$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5d3da03d-42e8-42c8-b063-07018d44b018.roa File: 5d3da03d-42e8-42c8-b063-07018d44b018.roa (raw, json) Hash identifier: oJDCTvmWrLXLAZMO5TeUpgYHdMvJYvqQK4z2IODMLoE= Subject key identifier: 01:E4:8A:6E:9D:A6:D0:B1:65:1E:AF:EF:68:EE:9B:D9:F4:AB:D7:7E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0E901C7EACA71531E6EFDAE7FA13A3BD04143EDF Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5d3da03d-42e8-42c8-b063-07018d44b018.roa Signing time: Mon 22 Sep 2025 22:00:13 +0000 ROA not before: Mon 22 Sep 2025 22:00:13 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.238.180.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:90:1c:7e:ac:a7:15:31:e6:ef:da:e7:fa:13:a3:bd:04:14:3e:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 22:00:13 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=20605ac8c10002eec854014f33eb158b0cfc94882c75a9e46923e3fc1d7df644, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:81:cf:86:67:4d:0e:20:13:7e:0a:ef:a5:64: 5e:d2:fa:5f:46:2a:16:39:b3:6c:f0:04:2d:69:b0: 94:c4:63:51:c5:2f:51:fb:b4:72:fc:a3:5f:3e:22: 12:1d:0b:8a:83:26:90:87:ad:b9:96:40:e8:cd:09: 00:d3:c8:e7:d0:8d:aa:a0:bc:6f:e3:3e:93:8d:ba: be:88:ed:cf:1e:52:c6:66:6b:30:a4:b1:b6:2c:29: 23:b9:d9:15:97:5a:8f:a5:7b:10:91:a0:23:50:ef: 67:cc:75:74:a6:59:53:80:1b:42:3f:1c:fa:23:cf: 6b:d1:01:9d:f0:e9:e0:73:57:c4:48:0d:4d:c6:77: b9:ea:60:fc:66:43:ad:99:de:9f:ea:f8:0b:f5:be: 4c:da:01:ad:ad:10:be:74:a1:15:4e:9b:15:c5:df: 6d:61:51:50:fb:db:33:e9:30:6c:29:41:14:26:50: a0:90:60:ff:89:bb:28:fe:e0:e6:e3:b0:30:12:12: 8a:66:eb:12:1c:71:73:1d:b6:cf:73:5e:7f:11:8e: 89:85:6f:07:ac:d8:07:3d:95:3f:cc:5d:f3:93:a7: 64:a0:ec:a4:d6:e4:32:6d:56:0b:40:f8:32:6a:ee: 45:45:e2:26:77:f9:4b:d2:23:e9:66:c3:c1:8a:73: e0:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:E4:8A:6E:9D:A6:D0:B1:65:1E:AF:EF:68:EE:9B:D9:F4:AB:D7:7E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5d3da03d-42e8-42c8-b063-07018d44b018.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.238.180.0/23 Signature Algorithm: sha256WithRSAEncryption 8e:71:26:f8:bc:2b:cc:dd:5c:f2:8c:d4:bb:8b:e5:6f:78:d2: 27:43:40:b9:9b:f8:42:0f:df:89:14:31:67:f8:9f:89:2e:03: 4f:d2:78:0a:d7:1f:a6:96:5d:2c:7a:39:53:24:bf:34:5e:bf: 1a:41:41:c8:6d:2e:07:1b:6f:b8:90:0f:59:09:de:95:ff:91: 45:62:fb:7f:4a:ae:07:b5:42:a9:fb:12:07:dc:a4:70:8c:43: cb:04:77:10:f5:bc:f2:45:c1:f2:11:47:bf:02:04:5e:da:43: ab:75:69:7a:ac:1c:0b:51:e2:22:55:0a:28:49:34:dd:6e:fe: b5:63:90:a2:63:cc:62:f8:64:d0:51:d6:45:c7:29:36:15:50: ba:76:e9:ad:9a:ad:f4:68:5e:ff:db:1c:34:aa:d1:f3:54:50: 17:bd:41:49:53:54:86:90:02:56:3a:a5:08:e3:07:a0:0d:5b: ee:e9:da:04:58:1a:50:95:e7:53:bf:ab:45:4f:17:a1:ad:86: d7:4b:ce:3b:7c:80:a6:4e:a4:e2:db:c1:ba:fc:96:8c:f8:fe: fb:5c:32:10:3a:48:67:51:65:7e:b2:16:6d:c9:87:1a:f9:1c: fa:db:4f:99:df:04:e5:eb:cd:94:96:dd:12:c0:71:54:9a:50: 2f:72:06:e3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDpAcfqynFTHm79rn+hOjvQQUPt8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjIwMDEzWhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AyMDYwNWFjOGMxMDAwMmVlYzg1NDAxNGYzM2ViMTU4YjBj ZmM5NDg4MmM3NWE5ZTQ2OTIzZTNmYzFkN2RmNjQ0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGgc+GZ00OIBN+Cu+lZF7S+l9GKhY5s2zwBC1psJTEY1HF L1H7tHL8o18+IhIdC4qDJpCHrbmWQOjNCQDTyOfQjaqgvG/jPpONur6I7c8eUsZm azCksbYsKSO52RWXWo+lexCRoCNQ72fMdXSmWVOAG0I/HPojz2vRAZ3w6eBzV8RI DU3Gd7nqYPxmQ62Z3p/q+Av1vkzaAa2tEL50oRVOmxXF321hUVD72zPpMGwpQRQm UKCQYP+Juyj+4ObjsDASEopm6xIccXMdts9zXn8RjomFbwes2Ac9lT/MXfOTp2Sg 7KTW5DJtVgtA+DJq7kVF4iZ3+UvSI+lmw8GKc+AvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUAeSKbp2m0LFlHq/vaO6b2fSr134wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzVkM2RhMDNkLTQyZTgtNDJjOC1iMDYzLTA3MDE4ZDQ0YjAxOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAES7rQwDQYJKoZIhvcNAQELBQADggEBAI5xJvi8K8zdXPKM1LuL5W940idD QLmb+EIP34kUMWf4n4kuA0/SeArXH6aWXSx6OVMkvzRevxpBQchtLgcbb7iQD1kJ 3pX/kUVi+39Krge1Qqn7EgfcpHCMQ8sEdxD1vPJFwfIRR78CBF7aQ6t1aXqsHAtR 4iJVCihJNN1u/rVjkKJjzGL4ZNBR1kXHKTYVULp26a2arfRoXv/bHDSq0fNUUBe9 QUlTVIaQAlY6pQjjB6ANW+7p2gRYGlCV51O/q0VPF6GthtdLzjt8gKZOpOLbwbr8 loz4/vtcMhA6SGdRZX6yFm3Jhxr5HPrbT5nfBOXrzZSW3RLAcVSaUC9yBuM= -----END CERTIFICATE-----Generated at Sat Oct 18 02:16:25 2025 by rpki-client