$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/94affa82-f233-40a7-bbd6-0260753c711b.roa File: 94affa82-f233-40a7-bbd6-0260753c711b.roa (raw, json) Hash identifier: BxMjAN840x6/WQHnrN/aVs4OQ+ZH65sMPJWh43XaBF0= Subject key identifier: D9:74:24:4B:B7:54:78:F8:BA:5C:36:43:B4:0C:BE:C4:89:91:D1:23 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7844B884F298688C4F06F8DBDF286EF6D40A54CE Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/94affa82-f233-40a7-bbd6-0260753c711b.roa Signing time: Mon 22 Sep 2025 19:24:00 +0000 ROA not before: Mon 22 Sep 2025 19:24:00 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.164.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:44:b8:84:f2:98:68:8c:4f:06:f8:db:df:28:6e:f6:d4:0a:54:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 19:24:00 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=8c5f51aef45dcbb48e4cd8aa5e0f290888e07d09ea8ec29b0a4c0fb556cab135, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:43:01:6d:39:3f:5b:85:35:fa:1f:ba:25:49: 4f:ac:94:7b:bf:c6:af:43:67:ef:74:d7:c1:47:f7: 31:57:90:7b:ff:25:d3:36:d4:a7:74:71:d1:b5:0b: 3a:ec:db:b1:dd:9e:1c:6a:f6:61:72:64:43:3a:f0: 8a:eb:98:88:a9:fe:8b:e9:43:78:0f:22:51:81:8c: 0d:7f:db:51:b7:2e:90:14:c5:b4:20:55:3b:55:e0: 0f:5e:5d:23:ab:d8:b0:ef:61:14:d3:85:83:56:f3: 06:a8:97:3a:22:b4:4e:d6:73:ad:ce:fd:8b:61:50: 00:3c:c0:b5:54:ba:fe:b6:7a:70:7c:eb:c3:5e:65: dc:b1:2b:86:00:40:82:d5:7d:60:e3:45:94:97:be: aa:32:09:96:2b:1f:99:b4:ce:d5:80:3d:56:35:48: 27:96:7a:fb:d2:2a:c7:56:8d:c7:a3:ea:f9:8a:c1: f3:eb:60:7d:ee:2c:b8:c4:c4:92:0a:77:3e:56:d9: 24:52:96:1d:13:b4:95:4b:61:0a:fd:36:7e:e2:2d: 74:ad:0b:5a:73:96:78:7e:e5:bc:54:09:4b:ec:14: d2:17:ed:f7:08:6a:a0:d2:69:6b:19:ad:2a:57:f2: a9:7c:91:6a:48:0e:2b:a4:09:e1:2d:36:a4:d9:2f: 72:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:74:24:4B:B7:54:78:F8:BA:5C:36:43:B4:0C:BE:C4:89:91:D1:23 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/94affa82-f233-40a7-bbd6-0260753c711b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.164.203.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:93:29:b5:1a:80:d9:69:fc:66:e3:b4:89:27:10:bf:bd:81: f6:9a:47:5a:18:f4:a0:54:ec:9a:26:4e:c1:16:40:a7:97:36: 99:40:30:68:e9:3f:25:42:18:85:39:3f:3a:ef:04:4b:d8:9a: c9:6a:b4:66:9b:31:4b:2f:15:d2:38:90:ba:fc:45:8e:7d:0c: a2:b5:a5:6b:6e:bc:2f:a3:a2:34:31:3f:d9:56:26:1e:eb:8c: 81:ff:f4:23:c2:34:5c:21:24:43:20:b6:39:ca:2f:6e:48:fb: 85:b0:8f:7d:6f:ed:77:c5:52:0d:c6:19:30:09:7f:5b:3e:4c: 8c:03:23:1f:07:11:3b:4e:2f:5a:ba:aa:e5:ff:fa:8b:b3:b8: 5a:9c:8b:92:4b:db:ae:a1:33:af:95:0e:52:29:85:2c:3b:43: b6:2f:7d:57:43:22:ff:ba:ee:5f:af:a3:89:9e:27:de:58:7a: de:42:d4:b9:4d:52:42:be:9c:90:de:75:ac:98:34:f3:7c:8b: bc:6b:83:4a:6c:07:b9:46:86:e4:02:85:b7:4d:a8:02:55:77: 40:6f:52:cb:ca:8d:0b:0d:6c:f9:5e:64:d2:2d:d8:cb:c2:79: 80:dc:c0:a4:73:1c:b6:cb:c4:88:c5:f3:63:19:ef:a8:3d:26: 05:84:be:18 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUeES4hPKYaIxPBvjb3yhu9tQKVM4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMTkyNDAwWhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A4YzVmNTFhZWY0NWRjYmI0OGU0Y2Q4YWE1ZTBmMjkwODg4 ZTA3ZDA5ZWE4ZWMyOWIwYTRjMGZiNTU2Y2FiMTM1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDZQwFtOT9bhTX6H7olSU+slHu/xq9DZ+9018FH9zFXkHv/ JdM21Kd0cdG1Czrs27Hdnhxq9mFyZEM68IrrmIip/ovpQ3gPIlGBjA1/21G3LpAU xbQgVTtV4A9eXSOr2LDvYRTThYNW8waolzoitE7Wc63O/YthUAA8wLVUuv62enB8 68NeZdyxK4YAQILVfWDjRZSXvqoyCZYrH5m0ztWAPVY1SCeWevvSKsdWjcej6vmK wfPrYH3uLLjExJIKdz5W2SRSlh0TtJVLYQr9Nn7iLXStC1pzlnh+5bxUCUvsFNIX 7fcIaqDSaWsZrSpX8ql8kWpIDiukCeEtNqTZL3J9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU2XQkS7dUePi6XDZDtAy+xImR0SMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzk0YWZmYTgyLWYyMzMtNDBhNy1iYmQ2LTAyNjA3NTNjNzExYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASpMswDQYJKoZIhvcNAQELBQADggEBAAyTKbUagNlp/GbjtIknEL+9gfaa R1oY9KBU7JomTsEWQKeXNplAMGjpPyVCGIU5PzrvBEvYmslqtGabMUsvFdI4kLr8 RY59DKK1pWtuvC+jojQxP9lWJh7rjIH/9CPCNFwhJEMgtjnKL25I+4Wwj31v7XfF Ug3GGTAJf1s+TIwDIx8HETtOL1q6quX/+ouzuFqci5JL266hM6+VDlIphSw7Q7Yv fVdDIv+67l+vo4meJ95Yet5C1LlNUkK+nJDedayYNPN8i7xrg0psB7lGhuQChbdN qAJVd0BvUsvKjQsNbPleZNIt2MvCeYDcwKRzHLbLxIjF82MZ76g9JgWEvhg= -----END CERTIFICATE-----Generated at Fri Oct 17 23:47:50 2025 by rpki-client