$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a1519a23-c13f-4c7c-998e-cda0911cad4a.roa File: a1519a23-c13f-4c7c-998e-cda0911cad4a.roa (raw, json) Hash identifier: IPo5HO710lG3e+kGWzEJolcvlvoGyjda8PozlIc5a1o= Subject key identifier: 75:75:33:37:08:06:BE:70:34:57:05:E7:C6:D7:89:95:5D:EB:B8:58 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 503703A4DDEBECA9545E8FED649E823077F4E513 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a1519a23-c13f-4c7c-998e-cda0911cad4a.roa Signing time: Wed 24 Sep 2025 21:28:31 +0000 ROA not before: Wed 24 Sep 2025 21:28:31 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.65.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:37:03:a4:dd:eb:ec:a9:54:5e:8f:ed:64:9e:82:30:77:f4:e5:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 21:28:31 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=c34fc0af5f8c21321b4c34535809fcd1d2cf97bc1eb780a03f3bcac30dc9fb61, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:1c:db:fd:e1:ac:f1:fe:4c:da:36:84:67:d2: 6b:9c:17:d5:5a:2e:8c:d1:98:51:e3:63:41:73:11: cf:5a:07:d2:d1:f2:ac:e9:2b:ca:ee:b5:80:ef:c8: 29:bc:ad:5c:44:87:a6:18:12:c6:fd:48:ba:60:39: ed:4e:1a:39:d1:4b:f7:1a:67:61:e4:51:7e:d4:fe: f3:1b:a6:0e:1c:f4:4e:99:0d:f7:c9:f4:95:16:b5: 5c:bb:91:fe:46:7b:62:df:a2:24:30:45:3a:47:45: da:9d:c9:ee:e0:9d:68:df:5f:db:e9:59:49:f0:59: 00:f6:eb:61:d3:9e:3f:f4:bf:b1:f4:35:ab:32:1d: 9a:58:b3:4c:5b:5f:95:52:36:27:15:62:d1:0e:7e: d3:56:2e:f3:43:4a:ca:3e:00:9b:96:2d:39:14:c6: b6:ee:04:f1:d0:52:ef:86:2d:1f:6f:ca:7a:ee:45: bf:88:ee:4e:0b:57:06:bf:d7:c7:b2:65:6f:24:ee: 9d:7f:98:92:8d:fc:88:f8:2e:75:7f:d3:3a:e3:3f: 46:da:ff:f2:62:f4:5f:4e:86:10:f4:33:82:b3:aa: cd:21:55:3b:e3:42:f9:54:3a:0c:a2:97:29:91:7d: 09:62:d4:60:77:97:ff:c2:45:42:3b:ba:b3:8c:7a: 7e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:75:33:37:08:06:BE:70:34:57:05:E7:C6:D7:89:95:5D:EB:B8:58 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a1519a23-c13f-4c7c-998e-cda0911cad4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.65.178.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:24:7b:97:b7:71:f7:4b:6a:ec:bc:41:91:96:1d:6f:a8:f7: ff:c5:b9:4d:b8:8b:78:ed:c3:4e:8e:03:2b:c5:ed:97:b0:39: 61:a9:74:e5:c6:64:d7:07:46:c5:bd:90:1c:21:77:b5:b8:f5: 4a:46:c8:75:6e:c9:b6:1c:dc:ce:47:bd:43:f0:08:0e:dd:61: 4a:f2:e8:53:eb:47:3f:60:34:53:e1:6f:dc:72:5b:e6:bb:14: a9:86:54:bc:33:a1:27:b5:7a:98:cf:63:fd:d7:27:17:39:52: 13:54:ca:5b:8c:04:10:87:4e:05:df:55:3a:13:07:d6:1c:08: 1d:6a:46:a6:f0:0d:2a:58:5a:d3:f3:a2:97:2f:8f:65:c8:64: 56:f1:2e:d0:dc:9f:f7:02:b2:57:74:a5:26:56:48:15:57:44: 32:1b:93:48:e8:b7:a5:cd:ba:5b:a4:9f:0a:00:32:3a:96:61: c3:ad:c0:ce:59:8e:a9:10:08:22:99:a6:ce:35:78:f0:d6:92: 24:8c:83:d7:76:50:2f:39:6b:05:79:22:d5:a4:8b:33:8d:1d: 8a:f1:94:81:62:76:3b:f3:e9:ca:c8:13:7d:0c:e2:29:81:8b: b1:5d:8a:58:ef:bc:62:8e:50:d0:76:b5:04:fb:e4:a0:01:a2: 56:59:98:59 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUDcDpN3r7KlUXo/tZJ6CMHf05RMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MjEyODMxWhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BjMzRmYzBhZjVmOGMyMTMyMWI0YzM0NTM1ODA5ZmNkMWQy Y2Y5N2JjMWViNzgwYTAzZjNiY2FjMzBkYzlmYjYxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDdHNv94azx/kzaNoRn0mucF9VaLozRmFHjY0FzEc9aB9LR 8qzpK8rutYDvyCm8rVxEh6YYEsb9SLpgOe1OGjnRS/caZ2HkUX7U/vMbpg4c9E6Z DffJ9JUWtVy7kf5Ge2LfoiQwRTpHRdqdye7gnWjfX9vpWUnwWQD262HTnj/0v7H0 NasyHZpYs0xbX5VSNicVYtEOftNWLvNDSso+AJuWLTkUxrbuBPHQUu+GLR9vynru Rb+I7k4LVwa/18eyZW8k7p1/mJKN/Ij4LnV/0zrjP0ba//Ji9F9OhhD0M4Kzqs0h VTvjQvlUOgyilymRfQli1GB3l//CRUI7urOMen49AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUdXUzNwgGvnA0VwXnxteJlV3ruFgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2ExNTE5YTIzLWMxM2YtNGM3Yy05OThlLWNkYTA5MTFjYWQ0YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASQbIwDQYJKoZIhvcNAQELBQADggEBAEoke5e3cfdLauy8QZGWHW+o9//F uU24i3jtw06OAyvF7ZewOWGpdOXGZNcHRsW9kBwhd7W49UpGyHVuybYc3M5HvUPw CA7dYUry6FPrRz9gNFPhb9xyW+a7FKmGVLwzoSe1epjPY/3XJxc5UhNUyluMBBCH TgXfVToTB9YcCB1qRqbwDSpYWtPzopcvj2XIZFbxLtDcn/cCsld0pSZWSBVXRDIb k0jot6XNuluknwoAMjqWYcOtwM5ZjqkQCCKZps41ePDWkiSMg9d2UC85awV5ItWk izONHYrxlIFidjvz6crIE30M4imBi7FdiljvvGKOUNB2tQT75KABolZZmFk= -----END CERTIFICATE-----Generated at Fri Oct 17 23:41:40 2025 by rpki-client