$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/92f68e4d-5802-41c2-be03-f675a576af9e.roa File: 92f68e4d-5802-41c2-be03-f675a576af9e.roa (raw, json) Hash identifier: tKbGA7yB1tDTOY+iUQJPjQP4RJI+T/9KaiquRr9O4Rg= Subject key identifier: 48:21:D4:A6:91:AB:AE:58:9C:00:D9:35:51:F8:1A:47:7D:14:60:F2 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0E0FB8DE53C1C08C041B66B2DC620DE7526BCCDC Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/92f68e4d-5802-41c2-be03-f675a576af9e.roa Signing time: Mon 22 Sep 2025 21:06:51 +0000 ROA not before: Mon 22 Sep 2025 21:06:51 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.173.214.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:0f:b8:de:53:c1:c0:8c:04:1b:66:b2:dc:62:0d:e7:52:6b:cc:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 21:06:51 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=1742235db7e170e6095ffbc4f8d07151a43fc70014cf67f9259f36db37120040, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a6:81:a2:bd:46:7c:07:06:ce:a8:8f:93:26: 05:b1:b3:cd:69:dc:cd:61:c6:bd:b7:91:e8:ab:b1: 5b:f2:76:a8:f5:69:7d:ec:41:0a:5e:5d:e3:c3:7c: b1:9d:bc:17:58:62:e4:92:1b:d1:46:64:3a:6f:c0: 20:0e:e4:17:83:0b:a6:16:b3:4f:1d:97:72:64:3a: c0:c1:f4:27:25:33:4f:c0:31:2b:5b:5f:c2:84:10: 23:42:1d:1c:f6:8e:2d:97:07:91:72:6f:28:db:2f: d8:5e:db:d8:39:04:da:36:b9:9b:d4:48:3f:61:06: 6d:fe:63:c3:63:d6:af:50:d5:8c:83:a1:25:56:16: 0f:90:69:bc:24:3c:09:bf:2a:e7:05:2e:63:88:59: 82:8e:28:8a:c0:77:74:eb:64:bd:5a:38:81:54:74: 05:3c:4e:e0:49:27:c6:35:e2:05:30:d5:28:13:da: a3:9d:59:53:bd:38:86:f4:83:5b:8c:a9:ac:b8:c3: 0c:78:89:76:d7:49:2d:ef:19:f5:2f:07:53:3c:47: 5f:7f:55:89:84:81:f9:3e:b0:6b:46:9a:68:e2:72: 8e:73:44:66:12:f8:68:79:92:38:a2:d0:6b:1f:7d: e0:59:9c:e3:9d:f7:72:21:e1:9a:20:d2:86:1b:d6: 52:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:21:D4:A6:91:AB:AE:58:9C:00:D9:35:51:F8:1A:47:7D:14:60:F2 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/92f68e4d-5802-41c2-be03-f675a576af9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.173.214.0/23 Signature Algorithm: sha256WithRSAEncryption 44:21:3c:ff:4d:a3:84:5a:e9:df:bf:f9:14:ba:ea:49:61:12: c6:47:8a:5b:75:da:b5:74:76:02:83:01:7c:06:6b:63:1a:dd: 06:c4:0f:4e:95:5c:4b:49:a0:cb:50:a5:89:d9:47:1b:60:85: 99:df:9b:0a:96:e4:85:cc:31:6b:1a:e5:43:c1:5a:7a:ed:4c: f6:84:46:19:19:01:bf:42:34:a3:11:34:98:da:19:6f:b7:35: bf:b8:37:45:b1:d2:01:c8:73:37:f9:06:4d:c1:9f:61:3d:ba: 33:4f:bd:65:25:a0:d4:59:0b:bd:fa:59:17:4e:99:70:9b:c9: 6c:13:06:56:b4:c6:c9:44:93:89:75:30:a2:a8:a6:44:fa:64: cd:2e:13:7b:2b:55:3a:af:c7:41:c2:97:af:c6:4f:c0:31:e7: f9:c4:4c:0d:4d:21:56:fd:9d:36:51:7c:07:7e:4d:3d:73:55: e2:a1:30:63:7b:a3:71:6d:4e:dc:82:cd:78:9d:5a:70:b6:a0: 37:bc:51:3b:1a:7c:98:c0:fa:c6:63:31:65:26:90:e4:b5:d5: a8:2a:38:43:a8:d6:f0:ae:b6:ad:c8:f9:0c:6f:74:22:30:57: 55:f4:38:9b:ab:8a:79:36:bf:3a:e6:1a:54:44:e6:b6:f5:ee: 8c:bd:1b:9f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDg+43lPBwIwEG2ay3GIN51JrzNwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjEwNjUxWhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AxNzQyMjM1ZGI3ZTE3MGU2MDk1ZmZiYzRmOGQwNzE1MWE0 M2ZjNzAwMTRjZjY3ZjkyNTlmMzZkYjM3MTIwMDQwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCapoGivUZ8BwbOqI+TJgWxs81p3M1hxr23keirsVvydqj1 aX3sQQpeXePDfLGdvBdYYuSSG9FGZDpvwCAO5BeDC6YWs08dl3JkOsDB9CclM0/A MStbX8KEECNCHRz2ji2XB5FybyjbL9he29g5BNo2uZvUSD9hBm3+Y8Nj1q9Q1YyD oSVWFg+QabwkPAm/KucFLmOIWYKOKIrAd3TrZL1aOIFUdAU8TuBJJ8Y14gUw1SgT 2qOdWVO9OIb0g1uMqay4wwx4iXbXSS3vGfUvB1M8R19/VYmEgfk+sGtGmmjico5z RGYS+Gh5kjii0GsffeBZnOOd93Ih4Zog0oYb1lJ1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUSCHUppGrrlicANk1UfgaR30UYPIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzkyZjY4ZTRkLTU4MDItNDFjMi1iZTAzLWY2NzVhNTc2YWY5ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESrdYwDQYJKoZIhvcNAQELBQADggEBAEQhPP9No4Ra6d+/+RS66klhEsZH ilt12rV0dgKDAXwGa2Ma3QbED06VXEtJoMtQpYnZRxtghZnfmwqW5IXMMWsa5UPB WnrtTPaERhkZAb9CNKMRNJjaGW+3Nb+4N0Wx0gHIczf5Bk3Bn2E9ujNPvWUloNRZ C736WRdOmXCbyWwTBla0xslEk4l1MKKopkT6ZM0uE3srVTqvx0HCl6/GT8Ax5/nE TA1NIVb9nTZRfAd+TT1zVeKhMGN7o3FtTtyCzXidWnC2oDe8UTsafJjA+sZjMWUm kOS11agqOEOo1vCutq3I+QxvdCIwV1X0OJurink2vzrmGlRE5rb17oy9G58= -----END CERTIFICATE-----Generated at Fri Oct 17 23:43:27 2025 by rpki-client