$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4f178149-6b29-428e-8a4d-ac9bf272220d.roa File: 4f178149-6b29-428e-8a4d-ac9bf272220d.roa (raw, json) Hash identifier: kLrYnf3zSDPOxV8RU2J9LgbFkmQ1oZaojAFq5z35Jg8= Subject key identifier: 70:2A:61:66:9F:EC:E2:4B:10:F1:DD:AA:78:93:C9:DB:4F:9F:91:8E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1B64EAADB5C04EC5DE6BF9FF7D149D20FDA346A8 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4f178149-6b29-428e-8a4d-ac9bf272220d.roa Signing time: Mon 22 Sep 2025 22:53:30 +0000 ROA not before: Mon 22 Sep 2025 22:53:30 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.245.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:64:ea:ad:b5:c0:4e:c5:de:6b:f9:ff:7d:14:9d:20:fd:a3:46:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 22:53:30 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=55af349a98b4e091aa11c6df99bea5b9c0706b8ce33786d7c3773d22bcfcb1a0, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:e9:73:ed:d4:da:3f:8c:95:ad:e5:67:28:6c: f1:a2:bc:a9:bc:06:46:c3:b8:82:98:23:c6:d8:e2: f3:2e:60:70:64:e7:19:19:ca:ca:4f:49:15:d5:88: ca:0c:88:94:77:e7:a6:5a:a9:b8:fa:d5:d5:d7:fa: 98:1f:14:fa:b5:a0:3b:c6:00:6a:b3:64:e6:eb:f7: 10:86:53:db:22:69:a8:68:25:40:f7:f5:80:02:a1: 17:56:d1:e4:37:68:55:4a:8c:17:58:ff:3f:bb:70: 81:ae:67:b5:99:d5:73:dd:5f:cc:ec:7e:f1:39:2e: be:95:46:9b:4e:dc:0e:c5:28:73:ce:70:3e:af:0d: 19:0c:cc:ff:1e:7e:48:42:68:fa:46:34:6e:47:1b: 90:e5:7d:c8:c7:5e:e3:15:20:ab:4b:90:bc:3b:62: a0:60:00:7c:63:79:bc:83:24:de:d7:64:f0:66:5c: 97:86:55:2b:ab:55:4a:a8:08:3e:dd:47:b0:fe:a5: 4e:78:58:e3:63:b1:40:82:b7:e3:df:c1:25:07:d4: 9e:72:9a:13:0e:00:a5:68:25:66:70:13:6c:0a:41: 0a:a1:43:c9:63:ca:d6:a7:6a:30:f9:37:f0:b3:81: 2e:8b:10:c7:d2:2f:e3:0e:04:a9:f2:fa:ad:6f:2f: 51:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:2A:61:66:9F:EC:E2:4B:10:F1:DD:AA:78:93:C9:DB:4F:9F:91:8E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4f178149-6b29-428e-8a4d-ac9bf272220d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.245.159.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:1f:89:ac:e7:56:6d:cf:d6:39:04:1e:7e:53:1c:b8:db:31: 54:8e:d5:2b:51:21:15:a9:16:27:ca:48:58:70:87:4c:68:32: 1b:e6:68:e5:de:b7:05:f0:52:11:6a:0e:18:9b:3a:60:4e:a7: ef:dd:10:eb:4c:e6:f5:1b:ee:cf:bd:19:3c:e6:67:3d:93:65: 87:91:15:58:42:ee:eb:26:6d:fe:aa:66:75:5b:c8:82:09:e6: de:b7:5d:d3:d5:66:ce:ac:06:f1:58:12:8f:0d:b7:37:36:95: 5a:b7:d7:d8:63:04:f5:93:18:4d:bb:01:c2:aa:aa:58:06:c1: 92:60:6d:d3:13:50:87:f4:c4:1d:82:7a:b8:5b:4f:04:b9:9d: c6:ee:19:eb:04:a2:73:e5:f2:c9:1b:8b:21:f9:a4:0a:94:7f: 10:2d:e4:83:32:9c:41:47:39:31:66:37:3c:b2:d2:53:98:0b: 98:47:c0:6c:71:ec:8d:9e:e9:8e:f4:6b:1c:ca:a6:f4:61:af: 50:ee:7f:05:1c:f8:b8:06:38:bb:c2:f1:39:fd:9a:d5:fe:f9: ea:3c:b2:09:48:8e:ef:ee:ba:84:63:f8:e8:6c:da:20:29:9d: 2a:bb:be:ee:e2:66:a0:c4:15:b2:1a:73:7d:5d:3a:7b:f7:8e: 80:13:3f:2f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUG2TqrbXATsXea/n/fRSdIP2jRqgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjI1MzMwWhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A1NWFmMzQ5YTk4YjRlMDkxYWExMWM2ZGY5OWJlYTViOWMw NzA2YjhjZTMzNzg2ZDdjMzc3M2QyMmJjZmNiMWEwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDj6XPt1No/jJWt5WcobPGivKm8BkbDuIKYI8bY4vMuYHBk 5xkZyspPSRXViMoMiJR356Zaqbj61dXX+pgfFPq1oDvGAGqzZObr9xCGU9siaaho JUD39YACoRdW0eQ3aFVKjBdY/z+7cIGuZ7WZ1XPdX8zsfvE5Lr6VRptO3A7FKHPO cD6vDRkMzP8efkhCaPpGNG5HG5DlfcjHXuMVIKtLkLw7YqBgAHxjebyDJN7XZPBm XJeGVSurVUqoCD7dR7D+pU54WONjsUCCt+PfwSUH1J5ymhMOAKVoJWZwE2wKQQqh Q8ljytanajD5N/CzgS6LEMfSL+MOBKny+q1vL1FlAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUcCphZp/s4ksQ8d2qeJPJ20+fkY4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzRmMTc4MTQ5LTZiMjktNDI4ZS04YTRkLWFjOWJmMjcyMjIwZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAS9Z8wDQYJKoZIhvcNAQELBQADggEBAD0fiaznVm3P1jkEHn5THLjbMVSO 1StRIRWpFifKSFhwh0xoMhvmaOXetwXwUhFqDhibOmBOp+/dEOtM5vUb7s+9GTzm Zz2TZYeRFVhC7usmbf6qZnVbyIIJ5t63XdPVZs6sBvFYEo8Ntzc2lVq319hjBPWT GE27AcKqqlgGwZJgbdMTUIf0xB2CerhbTwS5ncbuGesEonPl8skbiyH5pAqUfxAt 5IMynEFHOTFmNzyy0lOYC5hHwGxx7I2e6Y70axzKpvRhr1DufwUc+LgGOLvC8Tn9 mtX++eo8sglIju/uuoRj+Ohs2iApnSq7vu7iZqDEFbIac31dOnv3joATPy8= -----END CERTIFICATE-----Generated at Sat Oct 18 05:08:47 2025 by rpki-client