$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/80ce9bed-7b11-4441-8097-5c41806e76d9.roa File: 80ce9bed-7b11-4441-8097-5c41806e76d9.roa (raw, json) Hash identifier: uK7TCBtqVGSHGTfjogE1ZRynz1+G5X8svNYCAclo7KA= Subject key identifier: E8:B5:D4:87:FD:A7:68:F4:0A:69:12:E6:56:51:32:B5:3A:8D:96:EF Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 34A29F8512E3031107B52525960BA7D19F0DDCF4 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/80ce9bed-7b11-4441-8097-5c41806e76d9.roa Signing time: Wed 24 Sep 2025 22:44:48 +0000 ROA not before: Wed 24 Sep 2025 22:44:48 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.64.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:a2:9f:85:12:e3:03:11:07:b5:25:25:96:0b:a7:d1:9f:0d:dc:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 22:44:48 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=26ab2c8d8c5216bda9891fd18272d7d13507cbe580eac663a81ca6f53ee246d0, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:f9:18:32:e6:c0:ae:b8:70:ac:26:66:7b:fe: e1:a8:ef:a1:07:cb:09:13:56:7c:36:46:ac:ce:30: 76:fe:c9:82:55:3d:6b:7f:50:99:56:d1:2e:cb:2e: d4:70:16:14:52:05:19:0e:94:b3:7e:2f:b3:59:af: e9:6a:23:63:c3:00:2e:3f:a4:77:53:cb:54:3b:98: 54:52:8c:cd:72:a4:2c:a2:67:54:ce:16:13:85:20: 71:c2:79:a7:99:37:5b:5c:38:fb:73:14:38:9e:eb: 77:e3:ff:4c:50:49:f5:f5:35:b9:3b:2a:92:24:f2: 03:24:5f:47:33:25:14:b4:b1:c9:07:a5:7a:97:c8: 7f:ab:bc:a2:bb:b4:86:ae:6a:0f:0e:82:04:87:33: e5:f8:ed:f6:80:f0:f1:c4:f8:a1:8c:7b:d4:dd:dc: 61:3b:fa:8b:4a:31:91:2f:97:41:7b:dd:e7:02:38: 72:81:9c:3a:7f:82:d2:b7:19:c3:d7:4a:dc:8d:68: 10:5b:d1:28:38:2f:80:db:68:30:ab:07:f0:20:78: 11:2c:a1:08:4f:e9:0d:81:5d:67:05:00:e6:4b:09: 49:3b:4f:51:57:51:9c:f8:eb:9d:78:b6:18:a6:79: 90:94:4c:69:f0:70:12:c1:e6:c9:d5:08:23:9d:1f: 28:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:B5:D4:87:FD:A7:68:F4:0A:69:12:E6:56:51:32:B5:3A:8D:96:EF X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/80ce9bed-7b11-4441-8097-5c41806e76d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.64.172.0/22 Signature Algorithm: sha256WithRSAEncryption 01:b0:97:bb:79:af:6c:88:2d:0e:da:9a:56:45:64:3b:30:32: 41:6a:1c:2a:27:99:0a:e6:f2:e7:2c:cf:14:4e:cf:b8:60:0e: 0e:33:e3:92:ad:1c:10:8c:7b:8d:8a:9f:ed:16:1b:cb:f1:4d: 47:a1:e7:c0:77:47:01:4a:01:53:4f:5d:95:2c:96:b6:39:06: dc:78:79:75:a6:69:4e:e0:cf:93:00:82:44:32:47:51:42:5e: 54:93:3c:4b:1d:8a:09:a6:ed:00:24:d7:90:f9:d5:6e:f9:c3: 32:5b:cd:05:82:f1:75:67:99:f9:9c:27:aa:67:8a:5e:8c:56: a8:14:dc:3b:f4:7c:1f:cd:63:61:bb:50:03:86:c7:2d:c7:39: d0:a6:9f:75:d9:62:f5:86:3e:43:2f:53:a4:f7:5d:68:46:3b: e6:13:bc:f2:1d:da:37:e7:47:a4:69:31:f1:e9:27:d5:a1:5a: f6:ba:d8:4f:f3:01:a2:c1:6a:d2:28:de:fc:c0:5f:aa:60:97: 95:fe:b2:77:80:bf:68:f5:92:94:2d:c9:57:b5:3b:cb:5a:8d: d4:bf:7a:36:d8:36:93:98:60:e3:36:3e:63:35:9b:b5:a4:28: ce:6c:c9:56:bf:82:b9:33:13:a5:d4:22:ac:c6:e7:3b:c7:34: 66:1b:79:93 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNKKfhRLjAxEHtSUllgun0Z8N3PQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MjI0NDQ4WhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0AyNmFiMmM4ZDhjNTIxNmJkYTk4OTFmZDE4MjcyZDdkMTM1 MDdjYmU1ODBlYWM2NjNhODFjYTZmNTNlZTI0NmQwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDg+Rgy5sCuuHCsJmZ7/uGo76EHywkTVnw2RqzOMHb+yYJV PWt/UJlW0S7LLtRwFhRSBRkOlLN+L7NZr+lqI2PDAC4/pHdTy1Q7mFRSjM1ypCyi Z1TOFhOFIHHCeaeZN1tcOPtzFDie63fj/0xQSfX1Nbk7KpIk8gMkX0czJRS0sckH pXqXyH+rvKK7tIauag8OggSHM+X47faA8PHE+KGMe9Td3GE7+otKMZEvl0F73ecC OHKBnDp/gtK3GcPXStyNaBBb0Sg4L4DbaDCrB/AgeBEsoQhP6Q2BXWcFAOZLCUk7 T1FXUZz46514thimeZCUTGnwcBLB5snVCCOdHygHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU6LXUh/2naPQKaRLmVlEytTqNlu8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzgwY2U5YmVkLTdiMTEtNDQ0MS04MDk3LTVjNDE4MDZlNzZkOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAISQKwwDQYJKoZIhvcNAQELBQADggEBAAGwl7t5r2yILQ7amlZFZDswMkFq HConmQrm8ucszxROz7hgDg4z45KtHBCMe42Kn+0WG8vxTUeh58B3RwFKAVNPXZUs lrY5Btx4eXWmaU7gz5MAgkQyR1FCXlSTPEsdigmm7QAk15D51W75wzJbzQWC8XVn mfmcJ6pnil6MVqgU3Dv0fB/NY2G7UAOGxy3HOdCmn3XZYvWGPkMvU6T3XWhGO+YT vPId2jfnR6RpMfHpJ9WhWva62E/zAaLBatIo3vzAX6pgl5X+sneAv2j1kpQtyVe1 O8tajdS/ejbYNpOYYOM2PmM1m7WkKM5syVa/grkzE6XUIqzG5zvHNGYbeZM= -----END CERTIFICATE-----Generated at Fri Oct 17 22:00:17 2025 by rpki-client