$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aaa89e6c-ab8a-4970-b318-ff8c951e1bfd.roa File: aaa89e6c-ab8a-4970-b318-ff8c951e1bfd.roa (raw, json) Hash identifier: OPsvHd0hZL5f2417V5d95xRabcVBUMwyENGr7MEW11o= Subject key identifier: 74:D3:D4:6D:C1:97:F4:FD:D2:3D:31:E5:07:46:E7:80:61:8C:29:C5 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 098C0D1A9951BDE0E07CD8C2E3EE85E1A232F029 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aaa89e6c-ab8a-4970-b318-ff8c951e1bfd.roa Signing time: Mon 22 Sep 2025 21:06:25 +0000 ROA not before: Mon 22 Sep 2025 21:06:25 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.173.172.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:8c:0d:1a:99:51:bd:e0:e0:7c:d8:c2:e3:ee:85:e1:a2:32:f0:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 21:06:25 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=a5f45fe02667313f36b8bf13b74b51e50b7c7340c2adcaae48baf566a5861841, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:df:18:51:72:39:58:6d:8c:9d:63:db:7b:f8: 83:38:5b:dd:26:f6:5a:c6:f6:55:e8:8d:37:b6:13: 48:e0:fe:86:cb:8c:fc:7b:0b:d5:0c:f2:29:c3:e5: 6e:79:14:72:85:e7:62:7b:77:24:98:08:34:c7:a9: e0:6e:2d:78:55:ad:ca:1f:0f:d0:64:19:59:70:c4: 4e:cc:71:b3:c9:ad:a5:be:9a:d7:c2:fd:00:5c:06: e4:d6:79:53:09:ff:8e:52:6d:42:a2:f4:cc:83:bd: f2:1d:af:ae:4e:7d:25:f1:6e:6a:f0:40:7a:c9:58: 7f:a1:cc:12:b6:d1:46:60:6f:37:6c:f6:7f:93:a1: 16:62:12:bd:63:8e:df:e2:ba:46:34:a7:e6:2e:50: 66:eb:ce:14:2c:f4:d9:31:df:69:6a:24:92:bc:61: 6a:6d:7c:ec:3d:0d:f8:87:e1:8b:ec:a8:d1:e5:08: e3:a1:60:82:9e:c1:4b:63:d3:34:5e:7a:53:08:0b: 2d:2d:76:e2:eb:c4:0d:d4:90:b3:91:de:9b:d6:ba: c0:48:89:8b:01:28:fe:dd:24:2c:db:ad:ed:33:b0: e7:1f:28:cf:45:dc:35:37:60:e4:1c:f4:50:8f:44: 80:bc:19:a6:70:06:ae:c8:76:72:ac:d9:53:98:50: 8d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:D3:D4:6D:C1:97:F4:FD:D2:3D:31:E5:07:46:E7:80:61:8C:29:C5 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aaa89e6c-ab8a-4970-b318-ff8c951e1bfd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.173.172.0/23 Signature Algorithm: sha256WithRSAEncryption 36:70:f3:34:d2:13:7e:0f:01:2c:f8:8a:2e:b8:8c:8d:28:c8: e3:e8:ac:27:5e:91:fa:dc:a8:d9:45:1c:4f:bc:08:5d:22:95: 1f:c4:41:60:ad:bf:5f:02:be:97:4c:26:51:90:54:10:de:55: 89:cb:5b:50:8a:ce:7b:4f:5f:b8:c9:98:38:dd:31:43:b9:f4: 75:31:fd:d4:f1:64:5c:61:b4:07:4e:4d:29:e5:9b:e2:0e:8d: e1:ba:ca:62:af:22:f3:b3:c2:5e:d0:ce:18:00:96:58:45:b5: e1:7c:d8:69:8d:e4:ea:87:fa:d4:2f:28:c0:c3:d2:7e:09:a2: e8:16:94:a8:38:3e:49:7d:5b:fc:16:6c:86:18:b3:2a:39:44: 00:78:16:41:d6:93:16:58:ef:85:48:48:7f:7f:5c:a9:73:a7: 2e:80:0d:a3:79:f0:0c:f8:ea:2c:ed:1a:e4:05:ba:7b:21:60: 50:a5:6d:d4:0a:4d:a7:5e:c2:b6:70:6a:a6:b8:83:35:c4:08: f9:9d:48:bd:8b:bd:2b:fa:ac:84:7a:ef:13:6c:c7:cb:c3:b9: e4:f7:e9:fb:8c:70:d9:9d:e5:57:f7:d1:bc:75:bd:44:02:d6: 0b:01:1f:a3:4f:74:a8:14:c9:f1:f2:f8:36:ff:03:db:50:28: c7:db:37:d2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCYwNGplRveDgfNjC4+6F4aIy8CkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjEwNjI1WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BhNWY0NWZlMDI2NjczMTNmMzZiOGJmMTNiNzRiNTFlNTBi N2M3MzQwYzJhZGNhYWU0OGJhZjU2NmE1ODYxODQxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDv3xhRcjlYbYydY9t7+IM4W90m9lrG9lXojTe2E0jg/obL jPx7C9UM8inD5W55FHKF52J7dySYCDTHqeBuLXhVrcofD9BkGVlwxE7McbPJraW+ mtfC/QBcBuTWeVMJ/45SbUKi9MyDvfIdr65OfSXxbmrwQHrJWH+hzBK20UZgbzds 9n+ToRZiEr1jjt/iukY0p+YuUGbrzhQs9Nkx32lqJJK8YWptfOw9DfiH4YvsqNHl COOhYIKewUtj0zReelMICy0tduLrxA3UkLOR3pvWusBIiYsBKP7dJCzbre0zsOcf KM9F3DU3YOQc9FCPRIC8GaZwBq7IdnKs2VOYUI23AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUdNPUbcGX9P3SPTHlB0bngGGMKcUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2FhYTg5ZTZjLWFiOGEtNDk3MC1iMzE4LWZmOGM5NTFlMWJmZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESrawwDQYJKoZIhvcNAQELBQADggEBADZw8zTSE34PASz4ii64jI0oyOPo rCdekfrcqNlFHE+8CF0ilR/EQWCtv18CvpdMJlGQVBDeVYnLW1CKzntPX7jJmDjd MUO59HUx/dTxZFxhtAdOTSnlm+IOjeG6ymKvIvOzwl7QzhgAllhFteF82GmN5OqH +tQvKMDD0n4JougWlKg4Pkl9W/wWbIYYsyo5RAB4FkHWkxZY74VISH9/XKlzpy6A DaN58Az46iztGuQFunshYFClbdQKTadewrZwaqa4gzXECPmdSL2LvSv6rIR67xNs x8vDueT36fuMcNmd5Vf30bx1vUQC1gsBH6NPdKgUyfHy+Db/A9tQKMfbN9I= -----END CERTIFICATE-----Generated at Sat Oct 18 02:17:40 2025 by rpki-client