$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/61000947-4952-4759-a76f-178a00ea4e35.roa File: 61000947-4952-4759-a76f-178a00ea4e35.roa (raw, json) Hash identifier: Ki4DJ7EobOWmoA9irG09osFz1ymx3pbIlSc7/RBW5is= Subject key identifier: 53:A8:5B:9B:EC:46:6E:3D:80:DD:8E:74:EE:69:BE:B3:2D:A2:5C:C3 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 03A7111785F33C9A3E88D4FAF8742E2023B5FD70 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/61000947-4952-4759-a76f-178a00ea4e35.roa Signing time: Mon 22 Sep 2025 22:00:05 +0000 ROA not before: Mon 22 Sep 2025 22:00:05 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.238.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:a7:11:17:85:f3:3c:9a:3e:88:d4:fa:f8:74:2e:20:23:b5:fd:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 22:00:05 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=92420cdcdac88e64642317bd8bef73aece07b44393f35626a5b0c6f394f9cc44, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f9:fd:2d:3a:f5:09:e4:23:d4:5b:4c:ea:e2: 8f:c7:32:86:e8:09:9f:39:8f:c9:c1:88:ed:55:0d: f7:ca:5c:43:6a:9a:86:0f:95:e8:37:ad:dd:86:df: 78:11:dc:39:62:7d:8e:48:3e:4a:a1:82:3e:b9:dd: 92:56:ff:3d:81:1d:b1:12:13:1f:2b:d9:6d:ad:7c: 77:16:1f:1a:d5:1d:ff:5c:6e:1e:33:11:f9:39:58: 5f:c9:f1:61:11:84:24:24:02:13:99:00:d6:42:dd: 72:b8:08:ac:19:28:4e:f9:07:c2:a5:24:a7:44:f5: 3b:1d:50:c5:02:01:17:68:a7:b5:f3:94:1d:63:ba: 66:38:15:85:5d:7f:76:26:9a:87:a2:8c:11:2b:64: de:08:cc:5a:c6:9a:b2:d5:01:c1:78:2c:76:7e:8d: f6:28:d6:c2:d7:f2:ed:04:75:d7:14:b5:64:a9:60: 87:c9:3e:39:4d:8e:d6:bb:29:4b:c8:cf:06:61:73: 33:bb:a7:7e:3c:43:af:ac:0e:b7:43:db:01:84:b7: c6:1e:c7:50:e4:db:76:df:51:6e:68:05:10:0f:b0: a4:9b:a5:8f:08:b3:cc:34:cb:b0:26:5f:09:82:f2: 81:bc:0a:eb:be:27:c9:bb:93:5a:81:d4:7a:93:79: 0a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:A8:5B:9B:EC:46:6E:3D:80:DD:8E:74:EE:69:BE:B3:2D:A2:5C:C3 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/61000947-4952-4759-a76f-178a00ea4e35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.238.168.0/23 Signature Algorithm: sha256WithRSAEncryption 03:a2:b3:54:3d:37:9f:00:37:ce:9f:3f:5f:70:c3:e0:42:dd: 79:25:6d:9c:94:67:11:58:06:1f:86:15:62:6f:2c:2b:9b:ec: f9:8f:f8:0f:ce:60:29:e4:b9:f8:84:4d:eb:ad:94:62:43:ac: 48:0c:0f:65:d1:0d:df:64:79:95:d0:5d:33:41:d8:5a:fe:25: 37:4f:b8:1a:f7:48:99:9f:7c:fc:b0:08:85:3d:04:ca:d6:59: f7:d6:16:b1:e3:1c:65:60:ae:0f:83:8e:87:2d:90:42:a7:b0: 39:c4:07:0f:75:c6:43:bd:48:6f:11:f8:e1:06:2d:f1:55:6e: 04:25:d0:47:7d:b2:75:7e:87:4d:08:fb:e0:e6:32:d0:1c:a3: 7e:fe:96:64:77:96:dc:59:48:dc:f1:9f:89:80:ae:4a:08:b7: cb:a6:5c:2b:c9:7e:2d:b1:a6:fb:bb:d9:fc:5e:69:25:2c:f7: 2f:60:56:25:45:de:b6:9c:a9:6b:93:7b:94:fe:a3:e1:10:b8: 2e:38:4c:c3:1d:d4:da:f2:b3:f7:27:8f:d9:25:cf:e2:7c:4c: 1b:86:cb:a4:9c:74:fe:51:d3:65:55:3d:8c:c9:4d:d5:b4:69: 79:01:6c:67:e6:85:f4:5b:ca:54:ef:82:8d:98:45:e5:51:6d: 65:e7:9b:d9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUA6cRF4XzPJo+iNT6+HQuICO1/XAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjIwMDA1WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A5MjQyMGNkY2RhYzg4ZTY0NjQyMzE3YmQ4YmVmNzNhZWNl MDdiNDQzOTNmMzU2MjZhNWIwYzZmMzk0ZjljYzQ0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCe+f0tOvUJ5CPUW0zq4o/HMoboCZ85j8nBiO1VDffKXENq moYPleg3rd2G33gR3DlifY5IPkqhgj653ZJW/z2BHbESEx8r2W2tfHcWHxrVHf9c bh4zEfk5WF/J8WERhCQkAhOZANZC3XK4CKwZKE75B8KlJKdE9TsdUMUCARdop7Xz lB1jumY4FYVdf3YmmoeijBErZN4IzFrGmrLVAcF4LHZ+jfYo1sLX8u0EddcUtWSp YIfJPjlNjta7KUvIzwZhczO7p348Q6+sDrdD2wGEt8Yex1Dk23bfUW5oBRAPsKSb pY8Is8w0y7AmXwmC8oG8Cuu+J8m7k1qB1HqTeQqXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUU6hbm+xGbj2A3Y507mm+sy2iXMMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzYxMDAwOTQ3LTQ5NTItNDc1OS1hNzZmLTE3OGEwMGVhNGUzNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAES7qgwDQYJKoZIhvcNAQELBQADggEBAAOis1Q9N58AN86fP19ww+BC3Xkl bZyUZxFYBh+GFWJvLCub7PmP+A/OYCnkufiETeutlGJDrEgMD2XRDd9keZXQXTNB 2Fr+JTdPuBr3SJmffPywCIU9BMrWWffWFrHjHGVgrg+DjoctkEKnsDnEBw91xkO9 SG8R+OEGLfFVbgQl0Ed9snV+h00I++DmMtAco37+lmR3ltxZSNzxn4mArkoIt8um XCvJfi2xpvu72fxeaSUs9y9gViVF3racqWuTe5T+o+EQuC44TMMd1Nrys/cnj9kl z+J8TBuGy6ScdP5R02VVPYzJTdW0aXkBbGfmhfRbylTvgo2YReVRbWXnm9k= -----END CERTIFICATE-----Generated at Fri Oct 17 22:05:47 2025 by rpki-client