$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ab807907-2844-4812-bb2b-7b0dddcf009c.roa File: ab807907-2844-4812-bb2b-7b0dddcf009c.roa (raw, json) Hash identifier: yoMduX7ihkecbJEZuk42NBDYl+quxcjIlLzR14B5gJE= Subject key identifier: 2A:70:1B:BC:4E:10:FE:BD:FE:95:DF:A0:0B:B0:E7:16:3C:C3:52:BE Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 17D79E2CC2BEDC8ECEA761BB0F159029BCF87B7D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ab807907-2844-4812-bb2b-7b0dddcf009c.roa Signing time: Mon 22 Sep 2025 22:55:34 +0000 ROA not before: Mon 22 Sep 2025 22:55:34 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.245.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:d7:9e:2c:c2:be:dc:8e:ce:a7:61:bb:0f:15:90:29:bc:f8:7b:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 22:55:34 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=956b7533226a76cb2aff418f5130dbf04debd3dddff1e23d704a225a4a4bda10, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:83:75:44:28:43:5e:8e:40:52:8f:1a:c8:04: fb:f3:d2:33:9a:79:3f:1d:fc:fd:58:f7:78:09:2d: 76:26:2a:37:f0:a4:f2:18:80:7a:50:7e:9f:b4:61: 6b:f6:a3:86:c1:e1:1a:36:20:7a:9a:de:be:6b:8c: d8:b8:c5:77:83:61:1e:91:95:5d:cb:14:9a:80:11: ca:79:d9:58:4d:90:48:ec:21:31:49:35:6b:f6:40: b9:ff:4b:29:21:12:4c:33:52:86:c6:2e:12:4a:c0: 7c:8a:ff:42:00:22:24:6e:cc:2f:8a:0c:d8:29:1c: 80:4e:4a:b0:bb:c0:49:e2:19:2c:dc:c9:ce:e9:be: 5c:f3:93:44:ac:ab:ef:b8:d5:93:1b:04:28:a7:c0: 22:ad:65:e1:dd:c5:29:9d:85:54:ac:d5:6e:5c:6f: e6:bf:a4:b1:da:04:ff:53:9f:91:69:cf:3b:87:d9: fe:d1:36:c8:2c:c5:2c:7f:51:e6:80:34:08:49:cb: 72:3d:c0:81:da:d0:53:26:ac:d0:30:10:eb:5a:72: 64:a1:17:dc:92:63:7d:35:a5:f0:4c:f5:d6:66:2b: d6:e7:ac:f5:82:47:39:f6:bf:a4:16:8a:a3:fa:c9: 4c:68:b2:c0:ba:88:93:35:6c:89:be:9c:b9:49:aa: dd:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:70:1B:BC:4E:10:FE:BD:FE:95:DF:A0:0B:B0:E7:16:3C:C3:52:BE X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ab807907-2844-4812-bb2b-7b0dddcf009c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.245.198.0/24 Signature Algorithm: sha256WithRSAEncryption 08:25:2a:6c:60:6e:11:84:64:02:6a:69:73:e0:bf:bf:fe:70: bc:96:df:11:a1:1a:83:9a:c7:0e:91:4f:e5:b7:2f:60:de:24: f6:0a:5f:12:6e:af:e1:99:53:4b:1c:1e:78:8a:b9:af:7f:1d: 2d:b9:fd:7e:64:21:65:ce:30:85:cf:bf:4f:04:64:dd:b8:72: 25:b2:b8:af:ec:59:aa:a3:b6:de:be:69:71:58:a0:2d:4d:67: 47:1c:3b:64:35:20:8f:2e:e2:ad:b5:63:34:48:d2:83:50:ab: ec:09:6a:db:4f:5b:f4:c3:d9:4f:c8:de:ad:49:80:98:a8:e6: 8f:14:dc:f2:72:fe:17:61:42:80:3e:db:c7:3d:c2:51:34:07: 59:0d:07:1a:f7:a5:e1:cb:8d:8c:cd:ed:01:11:34:3d:c4:d6: 31:a0:e5:99:22:99:77:1e:ba:e8:96:e6:13:4d:4a:d0:50:a7: 7d:66:f5:3d:cd:b5:46:58:1e:38:4c:6c:30:4d:a4:f0:a3:63: b6:02:96:19:0d:5a:74:2d:a9:4f:b2:73:11:b7:6e:7f:df:b9: e9:5f:c5:2d:30:4b:da:6a:f6:b4:9b:3b:e9:fe:5a:7f:7c:ba: 27:bf:13:07:55:c5:b4:9d:44:63:c6:b6:5e:9a:56:3e:5f:b8: 8d:91:59:3e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUF9eeLMK+3I7Op2G7DxWQKbz4e30wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjI1NTM0WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A5NTZiNzUzMzIyNmE3NmNiMmFmZjQxOGY1MTMwZGJmMDRk ZWJkM2RkZGZmMWUyM2Q3MDRhMjI1YTRhNGJkYTEwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8g3VEKENejkBSjxrIBPvz0jOaeT8d/P1Y93gJLXYmKjfw pPIYgHpQfp+0YWv2o4bB4Ro2IHqa3r5rjNi4xXeDYR6RlV3LFJqAEcp52VhNkEjs ITFJNWv2QLn/SykhEkwzUobGLhJKwHyK/0IAIiRuzC+KDNgpHIBOSrC7wEniGSzc yc7pvlzzk0Ssq++41ZMbBCinwCKtZeHdxSmdhVSs1W5cb+a/pLHaBP9Tn5FpzzuH 2f7RNsgsxSx/UeaANAhJy3I9wIHa0FMmrNAwEOtacmShF9ySY301pfBM9dZmK9bn rPWCRzn2v6QWiqP6yUxossC6iJM1bIm+nLlJqt3JAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUKnAbvE4Q/r3+ld+gC7DnFjzDUr4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2FiODA3OTA3LTI4NDQtNDgxMi1iYjJiLTdiMGRkZGNmMDA5Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAS9cYwDQYJKoZIhvcNAQELBQADggEBAAglKmxgbhGEZAJqaXPgv7/+cLyW 3xGhGoOaxw6RT+W3L2DeJPYKXxJur+GZU0scHniKua9/HS25/X5kIWXOMIXPv08E ZN24ciWyuK/sWaqjtt6+aXFYoC1NZ0ccO2Q1II8u4q21YzRI0oNQq+wJattPW/TD 2U/I3q1JgJio5o8U3PJy/hdhQoA+28c9wlE0B1kNBxr3peHLjYzN7QERND3E1jGg 5ZkimXceuuiW5hNNStBQp31m9T3NtUZYHjhMbDBNpPCjY7YClhkNWnQtqU+ycxG3 bn/fuelfxS0wS9pq9rSbO+n+Wn98uie/EwdVxbSdRGPGtl6aVj5fuI2RWT4= -----END CERTIFICATE-----Generated at Fri Oct 17 22:04:57 2025 by rpki-client