$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/83b0a857-da31-4a4d-bd40-da58f79e338d.roa File: 83b0a857-da31-4a4d-bd40-da58f79e338d.roa (raw, json) Hash identifier: Yod0BCKXEUs657wDK0KzWZ8OrP4j95dLDc52elz4ue0= Subject key identifier: FE:A9:5F:BB:30:E8:B2:93:40:14:BB:04:4F:C4:B4:96:5C:38:8C:72 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 37FC39CD9ECBAEA37AD7D3B4238375B578EF6A52 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/83b0a857-da31-4a4d-bd40-da58f79e338d.roa Signing time: Mon 22 Sep 2025 20:40:53 +0000 ROA not before: Mon 22 Sep 2025 20:40:53 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.173.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:fc:39:cd:9e:cb:ae:a3:7a:d7:d3:b4:23:83:75:b5:78:ef:6a:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 20:40:53 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=cea1025afaa5e102eb76cbd2c20e52e3a9c914d90870f09ce33480b5d6430a14, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:77:2b:1f:50:21:13:23:37:b2:5b:15:16:5e: 2b:de:e1:fd:1f:e9:84:1e:d2:72:1f:66:39:bf:07: 73:cc:61:dc:0b:1b:67:eb:8e:f8:89:61:c5:d7:f5: ca:8d:ce:7c:5b:1f:a0:89:58:95:58:f8:d7:46:27: 72:f6:26:cc:44:e6:7c:f4:f1:57:36:09:6e:82:ce: 1c:8b:69:a8:52:a5:46:82:b6:3f:7c:80:c1:9e:3c: e5:6a:81:59:9c:aa:f4:d8:6a:9d:60:12:d2:da:2d: 2a:9f:9b:20:c0:4f:25:71:5f:90:fc:3c:f5:a4:a1: 13:b0:a9:7c:dc:0d:04:78:48:9b:a7:e1:2e:4a:65: a6:6c:0f:b8:38:78:d8:b9:8a:f5:17:27:ba:02:39: 1b:06:65:f6:53:0b:56:da:11:99:aa:0a:2c:81:6a: c2:c8:34:c6:94:df:55:aa:df:b5:db:96:c6:16:86: 84:c6:64:84:98:fe:d7:4e:19:ce:90:eb:13:2a:46: 5f:d4:5e:6f:30:bc:00:e5:63:06:1c:1b:3d:b6:96: 55:85:11:d9:42:58:66:b1:b9:94:70:73:c6:30:9f: f8:f1:61:0a:9b:a2:09:67:72:86:45:fa:19:ec:d6: cb:36:21:12:a4:7b:51:76:6f:57:65:66:60:28:ce: b3:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:A9:5F:BB:30:E8:B2:93:40:14:BB:04:4F:C4:B4:96:5C:38:8C:72 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/83b0a857-da31-4a4d-bd40-da58f79e338d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.173.140.0/24 Signature Algorithm: sha256WithRSAEncryption 73:04:cd:0f:aa:9a:44:45:8f:42:40:d1:ed:28:f1:e1:3b:84: 86:30:74:94:d9:bb:99:82:d1:45:23:fe:48:b1:00:86:9c:61: 7a:c2:b7:1f:af:c6:c5:81:ea:31:6b:56:c9:02:a3:70:50:6f: e9:c3:f9:5d:f6:5d:8e:e5:b2:e4:32:93:c2:2d:f4:41:a9:60: 4a:51:ad:63:e4:1f:be:72:b6:f9:fb:bc:e2:6f:42:ba:89:03: f1:f8:7f:85:5e:98:4a:3b:fa:7a:7d:3e:ea:41:cc:d7:5c:e4: 86:a3:f3:89:f9:67:64:a3:cd:d0:6a:cc:5d:63:80:06:bd:70: b8:67:f0:e7:6f:8a:3b:62:d7:91:35:eb:f1:41:16:a3:1f:6a: 96:c4:45:0f:3c:08:f0:ce:8f:7e:4a:47:97:5f:e1:1c:a1:b2: f0:5f:71:bb:da:5c:b4:a8:74:78:5d:6e:a8:63:47:27:ad:a1: 59:f4:6c:66:9d:03:00:d6:5f:1c:84:a1:52:41:28:b1:b6:6c: a5:09:c2:2b:66:9e:5e:b1:fb:67:24:9a:17:ed:a8:c7:ec:a9: bc:76:46:6a:cd:fc:b5:5d:66:51:f7:d6:0f:24:dc:52:0d:63: 23:41:64:f2:1f:60:97:6a:bf:27:af:6e:ff:d0:ce:89:b8:33: 9d:c3:a3:6b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUN/w5zZ7LrqN619O0I4N1tXjvalIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjA0MDUzWhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BjZWExMDI1YWZhYTVlMTAyZWI3NmNiZDJjMjBlNTJlM2E5 YzkxNGQ5MDg3MGYwOWNlMzM0ODBiNWQ2NDMwYTE0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJdysfUCETIzeyWxUWXive4f0f6YQe0nIfZjm/B3PMYdwL G2frjviJYcXX9cqNznxbH6CJWJVY+NdGJ3L2JsxE5nz08Vc2CW6CzhyLaahSpUaC tj98gMGePOVqgVmcqvTYap1gEtLaLSqfmyDATyVxX5D8PPWkoROwqXzcDQR4SJun 4S5KZaZsD7g4eNi5ivUXJ7oCORsGZfZTC1baEZmqCiyBasLINMaU31Wq37XblsYW hoTGZISY/tdOGc6Q6xMqRl/UXm8wvADlYwYcGz22llWFEdlCWGaxuZRwc8Ywn/jx YQqboglncoZF+hns1ss2IRKke1F2b1dlZmAozrNZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU/qlfuzDospNAFLsET8S0llw4jHIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzgzYjBhODU3LWRhMzEtNGE0ZC1iZDQwLWRhNThmNzllMzM4ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASrYwwDQYJKoZIhvcNAQELBQADggEBAHMEzQ+qmkRFj0JA0e0o8eE7hIYw dJTZu5mC0UUj/kixAIacYXrCtx+vxsWB6jFrVskCo3BQb+nD+V32XY7lsuQyk8It 9EGpYEpRrWPkH75ytvn7vOJvQrqJA/H4f4VemEo7+np9PupBzNdc5Iaj84n5Z2Sj zdBqzF1jgAa9cLhn8Odvijti15E16/FBFqMfapbERQ88CPDOj35KR5df4RyhsvBf cbvaXLSodHhdbqhjRyetoVn0bGadAwDWXxyEoVJBKLG2bKUJwitmnl6x+2ckmhft qMfsqbx2RmrN/LVdZlH31g8k3FINYyNBZPIfYJdqvyevbv/Qzom4M53Do2s= -----END CERTIFICATE-----Generated at Fri Oct 17 22:05:27 2025 by rpki-client