$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/74f03728-9ebc-45c3-8793-7347c5ef63c7.roa File: 74f03728-9ebc-45c3-8793-7347c5ef63c7.roa (raw, json) Hash identifier: OGS0cxNJ1gXzmQoNr3AImjfcWHG5tan3YeW2z89/1CU= Subject key identifier: A2:27:B3:F4:67:70:2D:F8:DB:32:25:44:DD:84:43:00:14:0C:75:EB Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1EC095E8D1A1DCB961E4838C25C0C54F5FFC84B5 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/74f03728-9ebc-45c3-8793-7347c5ef63c7.roa Signing time: Mon 22 Sep 2025 19:47:04 +0000 ROA not before: Mon 22 Sep 2025 19:47:04 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.165.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:c0:95:e8:d1:a1:dc:b9:61:e4:83:8c:25:c0:c5:4f:5f:fc:84:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 19:47:04 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=0898e5e2e5b482fb7b39c1ed35c8fda30d13e4a5f62d8d0f65b78050e94c8f04, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:33:5a:da:f8:e3:89:60:df:99:fe:07:69:a4: f1:15:55:70:52:29:3e:56:e6:4f:d0:81:33:c7:cf: 19:98:ab:af:62:8f:1c:f5:13:3b:58:d5:4e:f8:20: df:af:7e:f3:0c:4a:4a:e6:bf:a3:ea:5e:d5:26:0b: a7:8b:bd:8d:fc:46:1f:f7:2b:e1:11:a9:43:79:ef: 4c:a0:36:45:a8:b4:dc:69:b2:eb:8b:5a:ee:c3:09: 85:cd:f6:67:ee:91:65:86:05:9f:83:74:27:83:45: ec:9d:88:71:55:07:9a:4a:f1:f4:27:fe:22:17:92: 21:d2:f0:55:5f:4f:7a:a6:e6:75:e9:f1:95:f8:bb: c8:4b:63:a6:a0:c7:0b:1d:03:9b:96:ad:ca:bf:1d: 40:32:e0:3e:ca:3c:a7:67:c2:ea:d5:bc:f8:04:4c: fe:ae:1b:20:7e:e7:b6:50:68:f7:22:d0:bf:48:0b: f6:a0:6a:f0:e8:c1:96:56:f7:2c:57:d9:0b:48:da: 78:44:bc:3c:4e:8a:73:9a:fa:32:31:18:72:7e:61: 13:fe:ee:41:ba:29:88:0f:e7:ce:8d:52:d3:ae:df: 01:b1:9d:92:05:a0:25:d8:7a:11:1e:25:01:56:31: 88:c0:b1:88:6c:3c:c5:90:7b:25:bf:17:87:af:aa: 9c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:27:B3:F4:67:70:2D:F8:DB:32:25:44:DD:84:43:00:14:0C:75:EB X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/74f03728-9ebc-45c3-8793-7347c5ef63c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.165.88.0/24 Signature Algorithm: sha256WithRSAEncryption 23:9c:50:0f:02:cf:69:d8:7c:94:f7:9e:88:16:3a:76:de:95: a5:bd:06:17:0f:6c:27:d4:a6:da:b7:89:c5:0d:91:5e:e9:d8: 97:d8:98:04:fb:3a:49:43:e2:77:58:bc:20:12:ea:17:e2:b6: 16:f5:dc:1a:88:41:99:2c:d6:f4:0d:ee:e4:4d:fa:d5:b9:3e: 19:d3:c7:14:dd:97:1c:3d:5a:a8:2e:ba:17:85:7e:7f:d2:fa: ec:4d:2b:e0:35:3f:fa:d5:79:56:65:b3:18:6c:92:75:19:1f: 99:38:a0:0d:e5:84:09:10:83:5a:6d:ed:f3:dd:71:1c:dd:3a: f5:27:33:56:c3:74:2b:43:98:3a:6d:bd:39:32:9a:f0:a8:a1: b4:d1:a1:fd:78:70:20:d6:12:40:07:18:01:8d:25:19:80:0d: 2b:28:3e:7d:50:d0:9a:e6:ff:19:16:98:b0:d3:8b:00:93:f6: 02:62:ee:2b:c8:f4:60:cc:b6:cc:d2:34:ec:e4:dd:d6:e6:e8: 34:91:3a:65:b0:d9:3a:3b:a2:c8:71:17:a8:c7:1d:71:9d:e4: 83:47:7d:82:e8:89:80:6c:f6:e0:0c:d2:db:52:5c:dd:04:b7: ee:05:08:48:fc:ca:11:48:5c:40:ad:f1:23:2e:41:2d:46:f3: 57:41:37:8b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHsCV6NGh3Llh5IOMJcDFT1/8hLUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMTk0NzA0WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AwODk4ZTVlMmU1YjQ4MmZiN2IzOWMxZWQzNWM4ZmRhMzBk MTNlNGE1ZjYyZDhkMGY2NWI3ODA1MGU5NGM4ZjA0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCGM1ra+OOJYN+Z/gdppPEVVXBSKT5W5k/QgTPHzxmYq69i jxz1EztY1U74IN+vfvMMSkrmv6PqXtUmC6eLvY38Rh/3K+ERqUN570ygNkWotNxp suuLWu7DCYXN9mfukWWGBZ+DdCeDReydiHFVB5pK8fQn/iIXkiHS8FVfT3qm5nXp 8ZX4u8hLY6agxwsdA5uWrcq/HUAy4D7KPKdnwurVvPgETP6uGyB+57ZQaPci0L9I C/agavDowZZW9yxX2QtI2nhEvDxOinOa+jIxGHJ+YRP+7kG6KYgP586NUtOu3wGx nZIFoCXYehEeJQFWMYjAsYhsPMWQeyW/F4evqpx9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUoiez9GdwLfjbMiVE3YRDABQMdeswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzc0ZjAzNzI4LTllYmMtNDVjMy04NzkzLTczNDdjNWVmNjNjNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASpVgwDQYJKoZIhvcNAQELBQADggEBACOcUA8Cz2nYfJT3nogWOnbelaW9 BhcPbCfUptq3icUNkV7p2JfYmAT7OklD4ndYvCAS6hfithb13BqIQZks1vQN7uRN +tW5PhnTxxTdlxw9WqguuheFfn/S+uxNK+A1P/rVeVZlsxhsknUZH5k4oA3lhAkQ g1pt7fPdcRzdOvUnM1bDdCtDmDptvTkymvCoobTRof14cCDWEkAHGAGNJRmADSso Pn1Q0Jrm/xkWmLDTiwCT9gJi7ivI9GDMtszSNOzk3dbm6DSROmWw2To7oshxF6jH HXGd5INHfYLoiYBs9uAM0ttSXN0Et+4FCEj8yhFIXECt8SMuQS1G81dBN4s= -----END CERTIFICATE-----Generated at Fri Oct 17 23:52:20 2025 by rpki-client