$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/94e5e173-5b27-4256-ae22-e644e4e7f80c.roa File: 94e5e173-5b27-4256-ae22-e644e4e7f80c.roa (raw, json) Hash identifier: lE9uCCGQdrIlYb3Pkv/u5zaWtmrPhXVWRgp0TCz4J40= Subject key identifier: 6B:51:B2:50:EA:9C:88:7D:90:B4:46:B7:CC:9C:AF:C1:02:D8:79:5C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3EB8E3FD0480D0D8D611E896237719BD0111ACD0 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/94e5e173-5b27-4256-ae22-e644e4e7f80c.roa Signing time: Mon 22 Sep 2025 19:27:46 +0000 ROA not before: Mon 22 Sep 2025 19:27:46 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.164.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:b8:e3:fd:04:80:d0:d8:d6:11:e8:96:23:77:19:bd:01:11:ac:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 19:27:46 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=0d20cba4ab40cb057322e81de4765b4c43b449170d85ea724e85bd0611c0ff47, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c8:c5:91:4e:d5:77:21:b8:99:59:fe:ed:53: 39:35:00:a0:e6:d3:15:04:37:5d:ba:c4:2d:cc:83: 74:3a:05:27:e2:cc:79:f4:a5:5d:28:d3:6d:0a:8d: 1d:e2:be:76:72:d7:cc:53:ed:97:e1:f4:a6:12:0d: 72:30:c2:3f:17:e9:9c:f2:e9:d7:2e:d5:61:29:bf: a4:43:6d:0e:f2:43:aa:f4:2a:f6:96:a2:fb:e2:d2: 47:45:37:09:f1:0b:cc:a7:53:3f:1f:a1:f1:22:23: 75:7e:47:b2:46:e6:fb:82:d1:41:f6:3e:79:c0:13: a4:8e:7d:f1:5d:39:3e:4b:33:2e:43:4b:eb:03:42: 43:81:8a:e0:89:6f:55:33:67:d1:8a:b3:45:67:0c: 0b:4d:22:02:93:7e:44:e6:2d:1d:14:c0:75:28:4a: d0:7e:d3:49:9e:63:db:9c:ed:81:98:c6:36:09:fc: e3:c0:84:bf:ba:5f:70:30:d4:d2:e8:ea:b8:5b:2d: ea:c5:fb:00:ac:c9:cd:8c:b1:95:3e:d6:5d:73:d6: 08:99:87:ae:03:fd:ac:5f:c3:66:f9:d8:01:75:66: 47:2e:74:8a:dc:6f:4c:64:d0:95:9d:f3:48:c3:40: a3:26:9e:da:48:81:7c:ff:0b:25:37:ba:ac:3c:27: 9c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:51:B2:50:EA:9C:88:7D:90:B4:46:B7:CC:9C:AF:C1:02:D8:79:5C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/94e5e173-5b27-4256-ae22-e644e4e7f80c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.164.255.0/24 Signature Algorithm: sha256WithRSAEncryption 23:c0:d2:79:f5:e5:64:08:37:cc:4c:c8:d2:9d:dc:f2:95:35: 88:48:b5:84:9d:46:34:3c:08:2c:71:c0:3e:d5:e6:7f:8a:79: 24:bf:0e:98:9d:41:8b:61:e6:cc:ff:b7:c7:58:64:02:21:1f: 61:f1:84:b8:06:19:ea:7e:03:87:a0:48:13:d3:68:13:b3:d7: 3c:5d:96:e2:f8:57:c1:17:e7:f6:ea:2b:2e:54:3b:44:3f:60: 27:b8:34:7e:0a:dd:bd:cb:72:fe:71:b8:98:87:db:f4:f2:6f: 3d:35:2f:c0:1c:ae:d2:ed:c7:55:11:7b:db:eb:1c:90:15:f1: f6:14:6a:17:d8:f1:78:8e:b2:7c:bc:c2:c7:9d:0d:7f:7f:e1: 3a:a7:c4:d4:f6:f2:84:6e:8c:65:88:87:61:7f:52:08:ec:eb: 90:cd:b7:08:82:34:e2:ef:64:94:92:76:13:fd:cc:d5:07:c3: 5b:5e:70:60:05:42:ce:7d:33:bb:7b:c8:d9:e2:b7:d6:56:1a: 53:68:ea:48:7e:e2:03:32:9d:d6:80:28:f6:31:33:03:9e:ad: 55:fa:3b:5e:5b:10:0a:6b:d8:6d:57:fd:2d:b1:4d:27:c2:81: d2:25:42:c9:79:9d:77:d8:73:d1:c6:e2:03:fd:e9:8c:4c:71: 7d:4c:01:ed -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPrjj/QSA0NjWEeiWI3cZvQERrNAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMTkyNzQ2WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AwZDIwY2JhNGFiNDBjYjA1NzMyMmU4MWRlNDc2NWI0YzQz YjQ0OTE3MGQ4NWVhNzI0ZTg1YmQwNjExYzBmZjQ3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzyMWRTtV3IbiZWf7tUzk1AKDm0xUEN126xC3Mg3Q6BSfi zHn0pV0o020KjR3ivnZy18xT7Zfh9KYSDXIwwj8X6Zzy6dcu1WEpv6RDbQ7yQ6r0 KvaWovvi0kdFNwnxC8ynUz8fofEiI3V+R7JG5vuC0UH2PnnAE6SOffFdOT5LMy5D S+sDQkOBiuCJb1UzZ9GKs0VnDAtNIgKTfkTmLR0UwHUoStB+00meY9uc7YGYxjYJ /OPAhL+6X3Aw1NLo6rhbLerF+wCsyc2MsZU+1l1z1giZh64D/axfw2b52AF1Zkcu dIrcb0xk0JWd80jDQKMmntpIgXz/CyU3uqw8J5y9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUa1GyUOqciH2QtEa3zJyvwQLYeVwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzk0ZTVlMTczLTViMjctNDI1Ni1hZTIyLWU2NDRlNGU3ZjgwYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASpP8wDQYJKoZIhvcNAQELBQADggEBACPA0nn15WQIN8xMyNKd3PKVNYhI tYSdRjQ8CCxxwD7V5n+KeSS/DpidQYth5sz/t8dYZAIhH2HxhLgGGep+A4egSBPT aBOz1zxdluL4V8EX5/bqKy5UO0Q/YCe4NH4K3b3Lcv5xuJiH2/Tybz01L8AcrtLt x1URe9vrHJAV8fYUahfY8XiOsny8wsedDX9/4TqnxNT28oRujGWIh2F/Ugjs65DN twiCNOLvZJSSdhP9zNUHw1tecGAFQs59M7t7yNnit9ZWGlNo6kh+4gMyndaAKPYx MwOerVX6O15bEApr2G1X/S2xTSfCgdIlQsl5nXfYc9HG4gP96YxMcX1MAe0= -----END CERTIFICATE-----Generated at Fri Oct 17 23:41:24 2025 by rpki-client