$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/09a1e34c-8d58-4c21-9a5a-f0ffac8ca3dd.roa File: 09a1e34c-8d58-4c21-9a5a-f0ffac8ca3dd.roa (raw, json) Hash identifier: ycwRl6HCDszLxuyoJ84mJu/mXsxkpS4U2Kta0b6QJaA= Subject key identifier: A3:A7:BA:69:39:88:9B:3A:83:58:77:D9:53:3B:55:14:0C:F5:5D:87 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 77711B14506C5B80C08FA5B0410520EC40B81AB6 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/09a1e34c-8d58-4c21-9a5a-f0ffac8ca3dd.roa Signing time: Thu 16 Oct 2025 15:20:54 +0000 ROA not before: Thu 16 Oct 2025 15:20:54 +0000 ROA not after: Thu 20 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.68.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:71:1b:14:50:6c:5b:80:c0:8f:a5:b0:41:05:20:ec:40:b8:1a:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 16 15:20:54 2025 GMT Not After : Nov 20 23:59:59 2025 GMT Subject: serialNumber=184eeadde186cd76d179eb231eab33c7fdae715c4217efd40a559b875c6aba17, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7e:61:c0:c6:e2:30:4e:1d:43:ab:9c:2c:ad: 77:06:78:2b:9b:62:8b:48:95:17:de:b4:a8:8c:be: 20:dc:35:bd:44:c1:df:4c:c8:e5:af:10:fb:f1:87: 0f:a4:4b:4e:03:92:ee:27:b2:f2:40:3c:36:b6:33: 29:51:70:c8:ae:00:70:6c:5a:70:18:58:8e:a7:81: ba:dc:2c:d8:3f:21:b8:ee:43:d3:03:1f:4b:1a:56: 14:38:b2:7a:87:a0:44:1f:40:ee:0d:58:b3:36:3e: 06:99:72:af:45:17:39:a9:bf:f2:43:a0:a5:a8:fa: 93:b1:df:38:5a:e3:ed:02:53:44:de:96:45:7b:00: ae:c3:67:d7:6c:75:e0:25:a9:65:12:65:0d:34:85: 17:84:85:28:1e:03:32:56:8d:34:c4:a2:7b:e5:df: 90:93:a2:cf:12:8b:31:03:4f:ba:e2:84:06:df:d2: 6c:ac:36:b4:68:44:aa:11:19:d4:06:93:7e:82:38: 8e:c6:bb:07:92:56:8e:74:24:c5:5d:5e:c3:f8:0c: 05:16:1a:70:ce:59:5a:b0:fb:61:6a:15:5f:29:05: 35:48:68:bd:34:38:38:52:b0:01:09:ec:18:89:d8: 5a:a7:aa:a6:ea:5d:f4:cb:ce:aa:71:01:2e:62:3f: 03:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:A7:BA:69:39:88:9B:3A:83:58:77:D9:53:3B:55:14:0C:F5:5D:87 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/09a1e34c-8d58-4c21-9a5a-f0ffac8ca3dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.68.129.0/24 Signature Algorithm: sha256WithRSAEncryption b2:7d:b4:db:4b:57:4c:ce:73:59:c3:15:c4:d8:2d:6c:66:00: 61:f0:b4:d7:de:7c:d8:65:34:1b:d8:f1:b1:3e:0f:e3:a8:d5: 80:a6:d9:e3:03:aa:1c:99:1b:88:b7:e7:49:b9:08:db:90:d6: 4d:65:10:e3:20:19:c2:c2:e3:be:31:28:29:15:c4:d5:f5:88: 9a:0d:57:d1:68:0d:d3:5f:9c:e4:16:af:08:92:6e:61:82:76: ba:13:6e:cc:52:f7:b3:76:8f:e2:28:ca:27:27:b1:9f:c0:ae: e9:f1:a9:e8:a7:e6:1c:9c:80:12:29:85:1e:59:0f:a6:ae:73: 5b:6c:c0:be:92:5d:3d:53:33:c0:57:55:06:0a:a6:f9:3f:01: cb:17:89:10:fb:d3:69:81:cb:60:10:7c:39:92:6e:16:6e:4a: 37:97:ee:9d:2f:9e:48:aa:0c:78:15:83:1e:32:1a:62:e7:f4: 78:91:2c:89:63:c9:9b:8d:46:f5:bf:4c:bd:e3:5b:fc:d6:80: 11:7b:d0:c4:21:ea:86:78:7d:15:54:e4:3a:4c:16:dc:98:97: 9d:ea:04:17:54:87:c9:86:ef:8d:23:d9:b7:3a:21:ce:11:bb: 30:a4:3f:9b:fc:91:a7:59:ad:94:3e:29:9b:7e:b0:d8:c2:c0: 66:23:45:aa -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUd3EbFFBsW4DAj6WwQQUg7EC4GrYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE2MTUyMDU0WhcNMjUxMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0AxODRlZWFkZGUxODZjZDc2ZDE3OWViMjMxZWFiMzNjN2Zk YWU3MTVjNDIxN2VmZDQwYTU1OWI4NzVjNmFiYTE3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKfmHAxuIwTh1Dq5wsrXcGeCubYotIlRfetKiMviDcNb1E wd9MyOWvEPvxhw+kS04Dku4nsvJAPDa2MylRcMiuAHBsWnAYWI6ngbrcLNg/Ibju Q9MDH0saVhQ4snqHoEQfQO4NWLM2PgaZcq9FFzmpv/JDoKWo+pOx3zha4+0CU0Te lkV7AK7DZ9dsdeAlqWUSZQ00hReEhSgeAzJWjTTEonvl35CTos8SizEDT7rihAbf 0mysNrRoRKoRGdQGk36COI7GuweSVo50JMVdXsP4DAUWGnDOWVqw+2FqFV8pBTVI aL00ODhSsAEJ7BiJ2FqnqqbqXfTLzqpxAS5iPwPRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUo6e6aTmImzqDWHfZUztVFAz1XYcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzA5YTFlMzRjLThkNTgtNGMyMS05YTVhLWYwZmZhYzhjYTNkZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASRIEwDQYJKoZIhvcNAQELBQADggEBALJ9tNtLV0zOc1nDFcTYLWxmAGHw tNfefNhlNBvY8bE+D+Oo1YCm2eMDqhyZG4i350m5CNuQ1k1lEOMgGcLC474xKCkV xNX1iJoNV9FoDdNfnOQWrwiSbmGCdroTbsxS97N2j+IoyicnsZ/Arunxqein5hyc gBIphR5ZD6auc1tswL6SXT1TM8BXVQYKpvk/AcsXiRD702mBy2AQfDmSbhZuSjeX 7p0vnkiqDHgVgx4yGmLn9HiRLIljyZuNRvW/TL3jW/zWgBF70MQh6oZ4fRVU5DpM FtyYl53qBBdUh8mG740j2bc6Ic4RuzCkP5v8kadZrZQ+KZt+sNjCwGYjRao= -----END CERTIFICATE-----Generated at Wed Nov 5 08:43:10 2025 by rpki-client