$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/89e4633b-57c9-4871-a836-537d35bf2cee.roa File: 89e4633b-57c9-4871-a836-537d35bf2cee.roa (raw, json) Hash identifier: Fyf5xURcxHmRjje+UivTL7DFzQpzMEDXSK6Y2iszZwA= Subject key identifier: 8B:E1:31:74:85:4E:A7:6C:9D:B9:05:80:83:EC:B0:F9:E7:FB:D4:C4 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 58CAC58C78ED3D3DFA5C7689E5B9DD9A8F36A0D6 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/89e4633b-57c9-4871-a836-537d35bf2cee.roa Signing time: Mon 22 Sep 2025 18:45:13 +0000 ROA not before: Mon 22 Sep 2025 18:45:13 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.160.144.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:ca:c5:8c:78:ed:3d:3d:fa:5c:76:89:e5:b9:dd:9a:8f:36:a0:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 18:45:13 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=ab54757120c15622b8f13c931b7c87bd60f7827cea2b11b10ecd99819ad70060, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:33:1b:90:f5:37:ac:5b:24:47:bd:a5:4a:f9: aa:80:e7:13:a9:a6:cb:eb:45:40:fd:00:d2:e3:2a: 1a:14:ef:55:11:cb:37:4c:f0:15:6d:4d:42:b3:e5: c1:b5:c8:86:1b:bb:35:f4:79:1a:82:80:ec:cd:2d: 5e:33:20:79:e0:45:41:3f:64:45:37:ec:7f:52:5e: 5a:87:26:55:54:db:23:d5:ad:b8:73:d8:26:03:31: 12:92:f9:aa:e4:a4:72:9c:ca:4c:3f:db:d0:1d:ea: 0a:dd:43:2a:5f:c1:67:b3:73:ea:72:81:76:25:b6: 62:7c:8a:d9:8c:86:3e:0a:d4:84:70:dd:f8:8c:2a: ea:86:77:a9:f7:9d:ce:1a:49:46:14:cc:37:46:f9: 6b:eb:a9:c5:e1:d4:29:eb:f3:4e:b5:a8:ae:d6:88: 1f:97:1a:c8:62:1b:b5:1d:05:7a:6a:85:29:03:ab: c5:cf:52:3d:87:57:c2:22:e1:f3:33:44:a5:89:aa: 87:58:c6:60:16:4c:e1:5f:cb:9f:4a:4b:c5:4b:4b: b0:7b:d9:dc:df:e3:b7:c2:98:b0:27:76:a9:9b:95: c8:73:19:dd:be:7d:37:ea:75:a5:c5:ec:72:a2:74: f5:3f:fa:dd:eb:f3:ed:d9:76:81:49:e4:66:0f:b6: 42:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:E1:31:74:85:4E:A7:6C:9D:B9:05:80:83:EC:B0:F9:E7:FB:D4:C4 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/89e4633b-57c9-4871-a836-537d35bf2cee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.160.144.0/23 Signature Algorithm: sha256WithRSAEncryption b0:28:38:bf:9f:cc:f0:cd:39:bd:d7:48:80:bc:08:af:b0:6d: 68:cd:82:aa:49:cc:0d:8f:6f:6a:2b:aa:80:8b:79:fc:01:a5: 11:72:3c:c6:15:ee:44:d0:ec:f4:3c:06:ee:f4:99:43:af:23: 7a:ea:bb:51:7f:85:ff:52:a1:80:d8:38:f1:5a:cb:c9:ec:54: e9:fc:0c:3b:09:cb:95:9f:b2:72:91:f9:92:8d:0a:59:f6:7a: 80:8f:f1:b9:6a:37:1d:2f:4e:58:09:50:39:93:bc:7c:e4:65: bc:97:60:c3:11:f6:6b:d8:0a:0b:5a:a0:b7:3b:5a:1c:5e:f8: 65:09:87:c5:1d:d2:ae:38:20:d7:f2:2d:a7:b4:4e:1b:2e:b2: 8d:54:2d:71:0f:95:ed:ce:a2:ec:9d:96:02:33:f7:55:08:00: 83:94:d5:b3:5f:ae:fb:49:7b:24:9c:df:d1:b5:8f:d8:e6:15: 5f:2b:3c:2d:88:34:be:9b:f3:6e:00:6d:e3:7b:e2:f6:f2:c9: 71:f7:25:14:ca:28:a5:0f:0c:7b:ec:3e:60:e5:16:5e:80:2d: e2:7b:7b:63:49:5d:ed:1c:8e:d7:75:d3:26:5f:fb:7f:05:1e: fb:8d:9d:82:3b:c8:9c:be:f8:1e:25:56:4d:10:43:7b:19:17: 1b:2b:a1:a4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWMrFjHjtPT36XHaJ5bndmo82oNYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMTg0NTEzWhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BhYjU0NzU3MTIwYzE1NjIyYjhmMTNjOTMxYjdjODdiZDYw Zjc4MjdjZWEyYjExYjEwZWNkOTk4MTlhZDcwMDYwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQClMxuQ9TesWyRHvaVK+aqA5xOppsvrRUD9ANLjKhoU71UR yzdM8BVtTUKz5cG1yIYbuzX0eRqCgOzNLV4zIHngRUE/ZEU37H9SXlqHJlVU2yPV rbhz2CYDMRKS+arkpHKcykw/29Ad6grdQypfwWezc+pygXYltmJ8itmMhj4K1IRw 3fiMKuqGd6n3nc4aSUYUzDdG+WvrqcXh1Cnr8061qK7WiB+XGshiG7UdBXpqhSkD q8XPUj2HV8Ii4fMzRKWJqodYxmAWTOFfy59KS8VLS7B72dzf47fCmLAndqmblchz Gd2+fTfqdaXF7HKidPU/+t3r8+3ZdoFJ5GYPtkJNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUi+ExdIVOp2yduQWAg+yw+ef71MQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzg5ZTQ2MzNiLTU3YzktNDg3MS1hODM2LTUzN2QzNWJmMmNlZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESoJAwDQYJKoZIhvcNAQELBQADggEBALAoOL+fzPDNOb3XSIC8CK+wbWjN gqpJzA2Pb2orqoCLefwBpRFyPMYV7kTQ7PQ8Bu70mUOvI3rqu1F/hf9SoYDYOPFa y8nsVOn8DDsJy5WfsnKR+ZKNCln2eoCP8blqNx0vTlgJUDmTvHzkZbyXYMMR9mvY CgtaoLc7Whxe+GUJh8Ud0q44INfyLae0Thsuso1ULXEPle3OouydlgIz91UIAIOU 1bNfrvtJeySc39G1j9jmFV8rPC2INL6b824AbeN74vbyyXH3JRTKKKUPDHvsPmDl Fl6ALeJ7e2NJXe0cjtd10yZf+38FHvuNnYI7yJy++B4lVk0QQ3sZFxsroaQ= -----END CERTIFICATE-----Generated at Fri Oct 17 23:43:26 2025 by rpki-client