$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8a02509c-f29b-4f9a-8fc1-354e8905e50b.roa File: 8a02509c-f29b-4f9a-8fc1-354e8905e50b.roa (raw, json) Hash identifier: TW3mT+ev4Yul3EEANc9/Zx4Ci137Yd15sgo5lfsiRhY= Subject key identifier: 34:E2:8F:4F:68:B4:46:F8:BF:3A:49:65:A8:D0:1D:08:99:F9:AD:A1 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4A41E44C433198F51F382818F768D6845E122BBB Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8a02509c-f29b-4f9a-8fc1-354e8905e50b.roa Signing time: Mon 22 Sep 2025 23:36:33 +0000 ROA not before: Mon 22 Sep 2025 23:36:33 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.245.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:41:e4:4c:43:31:98:f5:1f:38:28:18:f7:68:d6:84:5e:12:2b:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 23:36:33 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=78e93011b00a56d027f0248f5362f4748a4ad749da10255c1801fdf09b9351b1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c8:b1:cb:88:a8:88:6c:27:8b:8e:30:92:b9: 8c:c3:8b:9c:98:b1:41:01:2a:75:3f:12:b2:75:24: cb:cd:0a:9f:39:c1:19:5c:c6:6a:e3:fb:0b:2e:31: 94:7e:9b:90:ad:b5:a8:84:b2:a0:ff:5b:c0:72:ee: 3d:96:fc:b8:12:00:31:65:dd:da:bb:02:46:2b:36: 85:48:01:f0:2d:4f:e7:fb:f3:de:b6:4e:22:91:d7: 91:ec:48:40:9c:a0:a3:f7:c8:d7:83:ad:f6:3e:1d: 24:bf:4e:ac:58:7d:13:3a:95:30:b0:8e:b6:f0:bc: 20:e0:35:e4:36:50:e7:39:d8:e1:a9:1e:fa:5c:36: ac:2a:53:da:67:c4:93:17:de:82:65:96:63:48:3b: dd:f6:e9:63:57:a1:e2:61:48:4c:9d:78:10:f3:24: 2a:fb:ad:e3:3f:86:4e:d1:b4:78:69:04:62:c4:93: 3a:f9:e1:2f:51:3e:33:c7:02:95:7f:b9:d9:0f:4b: 2c:8e:69:4c:45:36:9c:1a:ee:d7:d4:5c:4a:ae:56: 32:78:eb:7d:37:8a:a3:3c:aa:4c:06:ac:48:d3:f9: 35:82:67:75:08:f3:0d:17:f6:e4:ee:36:6c:58:02: 33:d7:8c:5b:44:8b:ca:72:7b:81:96:82:2f:04:f3: ed:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:E2:8F:4F:68:B4:46:F8:BF:3A:49:65:A8:D0:1D:08:99:F9:AD:A1 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8a02509c-f29b-4f9a-8fc1-354e8905e50b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.245.128.0/17 Signature Algorithm: sha256WithRSAEncryption 30:38:79:9a:f1:8e:d0:c7:e1:ba:68:04:ce:47:99:79:32:12: e0:54:6b:f0:4c:21:a7:e3:d0:9a:7f:f4:27:23:89:93:eb:be: e1:6b:1c:de:77:2c:42:5b:2f:b0:da:45:b2:a0:50:6a:a6:30: 2b:a6:5d:c1:1c:a2:1f:ba:67:30:9b:df:72:19:0b:fb:25:69: 90:77:8a:aa:8a:7c:cd:ae:6b:a3:51:80:3c:c1:23:e4:1b:b3: 71:3a:41:e8:64:36:42:d2:9e:aa:09:da:09:c5:4c:37:0d:f2: b1:12:ee:71:c4:6d:b9:80:c9:79:53:4e:ab:87:93:a7:c7:a6: 41:be:a6:8b:42:d5:0b:e9:aa:2e:bb:08:12:30:d3:a9:0c:a8: f0:29:fd:2a:a3:c5:77:c2:98:cc:3e:bb:61:cb:fb:21:ce:be: 87:49:84:d9:80:31:3d:48:05:22:17:ae:9d:99:9c:c6:d7:95: cc:49:21:1c:8f:e5:67:83:48:b8:2b:9c:14:8c:82:34:10:e6: ef:e6:5d:f2:e0:f5:bf:e9:81:02:da:29:ad:b2:16:e7:1d:9a: de:a8:07:50:18:b9:54:cc:41:1e:68:b7:8a:06:01:4d:0a:77: ea:d0:42:1e:f9:70:a3:a3:53:1e:e2:2d:cb:06:c9:d4:2d:b6: 71:cf:03:f0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSkHkTEMxmPUfOCgY92jWhF4SK7swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjMzNjMzWhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A3OGU5MzAxMWIwMGE1NmQwMjdmMDI0OGY1MzYyZjQ3NDhh NGFkNzQ5ZGExMDI1NWMxODAxZmRmMDliOTM1MWIxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCiyLHLiKiIbCeLjjCSuYzDi5yYsUEBKnU/ErJ1JMvNCp85 wRlcxmrj+wsuMZR+m5CttaiEsqD/W8By7j2W/LgSADFl3dq7AkYrNoVIAfAtT+f7 8962TiKR15HsSECcoKP3yNeDrfY+HSS/TqxYfRM6lTCwjrbwvCDgNeQ2UOc52OGp HvpcNqwqU9pnxJMX3oJllmNIO9326WNXoeJhSEydeBDzJCr7reM/hk7RtHhpBGLE kzr54S9RPjPHApV/udkPSyyOaUxFNpwa7tfUXEquVjJ46303iqM8qkwGrEjT+TWC Z3UI8w0X9uTuNmxYAjPXjFtEi8pye4GWgi8E8+2RAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUNOKPT2i0Rvi/OkllqNAdCJn5raEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzhhMDI1MDljLWYyOWItNGY5YS04ZmMxLTM1NGU4OTA1ZTUwYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcS9YAwDQYJKoZIhvcNAQELBQADggEBADA4eZrxjtDH4bpoBM5HmXkyEuBU a/BMIafj0Jp/9CcjiZPrvuFrHN53LEJbL7DaRbKgUGqmMCumXcEcoh+6ZzCb33IZ C/slaZB3iqqKfM2ua6NRgDzBI+Qbs3E6QehkNkLSnqoJ2gnFTDcN8rES7nHEbbmA yXlTTquHk6fHpkG+potC1Qvpqi67CBIw06kMqPAp/SqjxXfCmMw+u2HL+yHOvodJ hNmAMT1IBSIXrp2ZnMbXlcxJIRyP5WeDSLgrnBSMgjQQ5u/mXfLg9b/pgQLaKa2y Fucdmt6oB1AYuVTMQR5ot4oGAU0Kd+rQQh75cKOjUx7iLcsGydQttnHPA/A= -----END CERTIFICATE-----Generated at Fri Oct 17 22:02:23 2025 by rpki-client