$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/70aee1a2-7697-4847-9569-a1fe38213ef0.roa File: 70aee1a2-7697-4847-9569-a1fe38213ef0.roa (raw, json) Hash identifier: mjWg5IUHFdoqWPydYCWWzFLUqNdt9nv1ViM5BmLAUUE= Subject key identifier: 2D:64:EE:88:40:53:CC:D3:B2:38:B9:88:9A:D8:8E:9E:12:BF:B5:66 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6E15F43BF9EA629D493A7F9371BB870D8DD8AF29 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/70aee1a2-7697-4847-9569-a1fe38213ef0.roa Signing time: Mon 22 Sep 2025 17:13:31 +0000 ROA not before: Mon 22 Sep 2025 17:13:31 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.154.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:15:f4:3b:f9:ea:62:9d:49:3a:7f:93:71:bb:87:0d:8d:d8:af:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 17:13:31 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=ce71a1feb682c66244ca6e7a3a82bf5ae17a10ac73bb95f2929e76569f39dd6f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:50:87:78:44:5a:5f:dc:15:16:87:ff:10:22: d0:1f:ae:52:55:82:4e:c7:91:1f:03:01:ed:b4:b7: 4f:1a:82:fa:98:f3:7f:2d:21:34:11:b3:d2:05:cd: f1:a1:ea:62:27:f4:e5:88:2f:53:60:e9:02:f7:e2: 2b:61:82:74:51:df:cf:d0:9f:9c:4e:ae:d8:24:ca: fc:22:f3:03:4c:a0:ff:6c:fb:5b:37:ce:33:c3:26: dc:f6:0c:10:c3:2b:6d:18:20:08:ca:ab:fd:09:cf: a7:87:58:e0:0f:e9:44:e2:16:a6:02:dc:88:e1:7c: 27:63:5f:85:b1:1c:d2:87:98:9b:13:9b:21:81:3d: 93:05:f1:be:35:19:46:b4:92:a3:5b:d3:61:52:3e: 06:c9:bb:9b:dd:ff:e9:80:df:9c:f6:da:8c:44:1a: 20:55:d8:c2:75:2d:ee:ef:47:22:bc:e9:f7:f2:b4: b1:10:f0:94:f7:c6:5c:ff:93:d4:91:e8:07:91:5f: 55:45:8a:7b:fb:ec:21:94:7c:81:66:69:ba:6f:c1: 33:c8:68:b8:d9:05:7f:05:d3:30:b4:f0:d3:b2:3b: 6f:c4:b8:10:1d:ca:03:df:46:19:fc:d1:fd:de:9a: 29:77:0c:98:cc:b6:6d:d8:4b:fd:9c:49:f1:11:8f: 05:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:64:EE:88:40:53:CC:D3:B2:38:B9:88:9A:D8:8E:9E:12:BF:B5:66 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/70aee1a2-7697-4847-9569-a1fe38213ef0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.154.238.0/24 Signature Algorithm: sha256WithRSAEncryption 15:66:0d:7c:e1:b7:72:4f:1a:5a:d1:1d:d8:06:3c:3e:d9:8f: 8d:80:a5:8c:2a:4b:b9:34:2a:95:a5:47:3f:15:b4:c9:ce:55: 2b:3d:09:50:09:d1:c6:f6:56:dd:60:0c:ce:42:f6:31:92:9b: e1:94:9d:44:55:ca:81:f6:51:54:94:9b:f6:0e:a9:76:6a:e4: 7e:47:87:a5:69:c1:be:fa:dc:b7:71:d2:af:47:d9:08:de:30: da:07:b2:a4:be:22:13:eb:55:a1:28:c2:33:65:ac:4a:4b:18: ca:ba:41:47:ce:12:5c:b0:72:83:8e:3a:a4:4b:1e:01:c4:d1: b4:5e:ea:a6:e8:7f:0f:75:cf:97:20:0d:9f:12:7f:b8:c9:20: 9c:bb:d2:91:3d:89:c8:f4:8a:01:22:7d:85:7d:41:92:69:ea: 89:82:36:b0:c3:84:64:7a:12:6f:2b:90:4c:6a:82:af:7e:f3: fa:c6:ad:35:d4:7d:87:00:7f:87:69:16:15:17:8e:e1:a9:13: 26:f3:cd:56:07:37:6c:18:67:e7:05:e5:13:0a:52:41:97:69: 10:00:02:74:94:63:91:d8:ca:0c:32:2a:4f:18:19:9f:ff:9c: ae:5d:3a:cf:95:21:c1:72:10:ba:0e:eb:33:a1:d6:e7:07:25: a3:c9:3d:fb -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbhX0O/nqYp1JOn+TcbuHDY3YrykwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMTcxMzMxWhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BjZTcxYTFmZWI2ODJjNjYyNDRjYTZlN2EzYTgyYmY1YWUx N2ExMGFjNzNiYjk1ZjI5MjllNzY1NjlmMzlkZDZmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDUUId4RFpf3BUWh/8QItAfrlJVgk7HkR8DAe20t08agvqY 838tITQRs9IFzfGh6mIn9OWIL1Ng6QL34ithgnRR38/Qn5xOrtgkyvwi8wNMoP9s +1s3zjPDJtz2DBDDK20YIAjKq/0Jz6eHWOAP6UTiFqYC3IjhfCdjX4WxHNKHmJsT myGBPZMF8b41GUa0kqNb02FSPgbJu5vd/+mA35z22oxEGiBV2MJ1Le7vRyK86ffy tLEQ8JT3xlz/k9SR6AeRX1VFinv77CGUfIFmabpvwTPIaLjZBX8F0zC08NOyO2/E uBAdygPfRhn80f3emil3DJjMtm3YS/2cSfERjwXRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQULWTuiEBTzNOyOLmImtiOnhK/tWYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzcwYWVlMWEyLTc2OTctNDg0Ny05NTY5LWExZmUzODIxM2VmMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASmu4wDQYJKoZIhvcNAQELBQADggEBABVmDXzht3JPGlrRHdgGPD7Zj42A pYwqS7k0KpWlRz8VtMnOVSs9CVAJ0cb2Vt1gDM5C9jGSm+GUnURVyoH2UVSUm/YO qXZq5H5Hh6Vpwb763Ldx0q9H2QjeMNoHsqS+IhPrVaEowjNlrEpLGMq6QUfOElyw coOOOqRLHgHE0bRe6qbofw91z5cgDZ8Sf7jJIJy70pE9icj0igEifYV9QZJp6omC NrDDhGR6Em8rkExqgq9+8/rGrTXUfYcAf4dpFhUXjuGpEybzzVYHN2wYZ+cF5RMK UkGXaRAAAnSUY5HYygwyKk8YGZ//nK5dOs+VIcFyELoO6zOh1ucHJaPJPfs= -----END CERTIFICATE-----Generated at Fri Oct 17 23:43:22 2025 by rpki-client