$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4087d846-1e41-48d0-b745-bce863f087e1.roa File: 4087d846-1e41-48d0-b745-bce863f087e1.roa (raw, json) Hash identifier: Sg6uWUChttaHIx6GXy+MbJx8iBiPu6m7SKnkQ7SS+GM= Subject key identifier: 99:76:42:9C:A6:2B:26:CC:C1:7A:10:E4:3E:CF:F8:7E:96:0A:33:6A Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6255CEB552ABC35C689EF4046401F9D4AC419E51 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4087d846-1e41-48d0-b745-bce863f087e1.roa Signing time: Mon 22 Sep 2025 19:51:49 +0000 ROA not before: Mon 22 Sep 2025 19:51:49 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.164.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:55:ce:b5:52:ab:c3:5c:68:9e:f4:04:64:01:f9:d4:ac:41:9e:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 19:51:49 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=5480ccf47b079853f72fb4484f73202d9d304ea91a20a275e7cd994aca9ab9b0, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6d:74:cd:64:b2:2a:f3:76:23:37:86:65:b3: 31:d2:35:3a:61:a4:e8:8d:e3:bd:7e:f2:77:74:a7: 84:c9:fb:94:40:b2:b3:c6:8a:fa:ef:f0:fd:94:65: 12:be:62:07:f3:08:5f:c3:db:5d:24:32:44:4b:80: 14:40:bb:1a:7e:03:60:30:d4:34:30:79:c4:c0:a1: 94:a9:e9:ab:01:21:e0:62:8b:e1:26:ce:b0:3e:a2: 47:a0:a6:0d:38:2e:64:f2:e7:42:fb:86:6d:4e:ea: c5:b2:08:aa:cd:c3:d0:1b:fd:4c:88:e0:af:18:d9: 70:1d:9d:c4:9d:92:5d:1c:90:35:e9:4c:0f:97:be: 45:10:d6:7a:e3:b1:84:38:d0:fc:72:a6:5e:8f:ba: 8f:ca:ba:44:1e:e4:82:7c:21:62:f7:86:8c:28:73: 50:a2:ad:49:68:5b:e5:20:6d:f8:5b:2b:70:a1:3f: e1:6d:b0:54:37:39:f4:14:eb:af:5b:fc:74:bc:5b: 72:2e:ad:be:33:e5:bb:ad:ee:de:93:56:34:ad:59: 7e:03:22:67:ab:41:a3:83:4c:ec:ca:cc:b8:8c:33: 0f:19:21:44:67:26:8e:c9:db:41:4b:88:9e:dc:54: 01:84:ed:e2:a0:99:fa:c7:c0:74:f0:71:ea:0b:0c: 91:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:76:42:9C:A6:2B:26:CC:C1:7A:10:E4:3E:CF:F8:7E:96:0A:33:6A X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4087d846-1e41-48d0-b745-bce863f087e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.164.132.0/23 Signature Algorithm: sha256WithRSAEncryption 24:56:72:35:ad:b4:07:ac:40:83:78:a4:a8:f4:c4:98:40:1f: 7a:9b:d0:03:69:1a:b2:d3:82:0a:5e:79:7f:ec:8e:90:ba:8f: 7f:94:3d:09:7a:96:0c:9e:3d:5b:9f:a3:d4:93:35:28:fb:b0: 40:a0:25:23:e0:05:4a:9e:03:91:88:e5:20:e9:d4:b6:cc:37: 5c:b0:57:6e:64:46:96:77:1e:f9:00:d7:88:4d:5c:d6:e2:8a: ba:0f:93:9d:87:fc:03:1d:e9:8c:4d:9f:bb:22:e7:38:3d:ad: ce:3b:35:f5:ff:49:ca:92:b8:af:76:a1:e5:7b:af:01:20:0f: 6c:77:c4:fe:a2:eb:a8:55:20:d2:c1:2f:2e:3a:b6:75:f8:d4: cd:79:f5:37:03:67:aa:c7:32:e5:51:08:d0:d9:ef:f4:87:a8: 1a:c4:2b:e4:21:8b:29:b2:26:57:f3:fa:cc:64:ef:16:a2:45: 4a:76:a4:fb:8d:16:25:31:b9:9b:38:3f:0e:4d:ff:06:5f:8c: da:da:49:40:16:42:6b:04:75:cc:e8:fa:d5:1e:dd:05:e5:9e: b1:98:99:c8:68:b1:5e:63:16:5b:b9:72:ab:50:50:59:a8:d2: ff:13:49:76:a6:52:40:38:1f:ad:2d:98:e9:08:25:c7:64:c3: f3:aa:1f:0b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYlXOtVKrw1xonvQEZAH51KxBnlEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMTk1MTQ5WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A1NDgwY2NmNDdiMDc5ODUzZjcyZmI0NDg0ZjczMjAyZDlk MzA0ZWE5MWEyMGEyNzVlN2NkOTk0YWNhOWFiOWIwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpbXTNZLIq83YjN4ZlszHSNTphpOiN471+8nd0p4TJ+5RA srPGivrv8P2UZRK+YgfzCF/D210kMkRLgBRAuxp+A2Aw1DQwecTAoZSp6asBIeBi i+EmzrA+okegpg04LmTy50L7hm1O6sWyCKrNw9Ab/UyI4K8Y2XAdncSdkl0ckDXp TA+XvkUQ1nrjsYQ40Pxypl6Puo/KukQe5IJ8IWL3howoc1CirUloW+UgbfhbK3Ch P+FtsFQ3OfQU669b/HS8W3Iurb4z5but7t6TVjStWX4DImerQaODTOzKzLiMMw8Z IURnJo7J20FLiJ7cVAGE7eKgmfrHwHTwceoLDJG9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUmXZCnKYrJszBehDkPs/4fpYKM2owHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQwODdkODQ2LTFlNDEtNDhkMC1iNzQ1LWJjZTg2M2YwODdlMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESpIQwDQYJKoZIhvcNAQELBQADggEBACRWcjWttAesQIN4pKj0xJhAH3qb 0ANpGrLTggpeeX/sjpC6j3+UPQl6lgyePVufo9STNSj7sECgJSPgBUqeA5GI5SDp 1LbMN1ywV25kRpZ3HvkA14hNXNbiiroPk52H/AMd6YxNn7si5zg9rc47NfX/ScqS uK92oeV7rwEgD2x3xP6i66hVINLBLy46tnX41M159TcDZ6rHMuVRCNDZ7/SHqBrE K+QhiymyJlfz+sxk7xaiRUp2pPuNFiUxuZs4Pw5N/wZfjNraSUAWQmsEdczo+tUe 3QXlnrGYmchosV5jFlu5cqtQUFmo0v8TSXamUkA4H60tmOkIJcdkw/OqHws= -----END CERTIFICATE-----Generated at Sat Oct 18 02:36:28 2025 by rpki-client