$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8435a4ea-787e-4560-8aff-46e8177767c9.roa File: 8435a4ea-787e-4560-8aff-46e8177767c9.roa (raw, json) Hash identifier: RQg0OQQ9BcBUJE3thu4nfJ6XhE7g7bDpVMTjwpLh4xU= Subject key identifier: BB:3A:82:D1:96:A6:5B:D6:AE:52:CC:02:AF:EB:BB:2E:1C:B7:B9:14 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 728166D007526FE094F7C87741ED276751EF7F9B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8435a4ea-787e-4560-8aff-46e8177767c9.roa Signing time: Mon 22 Sep 2025 20:42:46 +0000 ROA not before: Mon 22 Sep 2025 20:42:46 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.173.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:81:66:d0:07:52:6f:e0:94:f7:c8:77:41:ed:27:67:51:ef:7f:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 20:42:46 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=39042d329540a925bdcf80ed376c1595e1a397a45ae419b6acafa4f46cbdee54, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:61:24:e3:45:ad:0d:72:66:64:5a:dc:37:87: ec:fb:59:52:cf:6e:b6:6f:26:96:83:18:18:d3:23: d6:57:3a:c7:62:b6:0a:42:bd:8d:ab:70:86:bc:cd: 63:93:92:37:a6:e7:c3:c0:df:7f:e6:10:38:f4:0c: c9:96:58:57:44:63:b1:66:27:c0:a0:14:f5:ec:99: 25:c6:57:02:75:d1:87:ca:65:fa:f5:f9:ca:7e:da: 8a:cf:65:d2:45:7f:4c:86:ee:a2:bd:21:4d:da:75: 50:78:b8:f3:8f:7a:93:7d:a5:67:7a:bb:99:e5:e2: 9e:09:4c:b1:55:87:c5:d6:52:20:0a:f8:23:5a:a4: 91:82:6e:f7:69:6e:3b:f1:20:f8:46:90:ce:57:e9: 73:04:c8:a5:39:d4:bb:1c:15:29:3e:6a:ee:d7:6d: 12:04:d0:bd:53:fe:db:03:0a:21:53:43:98:3d:2f: 3a:c5:43:12:1c:3a:a5:4b:e8:5b:8d:e4:88:ae:51: b0:7f:17:7a:47:bd:f4:55:19:f7:c3:db:bc:9a:1d: 90:2f:96:a2:c3:0c:08:96:5b:b7:61:ed:d9:42:01: b7:42:3a:57:76:92:bf:70:d0:63:60:d7:90:f8:15: c0:a3:3b:24:2d:3f:2e:6b:42:9d:86:04:0a:06:2e: 17:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:3A:82:D1:96:A6:5B:D6:AE:52:CC:02:AF:EB:BB:2E:1C:B7:B9:14 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8435a4ea-787e-4560-8aff-46e8177767c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.173.172.0/24 Signature Algorithm: sha256WithRSAEncryption 43:b7:cf:cc:6b:7a:17:86:97:91:43:73:80:ad:ca:b8:23:67: 66:13:78:34:d7:f2:53:66:dd:4f:77:6e:56:66:e8:1d:f7:13: 75:44:c4:e2:e2:50:25:b2:15:67:08:9b:bd:b4:b9:e4:49:a0: 05:be:1b:41:a3:16:87:3b:c4:8a:bb:5c:e1:11:4e:64:17:ab: 77:b2:b5:da:df:bf:1a:bd:96:a7:70:0c:9a:15:42:4c:3e:a7: 95:e8:3c:3e:08:05:ca:5c:46:76:f1:e2:77:d0:7d:c1:f8:21: f8:4c:bc:b4:db:c5:2f:20:8b:4f:72:f3:75:39:23:0b:e7:90: 08:7c:37:0f:b7:5c:21:f6:70:b1:e2:64:c7:12:48:35:b5:47: 5c:e1:c0:c8:87:22:ce:a5:78:22:45:a9:e4:51:1b:37:c8:bb: dd:d8:1c:8d:2a:e4:94:1a:ef:0c:2b:f0:02:62:89:36:f1:09: 40:50:76:55:12:7e:47:4b:4b:8f:ce:8c:34:de:b2:80:ee:d5: 6f:d5:25:dd:34:3f:16:0c:8b:05:19:69:b5:e8:59:8b:19:d5: 6e:a4:90:3d:2c:4a:e1:dc:7b:df:67:75:34:e7:5e:46:1e:47: dc:39:47:54:5d:f9:c1:5b:28:72:2f:a7:bf:4e:cb:bd:a4:da: ed:22:e5:d3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcoFm0AdSb+CU98h3Qe0nZ1Hvf5swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjA0MjQ2WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AzOTA0MmQzMjk1NDBhOTI1YmRjZjgwZWQzNzZjMTU5NWUx YTM5N2E0NWFlNDE5YjZhY2FmYTRmNDZjYmRlZTU0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCuYSTjRa0NcmZkWtw3h+z7WVLPbrZvJpaDGBjTI9ZXOsdi tgpCvY2rcIa8zWOTkjem58PA33/mEDj0DMmWWFdEY7FmJ8CgFPXsmSXGVwJ10YfK Zfr1+cp+2orPZdJFf0yG7qK9IU3adVB4uPOPepN9pWd6u5nl4p4JTLFVh8XWUiAK +CNapJGCbvdpbjvxIPhGkM5X6XMEyKU51LscFSk+au7XbRIE0L1T/tsDCiFTQ5g9 LzrFQxIcOqVL6FuN5IiuUbB/F3pHvfRVGffD27yaHZAvlqLDDAiWW7dh7dlCAbdC Old2kr9w0GNg15D4FcCjOyQtPy5rQp2GBAoGLheNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUuzqC0ZamW9auUswCr+u7Lhy3uRQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzg0MzVhNGVhLTc4N2UtNDU2MC04YWZmLTQ2ZTgxNzc3NjdjOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASrawwDQYJKoZIhvcNAQELBQADggEBAEO3z8xreheGl5FDc4CtyrgjZ2YT eDTX8lNm3U93blZm6B33E3VExOLiUCWyFWcIm720ueRJoAW+G0GjFoc7xIq7XOER TmQXq3eytdrfvxq9lqdwDJoVQkw+p5XoPD4IBcpcRnbx4nfQfcH4IfhMvLTbxS8g i09y83U5IwvnkAh8Nw+3XCH2cLHiZMcSSDW1R1zhwMiHIs6leCJFqeRRGzfIu93Y HI0q5JQa7wwr8AJiiTbxCUBQdlUSfkdLS4/OjDTesoDu1W/VJd00PxYMiwUZabXo WYsZ1W6kkD0sSuHce99ndTTnXkYeR9w5R1Rd+cFbKHIvp79Oy72k2u0i5dM= -----END CERTIFICATE-----Generated at Fri Oct 17 22:04:40 2025 by rpki-client