$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a5b5df11-e4b7-4dea-b07c-501edf5db505.roa File: a5b5df11-e4b7-4dea-b07c-501edf5db505.roa (raw, json) Hash identifier: te8+QTJ/XW39H9NPDps6+Upodo731VwM+hlZNWWwi5s= Subject key identifier: 35:B0:6B:8C:30:CA:F7:A8:7B:4C:4C:25:F4:5C:2C:DB:95:4E:3C:EF Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 31ADD3854864A89C88792D6F19B1FF2B159226E6 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a5b5df11-e4b7-4dea-b07c-501edf5db505.roa Signing time: Mon 22 Sep 2025 21:08:38 +0000 ROA not before: Mon 22 Sep 2025 21:08:38 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.173.32.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:ad:d3:85:48:64:a8:9c:88:79:2d:6f:19:b1:ff:2b:15:92:26:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 21:08:38 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=b2a197bceea2cefbbba42ac2c9d6fd4dd87264aa4de96cb4ba42395e0b7bc13f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c4:8a:23:83:fc:53:62:04:3d:58:7b:6f:1e: c0:63:a2:a2:c8:4f:51:53:cc:13:72:2d:30:0e:70: f6:10:fa:ef:e7:b7:aa:e2:d6:e4:b8:ce:68:e2:c4: 21:5a:b9:d5:14:44:27:cf:3c:d5:dd:b4:e1:51:b8: 6e:e0:75:29:ef:17:65:7a:6c:25:ae:92:66:e8:ce: 26:60:9b:13:d5:9a:9e:ae:c6:b3:bb:73:d1:02:ec: 0e:e3:89:1f:64:95:65:1e:30:72:96:f4:99:3f:18: 12:a3:35:5c:44:95:2d:00:56:af:d2:b1:69:b1:a4: e4:60:48:28:72:5e:48:ab:b0:f6:b0:2e:14:e2:e2: 56:a7:e6:cf:e2:f7:70:3b:54:7f:4e:44:71:8a:78: 5a:7b:64:b6:8e:89:d8:8f:67:4a:c3:94:c4:05:15: a5:ec:2e:07:2b:52:3e:27:6a:13:c4:fa:07:85:84: 71:a9:20:d8:f5:ff:70:6b:3d:e4:1c:10:35:d1:61: a9:ee:5e:c3:e6:ef:ac:ff:87:3d:eb:af:1e:aa:0d: 66:94:c9:f4:7b:32:87:13:cc:d0:7d:fc:b2:f0:fe: d7:95:76:54:25:9c:ad:21:84:cf:e4:bf:7b:bf:a0: b8:4f:1c:ca:8c:c1:16:b3:61:2d:23:18:99:bd:7f: b5:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:B0:6B:8C:30:CA:F7:A8:7B:4C:4C:25:F4:5C:2C:DB:95:4E:3C:EF X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a5b5df11-e4b7-4dea-b07c-501edf5db505.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.173.32.0/23 Signature Algorithm: sha256WithRSAEncryption 02:db:68:06:d3:d7:07:59:4d:98:6e:55:59:3c:8c:43:99:1c: f9:af:7f:72:ef:43:2e:fb:f2:c4:0b:c5:47:d6:2d:15:a9:a6: e5:d4:1b:dd:d5:5c:fc:d9:9c:ea:a1:ef:06:60:2d:7d:26:86: 83:f3:e5:d5:37:cf:d2:8f:bf:5a:fb:2a:81:1a:e7:9b:73:fd: 76:49:7c:c5:e5:31:a9:3b:49:e4:cf:fb:50:b2:18:67:42:b0: de:c1:bc:87:8a:32:7d:2a:b2:5d:ba:5b:d3:9f:19:3b:7d:f8: 0e:71:53:61:8f:fa:15:fe:3b:5d:89:5e:8e:5b:64:95:20:d1: 26:6c:06:70:f2:b9:02:03:7d:92:bc:02:92:86:6f:5f:85:f1: c2:0a:81:f1:76:91:42:35:10:1d:2c:65:44:14:25:19:58:13: 26:29:b9:fc:40:87:43:14:fd:1e:16:7e:b9:9d:c7:c4:cc:2d: d9:12:f1:97:ab:7e:23:90:b7:58:42:c7:fa:f3:87:b3:3e:31: b4:2c:b7:dd:8d:d7:e5:64:42:b9:fa:df:c6:82:06:35:71:76: f8:db:67:a7:3a:d2:89:2c:96:9e:14:f3:9d:e2:90:14:e2:bc: 17:82:d6:9c:44:2e:17:a2:a6:9d:7b:62:43:6c:96:0f:c6:fd: af:fd:6f:d7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMa3ThUhkqJyIeS1vGbH/KxWSJuYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjEwODM4WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMmExOTdiY2VlYTJjZWZiYmJhNDJhYzJjOWQ2ZmQ0ZGQ4 NzI2NGFhNGRlOTZjYjRiYTQyMzk1ZTBiN2JjMTNmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCaxIojg/xTYgQ9WHtvHsBjoqLIT1FTzBNyLTAOcPYQ+u/n t6ri1uS4zmjixCFaudUURCfPPNXdtOFRuG7gdSnvF2V6bCWukmboziZgmxPVmp6u xrO7c9EC7A7jiR9klWUeMHKW9Jk/GBKjNVxElS0AVq/SsWmxpORgSChyXkirsPaw LhTi4lan5s/i93A7VH9ORHGKeFp7ZLaOidiPZ0rDlMQFFaXsLgcrUj4nahPE+geF hHGpINj1/3BrPeQcEDXRYanuXsPm76z/hz3rrx6qDWaUyfR7MocTzNB9/LLw/teV dlQlnK0hhM/kv3u/oLhPHMqMwRazYS0jGJm9f7WHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUNbBrjDDK96h7TEwl9Fws25VOPO8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2E1YjVkZjExLWU0YjctNGRlYS1iMDdjLTUwMWVkZjVkYjUwNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESrSAwDQYJKoZIhvcNAQELBQADggEBAALbaAbT1wdZTZhuVVk8jEOZHPmv f3LvQy778sQLxUfWLRWppuXUG93VXPzZnOqh7wZgLX0mhoPz5dU3z9KPv1r7KoEa 55tz/XZJfMXlMak7SeTP+1CyGGdCsN7BvIeKMn0qsl26W9OfGTt9+A5xU2GP+hX+ O12JXo5bZJUg0SZsBnDyuQIDfZK8ApKGb1+F8cIKgfF2kUI1EB0sZUQUJRlYEyYp ufxAh0MU/R4Wfrmdx8TMLdkS8ZerfiOQt1hCx/rzh7M+MbQst92N1+VkQrn638aC BjVxdvjbZ6c60okslp4U853ikBTivBeC1pxELheipp17YkNslg/G/a/9b9c= -----END CERTIFICATE-----Generated at Fri Oct 17 22:03:17 2025 by rpki-client