$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4a085aba-de3b-4d02-b76d-6b883ad9e080.roa File: 4a085aba-de3b-4d02-b76d-6b883ad9e080.roa (raw, json) Hash identifier: yCjI/qVB9mDmsgzd9ZGrMPCZBHkNnYz9ye5f4BC3/+M= Subject key identifier: 5A:14:AD:52:BA:84:98:88:D9:DB:1A:AB:98:C2:F7:2D:E2:BC:20:DD Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 23A0AD1E8695BC71F668D3B490E85FA047055323 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4a085aba-de3b-4d02-b76d-6b883ad9e080.roa Signing time: Mon 22 Sep 2025 17:32:01 +0000 ROA not before: Mon 22 Sep 2025 17:32:01 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.155.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:a0:ad:1e:86:95:bc:71:f6:68:d3:b4:90:e8:5f:a0:47:05:53:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 17:32:01 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=52c6669f452eca23ef3303680354622a7180e32443d33677bda371e851518c49, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0b:7e:12:17:b9:e6:43:57:1f:70:a5:ae:01: fb:4a:82:2d:b2:5d:b2:01:a0:33:b9:8c:03:c4:bb: 02:0a:7b:83:39:79:80:80:f2:0f:0e:a1:1d:cc:c2: 61:60:19:a5:78:50:52:7a:db:d5:ab:ce:a7:6a:51: 93:cd:7a:c1:f6:f6:dd:a4:91:42:7e:34:db:90:ab: e7:ae:c9:31:ae:36:7b:b6:c4:fa:0a:2e:86:b7:7c: 02:6b:5f:45:de:ba:41:74:95:b3:06:30:9e:6e:28: 90:8d:cd:fd:d3:88:3b:97:53:46:6b:36:5c:f5:43: c8:44:f2:0d:82:b7:10:86:e1:df:14:34:c7:a6:2f: d8:29:37:d3:7a:2f:a1:c8:1a:be:96:b7:26:53:45: c9:2a:e8:76:40:f1:18:f5:cb:23:68:90:36:8f:2c: 3f:da:89:39:56:69:be:2b:3b:47:05:ad:c2:ab:24: 0b:10:ca:b9:ac:7b:a8:e0:29:26:43:49:7e:36:6f: ce:25:d2:c9:68:2f:bb:6d:1d:23:27:5b:65:3a:ce: c2:16:07:49:0a:c9:ae:31:0e:11:01:3a:33:03:a0: da:eb:7d:e1:31:64:04:d8:bf:2a:55:cb:92:eb:7b: f4:40:06:e0:f9:09:3e:f8:87:7b:7f:4e:ed:b6:7c: 04:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:14:AD:52:BA:84:98:88:D9:DB:1A:AB:98:C2:F7:2D:E2:BC:20:DD X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4a085aba-de3b-4d02-b76d-6b883ad9e080.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.155.253.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:df:4f:f8:71:27:5e:f7:c6:cd:4d:f8:d0:df:ea:fd:c9:21: 83:15:0f:24:f7:27:bc:04:e2:a6:4f:d4:dc:08:d3:59:50:24: b6:e3:2c:7a:f6:9e:64:42:19:01:99:a4:4f:0c:f3:3b:e9:9b: 07:7a:4f:b9:a9:96:de:f2:7d:59:b0:15:ce:79:fa:94:a4:de: 87:fd:a1:ff:83:6e:53:3a:91:ce:37:62:09:07:0e:96:d5:f7: 76:49:ad:b8:37:d5:61:1f:5a:7c:89:f0:21:d1:ae:fd:26:0b: 3b:7b:3e:56:e9:70:90:f3:09:1a:ef:6d:1d:e0:be:a2:a2:98: 5a:e6:8c:18:c5:99:4b:95:60:3c:9f:2a:bd:73:6c:a8:52:1b: 50:18:f4:81:f5:d7:ea:d5:90:b9:0b:64:7e:4f:64:1d:19:a3: eb:ee:96:29:db:b1:5d:b3:ec:93:c4:5e:60:18:08:85:ae:4b: 4a:48:2f:7a:e9:6b:1f:ea:4c:7c:83:84:dd:9c:e1:fc:0d:31: c9:0a:de:6c:f8:94:cb:f4:87:a4:4b:26:53:20:a1:87:c4:ac: 52:29:c7:57:01:8d:e1:f6:bc:3a:29:ee:f3:65:b4:7b:5d:83: fa:7c:30:41:44:dd:44:8b:72:92:73:ff:84:18:bf:07:01:56: 83:3d:20:78 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUI6CtHoaVvHH2aNO0kOhfoEcFUyMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMTczMjAxWhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A1MmM2NjY5ZjQ1MmVjYTIzZWYzMzAzNjgwMzU0NjIyYTcx ODBlMzI0NDNkMzM2NzdiZGEzNzFlODUxNTE4YzQ5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtC34SF7nmQ1cfcKWuAftKgi2yXbIBoDO5jAPEuwIKe4M5 eYCA8g8OoR3MwmFgGaV4UFJ629WrzqdqUZPNesH29t2kkUJ+NNuQq+euyTGuNnu2 xPoKLoa3fAJrX0XeukF0lbMGMJ5uKJCNzf3TiDuXU0ZrNlz1Q8hE8g2CtxCG4d8U NMemL9gpN9N6L6HIGr6WtyZTRckq6HZA8Rj1yyNokDaPLD/aiTlWab4rO0cFrcKr JAsQyrmse6jgKSZDSX42b84l0sloL7ttHSMnW2U6zsIWB0kKya4xDhEBOjMDoNrr feExZATYvypVy5Lre/RABuD5CT74h3t/Tu22fASbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUWhStUrqEmIjZ2xqrmML3LeK8IN0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzRhMDg1YWJhLWRlM2ItNGQwMi1iNzZkLTZiODgzYWQ5ZTA4MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASm/0wDQYJKoZIhvcNAQELBQADggEBAAzfT/hxJ173xs1N+NDf6v3JIYMV DyT3J7wE4qZP1NwI01lQJLbjLHr2nmRCGQGZpE8M8zvpmwd6T7mplt7yfVmwFc55 +pSk3of9of+DblM6kc43YgkHDpbV93ZJrbg31WEfWnyJ8CHRrv0mCzt7PlbpcJDz CRrvbR3gvqKimFrmjBjFmUuVYDyfKr1zbKhSG1AY9IH11+rVkLkLZH5PZB0Zo+vu linbsV2z7JPEXmAYCIWuS0pIL3rpax/qTHyDhN2c4fwNMckK3mz4lMv0h6RLJlMg oYfErFIpx1cBjeH2vDop7vNltHtdg/p8MEFE3USLcpJz/4QYvwcBVoM9IHg= -----END CERTIFICATE-----Generated at Fri Oct 17 22:15:43 2025 by rpki-client