$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/77366ac8-2675-4acc-84e0-08dc47aa5d3d.roa File: 77366ac8-2675-4acc-84e0-08dc47aa5d3d.roa (raw, json) Hash identifier: XLOkUj9POsdulr1Pwi22mBYdb46BalO4bl2enye8i2c= Subject key identifier: 52:D8:E8:12:9C:B8:BA:CA:92:7D:4B:0F:5E:38:F3:31:A5:7B:17:09 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7DEC21A54D8EA727FC2CC561699DD41C665CD3BC Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/77366ac8-2675-4acc-84e0-08dc47aa5d3d.roa Signing time: Mon 22 Sep 2025 19:41:10 +0000 ROA not before: Mon 22 Sep 2025 19:41:10 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.165.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:ec:21:a5:4d:8e:a7:27:fc:2c:c5:61:69:9d:d4:1c:66:5c:d3:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 19:41:10 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=e5526e2dc94d4dd45f0e47537837174b4b0e60ae735975fc1c6adbb1c118bf0f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:3e:d4:a4:ad:86:c8:6b:f8:85:fb:76:5e:2c: 12:5c:ab:1c:2f:d0:e9:06:a0:2e:4a:d6:9a:ae:49: 22:8e:54:16:84:34:23:50:e0:7c:99:fd:d1:c3:69: a5:a9:78:c3:60:d7:be:d6:52:61:40:1c:9c:11:ce: 23:ad:b6:9b:56:9e:2d:ed:ba:26:37:ad:2e:a5:92: 66:d9:3c:26:64:66:c2:43:58:70:f4:cf:9d:b8:12: 32:ca:cf:6f:a8:72:65:0b:dc:bb:d0:de:bb:b2:ae: c4:95:c5:cf:28:c7:a3:eb:4a:09:13:ff:ff:2d:c9: 40:df:2c:31:e5:84:9b:62:b8:b1:70:07:f9:6e:d1: 0f:36:7b:fc:2c:b1:35:74:46:a9:a7:05:07:78:fc: cd:68:22:06:97:a9:aa:60:c2:6c:51:f9:2b:97:9f: 74:37:50:1b:fb:6a:83:9a:2b:a1:38:29:dc:1d:fe: 31:b2:3b:86:aa:d3:d5:03:a0:10:aa:75:e4:be:fe: 32:3d:3c:e5:90:15:da:4c:3b:68:ca:b0:e8:46:1f: 32:3e:47:33:04:16:f0:f6:a1:68:67:0c:2d:b5:14: 95:09:96:b1:73:1f:e8:98:54:5a:aa:32:68:d5:d3: 78:ec:c3:d6:17:40:cc:28:c3:99:fd:82:fd:a3:7c: 25:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:D8:E8:12:9C:B8:BA:CA:92:7D:4B:0F:5E:38:F3:31:A5:7B:17:09 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/77366ac8-2675-4acc-84e0-08dc47aa5d3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.165.221.0/24 Signature Algorithm: sha256WithRSAEncryption 24:f8:40:c5:59:0f:a0:b9:e4:fc:43:22:ba:51:b1:60:6a:c8: e6:0f:da:57:18:4f:fc:8e:ca:d5:a3:51:6e:ab:1b:ea:2f:b5: ce:98:ae:42:cc:e5:1a:74:66:23:d8:9d:1e:11:56:de:ee:70: 7e:a4:e8:22:c8:b6:27:d6:61:a8:ee:79:d4:6b:cc:0e:9c:f6: 3d:ff:b8:56:5e:f9:4c:e9:50:ad:6f:a5:20:44:11:f7:ef:ad: cd:7a:42:32:76:81:f6:0c:16:70:27:23:f6:01:b8:23:be:3a: 80:55:94:51:98:59:10:4b:a3:9a:a4:1c:d4:31:22:bb:a3:c7: ee:0d:d7:94:61:2b:25:20:c7:cf:64:1c:92:a9:9f:b7:3b:f3: ba:3b:66:f3:7c:f9:5c:14:b6:7c:3f:b6:33:b6:1c:77:09:13: 3d:06:71:dd:77:1b:5b:e4:58:97:cd:02:0d:5d:51:fd:1d:4f: 33:37:11:57:79:07:7b:e4:13:37:22:b0:09:08:68:0d:44:a7: 49:03:30:38:bf:22:42:09:75:92:59:d0:52:d2:80:4d:98:e8: a6:54:ff:96:1a:0f:bc:5e:c6:65:03:e4:90:c9:ba:b4:6f:82: a9:e7:60:2f:45:38:e1:73:8d:99:b9:e5:35:35:e6:f6:92:28: 7a:38:6a:6b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfewhpU2Opyf8LMVhaZ3UHGZc07wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMTk0MTEwWhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BlNTUyNmUyZGM5NGQ0ZGQ0NWYwZTQ3NTM3ODM3MTc0YjRi MGU2MGFlNzM1OTc1ZmMxYzZhZGJiMWMxMThiZjBmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwPtSkrYbIa/iF+3ZeLBJcqxwv0OkGoC5K1pquSSKOVBaE NCNQ4HyZ/dHDaaWpeMNg177WUmFAHJwRziOttptWni3tuiY3rS6lkmbZPCZkZsJD WHD0z524EjLKz2+ocmUL3LvQ3ruyrsSVxc8ox6PrSgkT//8tyUDfLDHlhJtiuLFw B/lu0Q82e/wssTV0RqmnBQd4/M1oIgaXqapgwmxR+SuXn3Q3UBv7aoOaK6E4Kdwd /jGyO4aq09UDoBCqdeS+/jI9POWQFdpMO2jKsOhGHzI+RzMEFvD2oWhnDC21FJUJ lrFzH+iYVFqqMmjV03jsw9YXQMwow5n9gv2jfCU3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUUtjoEpy4usqSfUsPXjjzMaV7FwkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzc3MzY2YWM4LTI2NzUtNGFjYy04NGUwLTA4ZGM0N2FhNWQzZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASpd0wDQYJKoZIhvcNAQELBQADggEBACT4QMVZD6C55PxDIrpRsWBqyOYP 2lcYT/yOytWjUW6rG+ovtc6YrkLM5Rp0ZiPYnR4RVt7ucH6k6CLItifWYajuedRr zA6c9j3/uFZe+UzpUK1vpSBEEffvrc16QjJ2gfYMFnAnI/YBuCO+OoBVlFGYWRBL o5qkHNQxIrujx+4N15RhKyUgx89kHJKpn7c787o7ZvN8+VwUtnw/tjO2HHcJEz0G cd13G1vkWJfNAg1dUf0dTzM3EVd5B3vkEzcisAkIaA1Ep0kDMDi/IkIJdZJZ0FLS gE2Y6KZU/5YaD7xexmUD5JDJurRvgqnnYC9FOOFzjZm55TU15vaSKHo4ams= -----END CERTIFICATE-----Generated at Fri Oct 17 22:05:14 2025 by rpki-client