$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4c4bc94f-e65f-4b73-b219-aa458909c96f.roa File: 4c4bc94f-e65f-4b73-b219-aa458909c96f.roa (raw, json) Hash identifier: FruOjF8xzTo7KUr9/wYRUF/WlZBFAgQg8NFfy2n3k6k= Subject key identifier: C0:F7:69:F1:92:D5:0D:3D:93:61:BB:26:B0:61:A4:0A:D7:CE:9D:A8 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 068A749530C375387E2493E9553AAE170C3A7A85 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4c4bc94f-e65f-4b73-b219-aa458909c96f.roa Signing time: Mon 22 Sep 2025 20:00:20 +0000 ROA not before: Mon 22 Sep 2025 20:00:20 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.165.176.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:8a:74:95:30:c3:75:38:7e:24:93:e9:55:3a:ae:17:0c:3a:7a:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 20:00:20 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=61d9ce542eebab510931f033a5b338a381e43b78e680b6eb5fbc9f76492e1e71, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:e9:0b:cb:c0:d1:2d:26:88:3d:d5:7d:fa:91: f9:33:05:ee:15:53:66:69:2f:7f:65:4e:cf:9a:60: 94:ac:94:9b:8f:96:e6:65:e8:0c:ba:d6:25:ee:a2: 2e:9b:28:50:7d:6b:0e:ac:03:4d:4c:b8:1c:10:3e: 0d:d1:30:de:8e:f9:45:56:ae:7d:85:7c:5e:5a:0a: 20:13:9a:89:f8:71:39:6f:52:7d:a2:cb:af:7c:d6: 11:38:db:00:4e:1f:a3:ba:56:30:bb:54:8d:5d:10: 10:58:4a:01:16:72:bd:1f:2f:43:9d:45:d5:e3:d1: 2a:08:fb:76:c6:a6:8f:c8:9c:09:93:53:5d:a8:5b: ee:a9:7a:be:bd:9a:b0:f9:76:64:22:3c:57:a9:d8: d5:83:37:43:37:fe:a5:0b:14:9d:f5:26:0c:d0:8e: 35:8d:b7:49:bb:78:cb:61:2e:ae:11:88:6f:4c:f7: 10:62:fa:e2:97:fd:a1:27:68:8d:44:5c:97:e5:2f: fa:2e:fa:65:56:fe:50:b0:e0:fd:12:f7:43:1a:53: 78:92:2a:4c:40:75:62:a1:e8:b8:4f:2d:96:19:7e: 5f:84:18:d0:a5:27:6d:e0:1a:82:f4:4b:c0:62:15: 33:b5:a9:70:bf:f0:95:70:8d:b6:ac:68:1c:a3:ec: 3a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:F7:69:F1:92:D5:0D:3D:93:61:BB:26:B0:61:A4:0A:D7:CE:9D:A8 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4c4bc94f-e65f-4b73-b219-aa458909c96f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.165.176.0/23 Signature Algorithm: sha256WithRSAEncryption 52:bb:14:a6:f2:97:10:ef:68:c8:7e:58:4f:fa:80:4a:b8:14: 33:91:00:66:dd:cd:13:3b:5d:ec:df:69:90:3b:25:48:68:a4: ef:8c:d6:bb:32:54:9a:d1:88:f4:4c:68:7d:2c:15:f2:72:04: 84:84:6a:35:2a:ef:d1:cd:24:22:03:52:0c:53:a2:95:46:db: fc:37:82:d3:4b:c0:52:0d:1f:62:c6:66:c6:58:36:57:67:48: 9c:96:68:61:84:0e:78:35:aa:b6:9f:06:5c:29:64:c8:db:cb: 49:75:54:04:3a:45:75:58:3e:7d:1e:a6:1e:ef:ae:ec:31:2e: dd:4a:22:4e:27:bd:0b:56:2c:03:4b:57:f5:e6:c9:82:9f:a4: 6c:28:2a:9d:de:5f:51:e0:90:ef:71:a8:36:0c:ab:a0:10:d7: 9b:da:18:9b:5e:ad:65:45:d5:f2:80:a0:b8:6d:18:f1:db:57: d2:6d:73:af:c5:bd:08:f2:1f:af:fb:3c:e1:6a:f3:19:4b:f2: f9:b3:bb:5d:09:25:66:aa:f3:fc:fc:48:b6:2c:94:24:4c:1f: 59:2c:8f:2b:55:05:f3:fe:2c:88:88:17:58:0d:64:86:b7:09: d2:bf:6d:0b:8d:60:b5:97:e2:e1:3c:77:ca:b2:ba:fb:70:7e: 12:ff:95:cf -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBop0lTDDdTh+JJPpVTquFww6eoUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjAwMDIwWhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A2MWQ5Y2U1NDJlZWJhYjUxMDkzMWYwMzNhNWIzMzhhMzgx ZTQzYjc4ZTY4MGI2ZWI1ZmJjOWY3NjQ5MmUxZTcxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCH6QvLwNEtJog91X36kfkzBe4VU2ZpL39lTs+aYJSslJuP luZl6Ay61iXuoi6bKFB9aw6sA01MuBwQPg3RMN6O+UVWrn2FfF5aCiATmon4cTlv Un2iy6981hE42wBOH6O6VjC7VI1dEBBYSgEWcr0fL0OdRdXj0SoI+3bGpo/InAmT U12oW+6per69mrD5dmQiPFep2NWDN0M3/qULFJ31JgzQjjWNt0m7eMthLq4RiG9M 9xBi+uKX/aEnaI1EXJflL/ou+mVW/lCw4P0S90MaU3iSKkxAdWKh6LhPLZYZfl+E GNClJ23gGoL0S8BiFTO1qXC/8JVwjbasaByj7Do7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUwPdp8ZLVDT2TYbsmsGGkCtfOnagwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzRjNGJjOTRmLWU2NWYtNGI3My1iMjE5LWFhNDU4OTA5Yzk2Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESpbAwDQYJKoZIhvcNAQELBQADggEBAFK7FKbylxDvaMh+WE/6gEq4FDOR AGbdzRM7XezfaZA7JUhopO+M1rsyVJrRiPRMaH0sFfJyBISEajUq79HNJCIDUgxT opVG2/w3gtNLwFINH2LGZsZYNldnSJyWaGGEDng1qrafBlwpZMjby0l1VAQ6RXVY Pn0eph7vruwxLt1KIk4nvQtWLANLV/XmyYKfpGwoKp3eX1HgkO9xqDYMq6AQ15va GJterWVF1fKAoLhtGPHbV9Jtc6/FvQjyH6/7POFq8xlL8vmzu10JJWaq8/z8SLYs lCRMH1ksjytVBfP+LIiIF1gNZIa3CdK/bQuNYLWX4uE8d8qyuvtwfhL/lc8= -----END CERTIFICATE-----Generated at Fri Oct 17 22:18:56 2025 by rpki-client