$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8ced7688-e48b-48c0-81c0-17b09e0a45dd.roa File: 8ced7688-e48b-48c0-81c0-17b09e0a45dd.roa (raw, json) Hash identifier: i2xBCZNWibwz5ZCOPQUJ2wKS5w1CRwcCiVQNKE5Geak= Subject key identifier: AB:02:E3:6E:61:B4:01:5B:20:7E:B5:E3:1B:79:63:89:64:25:E1:1B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5E7B2B3DB96478E2313C5DE2B8DF890574E90CF9 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8ced7688-e48b-48c0-81c0-17b09e0a45dd.roa Signing time: Mon 22 Sep 2025 19:16:44 +0000 ROA not before: Mon 22 Sep 2025 19:16:44 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.164.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:7b:2b:3d:b9:64:78:e2:31:3c:5d:e2:b8:df:89:05:74:e9:0c:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 19:16:44 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=9dde902d66122be587aadc188d3082deff11e4a360f925a08d33121a4142a40e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e5:6d:07:7a:3c:ec:a0:0d:b0:34:f0:c8:c8: 12:ec:42:6a:08:44:df:32:32:03:07:82:53:fe:82: a2:0f:a3:08:25:e6:6d:b1:31:04:8e:9f:7a:e3:4e: cd:70:50:7a:16:f5:7e:3c:31:62:dc:0a:83:ea:41: fc:33:1b:bb:c3:73:f4:6f:81:8b:d0:b5:f3:8a:54: 2b:ee:ad:84:66:05:d2:a4:aa:09:aa:c2:4a:af:0b: d3:bb:73:9b:17:75:50:04:7b:9c:c5:d7:5d:79:07: f0:56:2a:42:b2:ed:75:53:df:8c:53:8a:0d:0a:e9: 39:28:0c:3e:89:c2:34:4f:69:22:5d:ac:64:b3:39: d7:23:d7:8d:50:2f:27:22:72:9c:36:a8:ae:f7:8a: bf:62:ec:8f:75:80:f1:0d:05:04:4a:50:c6:24:80: 95:13:a3:bc:a3:82:0d:6e:59:ae:0b:d0:c2:f0:08: ae:63:56:6e:3b:a4:0b:f0:c8:26:37:69:c7:93:63: f2:7b:f0:56:bf:d9:c3:30:cd:ba:69:26:f4:53:da: 42:1a:38:f7:97:23:20:80:0b:dc:08:23:28:3e:a5: 5e:7e:b5:19:d7:b7:ef:05:b1:b3:11:0c:4a:2d:05: b9:6d:9e:90:7b:0f:ff:44:78:1a:ba:b7:81:40:b4: 0b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:02:E3:6E:61:B4:01:5B:20:7E:B5:E3:1B:79:63:89:64:25:E1:1B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8ced7688-e48b-48c0-81c0-17b09e0a45dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.164.106.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:d3:74:cd:05:8e:cb:22:87:3c:3b:2d:cc:33:b8:41:07:57: c4:32:92:96:b9:83:ff:fa:e4:5b:d1:ce:47:77:34:8e:57:e0: d5:35:fb:8a:9e:79:72:0b:9a:95:ac:ec:6f:6e:3a:57:dc:20: 9b:19:38:a4:d7:6a:00:0c:04:1f:8b:e3:e4:b7:c1:79:cd:8b: a9:f2:31:53:fd:6a:ce:05:ce:73:dc:e5:7a:fb:3c:1b:84:67: 32:5d:90:f1:c9:d0:e7:a9:aa:9d:08:e8:95:88:7c:99:9a:df: b6:71:53:72:b6:f1:be:fa:18:69:3d:d3:32:51:78:ca:5b:bf: 27:67:cd:27:4d:2f:84:d3:71:fa:00:37:6a:ca:e2:27:92:76: b8:69:73:04:2a:b8:5b:68:ab:62:70:3c:b2:f6:9b:9f:77:3b: 82:b0:ab:3b:95:57:b3:09:4f:e2:5c:80:de:b0:cf:75:9d:14: 68:f5:82:06:52:ae:ca:9a:d3:69:22:4a:2d:9d:cb:4d:b4:48: 49:96:e0:63:91:d6:c3:df:ba:f5:ea:a6:8c:b9:be:42:05:a3: bc:5b:3d:d0:46:96:a2:5f:da:0d:b9:9f:e8:53:af:a7:21:b6: c0:93:91:94:64:df:b0:35:4f:1b:f5:77:5e:f7:17:2e:56:5d: 6b:39:05:17 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXnsrPblkeOIxPF3iuN+JBXTpDPkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMTkxNjQ0WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZGRlOTAyZDY2MTIyYmU1ODdhYWRjMTg4ZDMwODJkZWZm MTFlNGEzNjBmOTI1YTA4ZDMzMTIxYTQxNDJhNDBlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDW5W0HejzsoA2wNPDIyBLsQmoIRN8yMgMHglP+gqIPowgl 5m2xMQSOn3rjTs1wUHoW9X48MWLcCoPqQfwzG7vDc/RvgYvQtfOKVCvurYRmBdKk qgmqwkqvC9O7c5sXdVAEe5zF1115B/BWKkKy7XVT34xTig0K6TkoDD6JwjRPaSJd rGSzOdcj141QLycicpw2qK73ir9i7I91gPENBQRKUMYkgJUTo7yjgg1uWa4L0MLw CK5jVm47pAvwyCY3aceTY/J78Fa/2cMwzbppJvRT2kIaOPeXIyCAC9wIIyg+pV5+ tRnXt+8FsbMRDEotBbltnpB7D/9EeBq6t4FAtAurAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUqwLjbmG0AVsgfrXjG3ljiWQl4RswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzhjZWQ3Njg4LWU0OGItNDhjMC04MWMwLTE3YjA5ZTBhNDVkZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASpGowDQYJKoZIhvcNAQELBQADggEBAAvTdM0Fjssihzw7LcwzuEEHV8Qy kpa5g//65FvRzkd3NI5X4NU1+4qeeXILmpWs7G9uOlfcIJsZOKTXagAMBB+L4+S3 wXnNi6nyMVP9as4FznPc5Xr7PBuEZzJdkPHJ0Oepqp0I6JWIfJma37ZxU3K28b76 GGk90zJReMpbvydnzSdNL4TTcfoAN2rK4ieSdrhpcwQquFtoq2JwPLL2m593O4Kw qzuVV7MJT+JcgN6wz3WdFGj1ggZSrsqa02kiSi2dy020SEmW4GOR1sPfuvXqpoy5 vkIFo7xbPdBGlqJf2g25n+hTr6chtsCTkZRk37A1Txv1d173Fy5WXWs5BRc= -----END CERTIFICATE-----Generated at Fri Oct 17 23:46:28 2025 by rpki-client