$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a8e67c57-8280-4026-a861-c26842a8ab6c.roa File: a8e67c57-8280-4026-a861-c26842a8ab6c.roa (raw, json) Hash identifier: iCVlcTWP/iiQRgFHrVB7z/w+FyqaOlE4weTMtt2VfOs= Subject key identifier: D5:DC:24:F8:5B:A5:4E:2B:7B:4D:44:12:5E:2D:28:78:D4:39:62:65 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 233A2857968A3D332788176FFD813EE0F0E93C6E Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a8e67c57-8280-4026-a861-c26842a8ab6c.roa Signing time: Mon 22 Sep 2025 22:10:34 +0000 ROA not before: Mon 22 Sep 2025 22:10:34 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.239.18.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:3a:28:57:96:8a:3d:33:27:88:17:6f:fd:81:3e:e0:f0:e9:3c:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 22:10:34 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=fc6f3d678fe9d5895085151bd92d276ce02864c9ec112a113afe4002289ff5b8, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:44:9d:8c:45:c4:ef:bc:0b:5e:96:56:e6:2d: 57:19:8b:08:49:b4:95:08:b1:c1:f3:72:10:e2:3c: b0:91:d2:6d:ac:4b:44:2e:4e:1c:a7:ba:50:95:f0: 11:2e:aa:83:bc:c5:fd:2b:8d:1c:f8:24:d5:9b:fd: a9:6c:05:bc:fa:ed:35:05:55:76:e6:74:3b:de:8c: ec:b8:ac:70:87:cd:a1:e5:9f:6e:10:df:b3:bb:11: 23:6d:7a:c1:4c:5b:09:5c:c0:11:22:20:9c:f8:0a: 6e:9f:26:22:c6:ce:a7:f8:bc:9a:b6:84:f1:b5:93: 1a:bb:16:2b:84:2a:84:3e:b0:ec:b4:ae:dd:e0:c0: 75:f7:89:c5:7f:bc:81:27:d1:43:aa:a4:2e:29:ba: 54:c4:0a:ed:dc:34:6e:51:06:8c:8a:ad:cf:6c:fb: 2f:6a:bc:04:2e:cd:9b:b3:90:33:9a:3f:5b:cd:89: 9f:45:29:b7:6f:40:d0:98:4b:dd:a6:2b:48:66:31: dc:02:61:ac:0b:f2:47:e1:68:f2:57:32:3f:4e:62: 96:03:f0:70:2e:c9:ad:79:9a:e4:04:dc:af:84:a1: f4:65:bf:36:6c:a4:5c:3b:e1:73:54:38:47:fd:1d: 7b:80:06:c4:8b:e7:41:70:2c:6b:78:28:61:4f:eb: 2a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:DC:24:F8:5B:A5:4E:2B:7B:4D:44:12:5E:2D:28:78:D4:39:62:65 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a8e67c57-8280-4026-a861-c26842a8ab6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.239.18.0/23 Signature Algorithm: sha256WithRSAEncryption 9f:f4:c6:1a:34:0c:5c:ea:d0:54:96:3c:de:34:d2:36:ce:43: b2:81:68:8e:75:2e:18:8d:36:73:07:dc:07:7d:97:aa:9f:38: 98:fb:cc:12:57:ee:5f:af:c4:76:b0:fa:ce:5e:ea:73:d0:fe: 97:b1:d9:a0:49:85:60:9b:43:2d:ef:e4:68:5f:06:77:ba:2e: 6b:73:c1:e3:4f:bc:3e:22:3a:76:c3:36:b0:dd:41:dc:19:43: cc:d4:01:c8:3b:93:18:ca:0c:92:0c:de:f5:9f:d7:e7:e0:61: 99:4b:e4:99:76:c5:23:ce:2a:da:87:53:ad:df:01:b4:33:98: b2:46:5c:84:ce:69:b9:c4:eb:89:a9:ff:0e:e7:c3:9f:cb:ba: a9:db:9e:fc:e8:7b:ab:98:b2:8e:3f:cf:17:ae:5c:cd:e6:a2: b4:61:ba:32:13:34:03:a1:c0:b6:ee:56:e8:bc:bd:ad:1d:21: 30:c6:93:f7:e8:b0:2b:fb:24:b9:7a:e1:ea:e7:a2:e8:6b:fe: d7:f4:3a:31:60:c0:37:fd:ef:7d:b7:02:57:eb:39:a2:3b:b0: 02:f9:45:69:5b:7f:9d:0e:dc:43:1d:a1:05:10:3e:74:66:8a: 11:80:d7:51:28:fa:68:c2:8c:8d:73:f5:2f:8c:d3:fe:5f:d2: 10:da:25:ad -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIzooV5aKPTMniBdv/YE+4PDpPG4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjIxMDM0WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BmYzZmM2Q2NzhmZTlkNTg5NTA4NTE1MWJkOTJkMjc2Y2Uw Mjg2NGM5ZWMxMTJhMTEzYWZlNDAwMjI4OWZmNWI4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDRJ2MRcTvvAtellbmLVcZiwhJtJUIscHzchDiPLCR0m2s S0QuThynulCV8BEuqoO8xf0rjRz4JNWb/alsBbz67TUFVXbmdDvejOy4rHCHzaHl n24Q37O7ESNtesFMWwlcwBEiIJz4Cm6fJiLGzqf4vJq2hPG1kxq7FiuEKoQ+sOy0 rt3gwHX3icV/vIEn0UOqpC4pulTECu3cNG5RBoyKrc9s+y9qvAQuzZuzkDOaP1vN iZ9FKbdvQNCYS92mK0hmMdwCYawL8kfhaPJXMj9OYpYD8HAuya15muQE3K+EofRl vzZspFw74XNUOEf9HXuABsSL50FwLGt4KGFP6yr9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU1dwk+FulTit7TUQSXi0oeNQ5YmUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2E4ZTY3YzU3LTgyODAtNDAyNi1hODYxLWMyNjg0MmE4YWI2Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAES7xIwDQYJKoZIhvcNAQELBQADggEBAJ/0xho0DFzq0FSWPN400jbOQ7KB aI51LhiNNnMH3Ad9l6qfOJj7zBJX7l+vxHaw+s5e6nPQ/pex2aBJhWCbQy3v5Ghf Bne6LmtzweNPvD4iOnbDNrDdQdwZQ8zUAcg7kxjKDJIM3vWf1+fgYZlL5Jl2xSPO KtqHU63fAbQzmLJGXITOabnE64mp/w7nw5/Luqnbnvzoe6uYso4/zxeuXM3morRh ujITNAOhwLbuVui8va0dITDGk/fosCv7JLl64ernouhr/tf0OjFgwDf97323Alfr OaI7sAL5RWlbf50O3EMdoQUQPnRmihGA11Eo+mjCjI1z9S+M0/5f0hDaJa0= -----END CERTIFICATE-----Generated at Fri Oct 17 23:41:43 2025 by rpki-client