$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/540659a8-f175-4e18-9f6c-78dfb36089e2.roa File: 540659a8-f175-4e18-9f6c-78dfb36089e2.roa (raw, json) Hash identifier: 4gfMhT6ji8YArh/En/tr10ZL/xMK2o4Z259XKAqOlsw= Subject key identifier: 04:F3:F5:DD:F4:23:99:D0:5E:54:0B:0A:54:D8:EC:58:90:B5:81:25 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 44352C56D79A25A06A9E4681189747A7A25A49A3 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/540659a8-f175-4e18-9f6c-78dfb36089e2.roa Signing time: Mon 22 Sep 2025 21:29:23 +0000 ROA not before: Mon 22 Sep 2025 21:29:23 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.238.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:35:2c:56:d7:9a:25:a0:6a:9e:46:81:18:97:47:a7:a2:5a:49:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 21:29:23 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=8e7fbd6c1537e6b6f067474aace2ad55e0debb48edaca2af217e614743c82c4b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:80:52:c9:b9:e4:12:11:eb:8f:18:38:24:0a: e7:1d:e5:0d:79:85:22:11:37:94:0c:5b:fa:b4:e1: 4a:df:0d:4b:41:1c:9f:e6:4a:6a:c6:2f:07:aa:16: 91:f4:d2:d8:64:12:8f:91:d2:73:fa:d0:94:bc:9f: b7:50:16:2c:2c:0e:b0:bd:da:dc:8d:63:8a:af:c6: ef:04:1f:5a:1b:a4:50:4b:0a:c6:5e:a0:36:3c:d6: 26:1a:5a:ca:66:3c:a7:cc:83:5c:cb:80:84:99:b1: 9b:69:52:c3:8e:41:09:ff:cf:b4:5a:46:cd:ef:0f: 4a:f0:7a:ea:1f:d3:cb:ad:87:76:8b:1a:f4:2a:09: 43:a2:50:a1:51:87:f1:31:b3:32:3d:92:fa:80:97: 06:44:6d:0c:c8:82:0f:b6:09:9f:c0:87:63:52:4f: b0:6b:04:d4:b1:f3:d9:f8:53:11:14:8f:ed:aa:07: bf:c2:54:b3:68:38:57:92:27:c3:29:08:6f:7f:57: 6a:74:c4:61:5d:de:96:b3:c8:ca:f8:4d:58:22:5c: 79:eb:6e:e8:79:47:e8:d5:40:60:42:9f:02:ea:04: 98:99:11:b6:cf:8c:12:02:4f:90:25:4f:f5:e7:93: 82:6c:24:d6:61:92:69:db:be:2b:cc:b9:54:32:ff: e9:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:F3:F5:DD:F4:23:99:D0:5E:54:0B:0A:54:D8:EC:58:90:B5:81:25 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/540659a8-f175-4e18-9f6c-78dfb36089e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.238.148.0/24 Signature Algorithm: sha256WithRSAEncryption a0:3c:53:0b:59:ab:1b:e1:b9:d3:45:31:4d:c0:3d:13:00:d6: 27:9e:5e:42:f5:85:01:44:74:f6:61:df:88:67:f8:4d:f1:41: 1c:8a:4a:f3:dc:9f:c4:9c:a9:39:ec:6a:9b:38:6f:a8:84:ef: 84:cf:bc:53:be:c0:39:ac:cc:a1:19:e3:2e:1b:3d:92:35:2b: 55:6c:cd:8b:9d:60:25:c8:02:41:1d:e8:09:7c:31:50:a1:b9: 63:fe:55:13:a1:30:a1:00:ec:42:14:d6:6b:da:b2:d0:56:d5: 19:f9:b9:8c:06:df:50:0b:b7:09:be:ce:4d:f7:fd:dc:44:d8: 2c:f3:ea:30:85:12:f1:73:c7:41:96:31:db:32:28:ec:c0:c8: 8d:79:7c:44:f3:7d:67:b2:77:4b:91:d3:1e:f5:01:a9:c7:57: 37:39:0e:c1:6d:49:fe:a6:a8:6e:ec:42:b9:97:dd:d5:8b:99: 0c:0e:b0:ad:a9:86:7c:61:98:09:62:08:f0:ef:c1:82:06:12: 6b:a3:28:63:bc:b6:5b:fa:01:b3:8c:9e:6f:8a:57:cf:fa:da: 6b:18:cc:58:5c:2e:85:14:8f:fb:49:99:ae:fc:2b:ab:8c:bd: 33:ab:20:3d:b6:fd:3e:92:f4:aa:ba:73:85:cb:02:4d:18:a3: a0:e5:6f:d7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURDUsVteaJaBqnkaBGJdHp6JaSaMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjEyOTIzWhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZTdmYmQ2YzE1MzdlNmI2ZjA2NzQ3NGFhY2UyYWQ1NWUw ZGViYjQ4ZWRhY2EyYWYyMTdlNjE0NzQzYzgyYzRiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDygFLJueQSEeuPGDgkCucd5Q15hSIRN5QMW/q04UrfDUtB HJ/mSmrGLweqFpH00thkEo+R0nP60JS8n7dQFiwsDrC92tyNY4qvxu8EH1obpFBL CsZeoDY81iYaWspmPKfMg1zLgISZsZtpUsOOQQn/z7RaRs3vD0rweuof08uth3aL GvQqCUOiUKFRh/ExszI9kvqAlwZEbQzIgg+2CZ/Ah2NST7BrBNSx89n4UxEUj+2q B7/CVLNoOFeSJ8MpCG9/V2p0xGFd3pazyMr4TVgiXHnrbuh5R+jVQGBCnwLqBJiZ EbbPjBICT5AlT/Xnk4JsJNZhkmnbvivMuVQy/+ldAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUBPP13fQjmdBeVAsKVNjsWJC1gSUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzU0MDY1OWE4LWYxNzUtNGUxOC05ZjZjLTc4ZGZiMzYwODllMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAS7pQwDQYJKoZIhvcNAQELBQADggEBAKA8UwtZqxvhudNFMU3APRMA1iee XkL1hQFEdPZh34hn+E3xQRyKSvPcn8ScqTnsaps4b6iE74TPvFO+wDmszKEZ4y4b PZI1K1VszYudYCXIAkEd6Al8MVChuWP+VROhMKEA7EIU1mvastBW1Rn5uYwG31AL twm+zk33/dxE2Czz6jCFEvFzx0GWMdsyKOzAyI15fETzfWeyd0uR0x71AanHVzc5 DsFtSf6mqG7sQrmX3dWLmQwOsK2phnxhmAliCPDvwYIGEmujKGO8tlv6AbOMnm+K V8/62msYzFhcLoUUj/tJma78K6uMvTOrID22/T6S9Kq6c4XLAk0Yo6Dlb9c= -----END CERTIFICATE-----Generated at Fri Oct 17 22:18:31 2025 by rpki-client