$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8b2e6636-1d47-4271-be08-ff7fc9f1d750.roa File: 8b2e6636-1d47-4271-be08-ff7fc9f1d750.roa (raw, json) Hash identifier: 02MO7ewuztdDTitqcVprpMSQJdES7pDiff0EgKRK2os= Subject key identifier: C6:C8:5D:EA:31:B8:53:A3:14:EB:59:DA:B1:A2:4A:73:70:10:66:8F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 437F4F0E9D7C0E0B983E6FEE51889967DCF4AA22 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8b2e6636-1d47-4271-be08-ff7fc9f1d750.roa Signing time: Wed 24 Sep 2025 21:24:07 +0000 ROA not before: Wed 24 Sep 2025 21:24:07 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.65.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:7f:4f:0e:9d:7c:0e:0b:98:3e:6f:ee:51:88:99:67:dc:f4:aa:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 21:24:07 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=df64fae1ed6631f97bd048b53e0a43138ff3f0a8efb9f4599d791fca4d463f51, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:78:72:5a:1a:bb:e5:2a:7d:e6:da:20:76:53: 8b:14:b1:25:b4:48:ba:65:5d:a4:26:7d:da:9a:10: 5f:02:96:2a:55:69:de:1d:73:0a:b9:35:65:49:4a: 33:ba:61:2c:53:2c:a8:6f:92:30:3f:ca:de:7c:4b: 8f:fd:b7:fa:62:55:83:92:87:a9:d9:bc:e8:78:23: 27:99:6c:50:86:38:70:76:4a:bb:f4:8e:b1:04:a4: 98:a7:1e:22:a4:1d:a7:c4:17:b3:ec:e9:8b:c2:53: b5:1f:54:b3:f5:97:40:14:98:4a:8a:d2:22:ad:c7: d3:bc:11:e9:c1:b5:b4:06:a6:c9:36:d5:03:e3:52: e0:03:0f:6e:3e:73:53:f0:03:a1:bd:86:93:0f:0a: 69:5c:b2:ef:b5:a2:7b:0c:4e:69:dd:74:10:55:d5: 3b:ec:a9:0b:14:9a:85:94:ee:6f:1a:a6:9a:b0:42: 76:98:0f:9d:8b:e4:10:30:5d:3d:61:93:eb:aa:3a: db:70:49:12:49:cb:fd:d8:1b:60:5f:4d:38:5d:4c: 7a:1f:32:34:5f:50:d0:4b:5a:c8:84:b5:8d:1b:b4: c9:24:56:e7:ec:0a:2b:87:94:e5:73:26:f7:2c:5d: dd:f3:9d:e3:0a:12:99:f6:b1:57:b7:91:ce:5a:87: 1b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:C8:5D:EA:31:B8:53:A3:14:EB:59:DA:B1:A2:4A:73:70:10:66:8F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8b2e6636-1d47-4271-be08-ff7fc9f1d750.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.65.11.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:d8:d4:b6:11:dd:3c:94:ad:b5:ce:78:a1:1e:7c:3e:bd:11: 25:97:77:84:d1:b8:25:04:0a:f6:11:64:ad:c6:76:ad:a2:75: 9b:7d:c9:40:62:aa:37:3f:92:1b:55:41:1b:60:fb:66:e5:75: 51:b9:53:11:c5:bc:66:5f:bb:2e:e6:d9:a3:9a:a4:65:55:9b: 1b:a2:28:93:f7:14:3e:3c:0a:40:93:e7:52:21:30:14:74:27: fa:b3:21:f0:41:1c:85:c2:4e:53:b5:36:bf:b0:ef:40:29:67: 49:fb:e6:30:e3:ee:7d:23:5d:7a:f6:3f:51:db:f0:14:09:40: 89:ff:14:e0:e2:dc:d7:d2:1e:4a:80:28:0d:f9:16:e1:07:66: ad:08:30:50:98:ec:d5:a5:93:9c:7b:b6:cc:a1:dc:cc:0b:c2: 36:89:39:b8:1f:51:da:76:ff:fa:71:8a:48:3d:70:ce:d5:99: 11:7d:73:83:f8:ee:8f:3c:1b:e4:0d:cd:10:49:5f:12:f8:44: 25:a4:71:c8:a9:48:21:5f:74:9c:ab:e6:b8:36:b1:4e:02:e7: 5c:9e:8d:b3:f2:70:81:c1:a3:a1:d2:53:2b:ed:4d:b9:ef:53: c6:a5:39:79:af:e6:50:7d:25:7c:db:a1:ee:a1:1f:b2:63:a2: cd:9e:a3:bf -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQ39PDp18DguYPm/uUYiZZ9z0qiIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MjEyNDA3WhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BkZjY0ZmFlMWVkNjYzMWY5N2JkMDQ4YjUzZTBhNDMxMzhm ZjNmMGE4ZWZiOWY0NTk5ZDc5MWZjYTRkNDYzZjUxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD3eHJaGrvlKn3m2iB2U4sUsSW0SLplXaQmfdqaEF8ClipV ad4dcwq5NWVJSjO6YSxTLKhvkjA/yt58S4/9t/piVYOSh6nZvOh4IyeZbFCGOHB2 Srv0jrEEpJinHiKkHafEF7Ps6YvCU7UfVLP1l0AUmEqK0iKtx9O8EenBtbQGpsk2 1QPjUuADD24+c1PwA6G9hpMPCmlcsu+1onsMTmnddBBV1TvsqQsUmoWU7m8appqw QnaYD52L5BAwXT1hk+uqOttwSRJJy/3YG2BfTThdTHofMjRfUNBLWsiEtY0btMkk VufsCiuHlOVzJvcsXd3zneMKEpn2sVe3kc5ahxu7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUxshd6jG4U6MU61nasaJKc3AQZo8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzhiMmU2NjM2LTFkNDctNDI3MS1iZTA4LWZmN2ZjOWYxZDc1MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASQQswDQYJKoZIhvcNAQELBQADggEBAFrY1LYR3TyUrbXOeKEefD69ESWX d4TRuCUECvYRZK3Gdq2idZt9yUBiqjc/khtVQRtg+2bldVG5UxHFvGZfuy7m2aOa pGVVmxuiKJP3FD48CkCT51IhMBR0J/qzIfBBHIXCTlO1Nr+w70ApZ0n75jDj7n0j XXr2P1Hb8BQJQIn/FODi3NfSHkqAKA35FuEHZq0IMFCY7NWlk5x7tsyh3MwLwjaJ ObgfUdp2//pxikg9cM7VmRF9c4P47o88G+QNzRBJXxL4RCWkccipSCFfdJyr5rg2 sU4C51yejbPycIHBo6HSUyvtTbnvU8alOXmv5lB9JXzboe6hH7Jjos2eo78= -----END CERTIFICATE-----Generated at Fri Oct 17 23:43:27 2025 by rpki-client