$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/98006022-c873-4b80-82a0-c4ff8e54fa31.roa File: 98006022-c873-4b80-82a0-c4ff8e54fa31.roa (raw, json) Hash identifier: +BJSqY9bnIRjnYHSfuT0YYdzTOAgc7CIV6O2FK0ur4o= Subject key identifier: 7E:2B:60:7E:85:9C:31:16:1F:BB:E9:29:96:97:BF:62:98:34:91:5E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 205F49F5D60121792ADF7E6A53D58101C1D0F141 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/98006022-c873-4b80-82a0-c4ff8e54fa31.roa Signing time: Mon 22 Sep 2025 20:36:39 +0000 ROA not before: Mon 22 Sep 2025 20:36:39 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.172.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:5f:49:f5:d6:01:21:79:2a:df:7e:6a:53:d5:81:01:c1:d0:f1:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 20:36:39 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=d5a99b477c52b3031f1fa6e07d40ca03adf3c69c05c8aa54d445ae2550d58a51, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:09:c3:e9:d0:11:97:00:0e:4c:0e:76:3c:28: 72:23:94:de:12:ca:c8:9d:1e:7d:8b:79:d4:8a:3f: dd:c3:0e:6b:ad:57:b9:e1:ce:7b:16:ad:18:c2:d0: e5:f5:10:2c:5c:7a:e8:e9:bd:4b:8c:63:1b:3d:4f: ce:2d:36:1f:9e:c1:e5:e8:ee:9a:41:c8:6d:b1:0c: fc:75:e7:b1:ce:f9:70:6c:b0:1d:93:63:37:0b:9e: e2:2b:8d:a4:89:6b:8a:29:6e:92:5e:f1:69:1e:05: 76:66:2c:b0:b8:5a:91:95:ca:76:c0:b9:c0:03:a5: 4d:fa:e2:92:d0:8f:0d:d8:0e:56:2e:e0:ee:fd:8b: 2b:a2:72:a9:fd:27:c7:2a:82:f9:e3:4b:99:bd:a5: 0d:d7:39:ab:d5:81:56:65:61:4f:12:0c:41:10:28: 96:76:0e:2e:8e:42:c3:e6:d9:e8:36:3a:c3:e0:92: 4f:e7:17:81:63:b3:a4:48:6a:75:ec:ea:4d:5a:c0: 4a:88:7a:2a:23:b9:52:95:57:1c:26:b4:2f:2e:85: ce:80:6c:76:c6:a7:48:a6:c8:7d:a5:d5:a0:29:96: 28:18:15:b2:81:60:d0:47:c8:72:3d:69:db:48:98: e3:81:e7:6e:35:02:9d:90:fa:df:2b:59:bd:bc:98: 7e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:2B:60:7E:85:9C:31:16:1F:BB:E9:29:96:97:BF:62:98:34:91:5E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/98006022-c873-4b80-82a0-c4ff8e54fa31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.172.58.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:d0:97:62:14:1e:d1:cb:db:2f:9d:e7:0e:7f:70:39:d0:07: 18:cb:bf:cb:98:9f:ea:f8:62:34:c4:ed:01:73:60:2f:58:a4: 73:19:a6:79:68:b0:c4:66:c0:c9:f8:8a:49:27:7b:8c:65:61: 66:33:90:88:52:ba:24:1c:25:91:93:c4:5f:80:c1:b9:d7:f8: 58:7c:9c:82:00:85:da:48:f8:74:4a:c8:f8:0b:c0:bd:8b:ff: 10:ed:b3:0d:52:fc:f0:61:07:8a:09:f2:9b:2f:f9:4d:f0:33: 63:32:c6:1c:c2:ee:78:17:5b:c7:4d:92:05:50:56:45:f0:2a: 9a:61:db:49:80:88:ca:3d:8f:dd:89:58:14:b0:2d:5c:d2:65: 24:1d:c9:6d:b3:60:5e:80:9f:d9:da:05:f2:fc:80:75:5c:38: 2c:26:d4:8e:64:f8:95:6d:fc:dd:c8:f3:83:50:dd:23:0d:c8: 05:8a:bb:fe:a6:2f:aa:44:dd:e8:b5:51:67:97:74:22:a6:3a: 2a:69:c4:84:97:fc:99:ba:bb:97:45:02:5f:1f:87:40:2f:69: c2:5f:ab:c2:c5:16:c7:39:9b:3f:aa:4b:bd:00:3f:77:27:88: 72:9a:33:ab:2d:04:1b:fd:36:19:e2:34:56:73:52:38:a9:8e: 3b:8a:c2:ab -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIF9J9dYBIXkq335qU9WBAcHQ8UEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjAzNjM5WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BkNWE5OWI0NzdjNTJiMzAzMWYxZmE2ZTA3ZDQwY2EwM2Fk ZjNjNjljMDVjOGFhNTRkNDQ1YWUyNTUwZDU4YTUxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+CcPp0BGXAA5MDnY8KHIjlN4SysidHn2LedSKP93DDmut V7nhznsWrRjC0OX1ECxceujpvUuMYxs9T84tNh+eweXo7ppByG2xDPx157HO+XBs sB2TYzcLnuIrjaSJa4opbpJe8WkeBXZmLLC4WpGVynbAucADpU364pLQjw3YDlYu 4O79iyuicqn9J8cqgvnjS5m9pQ3XOavVgVZlYU8SDEEQKJZ2Di6OQsPm2eg2OsPg kk/nF4Fjs6RIanXs6k1awEqIeiojuVKVVxwmtC8uhc6AbHbGp0imyH2l1aApligY FbKBYNBHyHI9adtImOOB5241Ap2Q+t8rWb28mH41AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUfitgfoWcMRYfu+kplpe/Ypg0kV4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzk4MDA2MDIyLWM4NzMtNGI4MC04MmEwLWM0ZmY4ZTU0ZmEzMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASrDowDQYJKoZIhvcNAQELBQADggEBAJvQl2IUHtHL2y+d5w5/cDnQBxjL v8uYn+r4YjTE7QFzYC9YpHMZpnlosMRmwMn4ikkne4xlYWYzkIhSuiQcJZGTxF+A wbnX+Fh8nIIAhdpI+HRKyPgLwL2L/xDtsw1S/PBhB4oJ8psv+U3wM2MyxhzC7ngX W8dNkgVQVkXwKpph20mAiMo9j92JWBSwLVzSZSQdyW2zYF6An9naBfL8gHVcOCwm 1I5k+JVt/N3I84NQ3SMNyAWKu/6mL6pE3ei1UWeXdCKmOippxISX/Jm6u5dFAl8f h0AvacJfq8LFFsc5mz+qS70AP3cniHKaM6stBBv9NhniNFZzUjipjjuKwqs= -----END CERTIFICATE-----Generated at Fri Oct 17 21:59:19 2025 by rpki-client