$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a9a735aa-a13d-4324-a54e-0d8b7b1bd299.roa File: a9a735aa-a13d-4324-a54e-0d8b7b1bd299.roa (raw, json) Hash identifier: dB9sT4sQqyk5LXyszp/ukbac7T1qFJWTVupirAEFhtU= Subject key identifier: 34:B9:38:6E:46:67:B4:39:71:38:13:F3:53:0D:5A:A7:55:D6:98:48 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5F744827261CB282A8D6F7B90AC76ECC324461A3 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a9a735aa-a13d-4324-a54e-0d8b7b1bd299.roa Signing time: Mon 22 Sep 2025 20:42:59 +0000 ROA not before: Mon 22 Sep 2025 20:42:59 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.173.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:74:48:27:26:1c:b2:82:a8:d6:f7:b9:0a:c7:6e:cc:32:44:61:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 20:42:59 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=1df310c149043ea5c96e19abe23e7d60ea70695731c2955f368b33c19f383205, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3a:76:6f:c2:0f:06:df:13:c5:9c:e3:06:97: d7:57:0a:8b:6a:32:b0:e8:ce:15:1a:03:10:dc:99: 63:1a:4c:0b:2e:e9:83:f7:66:23:22:a2:2e:a2:ac: 86:14:da:dc:48:24:0a:3c:ec:b5:0e:b6:76:29:a6: b4:d1:b9:d6:9b:0c:60:b2:b5:da:53:e2:c7:18:d5: 88:e2:78:bb:49:d0:1b:2f:d7:d4:8c:62:f8:47:e5: 9c:92:85:b1:02:ca:31:96:aa:e2:45:c2:28:ba:e1: fe:0b:5c:6a:2d:97:5a:c6:53:99:ac:18:00:10:48: 3f:51:d3:a5:0f:1c:5f:2c:4f:90:66:75:09:ad:76: 25:d6:e0:9e:62:c2:7c:25:fd:56:33:65:c8:86:ed: a4:a3:61:64:fe:8e:fc:17:54:bc:fb:cf:53:11:90: dd:8f:8e:a1:89:7b:19:37:bd:9b:84:4c:43:16:a5: a7:49:14:b0:c9:c9:af:fe:53:da:f3:9a:63:7e:13: d2:6f:52:be:c1:7f:2b:f8:b6:e6:4c:25:87:79:a0: 61:d9:02:68:31:1e:df:48:0d:35:03:2b:7b:89:29: b9:01:4b:28:e3:c7:7f:28:07:d5:46:b1:c0:d9:b9: 5e:06:ab:48:4a:4d:13:79:3d:37:e0:56:6f:82:bf: 75:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:B9:38:6E:46:67:B4:39:71:38:13:F3:53:0D:5A:A7:55:D6:98:48 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a9a735aa-a13d-4324-a54e-0d8b7b1bd299.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.173.186.0/24 Signature Algorithm: sha256WithRSAEncryption 66:b1:ab:60:66:80:6b:e9:63:07:9c:1e:c3:5a:8a:72:67:66: 66:c4:1a:ff:d4:5d:a7:e2:22:d8:70:25:86:23:29:63:92:35: 83:35:6d:d8:47:24:b1:78:bd:a7:4b:aa:5f:6b:23:08:ed:cb: 96:53:09:3f:59:e7:b8:39:b1:98:c1:6c:22:40:42:2c:06:6a: 94:75:de:d8:79:28:9d:0d:78:0b:4c:e6:bd:5b:a4:41:41:37: 98:b6:fc:fa:75:6e:09:96:c5:c1:33:8a:28:15:48:32:b0:27: d1:56:00:51:0c:d5:6b:69:fc:57:8d:5a:93:43:47:19:df:35: 45:ea:b3:b0:e7:34:ae:b0:07:37:70:6a:6c:0f:8c:8c:6d:ae: 0a:93:ac:67:e0:90:51:95:c8:d0:24:c3:e9:c1:22:5e:49:52: f0:96:5e:4c:03:6b:b7:d6:33:25:b9:aa:52:41:70:d3:ea:8d: 21:20:b7:e9:49:58:33:92:82:2a:96:6c:e5:f0:c2:36:db:aa: 7f:ae:90:c9:28:79:70:8c:1a:ee:f3:66:7f:ee:c1:25:a2:b6: d0:32:c7:a9:93:d5:fd:fc:e8:09:9f:58:0c:8c:5c:b0:1f:9e: b7:25:bf:fa:74:8c:8a:4e:f3:e6:70:69:1a:bf:54:3e:53:82: 27:f4:a1:0e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUX3RIJyYcsoKo1ve5CsduzDJEYaMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjA0MjU5WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AxZGYzMTBjMTQ5MDQzZWE1Yzk2ZTE5YWJlMjNlN2Q2MGVh NzA2OTU3MzFjMjk1NWYzNjhiMzNjMTlmMzgzMjA1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3OnZvwg8G3xPFnOMGl9dXCotqMrDozhUaAxDcmWMaTAsu 6YP3ZiMioi6irIYU2txIJAo87LUOtnYpprTRudabDGCytdpT4scY1YjieLtJ0Bsv 19SMYvhH5ZyShbECyjGWquJFwii64f4LXGotl1rGU5msGAAQSD9R06UPHF8sT5Bm dQmtdiXW4J5iwnwl/VYzZciG7aSjYWT+jvwXVLz7z1MRkN2PjqGJexk3vZuETEMW padJFLDJya/+U9rzmmN+E9JvUr7Bfyv4tuZMJYd5oGHZAmgxHt9IDTUDK3uJKbkB Syjjx38oB9VGscDZuV4Gq0hKTRN5PTfgVm+Cv3XpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUNLk4bkZntDlxOBPzUw1ap1XWmEgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2E5YTczNWFhLWExM2QtNDMyNC1hNTRlLTBkOGI3YjFiZDI5OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASrbowDQYJKoZIhvcNAQELBQADggEBAGaxq2BmgGvpYwecHsNainJnZmbE Gv/UXafiIthwJYYjKWOSNYM1bdhHJLF4vadLql9rIwjty5ZTCT9Z57g5sZjBbCJA QiwGapR13th5KJ0NeAtM5r1bpEFBN5i2/Pp1bgmWxcEziigVSDKwJ9FWAFEM1Wtp /FeNWpNDRxnfNUXqs7DnNK6wBzdwamwPjIxtrgqTrGfgkFGVyNAkw+nBIl5JUvCW XkwDa7fWMyW5qlJBcNPqjSEgt+lJWDOSgiqWbOXwwjbbqn+ukMkoeXCMGu7zZn/u wSWittAyx6mT1f386AmfWAyMXLAfnrclv/p0jIpO8+ZwaRq/VD5Tgif0oQ4= -----END CERTIFICATE-----Generated at Sat Oct 18 02:14:07 2025 by rpki-client