$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8a98f02f-7bad-4d9d-a034-1126fde08f4e.roa File: 8a98f02f-7bad-4d9d-a034-1126fde08f4e.roa (raw, json) Hash identifier: cn7JW1eat8z6gle3DUeLsDhmJ1dgXKpZ0IHCSGT8oZ8= Subject key identifier: 4F:05:44:3D:CC:31:81:9B:29:E6:FC:6B:9E:AB:43:10:A7:69:32:72 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 610340F34A71EC231360B6BFDB5587A75FBA380E Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8a98f02f-7bad-4d9d-a034-1126fde08f4e.roa Signing time: Mon 22 Sep 2025 17:11:31 +0000 ROA not before: Mon 22 Sep 2025 17:11:31 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.154.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:03:40:f3:4a:71:ec:23:13:60:b6:bf:db:55:87:a7:5f:ba:38:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 17:11:31 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=d639f2bec75894873b6ff01713a876082dcf4dab7b6a83d378daf089ccb006a4, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c0:3a:f2:88:1e:44:db:e5:af:27:b1:a8:c6: 1f:5d:cd:d8:6c:51:6d:f7:f6:f9:df:48:95:3d:68: 8b:ff:6a:06:e4:d2:00:10:27:ce:ba:3a:93:ab:19: 43:a8:d3:71:a8:68:1b:c9:ed:8c:9d:4d:90:4d:1b: 53:79:cb:77:92:d5:b3:f2:3a:31:10:62:6b:c4:53: 03:be:f3:c6:66:b5:5f:59:a9:c6:5d:f7:21:17:5b: ec:a6:81:85:69:a4:03:b2:b9:5a:c4:80:cd:44:f2: 47:af:bc:06:e5:f7:83:1f:8b:df:cc:e1:ff:6e:e4: fe:2a:2b:c2:7d:81:a2:fd:fb:9d:26:f4:a8:82:09: ae:43:35:fb:a2:52:5b:88:e2:ad:9a:70:87:69:17: e8:26:b7:3d:d9:e2:84:c8:67:00:a7:e9:fd:4b:38: d8:4f:76:6e:b7:52:fb:26:22:95:a4:2a:d4:99:b8: c9:e8:88:e7:be:8d:f3:07:13:88:eb:7e:29:ca:d5: f0:10:dc:6a:af:2e:7e:f9:71:61:c0:a3:15:5b:f7: 8c:51:cb:24:36:39:90:01:4a:69:f3:f2:67:42:dd: 80:12:ae:17:b7:02:92:44:72:aa:e2:fe:b8:13:cb: d6:80:0c:9a:97:69:0e:4b:42:28:5b:a0:ec:cb:df: bc:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:05:44:3D:CC:31:81:9B:29:E6:FC:6B:9E:AB:43:10:A7:69:32:72 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8a98f02f-7bad-4d9d-a034-1126fde08f4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.154.174.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:dc:62:22:c3:d0:94:60:9e:8d:ea:d1:c2:42:23:8b:06:1d: 92:94:0c:ae:5c:72:75:0e:17:29:91:24:15:6b:fe:f9:8c:3a: ed:7c:6e:77:78:01:4e:46:06:be:93:ff:0c:db:ca:92:d4:43: 67:85:be:27:f1:38:f3:2f:77:e1:cc:ea:54:3b:4c:45:fe:3c: ef:74:18:ad:ab:71:b9:ba:11:8e:92:0f:6c:b3:3e:9f:80:5b: 48:79:ca:49:a1:63:b4:83:ed:bc:02:e2:5e:ed:60:09:21:16: 62:63:6a:b7:55:ac:f6:98:68:64:e8:1d:40:ba:a5:50:ae:7d: 6b:c3:fd:ed:73:bf:e2:23:3b:b7:ad:df:3b:45:ce:56:89:1b: e3:ee:fe:f1:be:ce:e7:9f:8a:02:e1:25:88:93:36:90:fe:8b: 7d:1b:fb:e6:72:f3:3b:f5:b5:e8:3b:ea:3e:24:89:eb:64:2d: 9b:68:49:e1:ff:77:ae:df:7c:4a:fd:cf:7c:c3:9a:f3:3b:97: 2c:12:0c:0a:85:26:af:8c:c0:4d:60:d4:ba:4c:f6:ec:1e:0e: 38:90:79:2a:c6:e9:7f:66:ed:4d:b6:32:fa:e2:f8:87:b6:26: e1:b2:aa:05:82:8a:b6:78:c9:e4:e9:b1:4a:c5:63:2b:64:a2: 2f:ea:4d:1f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYQNA80px7CMTYLa/21WHp1+6OA4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMTcxMTMxWhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BkNjM5ZjJiZWM3NTg5NDg3M2I2ZmYwMTcxM2E4NzYwODJk Y2Y0ZGFiN2I2YTgzZDM3OGRhZjA4OWNjYjAwNmE0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCbwDryiB5E2+WvJ7Goxh9dzdhsUW339vnfSJU9aIv/agbk 0gAQJ866OpOrGUOo03GoaBvJ7YydTZBNG1N5y3eS1bPyOjEQYmvEUwO+88ZmtV9Z qcZd9yEXW+ymgYVppAOyuVrEgM1E8kevvAbl94Mfi9/M4f9u5P4qK8J9gaL9+50m 9KiCCa5DNfuiUluI4q2acIdpF+gmtz3Z4oTIZwCn6f1LONhPdm63UvsmIpWkKtSZ uMnoiOe+jfMHE4jrfinK1fAQ3GqvLn75cWHAoxVb94xRyyQ2OZABSmnz8mdC3YAS rhe3ApJEcqri/rgTy9aADJqXaQ5LQihboOzL37yvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUTwVEPcwxgZsp5vxrnqtDEKdpMnIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzhhOThmMDJmLTdiYWQtNGQ5ZC1hMDM0LTExMjZmZGUwOGY0ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASmq4wDQYJKoZIhvcNAQELBQADggEBABzcYiLD0JRgno3q0cJCI4sGHZKU DK5ccnUOFymRJBVr/vmMOu18bnd4AU5GBr6T/wzbypLUQ2eFvifxOPMvd+HM6lQ7 TEX+PO90GK2rcbm6EY6SD2yzPp+AW0h5ykmhY7SD7bwC4l7tYAkhFmJjardVrPaY aGToHUC6pVCufWvD/e1zv+IjO7et3ztFzlaJG+Pu/vG+zuefigLhJYiTNpD+i30b ++Zy8zv1teg76j4kietkLZtoSeH/d67ffEr9z3zDmvM7lywSDAqFJq+MwE1g1LpM 9uweDjiQeSrG6X9m7U22Mvri+Ie2JuGyqgWCirZ4yeTpsUrFYytkoi/qTR8= -----END CERTIFICATE-----Generated at Fri Oct 17 21:55:19 2025 by rpki-client