$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/679ea956-d859-4b8e-a3fe-ba010d733fca.roa File: 679ea956-d859-4b8e-a3fe-ba010d733fca.roa (raw, json) Hash identifier: gdGKL4VudciOk8RGZloNLo+kIYMZtPBGS/4GTFk2kP0= Subject key identifier: BC:8C:43:73:1C:43:5D:FA:99:5F:F1:4B:8E:FA:97:1B:56:5C:9E:84 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1AF941E81F14EBCF0F578F59CB24BE409BC02854 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/679ea956-d859-4b8e-a3fe-ba010d733fca.roa Signing time: Mon 22 Sep 2025 20:52:13 +0000 ROA not before: Mon 22 Sep 2025 20:52:13 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.173.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:f9:41:e8:1f:14:eb:cf:0f:57:8f:59:cb:24:be:40:9b:c0:28:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 20:52:13 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=377ce3d586fe7d9f15b037f2f1644140b67dc615b32fa572609619d2d5118adc, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:17:a5:81:5d:44:70:77:ef:e5:05:42:bf:a3: c8:b8:b9:c8:a4:29:13:a2:fc:f5:0b:cd:10:08:19: d9:c3:40:d5:6c:e2:11:18:44:2a:3c:a7:6f:e9:bc: 75:09:f8:84:c1:76:a3:05:79:3e:45:39:da:57:38: d8:43:0f:f5:78:85:a8:7c:52:ee:50:a6:f3:74:7a: 18:43:e5:9d:04:a1:2d:da:64:d3:1f:c8:d9:4d:ea: 93:05:35:6b:90:ad:fc:5d:6e:71:8a:37:da:72:15: d9:b1:48:a5:5b:34:5f:82:44:02:93:5b:a2:23:f9: 3a:1f:83:5b:9d:46:9a:05:e1:a6:21:86:39:66:2d: 7e:06:39:34:54:bc:4f:09:cb:2d:1b:f1:04:66:48: a8:34:86:23:4d:8f:23:66:88:ad:d9:2e:ee:d2:6b: be:63:fc:e4:d5:fd:3e:12:f5:cc:f8:71:b9:d5:05: 6d:c8:31:1f:ba:98:98:70:d2:ed:19:d6:75:86:8b: 40:d9:ad:74:2b:50:fa:3e:df:3e:b8:18:9f:ab:09: e9:99:99:43:39:5a:a5:3c:07:e8:62:d3:89:c7:3c: 37:44:80:51:7f:9e:71:93:54:dc:d5:e2:55:d0:00: 77:ef:cf:01:9f:c5:71:95:5a:ef:4e:3a:8c:ef:17: a8:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:8C:43:73:1C:43:5D:FA:99:5F:F1:4B:8E:FA:97:1B:56:5C:9E:84 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/679ea956-d859-4b8e-a3fe-ba010d733fca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.173.55.0/24 Signature Algorithm: sha256WithRSAEncryption 85:38:69:5c:ea:28:c2:94:f5:82:01:6c:c0:e1:a7:b0:9f:80: f9:27:e0:1a:a6:bc:35:96:64:4d:e1:90:01:ec:be:52:b4:d0: 50:69:9d:33:93:97:3b:2b:55:10:b1:6d:21:20:46:27:b1:1d: 9f:d1:10:77:8b:e3:75:d0:dc:95:76:fb:4e:b8:4a:c6:f2:84: 17:f6:9d:ea:ca:0e:78:ef:b2:a8:ee:60:07:d1:e2:b3:5e:e0: ba:74:ba:ef:24:41:ae:99:75:4a:e1:ab:0f:56:b8:02:77:b7: 2b:c9:a1:6a:0e:e7:02:97:8a:85:27:ec:ca:a3:bb:07:ee:9e: a7:d8:fe:fa:e3:d6:cb:f8:c2:2a:7b:c0:a4:38:4a:d1:6a:f3: f0:95:a8:ef:c8:0a:ee:c9:8a:e9:52:47:39:9f:74:79:9b:57: c9:6c:ba:3c:a1:5f:07:78:c0:23:ff:1b:dc:3a:c4:a4:3a:b5: 0e:92:e5:3b:0f:32:36:53:8d:de:92:a3:e4:24:32:9a:7c:14: ad:48:35:5e:d1:4f:9e:14:59:66:19:96:fd:4c:bc:2e:40:2a: de:54:a3:ad:48:bc:70:aa:be:50:83:3a:84:74:ed:18:41:2b: e6:8a:4d:6b:7d:de:0e:32:06:23:da:f6:ac:15:10:59:5a:0e: 6b:0c:bc:d8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGvlB6B8U688PV49ZyyS+QJvAKFQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjA1MjEzWhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AzNzdjZTNkNTg2ZmU3ZDlmMTViMDM3ZjJmMTY0NDE0MGI2 N2RjNjE1YjMyZmE1NzI2MDk2MTlkMmQ1MTE4YWRjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNF6WBXURwd+/lBUK/o8i4ucikKROi/PULzRAIGdnDQNVs 4hEYRCo8p2/pvHUJ+ITBdqMFeT5FOdpXONhDD/V4hah8Uu5QpvN0ehhD5Z0EoS3a ZNMfyNlN6pMFNWuQrfxdbnGKN9pyFdmxSKVbNF+CRAKTW6Ij+Tofg1udRpoF4aYh hjlmLX4GOTRUvE8Jyy0b8QRmSKg0hiNNjyNmiK3ZLu7Sa75j/OTV/T4S9cz4cbnV BW3IMR+6mJhw0u0Z1nWGi0DZrXQrUPo+3z64GJ+rCemZmUM5WqU8B+hi04nHPDdE gFF/nnGTVNzV4lXQAHfvzwGfxXGVWu9OOozvF6hDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUvIxDcxxDXfqZX/FLjvqXG1ZcnoQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzY3OWVhOTU2LWQ4NTktNGI4ZS1hM2ZlLWJhMDEwZDczM2ZjYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASrTcwDQYJKoZIhvcNAQELBQADggEBAIU4aVzqKMKU9YIBbMDhp7CfgPkn 4BqmvDWWZE3hkAHsvlK00FBpnTOTlzsrVRCxbSEgRiexHZ/REHeL43XQ3JV2+064 SsbyhBf2nerKDnjvsqjuYAfR4rNe4Lp0uu8kQa6ZdUrhqw9WuAJ3tyvJoWoO5wKX ioUn7MqjuwfunqfY/vrj1sv4wip7wKQ4StFq8/CVqO/ICu7JiulSRzmfdHmbV8ls ujyhXwd4wCP/G9w6xKQ6tQ6S5TsPMjZTjd6So+QkMpp8FK1INV7RT54UWWYZlv1M vC5AKt5Uo61IvHCqvlCDOoR07RhBK+aKTWt93g4yBiPa9qwVEFlaDmsMvNg= -----END CERTIFICATE-----Generated at Fri Oct 17 23:52:56 2025 by rpki-client