$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8391cbc1-14b0-457c-95b2-04890b9cdf33.roa File: 8391cbc1-14b0-457c-95b2-04890b9cdf33.roa (raw, json) Hash identifier: 44x8xQ0uk7qZoWVmbC512QpTQSEWo4AOtXKJM27z6EQ= Subject key identifier: BA:BD:99:7D:BF:83:60:A7:FC:06:F1:84:1B:31:E2:59:A2:FB:91:A9 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 050551CDAF60CBEF805087BFE33CDC3AB7D90918 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8391cbc1-14b0-457c-95b2-04890b9cdf33.roa Signing time: Mon 22 Sep 2025 22:36:48 +0000 ROA not before: Mon 22 Sep 2025 22:36:48 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.244.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:05:51:cd:af:60:cb:ef:80:50:87:bf:e3:3c:dc:3a:b7:d9:09:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 22:36:48 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=ec2d7043241938901de5f685d8efb6e69509b8af6ba36b65875f12db2cc93cec, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:24:dc:38:eb:04:55:58:71:d5:42:dd:e4:7a: 77:aa:c0:d1:cf:ab:01:c2:6d:34:4a:48:28:32:c5: 6c:1c:8f:02:60:98:8e:09:10:15:31:93:65:bc:9b: 0b:b8:89:fe:eb:24:72:2c:f0:b4:8d:cd:ee:d9:e3: f5:22:2d:42:61:2e:dd:b3:ef:f4:36:cb:5f:55:3e: 8c:5b:e8:f9:6e:17:e0:8d:b8:1d:6c:2b:9e:b5:12: ab:0d:6d:f0:21:51:e7:bb:28:af:4d:0d:e6:f3:99: 9a:c8:0e:fa:32:7e:28:09:a8:d6:ad:02:66:7a:a5: cd:d1:3e:be:f5:37:05:96:28:85:4e:8f:81:42:7c: 64:e8:a4:2c:f8:b2:3d:60:25:2c:06:4f:d1:c4:4e: f7:06:39:4e:15:fb:a4:c2:0c:a9:7a:12:f9:d9:a8: 0f:2b:41:3b:51:c3:05:e9:64:a9:8d:ca:05:1a:83: 2b:45:1c:7d:2c:d9:a3:35:3e:e0:1d:75:29:5a:53: c7:40:48:dc:8c:6e:07:20:15:dc:fd:95:e7:a9:04: 64:df:92:8e:a9:9a:0f:59:96:36:85:6c:85:55:0a: d9:ab:3e:53:5b:74:2a:9e:d3:f6:e4:53:7e:7c:08: 86:1f:bd:70:3f:07:54:cd:77:8f:5f:b7:57:2f:3f: be:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:BD:99:7D:BF:83:60:A7:FC:06:F1:84:1B:31:E2:59:A2:FB:91:A9 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8391cbc1-14b0-457c-95b2-04890b9cdf33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.244.153.0/24 Signature Algorithm: sha256WithRSAEncryption 23:41:1a:bd:ee:51:5d:a9:b3:28:b9:59:ff:0a:b2:73:68:ac: 27:3f:04:66:27:4f:90:b3:c1:20:20:83:f0:42:76:c6:55:91: 90:e9:5a:31:eb:9f:f8:82:97:7f:07:1e:60:bd:f6:94:60:4b: 06:9f:71:47:8c:b5:0f:e1:8b:40:e1:84:01:2d:23:46:bd:1b: 48:b4:67:61:aa:c3:43:3a:bf:c4:7f:49:60:ac:c2:77:9c:86: 9f:65:8e:21:dc:9a:42:b4:e0:2a:1d:71:fa:fb:6e:91:6c:d1: c3:b9:bd:0d:07:b0:65:a4:4f:39:c0:df:d0:38:29:a0:f6:93: 44:10:65:3d:60:ad:65:14:2f:f9:c0:86:06:84:7e:d7:04:dd: c4:40:cb:9e:14:c6:10:5c:b0:7d:1d:96:57:f8:f0:2e:b0:bc: 89:bb:46:30:19:a1:ab:60:6c:0f:24:23:e3:c4:3c:07:c7:01: cd:69:d7:69:e5:ba:68:4b:23:3b:80:fd:07:a3:6d:d9:13:a6: c7:63:57:87:c6:22:04:6d:d0:06:60:be:e0:fe:0f:28:3a:0a: b3:ac:b8:7e:3f:10:fe:51:5d:31:47:32:7f:20:bf:b9:23:27: 05:1e:67:00:df:39:bc:81:48:e9:09:ff:29:be:43:ea:95:02: ab:7c:8b:12 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBQVRza9gy++AUIe/4zzcOrfZCRgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjIzNjQ4WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BlYzJkNzA0MzI0MTkzODkwMWRlNWY2ODVkOGVmYjZlNjk1 MDliOGFmNmJhMzZiNjU4NzVmMTJkYjJjYzkzY2VjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDIJNw46wRVWHHVQt3keneqwNHPqwHCbTRKSCgyxWwcjwJg mI4JEBUxk2W8mwu4if7rJHIs8LSNze7Z4/UiLUJhLt2z7/Q2y19VPoxb6PluF+CN uB1sK561EqsNbfAhUee7KK9NDebzmZrIDvoyfigJqNatAmZ6pc3RPr71NwWWKIVO j4FCfGTopCz4sj1gJSwGT9HETvcGOU4V+6TCDKl6EvnZqA8rQTtRwwXpZKmNygUa gytFHH0s2aM1PuAddSlaU8dASNyMbgcgFdz9leepBGTfko6pmg9ZljaFbIVVCtmr PlNbdCqe0/bkU358CIYfvXA/B1TNd49ft1cvP74xAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUur2Zfb+DYKf8BvGEGzHiWaL7kakwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzgzOTFjYmMxLTE0YjAtNDU3Yy05NWIyLTA0ODkwYjljZGYzMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAS9JkwDQYJKoZIhvcNAQELBQADggEBACNBGr3uUV2psyi5Wf8KsnNorCc/ BGYnT5CzwSAgg/BCdsZVkZDpWjHrn/iCl38HHmC99pRgSwafcUeMtQ/hi0DhhAEt I0a9G0i0Z2Gqw0M6v8R/SWCswnechp9ljiHcmkK04Codcfr7bpFs0cO5vQ0HsGWk TznA39A4KaD2k0QQZT1grWUUL/nAhgaEftcE3cRAy54UxhBcsH0dllf48C6wvIm7 RjAZoatgbA8kI+PEPAfHAc1p12nlumhLIzuA/QejbdkTpsdjV4fGIgRt0AZgvuD+ Dyg6CrOsuH4/EP5RXTFHMn8gv7kjJwUeZwDfObyBSOkJ/ym+Q+qVAqt8ixI= -----END CERTIFICATE-----Generated at Fri Oct 17 23:50:12 2025 by rpki-client