$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/858eb6c7-7452-4258-8874-a2afc0b9736f.roa File: 858eb6c7-7452-4258-8874-a2afc0b9736f.roa (raw, json) Hash identifier: EXJK7lqLhFkFUwOEfFfCSC7tBg1aUox+RneR/T7RlSE= Subject key identifier: 5D:43:0B:01:AD:8A:A5:1C:0E:1F:0F:F6:13:0A:8D:E0:D3:63:C3:CE Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6E46B8EE4F1AD9875C971BB52A04089E311934E2 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/858eb6c7-7452-4258-8874-a2afc0b9736f.roa Signing time: Mon 22 Sep 2025 19:41:05 +0000 ROA not before: Mon 22 Sep 2025 19:41:05 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.165.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:46:b8:ee:4f:1a:d9:87:5c:97:1b:b5:2a:04:08:9e:31:19:34:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 19:41:05 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=af055f6fcc2540103168cb03eb5bd8d71c18fd96d2c9c17d72e21cc9a6aea699, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:57:1c:44:7c:9b:68:d2:cb:c7:46:92:79:de: 85:0a:d0:c4:04:07:2d:76:e2:9c:ee:13:e4:c7:96: 28:a4:f9:d3:60:12:fc:f7:5f:60:64:f2:8a:a5:f4: 2e:db:9c:3f:db:3f:17:0b:fd:94:01:02:08:b6:fa: 01:89:32:00:59:b5:8f:3a:fa:23:fc:8f:bc:9d:29: 64:ab:de:99:2d:cd:d8:e1:e5:31:39:af:0c:f5:a0: b9:3a:8e:1f:b4:fc:4f:38:d5:69:2f:53:fc:12:ca: 7e:b9:b4:91:e0:6c:6a:91:cb:f2:6b:18:a6:ae:1f: fa:3a:b8:c2:ab:9a:90:b2:68:10:1b:dc:ce:3a:d5: ab:8c:a5:e5:0b:8a:7e:28:80:d0:55:5d:23:af:53: 79:dc:15:12:0e:6e:ab:d8:be:15:2d:07:77:2b:13: 41:93:5a:2f:fb:bd:ba:a1:a7:96:30:38:98:b7:ad: 49:a6:37:44:6c:6e:5b:f9:05:46:02:f7:30:4c:74: 3b:bd:5e:10:a1:6b:7a:83:fa:ad:1b:87:00:c7:b1: f6:1b:47:0f:ea:65:c4:8b:bb:f7:0b:c9:f2:0f:5e: af:3d:3f:51:17:da:ac:61:4a:e8:5b:74:2a:8d:41: 54:30:84:d4:86:07:3a:4b:43:6e:00:7a:d1:1e:cb: 40:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:43:0B:01:AD:8A:A5:1C:0E:1F:0F:F6:13:0A:8D:E0:D3:63:C3:CE X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/858eb6c7-7452-4258-8874-a2afc0b9736f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.165.219.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:67:94:80:4e:32:77:a0:d1:dd:29:21:2f:d8:3a:9e:76:fd: 0f:8b:5f:05:dc:22:3f:ea:54:d1:3f:e9:82:0d:94:be:d9:73: d3:3d:a5:ea:1d:1f:95:4a:73:60:d1:b4:d6:d7:4b:34:e4:29: 89:3e:42:73:ff:a4:11:66:c0:5f:35:91:1d:6a:2d:be:4f:47: b5:d4:ab:09:13:73:ff:21:14:14:71:67:a8:ea:58:1c:22:60: ee:e6:ea:35:14:b7:bb:f6:f4:4b:67:82:ec:cd:38:c3:9a:11: 7c:00:64:29:bb:7e:6c:fb:b1:ce:46:c2:41:d0:d9:3a:56:d1: 01:4c:e1:ac:06:77:4b:27:ae:a5:c3:ef:f0:a9:c3:a2:b7:8d: 55:0a:73:1d:b3:db:fa:ab:e1:9e:3a:56:89:81:53:10:45:54: a1:d4:8f:4b:f9:e9:0a:6c:b5:8e:5c:f6:29:4d:9a:ce:07:01: 36:22:a0:e5:7c:a3:ab:73:f5:b2:f3:8b:c8:a7:7f:88:30:a6: 6d:d9:e9:b8:64:af:4f:07:68:9b:67:df:72:82:70:af:d4:07: 21:ba:68:c9:90:b1:80:87:b1:b7:cb:04:cf:57:6d:a6:3f:7f: ea:5b:92:08:c7:e5:45:36:84:72:69:e1:d9:41:44:29:ea:42: a9:54:e4:c3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbka47k8a2Ydclxu1KgQInjEZNOIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMTk0MTA1WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BhZjA1NWY2ZmNjMjU0MDEwMzE2OGNiMDNlYjViZDhkNzFj MThmZDk2ZDJjOWMxN2Q3MmUyMWNjOWE2YWVhNjk5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDYVxxEfJto0svHRpJ53oUK0MQEBy124pzuE+THliik+dNg Evz3X2Bk8oql9C7bnD/bPxcL/ZQBAgi2+gGJMgBZtY86+iP8j7ydKWSr3pktzdjh 5TE5rwz1oLk6jh+0/E841WkvU/wSyn65tJHgbGqRy/JrGKauH/o6uMKrmpCyaBAb 3M461auMpeULin4ogNBVXSOvU3ncFRIObqvYvhUtB3crE0GTWi/7vbqhp5YwOJi3 rUmmN0Rsblv5BUYC9zBMdDu9XhCha3qD+q0bhwDHsfYbRw/qZcSLu/cLyfIPXq89 P1EX2qxhSuhbdCqNQVQwhNSGBzpLQ24AetEey0BtAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUXUMLAa2KpRwOHw/2EwqN4NNjw84wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzg1OGViNmM3LTc0NTItNDI1OC04ODc0LWEyYWZjMGI5NzM2Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASpdswDQYJKoZIhvcNAQELBQADggEBAC5nlIBOMneg0d0pIS/YOp52/Q+L XwXcIj/qVNE/6YINlL7Zc9M9peodH5VKc2DRtNbXSzTkKYk+QnP/pBFmwF81kR1q Lb5PR7XUqwkTc/8hFBRxZ6jqWBwiYO7m6jUUt7v29EtnguzNOMOaEXwAZCm7fmz7 sc5GwkHQ2TpW0QFM4awGd0snrqXD7/Cpw6K3jVUKcx2z2/qr4Z46VomBUxBFVKHU j0v56QpstY5c9ilNms4HATYioOV8o6tz9bLzi8inf4gwpm3Z6bhkr08HaJtn33KC cK/UByG6aMmQsYCHsbfLBM9XbaY/f+pbkgjH5UU2hHJp4dlBRCnqQqlU5MM= -----END CERTIFICATE-----Generated at Sat Oct 18 02:19:17 2025 by rpki-client