$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8e4698e7-d7f4-4b14-97ba-299d4007b291.roa File: 8e4698e7-d7f4-4b14-97ba-299d4007b291.roa (raw, json) Hash identifier: JFPOOqzbIYCQ2ZXIitgdK190V7wJq9MBY28BLjrKEJc= Subject key identifier: 8E:F4:B7:82:DC:A6:59:73:00:D2:1F:7D:BE:69:FB:D1:E4:85:5F:5B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5B5491F3681DC747A6B83042FA436ED94F067A0D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8e4698e7-d7f4-4b14-97ba-299d4007b291.roa Signing time: Mon 22 Sep 2025 17:55:59 +0000 ROA not before: Mon 22 Sep 2025 17:55:59 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.154.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:54:91:f3:68:1d:c7:47:a6:b8:30:42:fa:43:6e:d9:4f:06:7a:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 17:55:59 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=068c1c9c0026026dabbb8270eb660ead11fb97c6c145ec29b13c3805e0fd07c4, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c2:8c:75:f9:81:a4:f8:f3:80:3b:de:e6:41: e5:0d:ae:b0:f1:67:45:50:d5:42:6b:6d:c7:c9:41: 6f:99:14:79:ca:3e:29:c6:aa:08:cd:da:24:9e:b8: b6:51:97:4d:ba:17:63:ae:01:e6:bd:05:e2:1f:a7: 5c:e0:28:72:85:da:4c:c2:c4:81:83:16:47:be:0d: b4:30:85:7a:40:04:5a:d9:d9:57:33:50:e3:d1:7f: e4:6b:a7:6d:dd:9d:50:6d:38:84:06:27:62:75:7e: 8a:7f:13:7c:18:1b:42:45:5e:56:5e:46:f6:c5:78: 93:eb:4c:c0:93:a2:6f:73:76:96:c9:af:69:4d:1a: 21:a0:86:78:44:4f:28:4d:55:e9:16:d6:5c:1b:d6: 9e:ba:b2:86:2c:f6:e0:03:7e:06:bb:bb:92:4d:dd: 69:14:08:19:42:d0:49:f8:3c:57:e4:f4:65:28:17: 97:61:69:e8:26:76:a1:20:bb:fb:41:af:b4:95:84: 84:8a:44:80:f4:5f:8c:9a:3d:29:e6:29:b9:c2:27: 74:c8:ca:9e:b6:d5:3e:31:4d:c1:71:59:8f:be:2d: 0a:f7:e4:eb:1e:d0:d5:d5:f0:14:8e:c7:dd:28:79: 03:a9:c1:a2:e3:af:ea:9e:75:c3:1a:59:57:91:b6: 7d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:F4:B7:82:DC:A6:59:73:00:D2:1F:7D:BE:69:FB:D1:E4:85:5F:5B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8e4698e7-d7f4-4b14-97ba-299d4007b291.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.154.172.0/22 Signature Algorithm: sha256WithRSAEncryption 4d:7e:ca:01:19:51:36:53:bb:07:e2:5e:63:8d:3b:c4:33:ae: db:41:6e:40:5f:f9:51:8c:46:4d:a2:b9:0c:7a:51:b1:34:71: 10:70:16:3c:9b:ad:0c:70:dd:c8:fc:bd:5c:ed:51:8c:e3:97: 6e:8f:26:73:77:2d:9a:65:20:37:fb:b0:39:d3:9d:77:5d:90: fb:0f:5a:fb:ae:80:9e:70:31:e8:35:f1:21:44:c0:b6:40:6f: 9d:21:e3:9d:ef:2c:11:3c:85:b9:86:e3:e8:ac:66:eb:d0:88: e8:26:fe:e5:d1:7c:50:10:7c:f3:38:8e:fe:c5:47:d1:d4:5e: 97:f6:ad:b7:82:29:be:0a:3e:d6:52:df:be:68:f3:ff:e3:f4: 21:59:c3:48:9d:a6:aa:a2:65:63:5b:08:6a:e6:db:6f:1a:a0: a3:20:33:49:e1:50:22:23:0a:3e:5e:08:53:a6:6f:42:c9:dd: 83:2a:2d:71:7d:9c:00:20:6a:83:f5:ba:f1:10:77:3d:90:28: 56:53:cc:33:d7:4b:33:95:c3:3a:d2:9c:07:16:d8:c6:b7:85: 3e:8c:86:44:74:cc:48:bd:39:b1:8a:1f:96:10:5f:d7:8c:87: 21:e6:7a:e4:95:f2:91:14:9d:56:59:e8:65:ca:a8:95:4d:cb: 3a:6c:2c:50 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUW1SR82gdx0emuDBC+kNu2U8Geg0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMTc1NTU5WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AwNjhjMWM5YzAwMjYwMjZkYWJiYjgyNzBlYjY2MGVhZDEx ZmI5N2M2YzE0NWVjMjliMTNjMzgwNWUwZmQwN2M0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvwox1+YGk+POAO97mQeUNrrDxZ0VQ1UJrbcfJQW+ZFHnK PinGqgjN2iSeuLZRl026F2OuAea9BeIfp1zgKHKF2kzCxIGDFke+DbQwhXpABFrZ 2VczUOPRf+Rrp23dnVBtOIQGJ2J1fop/E3wYG0JFXlZeRvbFeJPrTMCTom9zdpbJ r2lNGiGghnhETyhNVekW1lwb1p66soYs9uADfga7u5JN3WkUCBlC0En4PFfk9GUo F5dhaegmdqEgu/tBr7SVhISKRID0X4yaPSnmKbnCJ3TIyp621T4xTcFxWY++LQr3 5Ose0NXV8BSOx90oeQOpwaLjr+qedcMaWVeRtn2JAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUjvS3gtymWXMA0h99vmn70eSFX1swHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzhlNDY5OGU3LWQ3ZjQtNGIxNC05N2JhLTI5OWQ0MDA3YjI5MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAISmqwwDQYJKoZIhvcNAQELBQADggEBAE1+ygEZUTZTuwfiXmONO8QzrttB bkBf+VGMRk2iuQx6UbE0cRBwFjybrQxw3cj8vVztUYzjl26PJnN3LZplIDf7sDnT nXddkPsPWvuugJ5wMeg18SFEwLZAb50h453vLBE8hbmG4+isZuvQiOgm/uXRfFAQ fPM4jv7FR9HUXpf2rbeCKb4KPtZS375o8//j9CFZw0idpqqiZWNbCGrm228aoKMg M0nhUCIjCj5eCFOmb0LJ3YMqLXF9nAAgaoP1uvEQdz2QKFZTzDPXSzOVwzrSnAcW 2Ma3hT6MhkR0zEi9ObGKH5YQX9eMhyHmeuSV8pEUnVZZ6GXKqJVNyzpsLFA= -----END CERTIFICATE-----Generated at Fri Oct 17 21:58:39 2025 by rpki-client