$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4da298f9-3c96-48c1-a170-99d5c99c21e7.roa File: 4da298f9-3c96-48c1-a170-99d5c99c21e7.roa (raw, json) Hash identifier: DQrHVluRC3Tu5dYafjN+qp/09U14MX63iWpGePqVPGg= Subject key identifier: 27:AB:6B:2A:D6:F6:82:35:3B:B1:76:6B:49:C8:BE:20:31:AE:8A:C0 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4BFEDFFB37C7C1EF35E0595CA24ACB374CAD8424 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4da298f9-3c96-48c1-a170-99d5c99c21e7.roa Signing time: Wed 24 Sep 2025 21:08:14 +0000 ROA not before: Wed 24 Sep 2025 21:08:14 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.64.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:fe:df:fb:37:c7:c1:ef:35:e0:59:5c:a2:4a:cb:37:4c:ad:84:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 21:08:14 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=ea04eb32c3e1c73a3b4e089bc02533fac18fac603b43a49bfefc79f6cb147053, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:8e:21:9b:dc:b1:ef:bd:41:f7:5c:17:fd:d0: c8:d6:08:38:d0:b6:4d:88:e6:fc:c7:66:66:b9:42: 55:eb:1c:82:25:2a:f4:1f:23:19:1b:f5:72:b6:63: 61:92:e6:68:42:7f:3a:b9:3e:05:40:4f:a1:99:bf: 78:7a:9c:ad:5e:30:30:e3:38:ea:44:1a:73:5c:72: 15:88:dd:f8:c7:f4:b2:f8:51:41:74:f8:87:3f:96: 3c:9f:1e:64:b6:fb:b5:77:13:b9:7c:b6:b7:05:61: 2a:78:50:28:0e:c7:58:27:bf:81:e0:15:7e:ea:12: b6:28:ec:d5:c6:0f:ad:fd:3a:3a:4e:1a:86:80:e6: ae:67:b0:6d:6b:fa:f4:f0:8c:9c:8e:c3:df:83:1a: ba:53:80:d4:43:db:9f:36:1e:e9:5a:1d:21:13:2d: a9:3b:f5:50:36:72:f3:fa:8d:aa:7f:3e:26:af:d5: b3:65:cf:84:ee:1b:4f:10:33:ca:02:0b:e6:b7:f1: af:e7:89:f7:50:3c:37:95:4d:65:92:d7:44:51:13: fc:f5:2d:dd:2e:64:7c:8c:e9:4f:13:5c:8c:ee:72: 20:5d:bc:fe:4b:16:13:46:a1:bb:b1:1c:62:c5:57: 6e:f6:37:2a:ff:44:29:87:c0:5a:8a:d0:7e:7e:65: 3f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:AB:6B:2A:D6:F6:82:35:3B:B1:76:6B:49:C8:BE:20:31:AE:8A:C0 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4da298f9-3c96-48c1-a170-99d5c99c21e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.64.119.0/24 Signature Algorithm: sha256WithRSAEncryption 09:e3:60:24:94:cf:62:2e:1c:41:09:05:e3:e4:43:84:97:38: 2d:18:ef:d0:0b:c1:7f:08:6a:d0:c1:84:60:3c:a6:c6:83:2d: ce:11:8f:3e:4e:6f:22:90:19:6e:79:1e:c3:e9:8e:ad:ca:0e: b2:68:2f:05:d7:27:e1:d7:f8:78:54:c0:06:1a:83:de:0d:f3: 79:52:45:a3:bd:9d:05:71:f6:3a:7b:60:ce:b6:09:56:c2:8a: 3a:bc:d9:23:f4:f3:18:be:18:8b:87:91:dd:37:80:68:7c:c8: 6b:1f:6e:1e:3b:9a:a1:f1:31:79:04:c1:20:af:36:18:bc:dc: 73:2a:a3:f4:95:e6:5d:d8:ae:e6:6c:dd:5e:4f:0b:cc:fd:2f: 9d:4b:fa:0f:8c:16:89:2e:8d:3e:10:28:a0:15:ed:84:30:b0: 93:68:d7:15:7f:f9:ff:37:7c:61:43:9a:1f:e3:30:fd:dd:9b: 60:34:88:01:19:9e:38:c1:ac:af:f1:22:8d:e5:f0:ab:df:5b: 2a:b7:f4:96:54:67:3a:84:33:62:4b:1d:e5:9b:e8:ec:dd:9c: 0c:b4:8e:d4:da:67:45:85:7a:a9:0e:a9:da:0e:4b:fd:e9:c7: 8d:dc:34:1f:79:33:27:b0:7f:82:4a:b5:16:38:57:ab:d2:44: e5:29:df:60 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUS/7f+zfHwe814FlcokrLN0ythCQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MjEwODE0WhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BlYTA0ZWIzMmMzZTFjNzNhM2I0ZTA4OWJjMDI1MzNmYWMx OGZhYzYwM2I0M2E0OWJmZWZjNzlmNmNiMTQ3MDUzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCMjiGb3LHvvUH3XBf90MjWCDjQtk2I5vzHZma5QlXrHIIl KvQfIxkb9XK2Y2GS5mhCfzq5PgVAT6GZv3h6nK1eMDDjOOpEGnNcchWI3fjH9LL4 UUF0+Ic/ljyfHmS2+7V3E7l8trcFYSp4UCgOx1gnv4HgFX7qErYo7NXGD639OjpO GoaA5q5nsG1r+vTwjJyOw9+DGrpTgNRD2582HulaHSETLak79VA2cvP6jap/Piav 1bNlz4TuG08QM8oCC+a38a/nifdQPDeVTWWS10RRE/z1Ld0uZHyM6U8TXIzuciBd vP5LFhNGobuxHGLFV272Nyr/RCmHwFqK0H5+ZT8LAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJ6trKtb2gjU7sXZrSci+IDGuisAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzRkYTI5OGY5LTNjOTYtNDhjMS1hMTcwLTk5ZDVjOTljMjFlNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASQHcwDQYJKoZIhvcNAQELBQADggEBAAnjYCSUz2IuHEEJBePkQ4SXOC0Y 79ALwX8IatDBhGA8psaDLc4Rjz5ObyKQGW55HsPpjq3KDrJoLwXXJ+HX+HhUwAYa g94N83lSRaO9nQVx9jp7YM62CVbCijq82SP08xi+GIuHkd03gGh8yGsfbh47mqHx MXkEwSCvNhi83HMqo/SV5l3YruZs3V5PC8z9L51L+g+MFokujT4QKKAV7YQwsJNo 1xV/+f83fGFDmh/jMP3dm2A0iAEZnjjBrK/xIo3l8KvfWyq39JZUZzqEM2JLHeWb 6OzdnAy0jtTaZ0WFeqkOqdoOS/3px43cNB95Myewf4JKtRY4V6vSROUp32A= -----END CERTIFICATE-----Generated at Fri Oct 17 23:58:30 2025 by rpki-client