$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/db275d37-4104-4014-bb36-fed306e0e0cd.roa File: db275d37-4104-4014-bb36-fed306e0e0cd.roa (raw, json) Hash identifier: 1ScrG+xR37LTGCk9abT5lMH0SLRtjiZqpgpSXVawkYU= Subject key identifier: 7F:B4:34:9B:7D:37:64:B9:0D:D0:41:4C:DB:E4:7F:A6:87:07:DA:CF Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0296EEAD8D5594CE49930A6AAA1DADE2C3417839 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/db275d37-4104-4014-bb36-fed306e0e0cd.roa Signing time: Fri 24 Oct 2025 06:25:44 +0000 ROA not before: Fri 24 Oct 2025 06:25:44 +0000 ROA not after: Fri 28 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.244.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:96:ee:ad:8d:55:94:ce:49:93:0a:6a:aa:1d:ad:e2:c3:41:78:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 24 06:25:44 2025 GMT Not After : Nov 28 23:59:59 2025 GMT Subject: serialNumber=20e2228ed9c5b26fec3c012cfe88f743e04770c676ca7698729b1fa3c071984f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:13:21:d2:71:f0:28:d5:5e:df:bf:08:f2:55: 65:b8:59:b1:f7:7d:c1:c3:0e:9b:f6:7d:14:36:e0: 8a:40:c4:62:b5:bd:3e:ec:6c:84:ef:f4:02:07:9e: 08:17:6a:b6:8a:5a:ff:06:44:da:5a:53:94:80:dd: aa:9d:b0:4a:7c:be:c6:69:62:5b:e7:3a:74:46:0d: a7:a6:d1:8a:3f:88:fe:1b:97:86:53:1b:07:fd:4b: 0b:a2:0a:23:08:83:cc:e6:79:d4:db:ac:1c:d5:e7: ff:8c:9b:85:5c:3b:77:b0:2e:c4:c2:b4:f2:d8:d0: c2:c3:c7:09:15:32:b4:08:7a:3c:38:28:02:fb:b9: 4f:b1:0c:b8:81:7d:bc:f6:dc:8a:3d:27:7f:95:7a: b8:b2:42:ff:97:e6:99:b2:64:57:84:f9:c9:4d:11: ec:f0:8e:57:9f:e0:90:72:6a:79:cd:e4:62:26:0c: d0:32:f8:9a:2b:22:06:db:76:c6:c2:6a:5f:21:ac: bf:d8:ea:e3:9a:77:d2:fa:4c:85:29:7a:0e:55:63: 25:b9:1c:5f:4c:56:a6:1a:a5:ce:ed:9a:61:13:a0: ed:1e:c9:53:e2:79:62:97:11:de:6e:4d:24:09:51: 58:33:85:9c:c6:93:70:b6:c1:79:f4:35:29:a3:25: 1b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:B4:34:9B:7D:37:64:B9:0D:D0:41:4C:DB:E4:7F:A6:87:07:DA:CF X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/db275d37-4104-4014-bb36-fed306e0e0cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.244.0.0/16 Signature Algorithm: sha256WithRSAEncryption 2e:c9:d3:77:29:f6:94:df:62:29:91:82:fb:c6:3e:7d:11:f3: 28:8f:f9:f4:89:f8:52:8f:66:2d:65:24:66:bc:20:f4:61:11: c4:0b:ea:0b:65:b3:0b:e7:eb:32:bb:03:f0:f9:fd:f3:a9:94: 34:74:60:a3:3b:9f:05:77:75:b5:81:44:da:4a:fd:b8:c7:b6: 5e:87:03:83:b9:28:f1:bb:d6:b4:ab:12:d0:cd:32:23:8f:06: d6:91:d9:e2:03:44:f7:22:67:3b:0a:01:62:91:63:a4:32:ad: 47:00:63:ec:cf:f6:41:09:4f:59:1e:96:f8:6f:df:2b:cd:96: d7:79:95:47:58:d2:73:53:6e:37:75:c8:04:f3:d2:8b:f2:d3: e8:ec:4e:45:8e:bd:6c:e8:bc:15:fe:6b:f0:8b:82:f6:e9:63: 98:e9:31:f9:8e:c6:c3:eb:cf:d0:62:70:31:56:8c:7e:b1:84: bc:af:5e:01:57:1e:a2:72:b8:b9:4e:cb:3a:e5:30:d5:de:db: d9:ff:fb:0f:35:11:05:ca:e6:c3:c3:f9:56:89:62:4d:27:91: a4:fe:0e:db:f0:d5:35:98:c4:8e:4c:7a:f5:b7:3e:04:d8:00: d1:c3:39:54:0e:e6:90:9f:bf:5f:19:07:5b:3a:60:d1:16:61: d6:39:f5:fd -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUApburY1VlM5Jkwpqqh2t4sNBeDkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDI0MDYyNTQ0WhcNMjUxMTI4MjM1OTU5 WjB6MUkwRwYDVQQFE0AyMGUyMjI4ZWQ5YzViMjZmZWMzYzAxMmNmZTg4Zjc0M2Uw NDc3MGM2NzZjYTc2OTg3MjliMWZhM2MwNzE5ODRmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDsEyHScfAo1V7fvwjyVWW4WbH3fcHDDpv2fRQ24IpAxGK1 vT7sbITv9AIHnggXaraKWv8GRNpaU5SA3aqdsEp8vsZpYlvnOnRGDaem0Yo/iP4b l4ZTGwf9SwuiCiMIg8zmedTbrBzV5/+Mm4VcO3ewLsTCtPLY0MLDxwkVMrQIejw4 KAL7uU+xDLiBfbz23Io9J3+VeriyQv+X5pmyZFeE+clNEezwjlef4JByannN5GIm DNAy+JorIgbbdsbCal8hrL/Y6uOad9L6TIUpeg5VYyW5HF9MVqYapc7tmmEToO0e yVPieWKXEd5uTSQJUVgzhZzGk3C2wXn0NSmjJRs/AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUf7Q0m303ZLkN0EFM2+R/pocH2s8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2RiMjc1ZDM3LTQxMDQtNDAxNC1iYjM2LWZlZDMwNmUwZTBjZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAS9DANBgkqhkiG9w0BAQsFAAOCAQEALsnTdyn2lN9iKZGC+8Y+fRHzKI/5 9In4Uo9mLWUkZrwg9GERxAvqC2WzC+frMrsD8Pn986mUNHRgozufBXd1tYFE2kr9 uMe2XocDg7ko8bvWtKsS0M0yI48G1pHZ4gNE9yJnOwoBYpFjpDKtRwBj7M/2QQlP WR6W+G/fK82W13mVR1jSc1NuN3XIBPPSi/LT6OxORY69bOi8Ff5r8IuC9uljmOkx +Y7Gw+vP0GJwMVaMfrGEvK9eAVceonK4uU7LOuUw1d7b2f/7DzURBcrmw8P5Voli TSeRpP4O2/DVNZjEjkx69bc+BNgA0cM5VA7mkJ+/XxkHWzpg0RZh1jn1/Q== -----END CERTIFICATE-----Generated at Wed Nov 5 10:33:19 2025 by rpki-client