$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a9a80223-ae0f-4b6d-b464-36deace0e1e8.roa File: a9a80223-ae0f-4b6d-b464-36deace0e1e8.roa (raw, json) Hash identifier: hIg5ecDt/MSvKz9ThzUDmCyWJAhvJjXZHXROVF9u4/c= Subject key identifier: 0B:83:23:36:17:34:BE:88:13:F2:0A:0E:15:C2:9E:15:DA:77:8D:F2 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4EF807BB1F93B0A486AC6B74EFB56542BAFBA724 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a9a80223-ae0f-4b6d-b464-36deace0e1e8.roa Signing time: Mon 22 Sep 2025 20:30:03 +0000 ROA not before: Mon 22 Sep 2025 20:30:03 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.172.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:f8:07:bb:1f:93:b0:a4:86:ac:6b:74:ef:b5:65:42:ba:fb:a7:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 20:30:03 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=7178c8ed9cde31341ac942f65ffbd9f740feb9d1fb0bae126e85271ffe72bb97, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:57:cb:25:fb:61:27:72:2e:c8:f5:49:67:28: ed:df:6d:12:f3:cb:75:48:9a:3f:98:9c:cc:b0:d2: a7:86:d4:59:dd:d9:3f:59:21:ed:bd:c4:d3:dc:57: 61:f5:21:c5:c1:c4:72:e3:56:3f:c5:69:35:ca:b3: cd:3f:bf:44:ce:67:a1:09:73:40:93:7a:c7:c9:f6: 57:4d:88:24:bf:cb:eb:58:fa:2e:b0:1a:0a:15:6a: 8d:03:1b:2f:ce:57:0b:18:85:b2:db:36:97:70:f1: 37:30:fb:19:1f:1e:da:e2:1c:4d:17:f6:2e:17:a3: 9c:10:13:69:2b:51:cc:1b:7d:00:7b:96:9a:71:b5: 99:05:67:be:d4:93:5f:ab:04:4c:7e:99:23:01:52: cb:dd:f6:c4:b9:1f:39:2c:38:29:c4:d8:3c:6e:30: a4:36:21:aa:a4:24:1f:90:24:69:10:4d:06:46:80: 9a:9b:43:3f:e7:23:ce:1c:eb:e2:e2:92:26:0e:f5: 7a:17:72:2d:7c:43:e2:6d:e4:0f:1e:76:54:29:52: 8f:85:89:13:5f:c7:43:fa:6e:57:6a:d4:73:f5:26: 45:00:37:2f:21:ab:23:98:9f:7a:3a:12:7f:e4:51: f2:f1:81:41:bb:ae:26:8d:79:1d:20:3b:22:f0:bc: 1d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:83:23:36:17:34:BE:88:13:F2:0A:0E:15:C2:9E:15:DA:77:8D:F2 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a9a80223-ae0f-4b6d-b464-36deace0e1e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.172.221.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:cd:4e:04:74:32:24:b5:79:64:15:f5:65:6b:59:7a:c7:49: 53:50:9a:45:d7:c1:ac:da:09:52:15:24:b2:c2:38:2b:24:cb: 1b:ad:da:97:7b:78:36:51:7b:71:f5:64:20:26:0a:2b:1e:6d: 16:89:59:2e:b3:54:fb:07:b7:eb:ca:f3:44:1a:a6:06:3a:9e: 54:b6:78:84:6a:b0:20:e3:ea:6e:20:1b:79:07:fb:f8:b7:68: 86:a3:25:a8:fb:e4:84:40:b1:86:16:0b:39:e9:20:cb:d6:3e: 6a:33:14:2e:c8:dc:10:f1:b2:eb:f4:a1:2a:5e:1b:8b:a4:11: 50:6d:c7:e2:52:a3:e4:20:a1:66:3d:08:cb:d8:f4:93:65:f6: 2a:65:07:4a:b5:cf:f0:10:45:32:32:8e:57:7d:4d:86:5a:52: c6:4d:4c:ce:e7:98:52:64:19:e0:34:66:53:ab:f8:69:0a:62: 51:53:bb:74:5a:9a:0f:82:e4:b1:35:a2:f1:44:fe:76:08:52: 63:4c:70:8b:ff:80:28:98:89:88:12:c4:bd:70:ad:cc:0e:6c: e8:df:d3:47:9d:da:0d:a8:8c:bb:09:e0:a4:48:f2:e9:bb:60: 06:56:de:89:69:55:87:c0:25:77:d5:e3:aa:32:dd:a4:3e:c4: 92:71:d6:1c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTvgHux+TsKSGrGt077VlQrr7pyQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjAzMDAzWhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A3MTc4YzhlZDljZGUzMTM0MWFjOTQyZjY1ZmZiZDlmNzQw ZmViOWQxZmIwYmFlMTI2ZTg1MjcxZmZlNzJiYjk3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGV8sl+2Enci7I9UlnKO3fbRLzy3VImj+YnMyw0qeG1Fnd 2T9ZIe29xNPcV2H1IcXBxHLjVj/FaTXKs80/v0TOZ6EJc0CTesfJ9ldNiCS/y+tY +i6wGgoVao0DGy/OVwsYhbLbNpdw8Tcw+xkfHtriHE0X9i4Xo5wQE2krUcwbfQB7 lppxtZkFZ77Uk1+rBEx+mSMBUsvd9sS5HzksOCnE2DxuMKQ2IaqkJB+QJGkQTQZG gJqbQz/nI84c6+LikiYO9XoXci18Q+Jt5A8edlQpUo+FiRNfx0P6bldq1HP1JkUA Ny8hqyOYn3o6En/kUfLxgUG7riaNeR0gOyLwvB2zAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUC4MjNhc0vogT8goOFcKeFdp3jfIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2E5YTgwMjIzLWFlMGYtNGI2ZC1iNDY0LTM2ZGVhY2UwZTFlOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASrN0wDQYJKoZIhvcNAQELBQADggEBAJzNTgR0MiS1eWQV9WVrWXrHSVNQ mkXXwazaCVIVJLLCOCskyxut2pd7eDZRe3H1ZCAmCisebRaJWS6zVPsHt+vK80Qa pgY6nlS2eIRqsCDj6m4gG3kH+/i3aIajJaj75IRAsYYWCznpIMvWPmozFC7I3BDx suv0oSpeG4ukEVBtx+JSo+QgoWY9CMvY9JNl9iplB0q1z/AQRTIyjld9TYZaUsZN TM7nmFJkGeA0ZlOr+GkKYlFTu3Ramg+C5LE1ovFE/nYIUmNMcIv/gCiYiYgSxL1w rcwObOjf00ed2g2ojLsJ4KRI8um7YAZW3olpVYfAJXfV46oy3aQ+xJJx1hw= -----END CERTIFICATE-----Generated at Fri Oct 17 21:58:40 2025 by rpki-client