$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/55b4f0ae-1da8-41ed-9a74-38cac6cada9a.roa File: 55b4f0ae-1da8-41ed-9a74-38cac6cada9a.roa (raw, json) Hash identifier: YMj2uYjpCuwjVwf7wGor4KWBm7GC7dHIieXwpn4kb2o= Subject key identifier: 0F:61:DC:40:99:B3:58:31:64:21:E8:12:0E:54:68:35:3B:0B:64:A7 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 65C8EC3CD28C9093207649E970FA619CFF546BA3 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/55b4f0ae-1da8-41ed-9a74-38cac6cada9a.roa Signing time: Mon 22 Sep 2025 21:12:44 +0000 ROA not before: Mon 22 Sep 2025 21:12:44 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.172.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:c8:ec:3c:d2:8c:90:93:20:76:49:e9:70:fa:61:9c:ff:54:6b:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 21:12:44 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=0fbbcedb8a01369c8013494a5c4a7e0a24b0dcc523227ee2fab5d3732bd85bd1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1c:f7:f7:61:21:8c:47:cb:23:82:f2:45:0c: 85:5b:df:e7:da:df:cb:79:42:07:83:c4:92:ad:d5: e4:11:fe:c9:63:6c:76:a4:e4:6a:2b:73:02:f5:16: 1e:a7:d4:50:7e:d0:d2:5b:11:b9:18:20:25:c3:95: b5:5c:97:c4:a7:4e:d5:a3:fc:da:eb:09:53:c7:dc: c4:53:96:fc:a4:ab:bb:d4:c1:3b:d7:88:5e:50:93: 7a:c9:6f:22:93:13:cb:81:bf:2f:a2:c0:57:2b:f4: 68:bc:a6:14:40:5a:b8:8c:2c:11:ab:2a:f3:d7:7e: 91:3c:8a:8b:f4:ed:5a:9d:03:68:aa:a0:5f:ce:50: 65:4b:87:f2:51:ef:5f:aa:c2:c7:5f:18:04:35:85: 2e:aa:1d:b8:ae:6a:66:ff:f8:06:e6:26:99:4e:66: 48:69:10:83:48:42:67:3c:c4:89:f5:a6:a5:6e:0e: e3:15:87:76:ab:62:da:46:eb:69:35:67:bf:18:ba: f5:e4:80:35:78:0b:f3:18:44:e8:62:bd:03:08:e3: f2:13:4e:de:9d:2e:eb:eb:dc:5f:48:3c:51:5c:c8: 71:94:78:3a:37:93:51:d3:1e:f3:31:10:61:92:33: 23:3c:13:64:16:af:6f:9a:00:c0:1b:ff:f1:68:1c: df:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:61:DC:40:99:B3:58:31:64:21:E8:12:0E:54:68:35:3B:0B:64:A7 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/55b4f0ae-1da8-41ed-9a74-38cac6cada9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.172.4.0/22 Signature Algorithm: sha256WithRSAEncryption 71:5b:8b:2b:c6:20:51:a4:dd:9e:00:d7:1d:eb:35:45:b3:84: 92:92:4c:9e:02:0b:45:1e:cd:b9:16:d7:15:dc:4e:22:db:76: 2a:c9:9c:8d:6b:58:43:88:50:5e:99:1f:64:71:8f:70:ab:e8: 08:d0:38:b3:7a:05:fc:d9:31:c1:41:f7:ea:9a:26:4d:1e:7c: cb:8b:f0:25:d4:0f:ba:08:c7:27:0f:b0:70:a6:48:8b:c3:d1: 44:ea:3c:e7:6c:49:82:3d:7b:74:dc:69:fd:15:3f:f0:69:59: 06:99:72:7b:79:7f:f4:fb:bd:c1:ab:38:63:02:28:bf:d3:eb: 15:64:d0:f5:c9:95:9f:39:2e:ca:05:61:b1:77:40:21:e2:46: 96:80:c4:7d:2a:06:88:39:bf:06:72:3b:42:6f:8c:b1:43:e7: df:1e:b9:e2:85:dc:e6:3c:9a:5c:8c:24:df:f8:89:79:09:8f: 79:3e:32:e7:50:c3:3e:c9:8b:39:7c:2b:67:ed:5c:7a:f5:0b: 7a:4e:e9:78:77:40:3e:a5:a9:0a:a4:e7:82:66:41:e3:e0:bb: bf:84:ff:8e:ff:f6:51:c4:76:74:ce:fe:bc:a0:18:80:1b:e6: f6:bd:0e:ec:a8:0b:a1:0d:51:71:e0:37:9f:f4:28:4e:53:54: b7:54:21:3b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZcjsPNKMkJMgdknpcPphnP9Ua6MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjExMjQ0WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AwZmJiY2VkYjhhMDEzNjljODAxMzQ5NGE1YzRhN2UwYTI0 YjBkY2M1MjMyMjdlZTJmYWI1ZDM3MzJiZDg1YmQxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0HPf3YSGMR8sjgvJFDIVb3+fa38t5QgeDxJKt1eQR/slj bHak5GorcwL1Fh6n1FB+0NJbEbkYICXDlbVcl8SnTtWj/NrrCVPH3MRTlvykq7vU wTvXiF5Qk3rJbyKTE8uBvy+iwFcr9Gi8phRAWriMLBGrKvPXfpE8iov07VqdA2iq oF/OUGVLh/JR71+qwsdfGAQ1hS6qHbiuamb/+AbmJplOZkhpEINIQmc8xIn1pqVu DuMVh3arYtpG62k1Z78YuvXkgDV4C/MYROhivQMI4/ITTt6dLuvr3F9IPFFcyHGU eDo3k1HTHvMxEGGSMyM8E2QWr2+aAMAb//FoHN/1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUD2HcQJmzWDFkIegSDlRoNTsLZKcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzU1YjRmMGFlLTFkYTgtNDFlZC05YTc0LTM4Y2FjNmNhZGE5YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAISrAQwDQYJKoZIhvcNAQELBQADggEBAHFbiyvGIFGk3Z4A1x3rNUWzhJKS TJ4CC0UezbkW1xXcTiLbdirJnI1rWEOIUF6ZH2Rxj3Cr6AjQOLN6BfzZMcFB9+qa Jk0efMuL8CXUD7oIxycPsHCmSIvD0UTqPOdsSYI9e3Tcaf0VP/BpWQaZcnt5f/T7 vcGrOGMCKL/T6xVk0PXJlZ85LsoFYbF3QCHiRpaAxH0qBog5vwZyO0JvjLFD598e ueKF3OY8mlyMJN/4iXkJj3k+MudQwz7Jizl8K2ftXHr1C3pO6Xh3QD6lqQqk54Jm QePgu7+E/47/9lHEdnTO/rygGIAb5va9DuyoC6ENUXHgN5/0KE5TVLdUITs= -----END CERTIFICATE-----Generated at Fri Oct 17 23:46:43 2025 by rpki-client