$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8a5027de-f0b9-4eae-8cca-5fd0958cf016.roa File: 8a5027de-f0b9-4eae-8cca-5fd0958cf016.roa (raw, json) Hash identifier: qQz6D3ISX7aMrkwdfhRPtdUjCrgY7Z0ADYlvJ8CT7cU= Subject key identifier: 79:64:4A:CC:26:10:B5:DB:13:9E:49:60:59:8E:72:99:DF:87:01:32 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4169BC826762684250717337D65321C1DC9EDFF4 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8a5027de-f0b9-4eae-8cca-5fd0958cf016.roa Signing time: Mon 22 Sep 2025 23:28:09 +0000 ROA not before: Mon 22 Sep 2025 23:28:09 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.244.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:69:bc:82:67:62:68:42:50:71:73:37:d6:53:21:c1:dc:9e:df:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 23:28:09 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=fcdb44e49b2b61414f1bc3a65d0b5917033ada932ae33c8e0fca735f193b4338, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:cb:20:0d:a3:28:13:ac:3a:80:44:36:ac:09: d4:da:8e:74:d6:e1:27:5d:c5:95:91:31:43:68:9d: 28:cf:0a:5d:fd:00:b3:e2:f7:c4:e5:aa:a3:8c:0b: 21:67:52:75:aa:61:4d:8a:1b:c1:0d:55:59:21:a3: 83:ba:67:04:21:e0:d6:34:d4:02:a2:f8:62:af:5a: 0e:83:d5:ae:f5:e1:fa:0f:97:77:62:e4:05:ad:b1: a7:bc:83:d4:77:71:c1:39:c0:a9:7a:dd:19:af:5d: 78:f4:a4:2f:67:4d:bd:e2:39:97:8c:31:f9:67:0b: 43:fe:d9:d8:63:1f:aa:57:c7:7c:68:07:11:ff:32: 3a:5e:df:f9:f7:66:81:79:7a:f3:e5:d8:ba:34:f2: 79:06:c6:b2:d6:ae:4b:49:21:d0:b7:a2:79:b7:1d: 25:37:6a:e3:b3:e2:14:4f:82:6d:2c:a6:2e:b3:25: 5c:95:5a:48:7c:aa:1a:17:b7:39:66:b4:3e:0f:74: fa:1c:96:cb:93:20:87:24:fd:59:23:39:d7:71:dd: 20:78:98:58:6f:21:79:4c:71:19:7f:cd:b2:65:79: 3e:dc:4f:bf:55:e0:17:72:fb:59:5b:14:e9:75:cc: 4e:dd:ae:e2:c6:7a:3c:18:8b:a6:2c:7b:78:11:56: dc:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:64:4A:CC:26:10:B5:DB:13:9E:49:60:59:8E:72:99:DF:87:01:32 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8a5027de-f0b9-4eae-8cca-5fd0958cf016.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.244.152.0/21 Signature Algorithm: sha256WithRSAEncryption 07:09:83:ee:72:d1:c5:6a:70:3f:24:44:73:6b:76:7c:1b:0a: 80:52:d9:a6:61:66:f0:59:53:fd:ea:5c:f7:2d:2a:14:4f:bd: fd:63:ec:6d:ef:aa:aa:c1:bc:f1:ad:13:dc:68:92:ec:09:8e: 33:60:ce:1e:48:73:fd:6c:3c:c1:db:07:4f:bf:f3:69:b8:20: 88:3c:f9:42:79:dd:2a:d3:bf:4d:8b:60:d1:4d:65:09:73:93: 9d:f5:9a:8a:e6:e7:82:0a:1c:3d:d0:55:9f:15:2b:18:a1:9f: 92:51:fa:f1:8c:d3:0f:00:93:c9:95:b1:52:c6:3f:9a:d7:aa: d5:6f:91:1b:b7:40:d0:80:fc:3f:3b:7d:85:e1:b0:a8:83:83: 95:28:d0:ae:e9:ce:57:18:1f:ba:3a:e6:1f:76:14:1e:83:13: 13:7f:3b:28:6c:78:bc:e2:bb:c5:16:91:d4:75:c4:eb:6a:39: 5b:d2:de:09:cb:e7:bd:5f:d2:65:cd:64:6b:5a:cb:83:ab:a2: 8f:7d:96:2e:53:21:98:d0:0e:0f:6d:ea:00:01:7c:d9:2c:3b: e9:86:78:13:a9:0d:49:eb:62:31:c1:83:94:c2:00:8d:84:08: 55:26:ff:df:0b:2b:53:77:ff:ae:5b:dc:2e:97:d7:af:d9:b2: d9:2a:41:17 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQWm8gmdiaEJQcXM31lMhwdye3/QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjMyODA5WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BmY2RiNDRlNDliMmI2MTQxNGYxYmMzYTY1ZDBiNTkxNzAz M2FkYTkzMmFlMzNjOGUwZmNhNzM1ZjE5M2I0MzM4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQyyANoygTrDqARDasCdTajnTW4SddxZWRMUNonSjPCl39 ALPi98TlqqOMCyFnUnWqYU2KG8ENVVkho4O6ZwQh4NY01AKi+GKvWg6D1a714foP l3di5AWtsae8g9R3ccE5wKl63RmvXXj0pC9nTb3iOZeMMflnC0P+2dhjH6pXx3xo BxH/Mjpe3/n3ZoF5evPl2Lo08nkGxrLWrktJIdC3onm3HSU3auOz4hRPgm0spi6z JVyVWkh8qhoXtzlmtD4PdPoclsuTIIck/VkjOddx3SB4mFhvIXlMcRl/zbJleT7c T79V4Bdy+1lbFOl1zE7druLGejwYi6Yse3gRVtxdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUeWRKzCYQtdsTnklgWY5ymd+HATIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzhhNTAyN2RlLWYwYjktNGVhZS04Y2NhLTVmZDA5NThjZjAxNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMS9JgwDQYJKoZIhvcNAQELBQADggEBAAcJg+5y0cVqcD8kRHNrdnwbCoBS 2aZhZvBZU/3qXPctKhRPvf1j7G3vqqrBvPGtE9xokuwJjjNgzh5Ic/1sPMHbB0+/ 82m4IIg8+UJ53SrTv02LYNFNZQlzk531morm54IKHD3QVZ8VKxihn5JR+vGM0w8A k8mVsVLGP5rXqtVvkRu3QNCA/D87fYXhsKiDg5Uo0K7pzlcYH7o65h92FB6DExN/ OyhseLziu8UWkdR1xOtqOVvS3gnL571f0mXNZGtay4Oroo99li5TIZjQDg9t6gAB fNksO+mGeBOpDUnrYjHBg5TCAI2ECFUm/98LK1N3/65b3C6X16/ZstkqQRc= -----END CERTIFICATE-----Generated at Fri Oct 17 22:05:31 2025 by rpki-client