$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9a619f99-8570-4552-aaf5-94d882bd87a4.roa File: 9a619f99-8570-4552-aaf5-94d882bd87a4.roa (raw, json) Hash identifier: qyv4C+VMSQXYgj00f0WI81tfao+6AK0lJjOu8xNqPoE= Subject key identifier: E2:20:37:FB:36:67:68:02:5F:62:17:6C:A9:26:D1:08:7F:B9:04:AE Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3D5093514ACBC96C0239AD10437F23FE51B898A5 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9a619f99-8570-4552-aaf5-94d882bd87a4.roa Signing time: Mon 22 Sep 2025 19:54:17 +0000 ROA not before: Mon 22 Sep 2025 19:54:17 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.164.224.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:50:93:51:4a:cb:c9:6c:02:39:ad:10:43:7f:23:fe:51:b8:98:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 19:54:17 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=94aa9357b983cf11dece321935e4b8a9728efadd6fc8a52f8dd4250808667336, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:98:32:f3:bb:8a:25:39:0d:ec:cd:4b:25:9c: f5:f1:41:06:3c:2f:ac:04:8b:9a:37:ab:d1:c4:c6: b0:40:1f:71:a0:72:93:a4:29:d3:bb:97:aa:f0:a0: 30:ab:1f:c4:0e:dc:e0:f9:30:6e:77:7c:8f:23:5d: 88:66:74:f4:84:51:4c:14:c1:c7:51:83:33:6f:9a: 6d:8c:c7:3c:04:61:ff:ff:0d:8f:4a:ef:10:d7:43: 83:b4:bb:ab:65:0e:2f:08:0d:6e:66:43:47:25:f8: 44:65:e7:97:78:02:ee:41:18:9f:13:a5:43:06:72: c7:84:b8:6a:ef:cb:cc:2c:64:c8:2f:55:9a:d1:4a: 92:21:e7:74:8c:2e:e5:b6:99:50:b4:e4:1b:e8:4b: 6e:45:5b:0a:68:82:a6:23:9f:26:e0:b6:cd:f2:79: f1:79:bc:00:fe:42:34:8e:f5:3f:c5:bb:c3:75:7c: 4d:a5:c0:bb:fe:27:03:ad:d4:ab:ab:23:c6:5c:dd: fd:f6:8a:d1:32:95:22:34:72:e8:80:56:be:4e:f7: 04:34:6d:fc:9f:b0:53:02:73:94:3c:57:18:a5:80: b7:0f:68:a2:07:c3:e1:f1:05:09:ed:fc:01:d4:ae: 4f:c4:4d:68:d5:24:be:88:38:69:07:36:4f:c8:77: dd:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:20:37:FB:36:67:68:02:5F:62:17:6C:A9:26:D1:08:7F:B9:04:AE X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9a619f99-8570-4552-aaf5-94d882bd87a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.164.224.0/23 Signature Algorithm: sha256WithRSAEncryption 0b:6d:a2:0c:63:7c:62:7d:d9:d0:2e:2f:af:76:bf:b3:c2:80: 4d:ad:18:d9:5e:e5:94:52:a7:de:34:c4:05:22:b4:cb:0c:ae: 98:95:a9:5e:c1:09:8f:59:fb:55:f6:76:e6:65:96:5d:7f:07: 84:8d:73:d2:20:51:ef:9b:1d:6c:c9:db:db:64:c2:af:24:34: 83:b6:25:d1:65:c9:fe:eb:cd:b2:d8:fe:90:40:a0:fa:1e:0e: c5:23:3a:1d:68:fd:f3:b9:d6:e9:3c:6e:f1:6a:12:a9:b0:33: 16:51:ea:74:99:1e:94:7f:8d:69:ac:0b:83:bf:70:9f:70:8d: 0a:8c:cc:f6:a4:8d:9a:4b:9c:92:7b:dd:c4:72:09:15:a7:07: 0d:a3:91:02:96:58:c0:90:61:df:37:64:4b:94:ef:c1:4e:e7: 00:6a:08:dc:55:c9:22:38:cf:de:03:cb:a2:ce:0d:fc:b3:7a: 09:28:3e:d4:36:78:19:7c:b6:c1:15:44:16:bf:7b:27:f7:0f: 61:25:bb:8f:13:7d:12:a8:bc:50:b5:85:e3:eb:32:35:ef:bf: 0b:76:f1:78:92:17:4c:da:0a:a3:68:eb:f2:db:51:36:5d:63: 87:af:9f:90:e8:9d:bb:2e:5b:f1:b0:0c:b3:ee:dc:6c:7e:8c: 96:4a:a1:07 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPVCTUUrLyWwCOa0QQ38j/lG4mKUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMTk1NDE3WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A5NGFhOTM1N2I5ODNjZjExZGVjZTMyMTkzNWU0YjhhOTcy OGVmYWRkNmZjOGE1MmY4ZGQ0MjUwODA4NjY3MzM2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1mDLzu4olOQ3szUslnPXxQQY8L6wEi5o3q9HExrBAH3Gg cpOkKdO7l6rwoDCrH8QO3OD5MG53fI8jXYhmdPSEUUwUwcdRgzNvmm2MxzwEYf// DY9K7xDXQ4O0u6tlDi8IDW5mQ0cl+ERl55d4Au5BGJ8TpUMGcseEuGrvy8wsZMgv VZrRSpIh53SMLuW2mVC05BvoS25FWwpogqYjnybgts3yefF5vAD+QjSO9T/Fu8N1 fE2lwLv+JwOt1KurI8Zc3f32itEylSI0cuiAVr5O9wQ0bfyfsFMCc5Q8VxilgLcP aKIHw+HxBQnt/AHUrk/ETWjVJL6IOGkHNk/Id91vAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU4iA3+zZnaAJfYhdsqSbRCH+5BK4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzlhNjE5Zjk5LTg1NzAtNDU1Mi1hYWY1LTk0ZDg4MmJkODdhNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESpOAwDQYJKoZIhvcNAQELBQADggEBAAttogxjfGJ92dAuL692v7PCgE2t GNle5ZRSp940xAUitMsMrpiVqV7BCY9Z+1X2duZlll1/B4SNc9IgUe+bHWzJ29tk wq8kNIO2JdFlyf7rzbLY/pBAoPoeDsUjOh1o/fO51uk8bvFqEqmwMxZR6nSZHpR/ jWmsC4O/cJ9wjQqMzPakjZpLnJJ73cRyCRWnBw2jkQKWWMCQYd83ZEuU78FO5wBq CNxVySI4z94Dy6LODfyzegkoPtQ2eBl8tsEVRBa/eyf3D2Elu48TfRKovFC1hePr MjXvvwt28XiSF0zaCqNo6/LbUTZdY4evn5DonbsuW/GwDLPu3Gx+jJZKoQc= -----END CERTIFICATE-----Generated at Sat Oct 18 02:19:15 2025 by rpki-client