$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a798e4f4-eff0-4c9b-b082-76fdab4aa247.roa File: a798e4f4-eff0-4c9b-b082-76fdab4aa247.roa (raw, json) Hash identifier: dz9cEIz3r+0AWL7s9WCM7nIqrNxLKZSFLZG4Ihb9Cy0= Subject key identifier: 9B:08:69:19:BB:CA:69:FF:D8:0E:06:FF:EF:88:C2:7C:3C:A3:B3:98 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7B3C9046E4216DD9710604FF899ACC9BC1946E30 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a798e4f4-eff0-4c9b-b082-76fdab4aa247.roa Signing time: Mon 22 Sep 2025 18:29:54 +0000 ROA not before: Mon 22 Sep 2025 18:29:54 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.161.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:3c:90:46:e4:21:6d:d9:71:06:04:ff:89:9a:cc:9b:c1:94:6e:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 18:29:54 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=142ee8d40a9350dd61612ffba22a44dfedd584e75d00a53b5ad3dfa5f82cdde7, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:dc:8e:2a:8f:69:23:b8:c3:d1:10:2d:c8:a0: 3a:df:3f:69:ac:b7:2a:2c:12:86:e1:9c:33:84:dd: 6a:31:b7:97:f7:a4:35:e6:72:fd:d2:95:3e:f1:70: c3:48:51:02:72:1d:e4:9f:6e:50:e0:2f:f4:73:fd: 5c:08:34:5a:1a:ed:d2:4b:e9:cd:8e:80:71:40:9b: 95:4b:62:9b:ce:0a:b3:cd:fe:0e:af:9b:85:9d:e5: dc:e8:30:8d:70:9d:c7:5d:9f:91:28:80:e1:eb:2c: ba:e3:5b:90:b3:16:60:9d:54:e3:c2:3c:68:dd:7b: ee:59:70:6b:1a:8d:b2:53:4a:24:2c:2f:38:44:e5: 72:ce:42:c4:8c:61:7c:9f:56:be:a1:23:ad:46:db: 63:b0:27:3e:dd:da:de:d5:a7:9d:79:d0:f9:a6:9f: f5:70:2f:5f:ba:79:53:c7:2b:29:f2:10:b2:f7:0f: fe:c5:3c:31:97:5a:cd:a5:74:34:7e:1d:1e:d4:db: 2d:95:72:4f:74:08:a4:89:4a:9e:20:cc:18:15:5e: 33:aa:b0:8f:85:51:42:0c:31:97:a0:54:3d:1c:31: 1e:49:8c:bc:ac:23:42:d4:03:3d:0a:a3:7f:96:9a: 80:71:ea:ef:df:33:e4:94:2f:ce:41:54:cd:da:04: 42:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:08:69:19:BB:CA:69:FF:D8:0E:06:FF:EF:88:C2:7C:3C:A3:B3:98 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a798e4f4-eff0-4c9b-b082-76fdab4aa247.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.161.134.0/24 Signature Algorithm: sha256WithRSAEncryption 54:8e:7e:eb:41:cc:e6:95:72:5f:68:41:4c:c5:77:6b:bb:66: 6a:77:a1:f5:14:3a:4b:05:0b:d9:b0:30:7a:d7:67:3f:31:0a: 37:57:7f:98:d6:1c:9d:43:cf:b2:87:9c:64:2a:b9:ec:c5:c5: a4:58:ef:68:bd:b8:e2:86:42:d5:57:b3:55:f5:7c:9e:17:ee: b8:ef:bd:1c:1b:f0:4a:df:42:32:ca:e4:8a:53:e4:47:09:79: fc:32:44:b0:a5:9f:6a:dc:ba:41:4d:48:48:79:f2:4a:04:9e: 07:1a:1d:cb:02:b1:d5:ba:92:3a:9d:31:39:7c:ce:b0:80:db: 6f:69:5d:64:8c:3c:d2:45:e0:54:25:00:3d:01:97:58:b2:91: e5:8b:dd:e6:c0:6a:f2:31:e0:ef:14:30:ea:90:96:d5:f9:fb: e1:6f:40:e1:b6:0c:d2:1c:27:05:85:7a:b7:70:42:52:e5:8b: 70:10:01:58:c5:93:3c:03:a0:28:50:32:52:a2:03:85:16:65: ba:dc:e9:c0:a4:cc:02:4e:0b:e7:94:60:32:50:83:eb:ff:52: c8:b1:95:27:be:89:51:6e:07:e8:25:fa:e6:3b:38:07:3b:ea: c1:d8:e8:5a:dc:9a:ba:23:e2:31:db:31:10:d6:f4:8b:01:78: 33:29:32:e7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUezyQRuQhbdlxBgT/iZrMm8GUbjAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMTgyOTU0WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AxNDJlZThkNDBhOTM1MGRkNjE2MTJmZmJhMjJhNDRkZmVk ZDU4NGU3NWQwMGE1M2I1YWQzZGZhNWY4MmNkZGU3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDj3I4qj2kjuMPREC3IoDrfP2mstyosEobhnDOE3Woxt5f3 pDXmcv3SlT7xcMNIUQJyHeSfblDgL/Rz/VwINFoa7dJL6c2OgHFAm5VLYpvOCrPN /g6vm4Wd5dzoMI1wncddn5EogOHrLLrjW5CzFmCdVOPCPGjde+5ZcGsajbJTSiQs LzhE5XLOQsSMYXyfVr6hI61G22OwJz7d2t7Vp5150Pmmn/VwL1+6eVPHKynyELL3 D/7FPDGXWs2ldDR+HR7U2y2Vck90CKSJSp4gzBgVXjOqsI+FUUIMMZegVD0cMR5J jLysI0LUAz0Ko3+WmoBx6u/fM+SUL85BVM3aBEJVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUmwhpGbvKaf/YDgb/74jCfDyjs5gwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2E3OThlNGY0LWVmZjAtNGM5Yi1iMDgyLTc2ZmRhYjRhYTI0Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASoYYwDQYJKoZIhvcNAQELBQADggEBAFSOfutBzOaVcl9oQUzFd2u7Zmp3 ofUUOksFC9mwMHrXZz8xCjdXf5jWHJ1Dz7KHnGQquezFxaRY72i9uOKGQtVXs1X1 fJ4X7rjvvRwb8ErfQjLK5IpT5EcJefwyRLCln2rcukFNSEh58koEngcaHcsCsdW6 kjqdMTl8zrCA229pXWSMPNJF4FQlAD0Bl1iykeWL3ebAavIx4O8UMOqQltX5++Fv QOG2DNIcJwWFerdwQlLli3AQAVjFkzwDoChQMlKiA4UWZbrc6cCkzAJOC+eUYDJQ g+v/UsixlSe+iVFuB+gl+uY7OAc76sHY6Frcmroj4jHbMRDW9IsBeDMpMuc= -----END CERTIFICATE-----Generated at Fri Oct 17 23:47:30 2025 by rpki-client