$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/79f7e002-ce15-433d-ad6e-b55e53093aa5.roa File: 79f7e002-ce15-433d-ad6e-b55e53093aa5.roa (raw, json) Hash identifier: HrdPJgmcZK+hnoLZRN+Dg4BCVlXWH3cR+5OsPyl6Hic= Subject key identifier: 95:44:D3:76:55:1D:01:C3:67:FC:9E:F1:3A:E4:C9:1D:FE:FC:37:42 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 40856BACD8641E246BDD26BBA006BC973B58EA7A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/79f7e002-ce15-433d-ad6e-b55e53093aa5.roa Signing time: Mon 22 Sep 2025 19:06:38 +0000 ROA not before: Mon 22 Sep 2025 19:06:38 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.161.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:85:6b:ac:d8:64:1e:24:6b:dd:26:bb:a0:06:bc:97:3b:58:ea:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 19:06:38 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=98b4746db2d557ca6f7ace37b0cad4311a479cf2be493ec50136b7949e69b2ba, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c0:41:4c:bd:2a:fb:a8:ed:e7:36:07:f5:e3: 8a:55:ee:77:e3:87:5a:18:ff:0b:fa:d8:78:c4:4e: 85:e5:6c:ad:8b:a8:88:ab:92:87:b1:8a:1d:e3:e3: bc:3c:c9:c2:0a:5b:e2:64:10:e2:fb:27:a3:eb:7e: f2:c3:d7:36:ad:bf:44:be:f4:97:89:2f:38:8c:61: 91:bb:6e:21:41:08:c9:ab:bf:95:a3:ea:54:b1:99: f2:d4:e9:1d:7a:11:f0:2a:43:0f:1b:ba:a3:9b:5e: 17:b8:3c:da:55:93:08:a8:fe:72:2b:8c:47:58:da: 9a:4a:9c:f8:0f:f5:ab:1b:cd:5c:2c:47:7f:44:44: 26:18:eb:0a:44:96:88:35:c1:b9:b1:c0:f1:40:7f: 9c:c3:a8:11:4a:49:f0:4d:0c:6e:36:ec:34:08:f1: 06:7f:4b:72:50:6e:be:65:cd:e7:a2:a1:8d:f6:ab: de:e9:3e:d9:6e:41:39:bd:a5:ff:8e:fe:46:57:1e: 7c:66:d1:90:d4:65:8d:7b:e4:49:4a:95:9b:ab:0d: 6c:cb:24:1b:cb:01:7e:a0:94:ab:33:09:bf:2d:40: 17:84:64:37:3a:46:7e:e4:cb:fd:44:38:39:38:c3: 5f:7d:22:0e:a9:55:ec:56:35:e8:17:b6:84:5a:82: 0a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:44:D3:76:55:1D:01:C3:67:FC:9E:F1:3A:E4:C9:1D:FE:FC:37:42 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/79f7e002-ce15-433d-ad6e-b55e53093aa5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.161.124.0/22 Signature Algorithm: sha256WithRSAEncryption 3e:25:59:b1:56:f8:69:9e:7f:43:de:e8:75:ac:b5:4f:a7:5a: b4:ae:77:ec:49:d5:cc:65:10:19:b6:b4:2d:b1:f9:3a:ac:c8: d6:d0:6c:4a:10:4a:78:cc:bd:98:71:89:51:64:eb:40:a7:6e: 69:59:d5:35:b0:f3:f0:e2:ad:86:f0:1c:49:a8:60:cb:16:ea: ec:80:59:2a:3d:68:c8:f8:55:c6:6c:47:2a:27:8c:34:8f:65: 3d:bb:53:c9:af:bc:0b:85:5d:22:40:e7:f6:e7:28:42:52:ef: b1:78:2e:1f:63:d9:cd:36:df:f7:5d:1e:d8:8a:a1:cf:6f:69: eb:cf:f6:d9:1c:2f:d6:46:b2:94:80:7b:66:58:67:e8:8b:8b: da:52:8d:30:de:0d:af:52:2e:e7:67:0e:dc:d4:20:36:92:4c: 0b:75:81:13:dc:b1:af:e2:44:6f:25:5e:d6:41:00:09:dc:7c: 71:9b:8b:38:8e:9e:7d:71:3f:07:bd:62:ca:b9:48:68:13:8a: a3:60:63:bb:53:cf:3d:c9:ca:3e:6a:c3:40:47:27:1b:31:8f: 39:b6:a2:55:18:f6:8c:93:dc:bc:4b:af:bf:1d:d5:b1:75:20: 0a:93:74:03:1d:a4:15:83:d3:96:27:79:25:a0:d0:de:27:e1: 96:81:b3:53 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQIVrrNhkHiRr3Sa7oAa8lztY6nowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMTkwNjM4WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A5OGI0NzQ2ZGIyZDU1N2NhNmY3YWNlMzdiMGNhZDQzMTFh NDc5Y2YyYmU0OTNlYzUwMTM2Yjc5NDllNjliMmJhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4wEFMvSr7qO3nNgf144pV7nfjh1oY/wv62HjEToXlbK2L qIirkoexih3j47w8ycIKW+JkEOL7J6PrfvLD1zatv0S+9JeJLziMYZG7biFBCMmr v5Wj6lSxmfLU6R16EfAqQw8buqObXhe4PNpVkwio/nIrjEdY2ppKnPgP9asbzVws R39ERCYY6wpElog1wbmxwPFAf5zDqBFKSfBNDG427DQI8QZ/S3JQbr5lzeeioY32 q97pPtluQTm9pf+O/kZXHnxm0ZDUZY175ElKlZurDWzLJBvLAX6glKszCb8tQBeE ZDc6Rn7ky/1EODk4w199Ig6pVexWNegXtoRaggohAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUlUTTdlUdAcNn/J7xOuTJHf78N0IwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzc5ZjdlMDAyLWNlMTUtNDMzZC1hZDZlLWI1NWU1MzA5M2FhNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAISoXwwDQYJKoZIhvcNAQELBQADggEBAD4lWbFW+Gmef0Pe6HWstU+nWrSu d+xJ1cxlEBm2tC2x+TqsyNbQbEoQSnjMvZhxiVFk60CnbmlZ1TWw8/DirYbwHEmo YMsW6uyAWSo9aMj4VcZsRyonjDSPZT27U8mvvAuFXSJA5/bnKEJS77F4Lh9j2c02 3/ddHtiKoc9vaevP9tkcL9ZGspSAe2ZYZ+iLi9pSjTDeDa9SLudnDtzUIDaSTAt1 gRPcsa/iRG8lXtZBAAncfHGbiziOnn1xPwe9Ysq5SGgTiqNgY7tTzz3Jyj5qw0BH Jxsxjzm2olUY9oyT3LxLr78d1bF1IAqTdAMdpBWD05YneSWg0N4n4ZaBs1M= -----END CERTIFICATE-----Generated at Fri Oct 17 21:57:14 2025 by rpki-client