$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/74403c42-53b7-4c4c-ac75-7e201b98aca9.roa File: 74403c42-53b7-4c4c-ac75-7e201b98aca9.roa (raw, json) Hash identifier: bwQsbojtUEPyS8dIhCA36UDjnezRItLF9nwPa2sUkWw= Subject key identifier: 24:B8:D4:3C:19:60:36:BB:91:E8:C1:5B:FA:46:FD:1F:9B:AD:D1:3D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 50082C94EE54421577A87E7525864EBF4473804D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/74403c42-53b7-4c4c-ac75-7e201b98aca9.roa Signing time: Mon 22 Sep 2025 22:53:48 +0000 ROA not before: Mon 22 Sep 2025 22:53:48 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.245.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:08:2c:94:ee:54:42:15:77:a8:7e:75:25:86:4e:bf:44:73:80:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 22:53:48 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=b335361678ce21ff7feecf20c08d9cc3f0148f7340e2039bc14bddc0cccd0aa6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:64:9c:db:da:02:05:66:65:86:3e:22:a5:6e: ca:e6:c7:a0:d6:76:d7:10:68:17:79:ae:34:0f:19: 55:e3:b8:41:16:fc:a5:a2:c7:64:8e:85:e5:55:a7: 15:80:bf:67:4b:fb:3f:f6:8e:2a:1d:e0:03:84:6c: 31:f8:4b:5c:77:ae:36:ed:54:5b:16:b8:8d:40:70: a4:77:07:0f:56:43:bd:4f:ff:8e:8b:47:fb:d5:69: 1f:d7:8d:61:91:83:4e:a4:1b:73:fe:98:89:a1:8a: 65:33:d5:96:e4:5a:27:63:1f:03:f5:e9:3d:58:83: cb:1f:c0:04:fd:ef:2e:de:1d:05:7c:36:64:da:57: 7d:16:26:10:73:35:fa:a8:26:5f:00:68:56:af:20: 6f:31:60:57:43:05:5b:ae:a5:96:63:c1:bf:3e:d1: a7:34:70:3b:d2:c8:ac:0c:65:1e:ee:4e:04:7b:3a: 29:87:af:3c:15:ed:72:c7:b8:cd:71:06:4d:a0:b9: b4:64:11:16:2a:a5:1a:30:c1:86:ed:fe:2a:c0:8c: 64:58:d9:bf:18:96:4f:02:85:ff:81:b8:15:fb:f1: 30:a3:4a:f5:c0:08:f2:f5:13:df:2a:60:80:24:a2: e5:8a:5a:63:ca:3f:b2:cb:b0:f0:c3:a6:3c:75:04: 15:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:B8:D4:3C:19:60:36:BB:91:E8:C1:5B:FA:46:FD:1F:9B:AD:D1:3D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/74403c42-53b7-4c4c-ac75-7e201b98aca9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.245.174.0/24 Signature Algorithm: sha256WithRSAEncryption 71:c3:6a:60:6a:47:7f:27:41:3e:5a:69:b2:d1:1f:ca:98:13: d0:22:71:1c:5a:e0:b3:21:09:22:01:d4:a9:eb:be:4b:e4:84: 7b:b0:a5:c6:66:33:ca:47:19:e5:25:45:25:71:e9:82:87:26: 7a:2b:16:1c:82:69:90:00:43:36:2a:8d:dd:43:8b:83:45:7b: 42:0d:b8:8f:19:59:3f:a7:43:13:6a:04:c1:13:b1:6e:a0:7c: fd:63:9e:df:4f:11:4c:aa:f5:8c:37:d0:be:96:23:ac:ea:15: c7:1d:35:32:d3:b4:36:ec:a4:74:74:20:c1:56:32:48:27:df: ba:2a:9d:32:43:69:44:4f:ba:9a:6d:24:64:05:ca:fe:10:99: ed:8e:d2:ad:26:ec:fc:09:af:9d:9b:3c:21:9b:63:02:a1:78: 55:39:96:e9:cd:a8:42:87:54:c9:f6:c4:94:de:b6:e2:4d:68: ff:83:90:4a:a5:13:66:bf:81:52:f5:cb:a2:4f:64:e5:ac:f8: 84:3f:00:50:60:3b:cc:5f:78:d3:f0:ef:ec:96:50:0d:74:b3: 11:a5:94:c9:b6:a3:cb:e3:7a:2c:d9:56:ad:8a:40:37:36:eb: e1:c6:d0:26:28:36:77:a2:ff:82:9a:04:aa:2e:12:34:61:d1: ec:fe:a1:f5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUAgslO5UQhV3qH51JYZOv0RzgE0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjI1MzQ4WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMzM1MzYxNjc4Y2UyMWZmN2ZlZWNmMjBjMDhkOWNjM2Yw MTQ4ZjczNDBlMjAzOWJjMTRiZGRjMGNjY2QwYWE2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvZJzb2gIFZmWGPiKlbsrmx6DWdtcQaBd5rjQPGVXjuEEW /KWix2SOheVVpxWAv2dL+z/2jiod4AOEbDH4S1x3rjbtVFsWuI1AcKR3Bw9WQ71P /46LR/vVaR/XjWGRg06kG3P+mImhimUz1ZbkWidjHwP16T1Yg8sfwAT97y7eHQV8 NmTaV30WJhBzNfqoJl8AaFavIG8xYFdDBVuupZZjwb8+0ac0cDvSyKwMZR7uTgR7 OimHrzwV7XLHuM1xBk2gubRkERYqpRowwYbt/irAjGRY2b8Ylk8Chf+BuBX78TCj SvXACPL1E98qYIAkouWKWmPKP7LLsPDDpjx1BBXRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJLjUPBlgNruR6MFb+kb9H5ut0T0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzc0NDAzYzQyLTUzYjctNGM0Yy1hYzc1LTdlMjAxYjk4YWNhOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAS9a4wDQYJKoZIhvcNAQELBQADggEBAHHDamBqR38nQT5aabLRH8qYE9Ai cRxa4LMhCSIB1KnrvkvkhHuwpcZmM8pHGeUlRSVx6YKHJnorFhyCaZAAQzYqjd1D i4NFe0INuI8ZWT+nQxNqBMETsW6gfP1jnt9PEUyq9Yw30L6WI6zqFccdNTLTtDbs pHR0IMFWMkgn37oqnTJDaURPupptJGQFyv4Qme2O0q0m7PwJr52bPCGbYwKheFU5 lunNqEKHVMn2xJTetuJNaP+DkEqlE2a/gVL1y6JPZOWs+IQ/AFBgO8xfeNPw7+yW UA10sxGllMm2o8vjeizZVq2KQDc26+HG0CYoNnei/4KaBKouEjRh0ez+ofU= -----END CERTIFICATE-----Generated at Fri Oct 17 21:57:19 2025 by rpki-client