$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/58952325-0592-46ce-83d3-00220545a42b.roa File: 58952325-0592-46ce-83d3-00220545a42b.roa (raw, json) Hash identifier: 2cdMf+J05YG1gPHOy4F2QZL4ZrODgA9y6IJbGk/wmJg= Subject key identifier: 24:3B:67:96:78:2D:B4:2D:A6:7B:AD:26:97:45:B2:9B:62:26:79:D4 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 18B093F8749E035A3E33E563B5BF2BABFA4DEB6D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/58952325-0592-46ce-83d3-00220545a42b.roa Signing time: Mon 22 Sep 2025 17:10:07 +0000 ROA not before: Mon 22 Sep 2025 17:10:07 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.154.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:b0:93:f8:74:9e:03:5a:3e:33:e5:63:b5:bf:2b:ab:fa:4d:eb:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 17:10:07 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=ad1444ecd9c72899be13685dfd51f13753d3c0915973cbd2ce87e56a057e6d93, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:43:e0:74:49:2c:59:3b:d1:3d:35:e7:c8:1b: 2f:ba:88:96:e9:2e:47:2b:c5:36:91:6d:d9:63:59: 97:7b:3c:54:76:66:0b:ef:55:df:ee:e4:61:46:b8: 6f:38:ab:f2:b0:fa:c5:34:0e:32:bc:e7:b1:7c:cc: 3f:c5:ce:d1:32:4e:26:b7:6f:9a:af:36:1c:b0:30: fc:24:06:32:d6:73:b3:fb:2d:b5:48:15:31:0b:f5: 01:90:ec:0c:a7:86:4b:5d:62:4c:21:7d:45:41:06: 75:bf:e6:10:83:b4:29:94:6c:c8:31:7f:c5:e7:0b: 0e:51:b5:0a:3b:7f:89:64:55:2d:64:87:52:ef:49: 93:42:b8:2e:e6:ea:54:b6:a7:21:63:ca:65:67:74: fe:99:a5:3b:a7:5c:84:65:da:09:72:74:fb:55:0a: 99:2e:fe:5e:56:a4:9d:45:40:26:3e:e1:75:15:25: bf:bd:5e:d3:80:9a:0a:87:1e:cf:22:df:16:8e:6c: c7:86:b6:64:af:79:02:ae:5d:60:a9:91:24:e6:3b: 75:bb:4b:25:65:ef:8f:d1:2b:e2:37:0d:37:d6:26: 65:1f:55:da:58:f5:78:1f:79:2a:c2:85:6f:ae:52: 08:de:e0:a6:b0:c4:31:59:2e:a0:44:0f:d0:62:aa: 66:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:3B:67:96:78:2D:B4:2D:A6:7B:AD:26:97:45:B2:9B:62:26:79:D4 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/58952325-0592-46ce-83d3-00220545a42b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.154.144.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:d5:12:88:5b:9e:c4:8a:b4:da:05:c6:aa:50:6f:3f:fc:bc: 87:a1:26:65:4c:66:7b:35:c8:2f:d3:54:b6:04:47:f1:23:e4: 3f:f7:61:54:82:6c:22:8d:6b:c5:3d:19:22:b0:ce:b3:24:98: 3d:47:42:dd:4a:c0:c6:30:52:b6:03:61:a3:ca:a9:21:aa:86: cc:a5:3d:f1:8e:75:4f:16:a1:80:33:5f:17:46:da:45:37:2c: a4:06:c1:20:83:c3:57:62:12:a4:8e:e3:4e:4e:9e:cf:29:d1: df:51:2f:46:19:23:72:95:63:15:b8:a9:f4:51:03:63:ed:f0: e6:02:a5:10:37:8f:66:be:97:d4:6b:6d:e2:90:1b:9f:f8:1d: df:30:5c:e8:d1:17:19:ad:57:4a:2b:2b:5c:c7:c5:e3:ce:53: 0f:fb:34:59:0c:f1:14:e4:56:d4:02:74:20:8a:b7:0a:e2:1c: ba:af:55:e8:33:e7:11:e7:ce:cb:2b:42:3a:6b:e2:81:de:2c: ad:2f:d9:ed:5e:11:1a:94:b6:81:4e:d2:ed:d9:78:09:db:ec: 43:2c:ef:08:13:61:2f:81:e2:f3:09:51:67:41:5e:8b:69:58: 5a:e6:53:d7:0a:1f:6e:71:7f:5c:64:39:76:e7:a0:3a:fe:dc: 19:c5:3f:01 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGLCT+HSeA1o+M+Vjtb8rq/pN620wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMTcxMDA3WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BhZDE0NDRlY2Q5YzcyODk5YmUxMzY4NWRmZDUxZjEzNzUz ZDNjMDkxNTk3M2NiZDJjZTg3ZTU2YTA1N2U2ZDkzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDhQ+B0SSxZO9E9NefIGy+6iJbpLkcrxTaRbdljWZd7PFR2 ZgvvVd/u5GFGuG84q/Kw+sU0DjK857F8zD/FztEyTia3b5qvNhywMPwkBjLWc7P7 LbVIFTEL9QGQ7AynhktdYkwhfUVBBnW/5hCDtCmUbMgxf8XnCw5RtQo7f4lkVS1k h1LvSZNCuC7m6lS2pyFjymVndP6ZpTunXIRl2glydPtVCpku/l5WpJ1FQCY+4XUV Jb+9XtOAmgqHHs8i3xaObMeGtmSveQKuXWCpkSTmO3W7SyVl74/RK+I3DTfWJmUf VdpY9XgfeSrChW+uUgje4KawxDFZLqBED9BiqmZpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJDtnlngttC2me60ml0Wym2ImedQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzU4OTUyMzI1LTA1OTItNDZjZS04M2QzLTAwMjIwNTQ1YTQyYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASmpAwDQYJKoZIhvcNAQELBQADggEBAAvVEohbnsSKtNoFxqpQbz/8vIeh JmVMZns1yC/TVLYER/Ej5D/3YVSCbCKNa8U9GSKwzrMkmD1HQt1KwMYwUrYDYaPK qSGqhsylPfGOdU8WoYAzXxdG2kU3LKQGwSCDw1diEqSO405Ons8p0d9RL0YZI3KV YxW4qfRRA2Pt8OYCpRA3j2a+l9RrbeKQG5/4Hd8wXOjRFxmtV0orK1zHxePOUw/7 NFkM8RTkVtQCdCCKtwriHLqvVegz5xHnzssrQjpr4oHeLK0v2e1eERqUtoFO0u3Z eAnb7EMs7wgTYS+B4vMJUWdBXotpWFrmU9cKH25xf1xkOXbnoDr+3BnFPwE= -----END CERTIFICATE-----Generated at Fri Oct 17 23:53:58 2025 by rpki-client