$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/42390949-458a-4604-ae75-f7eb64bd5a90.roa File: 42390949-458a-4604-ae75-f7eb64bd5a90.roa (raw, json) Hash identifier: Mdefo0WYr2RVpYbVvcWhIzeFXiMdKT1IAu7F3QyKTxw= Subject key identifier: B8:17:CE:CB:F4:94:0A:18:55:3F:D8:38:A4:7C:2B:15:0E:E7:E2:80 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2A0ABEC5A2381D7ECFCDD51F32DDC03603AA7446 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/42390949-458a-4604-ae75-f7eb64bd5a90.roa Signing time: Mon 22 Sep 2025 20:07:01 +0000 ROA not before: Mon 22 Sep 2025 20:07:01 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.164.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:0a:be:c5:a2:38:1d:7e:cf:cd:d5:1f:32:dd:c0:36:03:aa:74:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 20:07:01 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=d8104eaa9e62a34c40d191d3ef6c6c18f38a906d1d9dfc32d798f322a09d5569, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6d:90:fd:90:60:40:29:f9:65:dd:6e:e4:7f: 20:40:36:37:eb:77:44:e0:15:ba:4b:2e:08:7a:2f: e6:24:30:da:0c:78:73:13:e9:64:4e:46:6c:b8:58: 36:1c:5d:72:e7:19:3a:c0:93:78:d5:3e:41:e0:20: 07:95:c5:fe:05:fe:b0:e0:f7:0c:1e:a0:02:ba:c1: 96:df:19:63:c4:0d:ec:4e:b8:34:74:88:fe:47:d8: 91:c5:90:ad:50:b6:19:0d:ef:df:3b:89:d4:2f:5b: 74:87:3a:d6:12:0d:86:e8:02:10:57:a7:cc:c3:56: 59:c6:f8:63:dc:cd:5a:7e:ff:4d:f3:4f:4b:ec:d3: 8a:8d:0b:53:a8:14:19:16:fc:f5:0f:b4:48:e0:cc: a7:a9:43:d9:9f:2c:9a:86:41:9d:e8:50:17:f2:1e: a6:79:7a:b0:ed:ab:f7:64:6a:33:ff:e7:3b:35:38: 27:00:57:ba:ea:c7:7e:61:bd:b3:4c:e2:e1:48:88: 43:04:27:59:f9:70:50:87:29:3b:c7:1c:30:a1:7b: 73:62:f7:5d:28:03:9b:8e:41:f6:2f:32:77:65:10: c9:1b:ac:ab:fd:d8:6a:e2:ca:ee:1a:c4:c9:cc:1a: 08:78:1a:0f:e0:a5:e5:a2:96:0b:aa:a3:5c:d8:48: 06:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:17:CE:CB:F4:94:0A:18:55:3F:D8:38:A4:7C:2B:15:0E:E7:E2:80 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/42390949-458a-4604-ae75-f7eb64bd5a90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.164.184.0/22 Signature Algorithm: sha256WithRSAEncryption 23:c0:43:07:cd:d3:54:f4:eb:75:21:80:c3:1f:a5:94:94:8f: 62:a9:54:c0:0b:8f:b5:ad:7c:7a:b0:da:6e:01:0a:4a:4e:d6: 5b:dd:47:1b:ac:d9:24:61:d9:43:e5:98:e6:66:e8:56:41:2b: 3b:a0:8b:76:ac:90:28:a2:38:4c:23:21:6e:b8:60:6a:95:c4: b5:11:ce:0a:1e:e5:17:04:89:8f:37:2e:26:19:49:1e:7c:fb: 69:b5:10:01:69:03:67:84:45:b5:de:2c:46:4a:e1:85:7f:f9: ac:0f:d8:73:57:66:76:f0:09:12:08:1b:fa:00:5b:dd:0d:2a: 1c:06:f2:94:5f:e9:c9:ed:50:3f:c9:3f:a1:6b:b9:ae:fb:ec: 3f:74:3e:76:85:8b:0b:2f:33:d7:53:8e:45:aa:20:a0:74:88: ed:63:bf:65:83:35:cf:17:4c:08:9e:0a:fc:4c:08:9c:97:b6: ee:be:35:c2:03:80:58:ac:47:ab:c5:c6:04:45:70:56:df:c2: e7:5f:3e:f6:b7:6a:47:40:58:ef:b7:2f:21:2d:01:70:ee:76: 56:41:e0:fe:33:c3:4a:50:25:f7:99:96:a9:c6:a5:73:d7:ce: aa:d6:5e:58:e1:d1:75:b5:ab:8c:df:b3:39:f4:5f:4d:6f:5b: ce:76:64:0c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKgq+xaI4HX7PzdUfMt3ANgOqdEYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjAwNzAxWhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BkODEwNGVhYTllNjJhMzRjNDBkMTkxZDNlZjZjNmMxOGYz OGE5MDZkMWQ5ZGZjMzJkNzk4ZjMyMmEwOWQ1NTY5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpbZD9kGBAKfll3W7kfyBANjfrd0TgFbpLLgh6L+YkMNoM eHMT6WRORmy4WDYcXXLnGTrAk3jVPkHgIAeVxf4F/rDg9wweoAK6wZbfGWPEDexO uDR0iP5H2JHFkK1QthkN7987idQvW3SHOtYSDYboAhBXp8zDVlnG+GPczVp+/03z T0vs04qNC1OoFBkW/PUPtEjgzKepQ9mfLJqGQZ3oUBfyHqZ5erDtq/dkajP/5zs1 OCcAV7rqx35hvbNM4uFIiEMEJ1n5cFCHKTvHHDChe3Ni910oA5uOQfYvMndlEMkb rKv92Griyu4axMnMGgh4Gg/gpeWilguqo1zYSAbjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUuBfOy/SUChhVP9g4pHwrFQ7n4oAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQyMzkwOTQ5LTQ1OGEtNDYwNC1hZTc1LWY3ZWI2NGJkNWE5MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAISpLgwDQYJKoZIhvcNAQELBQADggEBACPAQwfN01T063UhgMMfpZSUj2Kp VMALj7WtfHqw2m4BCkpO1lvdRxus2SRh2UPlmOZm6FZBKzugi3askCiiOEwjIW64 YGqVxLURzgoe5RcEiY83LiYZSR58+2m1EAFpA2eERbXeLEZK4YV/+awP2HNXZnbw CRIIG/oAW90NKhwG8pRf6cntUD/JP6Frua777D90PnaFiwsvM9dTjkWqIKB0iO1j v2WDNc8XTAieCvxMCJyXtu6+NcIDgFisR6vFxgRFcFbfwudfPva3akdAWO+3LyEt AXDudlZB4P4zw0pQJfeZlqnGpXPXzqrWXljh0XW1q4zfszn0X01vW852ZAw= -----END CERTIFICATE-----Generated at Sat Oct 18 02:36:47 2025 by rpki-client