:43:1a:13:1a:cf:e9: 63:0a:a2:a3:46:dd:9d:d8:ec:ea:15:00:46:f8:d7: 51:d7:07:ad:58:2a:5c:9b:18:4e:1c:ad:37:34:28: 00:59:b3:cc:6b:93:2f:f6:db:b6:f5:15:af:6f:c7: 5d:67:c2:54:2a:a5:c1:66:3e:3e:39:f7:6e:23:cf: b6:36:38:d9:45:29:47:e2:19:54:58:77:82:a1:fd: 6c:f3:cd:ec:14:ff:36:8a:f4:be:0f:29:91:4e:18: bc:9f:38:74:b0:20:79:6d:68:52:d0:64:ba:d7:10: d8:a6:74:2d:30:fa:c7:56:17:fb:9f:5f:af:43:06: db:df:6b:42:6d:56:72:94:59:d6:4e:ea:6f:7b:78: 44:cb:2c:9c:15:bd:89:f3:98:0c:c2:1f:d1:24:22: 2f:00:61:4e:e8:4f:a2:3e:40:72:f8:9a:63:98:0d: bd:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:57:D4:C3:44:FF:48:78:55:A1:96:05:15:01:A1:F3:00:59:B4:45 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2df8acd9-7911-4742-b64f-43c495eaf076.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.245.38.0/23 Signature Algorithm: sha256WithRSAEncryption 94:1b:dd:e4:de:71:e2:fd:44:7d:23:94:ea:6f:58:a6:1e:1a: 1b:39:03:ba:32:4f:0c:82:aa:d2:43:a6:45:00:eb:d9:44:c6: 0f:9f:49:cb:df:26:b4:ca:0c:21:3e:80:79:ef:1e:0f:cc:13: a6:04:b4:41:dc:0c:72:88:ae:5c:de:0d:f2:ba:d4:c9:14:45: 70:59:16:72:fc:05:de:e7:ac:3b:cd:e7:32:98:2c:0c:06:99: 0e:d8:86:04:73:63:cc:38:a7:a4:34:1e:e1:bb:22:59:5c:66: 58:ca:05:ba:a8:ba:cc:af:2d:40:0c:ac:5f:a0:bf:18:45:48: 1d:c5:8b:87:b5:82:d2:ce:85:9a:d4:4e:37:df:98:ed:86:14: c1:06:66:6c:e3:95:7f:3d:40:93:dc:05:30:be:1f:ce:18:9e: cb:45:1f:c8:36:09:97:bd:88:07:f3:5e:c8:8d:9e:15:3b:a9: 21:f4:79:c4:6d:e5:e4:d2:63:fc:ec:f4:54:2c:86:74:75:20: 63:1b:3c:5e:6a:d1:58:79:f8:a4:29:b2:07:0e:78:cb:ef:87: 26:c9:35:b4:7b:61:74:91:d1:12:b1:07:8d:8b:dc:2b:6d:1b: 48:69:70:72:e0:cf:1c:5d:e4:b5:76:72:c2:cd:30:55:a9:41: b2:97:4d:53 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBX9UPXwhIWb8K38+Febiv5SyNpwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjMxNzQxWhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BhZmM4MDk4NzAxZjc3NTBmYWRjN2Y5YjQwMmZlMzA0Y2Y3 NTVhMjMyODkyZDM0ZmY2MDhmNThkOTc2YzFjMTI0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCaoyLNvopaXGQSyG8mAy8z+9ZGpCkdoTARTdRKtcxKTD/s jxdwj4kla6Sg3uRi2qJ/jFyuRnD7bzJ90zVjXBdkXRJm/nJrhfqnpWFBMKAEfxYh C0MaExrP6WMKoqNG3Z3Y7OoVAEb411HXB61YKlybGE4crTc0KABZs8xrky/227b1 Fa9vx11nwlQqpcFmPj45924jz7Y2ONlFKUfiGVRYd4Kh/WzzzewU/zaK9L4PKZFO GLyfOHSwIHltaFLQZLrXENimdC0w+sdWF/ufX69DBtvfa0JtVnKUWdZO6m97eETL LJwVvYnzmAzCH9EkIi8AYU7oT6I+QHL4mmOYDb3dAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU8FfUw0T/SHhVoZYFFQGh8wBZtEUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzJkZjhhY2Q5LTc5MTEtNDc0Mi1iNjRmLTQzYzQ5NWVhZjA3Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAES9SYwDQYJKoZIhvcNAQELBQADggEBAJQb3eTeceL9RH0jlOpvWKYeGhs5 A7oyTwyCqtJDpkUA69lExg+fScvfJrTKDCE+gHnvHg/ME6YEtEHcDHKIrlzeDfK6 1MkURXBZFnL8Bd7nrDvN5zKYLAwGmQ7YhgRzY8w4p6Q0HuG7IllcZljKBbqousyv LUAMrF+gvxhFSB3Fi4e1gtLOhZrUTjffmO2GFMEGZmzjlX89QJPcBTC+H84YnstF H8g2CZe9iAfzXsiNnhU7qSH0ecRt5eTSY/zs9FQshnR1IGMbPF5q0Vh5+KQpsgcO eMvvhybJNbR7YXSR0RKxB42L3CttG0hpcHLgzxxd5LV2csLNMFWpQbKXTVM= -----END CERTIFICATE-----Generated at Fri Oct 17 22:18:22 2025 by rpki-client