$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/83ccd332-265a-4af8-9a38-49aa276ecd3b.roa File: 83ccd332-265a-4af8-9a38-49aa276ecd3b.roa (raw, json) Hash identifier: 1C98jGAbA5mC5lUM5CS+7tZlNsKLCtL+YYwCFu5Jku0= Subject key identifier: 32:89:6D:5F:E2:E8:D1:BD:B2:57:B4:A2:90:EF:88:2C:34:D3:DC:62 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4830B84D754EFA853D39BB4C2ACA3CD73939C22E Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/83ccd332-265a-4af8-9a38-49aa276ecd3b.roa Signing time: Mon 22 Sep 2025 20:41:01 +0000 ROA not before: Mon 22 Sep 2025 20:41:01 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.173.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:30:b8:4d:75:4e:fa:85:3d:39:bb:4c:2a:ca:3c:d7:39:39:c2:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 20:41:01 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=6dc449e97bc8f311fcf73a5c54c611064d28ae2c900aa29623f742ae925479be, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:61:52:b4:2c:81:c6:0e:da:c2:40:12:fa:54: 72:73:36:8c:28:b5:b5:04:5c:4e:9d:38:a5:1b:37: a5:7c:10:6f:00:29:3b:98:a3:f3:ec:9c:87:49:71: b9:92:71:6f:33:32:42:9b:02:4f:87:cb:23:85:eb: 4c:ac:73:1c:aa:eb:93:5f:57:d7:ab:d0:86:9b:b4: e3:90:73:33:7f:3b:b6:a2:8c:d3:ba:01:87:e6:65: 2e:40:d9:8f:ed:b9:31:10:9f:83:30:cb:b9:ad:a5: 53:39:e0:6c:4e:0b:9f:8a:8c:d3:1d:44:3f:bc:06: 68:81:7f:ff:41:b8:68:44:13:4d:3f:75:59:b5:cb: 4d:f3:58:b8:d9:4b:5c:14:1b:11:cc:d3:8e:fd:e3: c5:ac:00:54:6c:a7:8a:d5:12:5d:59:53:bf:22:62: 75:1d:6f:40:ce:f7:76:c9:6a:91:32:36:d1:5b:76: 06:53:f3:c4:61:c5:68:86:80:96:3e:fb:59:a1:b9: 03:25:92:f3:81:53:12:70:20:22:a9:22:b5:51:d4: 51:38:8b:3d:7e:64:d3:59:a5:38:ce:db:12:77:67: 8b:ea:8f:68:90:70:c1:f5:18:9e:6e:56:79:d9:3b: be:be:95:d5:66:85:82:82:40:56:8d:a4:d5:26:23: 30:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:89:6D:5F:E2:E8:D1:BD:B2:57:B4:A2:90:EF:88:2C:34:D3:DC:62 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/83ccd332-265a-4af8-9a38-49aa276ecd3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.173.148.0/24 Signature Algorithm: sha256WithRSAEncryption 00:0d:ff:f1:ea:e8:3c:4a:15:b1:90:c7:7d:0b:55:33:d7:8f: 0f:23:c9:2b:c3:28:63:6b:7b:33:d2:96:e8:d8:3b:78:7d:61: 2e:17:19:23:14:c0:43:18:69:89:e2:25:bb:f9:75:57:3e:5a: 1d:a2:cb:55:ba:fe:be:9f:bf:f9:b2:de:1e:fe:c9:36:00:95: 47:dc:11:24:39:03:92:76:02:95:11:da:ea:b3:e3:a1:31:75: 9f:09:00:33:6f:0d:89:37:c0:78:d9:fa:69:a1:72:d9:07:e8: bc:a6:d5:db:34:13:c4:85:8e:76:4d:1b:8b:7d:b9:c1:63:a3: 03:e0:ca:ef:da:02:35:88:07:31:7f:65:d9:77:35:49:5e:c3: ff:cb:dc:1a:38:81:64:d8:28:4a:51:97:5d:32:9f:79:e9:e9: f1:4d:d0:73:e4:39:7d:12:70:8d:a6:ef:39:58:13:63:91:03: e0:23:5e:57:aa:7b:ba:c3:89:91:c7:7a:59:bc:4d:07:47:1b: be:05:2d:a9:eb:0e:d4:52:d5:34:15:4e:d5:33:82:71:50:6b: 66:a0:2a:d4:e0:5f:db:9b:e5:a3:b5:6f:9a:36:4a:80:8d:9b: 84:f4:93:a5:9b:1d:06:df:eb:40:e0:54:80:28:25:7e:37:56: a2:a4:47:c9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSDC4TXVO+oU9ObtMKso81zk5wi4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjA0MTAxWhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZGM0NDllOTdiYzhmMzExZmNmNzNhNWM1NGM2MTEwNjRk MjhhZTJjOTAwYWEyOTYyM2Y3NDJhZTkyNTQ3OWJlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDkYVK0LIHGDtrCQBL6VHJzNowotbUEXE6dOKUbN6V8EG8A KTuYo/PsnIdJcbmScW8zMkKbAk+HyyOF60yscxyq65NfV9er0IabtOOQczN/O7ai jNO6AYfmZS5A2Y/tuTEQn4Mwy7mtpVM54GxOC5+KjNMdRD+8BmiBf/9BuGhEE00/ dVm1y03zWLjZS1wUGxHM047948WsAFRsp4rVEl1ZU78iYnUdb0DO93bJapEyNtFb dgZT88RhxWiGgJY++1mhuQMlkvOBUxJwICKpIrVR1FE4iz1+ZNNZpTjO2xJ3Z4vq j2iQcMH1GJ5uVnnZO76+ldVmhYKCQFaNpNUmIzDzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUMoltX+Lo0b2yV7SikO+ILDTT3GIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzgzY2NkMzMyLTI2NWEtNGFmOC05YTM4LTQ5YWEyNzZlY2QzYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASrZQwDQYJKoZIhvcNAQELBQADggEBAAAN//Hq6DxKFbGQx30LVTPXjw8j ySvDKGNrezPSlujYO3h9YS4XGSMUwEMYaYniJbv5dVc+Wh2iy1W6/r6fv/my3h7+ yTYAlUfcESQ5A5J2ApUR2uqz46ExdZ8JADNvDYk3wHjZ+mmhctkH6Lym1ds0E8SF jnZNG4t9ucFjowPgyu/aAjWIBzF/Zdl3NUlew//L3Bo4gWTYKEpRl10yn3np6fFN 0HPkOX0ScI2m7zlYE2ORA+AjXleqe7rDiZHHelm8TQdHG74FLanrDtRS1TQVTtUz gnFQa2agKtTgX9ub5aO1b5o2SoCNm4T0k6WbHQbf60DgVIAoJX43VqKkR8k= -----END CERTIFICATE-----Generated at Fri Oct 17 23:52:41 2025 by rpki-client