$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/84b9cc7f-6065-4f73-9cba-8187d1b57d65.roa File: 84b9cc7f-6065-4f73-9cba-8187d1b57d65.roa (raw, json) Hash identifier: DnaeT4NzV52amgvPuq0D3sbS2gVrJqFhb7XIwGhW1Gw= Subject key identifier: D7:50:F5:57:87:86:F9:DC:69:4C:97:28:60:4E:52:F9:A3:E2:CF:5E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4E9B3455ADD1EDCF6DFEBEC9EA28EAA5737CF00F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/84b9cc7f-6065-4f73-9cba-8187d1b57d65.roa Signing time: Mon 22 Sep 2025 20:17:23 +0000 ROA not before: Mon 22 Sep 2025 20:17:23 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.165.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:9b:34:55:ad:d1:ed:cf:6d:fe:be:c9:ea:28:ea:a5:73:7c:f0:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 20:17:23 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=30c302e84c394ed81c690c593224fd8b0ace7337808ddbdb83d4a1f8f749576a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:35:22:d3:d5:89:a1:ad:f2:e6:c8:42:8f:d9: c1:e9:e8:13:78:d2:7b:a7:d7:18:73:36:ab:45:41: 28:03:2b:c9:5f:bb:bf:10:53:c3:de:1a:f6:bf:69: 48:5c:ca:7b:d2:d6:d5:59:d9:44:96:70:84:71:ce: d3:ab:4b:79:c3:6c:35:6d:d5:92:5e:0d:47:2a:2e: e8:75:bb:a7:27:ab:48:3e:ef:88:fc:bd:17:bf:e8: 4c:db:4d:cc:ba:26:9a:40:0e:54:c5:52:6b:38:29: 65:b7:e2:c8:2a:13:ed:ca:16:cc:26:bf:8d:66:d3: 0d:5d:ba:11:55:ab:44:f8:2d:8c:d6:0d:fd:f9:a0: 7b:f5:32:7f:2a:ed:b3:53:96:b3:3e:73:f1:3b:cd: 87:2a:b9:73:35:aa:53:36:5f:a1:fa:49:e9:ce:93: c9:9b:20:ed:67:ce:72:93:55:63:5b:99:00:94:5f: bd:23:03:9d:59:74:0a:ea:25:fb:8e:ee:0e:56:11: df:18:3f:84:40:4d:7c:86:e0:3e:92:3f:23:dd:1a: 2c:fb:0d:0f:a9:a2:ae:57:3d:30:a9:b2:38:7a:3c: 75:25:c7:38:f1:80:91:cb:15:66:c9:c9:38:2b:28: f1:96:43:b0:45:de:04:6a:ec:24:b3:b8:3c:55:28: c9:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:50:F5:57:87:86:F9:DC:69:4C:97:28:60:4E:52:F9:A3:E2:CF:5E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/84b9cc7f-6065-4f73-9cba-8187d1b57d65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.165.224.0/20 Signature Algorithm: sha256WithRSAEncryption 86:41:be:07:19:64:e6:9b:d3:8f:29:01:cd:9e:fd:7a:c3:71: 7c:eb:29:be:27:94:b8:73:54:c2:d9:22:cd:b4:93:bb:44:4f: ba:3b:ab:92:44:5a:ae:85:29:ea:ec:77:ac:60:28:bd:d7:e1: 61:e6:a3:24:96:e9:e2:c7:87:12:e2:47:32:41:e3:7d:ca:7e: 61:1c:c7:c4:f4:da:a0:c6:2b:1c:ae:6a:76:52:2c:99:55:e1: 2e:99:c9:73:f7:87:5b:e9:9b:b7:83:97:3d:fa:65:83:54:65: 5a:ea:f1:cc:e1:0e:1a:cb:76:a1:60:4c:71:9d:9e:ef:c6:a1: ad:74:54:1c:ef:1a:30:2f:0b:2f:cf:0e:78:ec:93:f1:fe:21: 91:8a:4a:20:b3:ad:10:6e:14:ea:b0:10:71:33:06:49:d5:3d: 24:4a:7d:22:06:d9:91:91:b5:60:c0:6c:53:a3:38:9a:4f:ae: 84:3d:3e:fb:b7:28:60:62:da:8a:72:10:d7:cc:50:c0:b4:b7: 0b:40:cb:10:3c:82:ea:25:1f:e1:3d:f1:99:67:99:80:47:38: c2:6f:c3:8e:84:1d:86:12:4c:f1:28:db:05:2b:46:f4:8a:98: ee:8e:f3:f2:df:af:0c:ae:58:8f:57:cf:48:20:8e:f7:df:db: d1:7e:82:ac -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTps0Va3R7c9t/r7J6ijqpXN88A8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjAxNzIzWhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AzMGMzMDJlODRjMzk0ZWQ4MWM2OTBjNTkzMjI0ZmQ4YjBh Y2U3MzM3ODA4ZGRiZGI4M2Q0YTFmOGY3NDk1NzZhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtNSLT1YmhrfLmyEKP2cHp6BN40nun1xhzNqtFQSgDK8lf u78QU8PeGva/aUhcynvS1tVZ2USWcIRxztOrS3nDbDVt1ZJeDUcqLuh1u6cnq0g+ 74j8vRe/6EzbTcy6JppADlTFUms4KWW34sgqE+3KFswmv41m0w1duhFVq0T4LYzW Df35oHv1Mn8q7bNTlrM+c/E7zYcquXM1qlM2X6H6SenOk8mbIO1nznKTVWNbmQCU X70jA51ZdArqJfuO7g5WEd8YP4RATXyG4D6SPyPdGiz7DQ+poq5XPTCpsjh6PHUl xzjxgJHLFWbJyTgrKPGWQ7BF3gRq7CSzuDxVKMnhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU11D1V4eG+dxpTJcoYE5S+aPiz14wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzg0YjljYzdmLTYwNjUtNGY3My05Y2JhLTgxODdkMWI1N2Q2NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQSpeAwDQYJKoZIhvcNAQELBQADggEBAIZBvgcZZOab048pAc2e/XrDcXzr Kb4nlLhzVMLZIs20k7tET7o7q5JEWq6FKersd6xgKL3X4WHmoySW6eLHhxLiRzJB 433KfmEcx8T02qDGKxyuanZSLJlV4S6ZyXP3h1vpm7eDlz36ZYNUZVrq8czhDhrL dqFgTHGdnu/Goa10VBzvGjAvCy/PDnjsk/H+IZGKSiCzrRBuFOqwEHEzBknVPSRK fSIG2ZGRtWDAbFOjOJpProQ9Pvu3KGBi2opyENfMUMC0twtAyxA8guolH+E98Zln mYBHOMJvw46EHYYSTPEo2wUrRvSKmO6O8/LfrwyuWI9Xz0ggjvff29F+gqw= -----END CERTIFICATE-----Generated at Fri Oct 17 23:43:32 2025 by rpki-client