$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a0ed88ad-618f-414b-b1e3-3f28acbe8783.roa File: a0ed88ad-618f-414b-b1e3-3f28acbe8783.roa (raw, json) Hash identifier: 8W0yKkPMa6N5nOmYg4hKASyklHaivzUeRuXTVBVOTxI= Subject key identifier: 5B:A1:0F:1C:D1:F5:53:A3:65:4C:6B:FE:14:FE:56:52:30:9D:3F:CD Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 759BA8FF025CE92EE90C75CAF2097DB846C6150C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a0ed88ad-618f-414b-b1e3-3f28acbe8783.roa Signing time: Wed 24 Sep 2025 22:59:28 +0000 ROA not before: Wed 24 Sep 2025 22:59:28 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.67.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:9b:a8:ff:02:5c:e9:2e:e9:0c:75:ca:f2:09:7d:b8:46:c6:15:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 22:59:28 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=4a9a0056f03287667efff36db7eecf68c0a4ae8e9e597254b9a2014a59efc633, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f7:9b:5c:00:5d:3e:25:66:00:83:c0:c5:72: ff:f5:25:67:84:1e:ec:15:37:68:d7:cb:cd:85:c8: 15:72:9b:e2:7a:d4:1d:ae:6f:9d:5e:56:d7:81:f8: d1:9d:5f:4d:4a:8e:a0:86:5c:73:9f:04:45:7c:ea: 87:49:d7:f2:75:b5:ae:68:ba:bb:20:3d:80:48:cb: 90:63:7f:0f:6e:46:d0:88:f4:1f:50:f8:31:e4:e5: e5:b2:8f:a7:53:bb:0d:dd:b0:11:75:24:3a:a7:a6: a4:c1:af:ea:42:2a:99:16:5d:2e:af:4c:12:98:df: 19:23:ab:ca:e5:36:d5:63:7c:33:d8:1f:0d:ab:46: 0d:5d:75:a6:93:15:99:72:35:bf:3b:ef:95:03:29: f5:88:7b:9a:16:8c:8f:bc:4f:dd:a6:07:2c:24:7a: e3:04:c3:26:59:66:da:47:26:8a:b8:56:1e:a1:bc: 96:7a:ca:39:1f:47:2b:7b:88:53:a2:5b:a3:01:bb: 98:94:66:f7:76:ff:a3:42:ad:92:12:d2:06:af:74: 70:bc:78:4c:d7:0e:cd:94:94:c3:b1:73:72:e8:5e: d3:b0:5e:61:53:3a:20:8a:5f:e7:8d:80:2f:f4:78: 5f:23:1c:d8:e7:c2:9e:6e:04:8a:26:fa:d4:a8:4a: 5b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:A1:0F:1C:D1:F5:53:A3:65:4C:6B:FE:14:FE:56:52:30:9D:3F:CD X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a0ed88ad-618f-414b-b1e3-3f28acbe8783.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.67.32.0/22 Signature Algorithm: sha256WithRSAEncryption af:ac:fc:6c:07:ff:b6:76:06:58:f9:97:15:f4:12:9e:54:27: d7:41:c1:99:39:e5:b6:f0:4a:a5:fb:ba:89:1c:50:87:9a:a0: 8e:88:cd:fb:f1:c7:df:5f:30:c8:ae:be:a1:07:af:8a:b6:87: 56:46:e4:bd:68:c7:26:3f:55:88:f1:2e:7b:fd:00:0f:e8:51: ad:9d:e1:97:44:93:2b:14:5a:6b:f2:11:78:35:75:0e:d8:3c: 93:a6:21:18:0d:25:a5:06:3f:88:9e:e3:4d:b2:00:79:83:b5: af:cf:74:24:4f:fb:b0:47:38:b5:66:96:32:96:ee:be:4a:eb: e9:ec:dc:a9:1d:2c:ab:d1:80:6f:4a:fc:0e:cf:ed:83:b2:26: 43:f3:c7:a2:8c:e1:51:e4:14:b1:80:34:92:7c:6a:b5:d2:72: ef:75:dc:81:50:6f:63:df:67:5e:dc:b7:ac:87:02:c7:a2:b3: 56:7f:69:ee:e7:4c:a2:86:39:f1:dc:ae:8d:56:26:dc:0d:a5: 33:27:48:1a:1c:0d:57:0c:e0:4a:4b:02:f6:ec:ae:97:fd:ba: 0f:bb:b7:61:82:60:9f:71:b5:af:87:73:fd:36:9d:a3:7b:ed: 68:d2:dc:b8:12:5f:4c:78:95:d2:dc:32:17:5a:3f:65:53:7b: 18:46:51:11 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdZuo/wJc6S7pDHXK8gl9uEbGFQwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MjI1OTI4WhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A0YTlhMDA1NmYwMzI4NzY2N2VmZmYzNmRiN2VlY2Y2OGMw YTRhZThlOWU1OTcyNTRiOWEyMDE0YTU5ZWZjNjMzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC595tcAF0+JWYAg8DFcv/1JWeEHuwVN2jXy82FyBVym+J6 1B2ub51eVteB+NGdX01KjqCGXHOfBEV86odJ1/J1ta5oursgPYBIy5Bjfw9uRtCI 9B9Q+DHk5eWyj6dTuw3dsBF1JDqnpqTBr+pCKpkWXS6vTBKY3xkjq8rlNtVjfDPY Hw2rRg1ddaaTFZlyNb8775UDKfWIe5oWjI+8T92mBywkeuMEwyZZZtpHJoq4Vh6h vJZ6yjkfRyt7iFOiW6MBu5iUZvd2/6NCrZIS0gavdHC8eEzXDs2UlMOxc3LoXtOw XmFTOiCKX+eNgC/0eF8jHNjnwp5uBIom+tSoSltbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUW6EPHNH1U6NlTGv+FP5WUjCdP80wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2EwZWQ4OGFkLTYxOGYtNDE0Yi1iMWUzLTNmMjhhY2JlODc4My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAISQyAwDQYJKoZIhvcNAQELBQADggEBAK+s/GwH/7Z2Blj5lxX0Ep5UJ9dB wZk55bbwSqX7uokcUIeaoI6Izfvxx99fMMiuvqEHr4q2h1ZG5L1oxyY/VYjxLnv9 AA/oUa2d4ZdEkysUWmvyEXg1dQ7YPJOmIRgNJaUGP4ie402yAHmDta/PdCRP+7BH OLVmljKW7r5K6+ns3KkdLKvRgG9K/A7P7YOyJkPzx6KM4VHkFLGANJJ8arXScu91 3IFQb2PfZ17ct6yHAseis1Z/ae7nTKKGOfHcro1WJtwNpTMnSBocDVcM4EpLAvbs rpf9ug+7t2GCYJ9xta+Hc/02naN77WjS3LgSX0x4ldLcMhdaP2VTexhGURE= -----END CERTIFICATE-----Generated at Fri Oct 17 23:45:38 2025 by rpki-client