$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/31d13243-9898-4184-9c48-8210362d0ff5.roa File: 31d13243-9898-4184-9c48-8210362d0ff5.roa (raw, json) Hash identifier: dIQA/j5oaSTdGtSSuwJBTcbRyZ+acZVM9VMgWoKHB+Q= Subject key identifier: 8E:16:39:8D:58:D0:59:0E:4C:3C:A1:44:E8:7B:94:C1:C1:53:15:F6 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1523D4078E6D39BC45ACE1C9BC8CBA78C65CD39F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/31d13243-9898-4184-9c48-8210362d0ff5.roa Signing time: Mon 22 Sep 2025 19:54:23 +0000 ROA not before: Mon 22 Sep 2025 19:54:23 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.164.236.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:23:d4:07:8e:6d:39:bc:45:ac:e1:c9:bc:8c:ba:78:c6:5c:d3:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 19:54:23 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=5b87db3195e4416313de09450282eb4b2cc5271b19b25e86d704d4da0c6d901c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:2c:75:cc:88:c9:a1:27:e8:1f:8d:0e:09:a0: 35:81:0d:dd:d8:b8:ef:75:e3:44:47:05:fc:84:00: 73:42:2e:36:0d:71:5d:fb:94:88:31:2d:e4:75:3a: bc:ef:0f:89:68:ae:72:80:3f:fb:a5:a1:12:c9:81: 2d:98:89:06:61:24:a4:02:29:fd:0b:45:50:f5:ca: 4a:2e:89:9f:86:8a:e2:ce:7c:1d:d8:ec:53:74:a5: ad:31:38:54:0a:10:72:a0:bd:99:e9:5f:b7:25:34: a4:82:33:0a:64:49:25:d4:3b:52:2a:d3:17:7a:33: 92:33:69:a9:66:2c:fc:c3:ad:fa:f5:63:0e:fd:ad: 97:dd:6b:79:70:8d:59:f5:5c:69:ca:b7:1d:9c:45: 52:a9:9a:97:6b:11:4f:88:1a:89:46:2e:fb:b9:84: 4a:89:ea:07:84:1e:19:17:d3:f6:41:7b:80:fb:78: ea:f2:40:06:07:4d:5a:ff:53:26:f5:27:66:90:48: 16:44:7f:1d:28:ce:db:8b:68:1a:5b:10:44:5b:73: 25:77:a5:3f:2e:42:41:c4:db:e6:6d:e0:20:83:45: 25:e0:a2:8b:a7:06:ba:24:b6:3f:48:f6:ed:44:9f: ba:f7:d4:b3:a0:b0:c3:9b:3f:fa:1c:7a:31:e7:3a: 9e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:16:39:8D:58:D0:59:0E:4C:3C:A1:44:E8:7B:94:C1:C1:53:15:F6 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/31d13243-9898-4184-9c48-8210362d0ff5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.164.236.0/23 Signature Algorithm: sha256WithRSAEncryption 78:f5:7a:fd:b4:17:32:c5:3c:e2:7a:a7:45:d5:ad:56:6c:e8: b9:38:f5:98:d4:2d:19:a5:64:2a:37:a2:41:77:9d:18:d4:9b: a4:22:92:a4:00:77:6c:a7:25:2a:c0:c8:df:35:7d:88:e9:74: f8:5d:ea:60:fb:c0:24:90:e8:13:7a:89:d7:3d:06:4e:6f:d9: 13:09:ae:a6:3e:7f:9e:e8:40:67:b4:a4:1c:9f:3d:bf:ec:68: 71:53:a3:0a:ae:43:f9:82:58:57:69:a3:a5:60:3c:e7:ef:67: 97:4b:17:41:f0:ec:79:a0:49:50:88:89:8d:b5:4e:11:ad:00: 6f:af:60:b2:43:9a:65:7e:23:be:53:c9:ed:65:eb:5d:72:70: 9d:19:f1:01:1e:fc:75:53:eb:91:de:7f:76:b3:63:00:00:c1: 58:58:5b:93:1c:25:2f:f5:2e:45:7e:dd:ef:8f:2e:f5:59:44: 8d:94:2a:bb:a9:07:ee:e8:b0:84:42:1b:d6:cd:ab:b9:f3:84: 28:ef:1d:30:ab:5f:49:5e:e8:7a:78:2d:7a:b8:b4:bc:20:3c: c9:62:ed:6a:72:6c:b2:a0:a1:a7:b9:7d:09:27:b7:46:4a:0c: c2:c6:46:77:d2:c4:54:b9:ad:18:ac:f3:b1:71:b2:53:7e:fb: f7:cc:91:f0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFSPUB45tObxFrOHJvIy6eMZc058wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMTk1NDIzWhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A1Yjg3ZGIzMTk1ZTQ0MTYzMTNkZTA5NDUwMjgyZWI0YjJj YzUyNzFiMTliMjVlODZkNzA0ZDRkYTBjNmQ5MDFjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCWLHXMiMmhJ+gfjQ4JoDWBDd3YuO9140RHBfyEAHNCLjYN cV37lIgxLeR1OrzvD4lornKAP/uloRLJgS2YiQZhJKQCKf0LRVD1ykouiZ+GiuLO fB3Y7FN0pa0xOFQKEHKgvZnpX7clNKSCMwpkSSXUO1Iq0xd6M5IzaalmLPzDrfr1 Yw79rZfda3lwjVn1XGnKtx2cRVKpmpdrEU+IGolGLvu5hEqJ6geEHhkX0/ZBe4D7 eOryQAYHTVr/Uyb1J2aQSBZEfx0oztuLaBpbEERbcyV3pT8uQkHE2+Zt4CCDRSXg oounBroktj9I9u1En7r31LOgsMObP/ocejHnOp7xAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUjhY5jVjQWQ5MPKFE6HuUwcFTFfYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzMxZDEzMjQzLTk4OTgtNDE4NC05YzQ4LTgyMTAzNjJkMGZmNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESpOwwDQYJKoZIhvcNAQELBQADggEBAHj1ev20FzLFPOJ6p0XVrVZs6Lk4 9ZjULRmlZCo3okF3nRjUm6QikqQAd2ynJSrAyN81fYjpdPhd6mD7wCSQ6BN6idc9 Bk5v2RMJrqY+f57oQGe0pByfPb/saHFTowquQ/mCWFdpo6VgPOfvZ5dLF0Hw7Hmg SVCIiY21ThGtAG+vYLJDmmV+I75Tye1l611ycJ0Z8QEe/HVT65Hef3azYwAAwVhY W5McJS/1LkV+3e+PLvVZRI2UKrupB+7osIRCG9bNq7nzhCjvHTCrX0le6Hp4LXq4 tLwgPMli7WpybLKgoae5fQknt0ZKDMLGRnfSxFS5rRis87FxslN++/fMkfA= -----END CERTIFICATE-----Generated at Sat Oct 18 05:11:43 2025 by rpki-client