$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/83607099-ee99-473a-9f0c-8bb66a859735.roa File: 83607099-ee99-473a-9f0c-8bb66a859735.roa (raw, json) Hash identifier: PbAmT+BaVeEIncnpslkQjLdD7Wp23R2zxX1ZTy7YbzI= Subject key identifier: 9A:6C:9C:62:04:B7:90:EE:EF:00:7B:BE:2C:F3:D3:D6:43:E4:E0:F2 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4D643CE0E06D2C1C278CE8072B266686FB20959A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/83607099-ee99-473a-9f0c-8bb66a859735.roa Signing time: Mon 22 Sep 2025 22:01:47 +0000 ROA not before: Mon 22 Sep 2025 22:01:47 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.238.208.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:64:3c:e0:e0:6d:2c:1c:27:8c:e8:07:2b:26:66:86:fb:20:95:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 22:01:47 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=35bbed5f1e3d70ffbf000495cf70c64d0705efe3c3931bfcd6b375cb55d6c80f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:23:eb:21:f1:57:b6:27:1f:5d:3a:7b:4a:59: 82:56:c8:78:df:31:e7:80:b6:a7:70:b6:f6:9f:d3: 2b:02:f1:9f:ae:8b:b4:b2:e8:ea:87:f7:86:4a:dc: ea:09:53:18:e9:5e:94:01:98:42:82:68:cd:2b:fb: bf:84:e3:74:8d:f1:51:15:56:7d:fe:2f:0e:ce:af: e0:9a:cc:da:25:f4:30:ee:6c:28:19:20:5f:b1:4e: 4d:f9:65:63:9a:b6:da:f1:87:57:d1:06:21:f1:28: 3b:70:23:6f:8b:37:ca:f6:0e:15:66:ef:5f:1c:de: bd:37:06:06:a8:57:a5:c2:01:ba:f2:ba:6d:b6:e8: bf:9b:4e:3c:0b:34:5e:e5:ae:0e:01:35:89:5e:bf: 47:ce:14:a8:7d:12:72:bf:a6:59:cb:a2:4a:cd:cd: 21:40:e6:81:46:96:c3:88:6e:68:55:e0:9c:b0:f5: 69:70:32:d8:47:ae:b6:7a:23:41:a5:b7:b2:84:54: 7a:21:c6:d5:4d:0b:b6:f5:a5:a8:30:85:ce:d9:6b: 7b:fa:d9:ac:90:21:bc:ef:8e:de:83:68:0e:2e:71: 91:cc:6b:4e:2f:24:1f:1c:bc:11:87:59:f7:0e:d8: bd:98:bd:a7:3c:71:29:4b:99:55:1a:2d:bd:61:82: ae:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:6C:9C:62:04:B7:90:EE:EF:00:7B:BE:2C:F3:D3:D6:43:E4:E0:F2 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/83607099-ee99-473a-9f0c-8bb66a859735.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.238.208.0/23 Signature Algorithm: sha256WithRSAEncryption 12:b0:0f:26:c4:2d:b9:10:1d:62:21:76:7c:6b:2c:1e:9b:31: 08:ef:41:d2:d6:85:06:ce:ce:c3:ee:5a:00:e5:dc:2c:45:a5: 8e:ab:0d:0d:b1:3f:d3:6c:8b:84:f7:68:b6:4b:b0:04:de:0c: 98:ba:e3:42:6d:e8:f4:e6:fd:d8:2e:22:36:21:20:3f:fd:94: c0:42:08:01:ae:97:44:01:c5:b2:dc:35:50:c4:81:5e:65:4b: a5:d6:fe:38:82:1f:86:46:4f:1e:af:09:ac:6a:db:38:c8:ce: be:8a:f4:9d:33:14:4e:30:f6:79:20:d2:51:85:6d:da:40:a9: 50:ea:0e:fa:7e:59:b3:3d:e0:58:50:18:ac:db:cb:7c:e1:a4: 96:03:50:87:6c:62:3b:73:22:72:e2:d3:a4:d0:1b:9d:1d:b3: 84:6f:ad:cc:18:f7:4c:a5:07:18:a0:4e:83:d7:f5:5b:68:4a: 2b:14:6d:f3:8f:32:d6:4c:aa:34:16:66:36:20:45:e6:47:d5: fe:c9:d6:b1:2e:f1:3b:7b:b0:3c:d4:ed:5e:00:68:3b:43:ee: bc:64:c5:6e:a8:0a:19:1d:33:22:8d:e5:d6:9e:25:c2:d6:bd: d8:a1:b6:c4:42:a3:5e:57:5a:8b:fe:c7:8b:eb:9c:d1:77:1f: 9a:75:79:85 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTWQ84OBtLBwnjOgHKyZmhvsglZowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjIwMTQ3WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AzNWJiZWQ1ZjFlM2Q3MGZmYmYwMDA0OTVjZjcwYzY0ZDA3 MDVlZmUzYzM5MzFiZmNkNmIzNzVjYjU1ZDZjODBmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDsI+sh8Ve2Jx9dOntKWYJWyHjfMeeAtqdwtvaf0ysC8Z+u i7Sy6OqH94ZK3OoJUxjpXpQBmEKCaM0r+7+E43SN8VEVVn3+Lw7Or+CazNol9DDu bCgZIF+xTk35ZWOattrxh1fRBiHxKDtwI2+LN8r2DhVm718c3r03BgaoV6XCAbry um226L+bTjwLNF7lrg4BNYlev0fOFKh9EnK/plnLokrNzSFA5oFGlsOIbmhV4Jyw 9WlwMthHrrZ6I0Glt7KEVHohxtVNC7b1pagwhc7Za3v62ayQIbzvjt6DaA4ucZHM a04vJB8cvBGHWfcO2L2Yvac8cSlLmVUaLb1hgq4jAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUmmycYgS3kO7vAHu+LPPT1kPk4PIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzgzNjA3MDk5LWVlOTktNDczYS05ZjBjLThiYjY2YTg1OTczNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAES7tAwDQYJKoZIhvcNAQELBQADggEBABKwDybELbkQHWIhdnxrLB6bMQjv QdLWhQbOzsPuWgDl3CxFpY6rDQ2xP9Nsi4T3aLZLsATeDJi640Jt6PTm/dguIjYh ID/9lMBCCAGul0QBxbLcNVDEgV5lS6XW/jiCH4ZGTx6vCaxq2zjIzr6K9J0zFE4w 9nkg0lGFbdpAqVDqDvp+WbM94FhQGKzby3zhpJYDUIdsYjtzInLi06TQG50ds4Rv rcwY90ylBxigToPX9VtoSisUbfOPMtZMqjQWZjYgReZH1f7J1rEu8Tt7sDzU7V4A aDtD7rxkxW6oChkdMyKN5daeJcLWvdihtsRCo15XWov+x4vrnNF3H5p1eYU= -----END CERTIFICATE-----Generated at Fri Oct 17 21:58:53 2025 by rpki-client