$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9ada3179-915d-4daf-863c-60caada05cc0.roa File: 9ada3179-915d-4daf-863c-60caada05cc0.roa (raw, json) Hash identifier: FNCRc22lwp0+8qVy7Z+HcpSYHh5YCyWEtIRt6eag1Mw= Subject key identifier: 76:E2:C1:AD:4B:B0:7C:D5:BA:B6:41:A8:C2:FD:D9:EF:14:E2:AE:77 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3787BAB388E09C82736837F8B291E9197D512693 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9ada3179-915d-4daf-863c-60caada05cc0.roa Signing time: Wed 24 Sep 2025 21:54:40 +0000 ROA not before: Wed 24 Sep 2025 21:54:40 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.66.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:87:ba:b3:88:e0:9c:82:73:68:37:f8:b2:91:e9:19:7d:51:26:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 21:54:40 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=fb50b11c8407e7407fd0ddb2881466bb86be6d5f7cf842ef1e65cb0af37cb303, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c8:51:13:a2:07:20:d3:ae:d5:5e:c4:ac:6d: 80:9f:ef:1a:b4:7c:73:07:b2:f0:2d:94:36:93:d6: 21:35:b1:0b:8f:a4:1a:d9:eb:94:68:df:dd:7b:56: e3:9a:34:ac:85:b7:c0:1c:09:98:00:54:12:e4:d6: 03:16:90:a6:23:03:20:f2:0c:58:e3:ea:e9:47:cf: 1b:8f:b2:ee:9d:42:ae:70:4e:55:b6:06:94:2e:68: 93:92:5d:2e:f4:ff:5d:a5:b2:a6:ff:a4:e2:6d:52: 3e:a9:13:87:49:3a:60:ca:76:be:cd:08:cf:00:60: 78:b9:61:04:04:8a:1b:54:ee:e4:5f:4b:15:d2:bc: 48:a0:36:6f:e5:da:91:8d:35:19:87:a3:b0:69:4c: 1a:d7:ad:09:77:0e:9e:eb:a0:51:cb:d3:87:77:96: 47:2e:27:1c:08:2f:6c:b8:9b:85:a4:ce:bd:07:45: ce:f0:88:01:7d:f7:5a:f1:c0:f4:57:08:e6:e9:3e: 03:6d:4a:7b:1a:35:5e:26:b0:24:a5:8b:52:c6:ab: 24:36:a5:83:ec:e3:fd:40:08:2d:91:7a:2b:63:10: cb:93:03:4b:b7:11:2e:80:23:69:fe:f5:8c:df:ca: 10:86:8e:77:2d:65:15:35:ab:2a:d0:6d:d7:9e:c9: 42:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:E2:C1:AD:4B:B0:7C:D5:BA:B6:41:A8:C2:FD:D9:EF:14:E2:AE:77 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9ada3179-915d-4daf-863c-60caada05cc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.66.72.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:2e:cb:5f:e1:d9:04:55:21:5f:d0:6b:81:2c:fc:08:0f:7a: a4:45:b4:2e:9c:34:c8:d3:6d:eb:ad:27:b9:9d:ce:69:21:5a: 2c:89:15:6e:33:de:26:ce:9d:57:da:4b:f3:b9:11:6d:5d:a3: 6a:49:df:4c:d5:b3:1f:d6:d4:97:a1:fd:b6:2f:ca:f3:85:bb: 0d:5a:33:23:fb:70:90:c6:7c:b3:48:20:7a:72:8b:7e:8f:31: e7:03:58:a1:42:ab:c7:27:de:e6:0c:89:15:fb:35:90:b7:5d: a3:97:d3:e7:df:f9:2b:12:a4:1a:d7:55:e5:a3:11:24:15:02: f6:49:19:3f:41:88:e0:64:a1:9c:89:a6:4a:8c:86:9c:f0:06: 14:88:58:ea:40:ba:40:e2:6b:e6:19:87:4c:df:af:56:f4:ba: a9:c6:79:74:ea:69:03:2b:ca:af:18:ac:7b:d1:52:86:ed:f8: 7b:be:ab:de:7c:fb:55:ff:94:62:03:8a:c3:ff:36:5e:5f:11: 4a:78:70:f9:cc:d3:ad:0a:3d:d8:32:b3:ef:d5:53:16:08:dd: d0:a9:1a:e1:3e:46:92:c3:4c:7f:3e:76:d2:96:73:45:4c:d6: 2b:c0:9d:1e:7a:e0:f1:28:f0:f5:be:0b:26:ea:e8:7f:63:76: 5a:dd:2b:f2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUN4e6s4jgnIJzaDf4spHpGX1RJpMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MjE1NDQwWhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BmYjUwYjExYzg0MDdlNzQwN2ZkMGRkYjI4ODE0NjZiYjg2 YmU2ZDVmN2NmODQyZWYxZTY1Y2IwYWYzN2NiMzAzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDRyFETogcg067VXsSsbYCf7xq0fHMHsvAtlDaT1iE1sQuP pBrZ65Ro3917VuOaNKyFt8AcCZgAVBLk1gMWkKYjAyDyDFjj6ulHzxuPsu6dQq5w TlW2BpQuaJOSXS70/12lsqb/pOJtUj6pE4dJOmDKdr7NCM8AYHi5YQQEihtU7uRf SxXSvEigNm/l2pGNNRmHo7BpTBrXrQl3Dp7roFHL04d3lkcuJxwIL2y4m4Wkzr0H Rc7wiAF991rxwPRXCObpPgNtSnsaNV4msCSli1LGqyQ2pYPs4/1ACC2ReitjEMuT A0u3ES6AI2n+9YzfyhCGjnctZRU1qyrQbdeeyUJ/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUduLBrUuwfNW6tkGowv3Z7xTirncwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzlhZGEzMTc5LTkxNWQtNGRhZi04NjNjLTYwY2FhZGEwNWNjMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASQkgwDQYJKoZIhvcNAQELBQADggEBAHsuy1/h2QRVIV/Qa4Es/AgPeqRF tC6cNMjTbeutJ7mdzmkhWiyJFW4z3ibOnVfaS/O5EW1do2pJ30zVsx/W1Jeh/bYv yvOFuw1aMyP7cJDGfLNIIHpyi36PMecDWKFCq8cn3uYMiRX7NZC3XaOX0+ff+SsS pBrXVeWjESQVAvZJGT9BiOBkoZyJpkqMhpzwBhSIWOpAukDia+YZh0zfr1b0uqnG eXTqaQMryq8YrHvRUobt+Hu+q958+1X/lGIDisP/Nl5fEUp4cPnM060KPdgys+/V UxYI3dCpGuE+RpLDTH8+dtKWc0VM1ivAnR564PEo8PW+Cybq6H9jdlrdK/I= -----END CERTIFICATE-----Generated at Fri Oct 17 22:05:04 2025 by rpki-client