$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a7f130c1-4495-4408-a106-6bd938ed40b3.roa File: a7f130c1-4495-4408-a106-6bd938ed40b3.roa (raw, json) Hash identifier: bNuthVWF9suRT8mR7WMe+ilMcKUboj0o4hWIuJSRB7U= Subject key identifier: A9:8B:E0:96:60:63:E6:43:AE:47:42:1D:DD:9D:97:BA:01:B8:1C:0F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0FBB8C5629C3988245516DA8A938AE182DCD52B3 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a7f130c1-4495-4408-a106-6bd938ed40b3.roa Signing time: Wed 24 Sep 2025 21:49:41 +0000 ROA not before: Wed 24 Sep 2025 21:49:41 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.66.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:bb:8c:56:29:c3:98:82:45:51:6d:a8:a9:38:ae:18:2d:cd:52:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 21:49:41 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=bf9cef7878646239f9555fcf4c4bc29a67f9d95e4dd642c8d6ef371fdacee0bb, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:cf:cb:83:fb:58:e2:66:6f:28:95:cf:a4:43: 68:1e:20:4f:d2:9b:45:bb:4b:6d:3b:3a:ee:0f:ad: c6:fb:d4:2f:8b:a0:98:a2:32:88:23:a3:26:b3:6f: a9:dd:52:87:e3:77:3f:bb:67:38:4f:9a:d9:52:75: 34:89:16:41:29:e4:66:cc:ef:a3:03:10:3d:f0:94: 5e:3c:db:30:29:9f:8b:91:29:93:90:e6:fe:54:e2: af:80:af:7e:78:e2:62:86:ee:9d:97:32:e7:1f:1b: 37:9c:ba:8c:c2:8a:84:8e:8f:b4:66:b7:5e:31:ec: 37:95:bc:1d:0d:03:57:29:45:69:c8:88:d0:f5:41: 38:71:50:80:6e:66:c4:e5:66:d5:7f:ab:24:02:0c: 5b:7a:ed:a3:ca:53:ce:66:c9:44:64:08:8f:07:bc: 69:20:4a:4a:a2:eb:b6:f7:f2:bf:68:fc:35:20:7b: 5b:5e:68:aa:35:28:8f:97:1c:af:c7:25:e4:35:19: 09:1e:c2:e2:8d:4d:09:39:32:94:b3:4c:f2:df:24: fd:4a:87:de:8e:34:d2:86:0e:63:92:36:15:26:27: fd:f2:78:11:5e:8d:5e:df:4b:27:fd:ef:c7:3a:fa: 57:aa:f9:1f:a9:87:66:b7:b8:d7:8c:52:c4:cc:bd: a4:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:8B:E0:96:60:63:E6:43:AE:47:42:1D:DD:9D:97:BA:01:B8:1C:0F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a7f130c1-4495-4408-a106-6bd938ed40b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.66.232.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:89:ae:0a:cd:30:58:59:e3:5f:7e:f3:d7:55:17:d3:bf:d6: b2:bc:5a:12:60:65:b1:d9:cb:a9:12:2c:74:21:b0:de:5f:11: c5:e7:fc:00:9f:59:d0:4a:f1:06:2a:5a:91:d6:80:58:32:97: 4f:69:7a:32:28:f0:e8:06:75:52:5d:95:2f:96:30:0b:0e:22: ce:33:04:0f:2c:0a:37:c0:62:21:a5:e0:f2:d9:54:8e:22:6a: b7:f2:9e:ca:4e:e0:02:cf:37:fb:a0:14:fb:6f:64:39:31:a1: 20:b8:0c:63:ab:d1:e3:14:ca:42:23:16:59:d9:be:e1:fa:c0: 1c:d8:f8:5d:44:58:7c:76:bb:43:35:33:ae:98:22:22:8e:26: f7:27:d3:c4:2c:a9:b0:42:d1:ba:be:5b:98:3a:7d:37:5a:e0: b5:44:c1:d3:63:68:19:26:1f:a5:71:cb:d7:a6:08:00:71:f2: a9:9c:e6:53:ba:97:36:03:b7:e2:0a:ea:d2:85:df:a7:61:d3: f1:3d:bd:6f:11:53:c7:d9:ac:57:eb:5d:95:22:53:a1:00:07: 5b:63:b4:be:c7:d9:70:a4:ed:8c:ba:06:ef:ec:d6:75:63:a4: 6b:ad:15:3a:47:1b:2c:39:3a:19:cd:67:71:58:c8:45:cb:27: b0:43:e6:c9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUD7uMVinDmIJFUW2oqTiuGC3NUrMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MjE0OTQxWhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BiZjljZWY3ODc4NjQ2MjM5Zjk1NTVmY2Y0YzRiYzI5YTY3 ZjlkOTVlNGRkNjQyYzhkNmVmMzcxZmRhY2VlMGJiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0z8uD+1jiZm8olc+kQ2geIE/Sm0W7S207Ou4Prcb71C+L oJiiMogjoyazb6ndUofjdz+7ZzhPmtlSdTSJFkEp5GbM76MDED3wlF482zApn4uR KZOQ5v5U4q+Ar3544mKG7p2XMucfGzecuozCioSOj7Rmt14x7DeVvB0NA1cpRWnI iND1QThxUIBuZsTlZtV/qyQCDFt67aPKU85myURkCI8HvGkgSkqi67b38r9o/DUg e1teaKo1KI+XHK/HJeQ1GQkewuKNTQk5MpSzTPLfJP1Kh96ONNKGDmOSNhUmJ/3y eBFejV7fSyf978c6+leq+R+ph2a3uNeMUsTMvaQRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUqYvglmBj5kOuR0Id3Z2XugG4HA8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2E3ZjEzMGMxLTQ0OTUtNDQwOC1hMTA2LTZiZDkzOGVkNDBiMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASQugwDQYJKoZIhvcNAQELBQADggEBAJuJrgrNMFhZ419+89dVF9O/1rK8 WhJgZbHZy6kSLHQhsN5fEcXn/ACfWdBK8QYqWpHWgFgyl09pejIo8OgGdVJdlS+W MAsOIs4zBA8sCjfAYiGl4PLZVI4iarfynspO4ALPN/ugFPtvZDkxoSC4DGOr0eMU ykIjFlnZvuH6wBzY+F1EWHx2u0M1M66YIiKOJvcn08QsqbBC0bq+W5g6fTda4LVE wdNjaBkmH6Vxy9emCABx8qmc5lO6lzYDt+IK6tKF36dh0/E9vW8RU8fZrFfrXZUi U6EAB1tjtL7H2XCk7Yy6Bu/s1nVjpGutFTpHGyw5OhnNZ3FYyEXLJ7BD5sk= -----END CERTIFICATE-----Generated at Fri Oct 17 21:57:03 2025 by rpki-client