$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a15769e2-8759-4cc2-8cd7-c9418bbfa694.roa File: a15769e2-8759-4cc2-8cd7-c9418bbfa694.roa (raw, json) Hash identifier: v6HCbWqBYvRqYhbzYbkDEa0tav0erqDBsPOcORswrWc= Subject key identifier: 02:90:89:59:5B:4B:BF:39:A9:19:FE:F8:B6:99:A0:6D:B5:B6:01:CE Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 18C748201E6996AD49E4674A6143771CEEB7BAB2 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a15769e2-8759-4cc2-8cd7-c9418bbfa694.roa Signing time: Mon 22 Sep 2025 21:02:54 +0000 ROA not before: Mon 22 Sep 2025 21:02:54 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.173.114.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:c7:48:20:1e:69:96:ad:49:e4:67:4a:61:43:77:1c:ee:b7:ba:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 21:02:54 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=b3dd8987269bdc5f1811e4ed5e00e9ee63caae7a32ac37b6ab456b5c6eae5e7c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ba:57:79:15:4b:f1:38:8d:81:9d:a2:78:f1: 91:c4:47:c8:3b:a8:62:22:d6:a4:be:41:28:94:78: 9c:36:29:8a:3f:e3:24:7a:31:1b:3c:b7:1f:c6:14: 62:0d:f5:4f:43:9b:b3:ed:fc:fe:d7:bc:e3:79:87: a1:9a:2f:0f:da:d7:a6:0b:ff:55:21:7d:51:7a:d4: a1:b3:f1:3c:73:7d:0f:90:e4:c2:3b:56:97:06:82: b7:70:e0:77:2b:e0:1d:04:18:14:99:6b:d1:05:03: 65:f5:ad:a6:1c:3e:10:c0:f3:0e:1e:10:43:6c:41: b4:d7:e6:10:82:3b:3c:c1:f2:65:e9:2c:8d:89:47: ff:79:af:36:70:9b:16:4f:b6:f5:a7:74:83:55:fa: 58:2b:9a:52:55:3b:75:b6:3e:18:5a:f5:2d:2b:94: f0:e9:fa:d3:a9:63:5e:62:84:16:07:2c:59:6c:ec: 1b:b3:29:2c:d1:4a:3f:e9:eb:5e:3d:dc:02:47:69: eb:02:4a:1d:ec:9d:62:e0:8c:e1:e3:95:97:42:0f: 63:e3:c3:d4:00:7a:a5:e4:07:ed:df:bb:2a:33:99: b7:d7:fe:fe:28:01:2b:0a:0e:ba:21:07:96:03:e6: dd:3d:ec:94:44:61:08:35:15:43:2d:30:0d:3e:52: de:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:90:89:59:5B:4B:BF:39:A9:19:FE:F8:B6:99:A0:6D:B5:B6:01:CE X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a15769e2-8759-4cc2-8cd7-c9418bbfa694.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.173.114.0/23 Signature Algorithm: sha256WithRSAEncryption 5a:d7:85:64:c0:21:b4:ba:b7:0a:da:54:3c:b9:ef:9b:50:ae: a1:3f:4b:ce:de:5e:a5:c8:7f:f0:84:6e:be:15:d1:0e:c9:58: ee:b1:08:c5:25:bc:17:37:a3:37:e9:0b:d4:94:13:a2:74:00: 79:0a:ca:3e:fd:33:7c:d6:2f:0e:39:d4:5a:ca:e5:93:68:eb: 5a:14:b4:1c:e0:fe:1b:fa:e9:55:16:40:b3:5d:80:d9:8a:ac: 45:a6:30:94:eb:0a:d3:5e:a1:73:3f:e0:3c:ed:b6:4b:11:73: ec:e0:20:c0:e8:45:20:cf:80:a8:75:06:22:40:c2:3b:f4:7e: 47:72:0b:d3:13:5a:4d:93:84:89:66:48:5e:6c:8c:30:6d:3b: 03:eb:a0:4b:ab:68:c6:71:94:d5:e8:43:57:54:96:69:b1:e4: b1:54:de:a4:f4:78:39:22:ac:1e:ce:9a:be:ce:c3:6e:fe:dd: 18:c4:85:e4:ca:d6:d5:5d:92:a9:68:44:10:14:f5:7b:40:ca: 9c:7b:04:a5:42:c0:3e:74:1b:91:89:4e:72:0d:30:d0:39:3f: 74:24:e0:60:ed:f5:f9:0e:bd:c5:50:5c:ac:14:38:7d:45:2d: 7f:4e:f2:6d:8d:01:4b:64:85:9d:1b:09:a1:da:49:6b:50:51: 78:91:ca:be -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGMdIIB5plq1J5GdKYUN3HO63urIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjEwMjU0WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BiM2RkODk4NzI2OWJkYzVmMTgxMWU0ZWQ1ZTAwZTllZTYz Y2FhZTdhMzJhYzM3YjZhYjQ1NmI1YzZlYWU1ZTdjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1uld5FUvxOI2BnaJ48ZHER8g7qGIi1qS+QSiUeJw2KYo/ 4yR6MRs8tx/GFGIN9U9Dm7Pt/P7XvON5h6GaLw/a16YL/1UhfVF61KGz8TxzfQ+Q 5MI7VpcGgrdw4Hcr4B0EGBSZa9EFA2X1raYcPhDA8w4eEENsQbTX5hCCOzzB8mXp LI2JR/95rzZwmxZPtvWndINV+lgrmlJVO3W2Phha9S0rlPDp+tOpY15ihBYHLFls 7BuzKSzRSj/p61493AJHaesCSh3snWLgjOHjlZdCD2Pjw9QAeqXkB+3fuyozmbfX /v4oASsKDrohB5YD5t097JREYQg1FUMtMA0+Ut4pAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUApCJWVtLvzmpGf74tpmgbbW2Ac4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2ExNTc2OWUyLTg3NTktNGNjMi04Y2Q3LWM5NDE4YmJmYTY5NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESrXIwDQYJKoZIhvcNAQELBQADggEBAFrXhWTAIbS6twraVDy575tQrqE/ S87eXqXIf/CEbr4V0Q7JWO6xCMUlvBc3ozfpC9SUE6J0AHkKyj79M3zWLw451FrK 5ZNo61oUtBzg/hv66VUWQLNdgNmKrEWmMJTrCtNeoXM/4DzttksRc+zgIMDoRSDP gKh1BiJAwjv0fkdyC9MTWk2ThIlmSF5sjDBtOwProEuraMZxlNXoQ1dUlmmx5LFU 3qT0eDkirB7Omr7Ow27+3RjEheTK1tVdkqloRBAU9XtAypx7BKVCwD50G5GJTnIN MNA5P3Qk4GDt9fkOvcVQXKwUOH1FLX9O8m2NAUtkhZ0bCaHaSWtQUXiRyr4= -----END CERTIFICATE-----Generated at Fri Oct 17 21:58:21 2025 by rpki-client