$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8bad8d0f-6cce-4866-82db-a90b073ab31b.roa File: 8bad8d0f-6cce-4866-82db-a90b073ab31b.roa (raw, json) Hash identifier: 4Z119+tQ/HrkyFW9piO8hRmfYsU2Pf+T0U83MoEInTI= Subject key identifier: A6:2B:32:E6:B1:3A:79:79:8B:49:AE:B9:1E:0D:D6:D6:7B:7E:9C:BB Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 045B9BF039EC7AE06B4900586F6B91897C2F756D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8bad8d0f-6cce-4866-82db-a90b073ab31b.roa Signing time: Mon 22 Sep 2025 22:40:44 +0000 ROA not before: Mon 22 Sep 2025 22:40:44 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.244.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:5b:9b:f0:39:ec:7a:e0:6b:49:00:58:6f:6b:91:89:7c:2f:75:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 22:40:44 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=669a88ef4d0cb610bd16842e585be606f304d712d6dde6b10b140ab4ff4b11f5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a7:de:90:e6:1f:a9:1f:72:50:6c:b2:55:36: 49:9e:7c:86:5b:86:d4:4c:6f:c6:03:18:90:7e:cd: ff:88:ad:ac:e6:eb:8f:9a:c1:6a:c6:05:30:d5:10: 0c:7d:c1:e6:9b:51:f4:e5:32:d0:d5:54:ab:dd:fc: 62:ad:44:49:b3:61:68:1b:1e:fe:a2:17:68:d0:85: b3:72:b4:e4:76:2e:29:72:ce:43:df:41:d9:fe:5e: e0:78:ba:ab:31:c2:7f:1e:aa:10:7c:b7:40:30:64: ee:04:e5:d1:1f:e9:a4:ac:c4:48:d2:b5:50:6c:4f: 92:a2:69:db:f4:49:b5:25:05:a9:ef:8c:9f:be:1d: c3:df:52:56:7f:64:48:a8:88:3e:2f:59:17:32:f0: f0:b2:ff:31:9a:56:4b:68:50:cf:34:df:ae:ab:34: 59:4f:d3:05:a8:1f:31:a1:b0:af:36:ad:d2:26:d3: 05:82:55:9d:ef:9c:a6:f0:9e:6c:1d:6e:68:db:db: 71:c9:5d:b6:d7:87:00:98:08:af:e8:5b:4b:20:35: f9:5a:cb:f9:5d:fc:73:9e:12:c6:f7:3d:15:c6:12: f5:9c:45:df:75:c6:34:ee:ea:fb:ae:40:81:0f:0c: 38:18:58:42:b8:2c:8f:7b:67:53:f0:8a:65:90:4f: 00:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:2B:32:E6:B1:3A:79:79:8B:49:AE:B9:1E:0D:D6:D6:7B:7E:9C:BB X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8bad8d0f-6cce-4866-82db-a90b073ab31b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.244.223.0/24 Signature Algorithm: sha256WithRSAEncryption 69:33:cc:aa:31:8e:23:2a:dc:dd:bd:98:da:22:af:ce:78:20: 9b:17:1e:28:83:66:c0:3b:d7:b4:12:50:c1:ff:ac:cf:ba:52: be:37:19:f3:f0:bd:98:c6:98:22:6f:09:df:ab:74:6a:30:37: ad:15:82:37:36:11:e2:24:68:de:2d:9b:d8:25:d4:36:d1:6a: 56:ac:a5:fa:95:97:01:a9:29:8f:ae:2d:1e:99:fe:16:9a:ac: 8b:a1:6a:80:4d:ee:43:3d:9c:f4:1d:a7:53:db:2e:ea:7b:0c: b3:60:e0:14:07:4e:57:65:67:39:a1:ed:fa:e6:c7:68:25:4c: bb:5e:80:7f:00:6c:0d:c4:9f:2a:aa:88:95:51:93:63:fe:ef: fd:bc:28:ef:b1:13:4a:ee:4d:29:84:62:7d:94:aa:f7:19:9d: 2e:06:c0:f0:b3:8a:fa:3d:b2:4a:f4:30:65:bd:f4:02:70:d7: e4:1d:2c:aa:7a:2c:61:c1:9c:b0:ee:4e:28:9c:8f:01:00:fb: 67:11:b5:c2:f1:89:8f:cb:15:90:d9:24:12:21:29:37:aa:35: 5e:38:65:ab:8e:d8:e8:47:26:b5:c0:9d:61:98:79:87:ad:e7: a8:c7:2e:69:d6:b3:cc:1c:95:cb:ce:fa:b8:5f:bd:c7:53:b0: e0:68:79:89 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBFub8DnseuBrSQBYb2uRiXwvdW0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjI0MDQ0WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A2NjlhODhlZjRkMGNiNjEwYmQxNjg0MmU1ODViZTYwNmYz MDRkNzEyZDZkZGU2YjEwYjE0MGFiNGZmNGIxMWY1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQChp96Q5h+pH3JQbLJVNkmefIZbhtRMb8YDGJB+zf+Irazm 64+awWrGBTDVEAx9weabUfTlMtDVVKvd/GKtREmzYWgbHv6iF2jQhbNytOR2Lily zkPfQdn+XuB4uqsxwn8eqhB8t0AwZO4E5dEf6aSsxEjStVBsT5Kiadv0SbUlBanv jJ++HcPfUlZ/ZEioiD4vWRcy8PCy/zGaVktoUM80366rNFlP0wWoHzGhsK82rdIm 0wWCVZ3vnKbwnmwdbmjb23HJXbbXhwCYCK/oW0sgNflay/ld/HOeEsb3PRXGEvWc Rd91xjTu6vuuQIEPDDgYWEK4LI97Z1PwimWQTwCTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUpisy5rE6eXmLSa65Hg3W1nt+nLswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzhiYWQ4ZDBmLTZjY2UtNDg2Ni04MmRiLWE5MGIwNzNhYjMxYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAS9N8wDQYJKoZIhvcNAQELBQADggEBAGkzzKoxjiMq3N29mNoir854IJsX HiiDZsA717QSUMH/rM+6Ur43GfPwvZjGmCJvCd+rdGowN60Vgjc2EeIkaN4tm9gl 1DbRalaspfqVlwGpKY+uLR6Z/haarIuhaoBN7kM9nPQdp1PbLup7DLNg4BQHTldl Zzmh7frmx2glTLtegH8AbA3EnyqqiJVRk2P+7/28KO+xE0ruTSmEYn2UqvcZnS4G wPCzivo9skr0MGW99AJw1+QdLKp6LGHBnLDuTiicjwEA+2cRtcLxiY/LFZDZJBIh KTeqNV44ZauO2OhHJrXAnWGYeYet56jHLmnWs8wclcvO+rhfvcdTsOBoeYk= -----END CERTIFICATE-----Generated at Fri Oct 17 21:54:46 2025 by rpki-client