$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0427d96e-6351-47b0-ac3a-e88ba1a944b3.roa File: 0427d96e-6351-47b0-ac3a-e88ba1a944b3.roa (raw, json) Hash identifier: 5CBwSeM+yEsO7EJ0LbfTli9Hu7gyMw8tiJI2BIu2Bz4= Subject key identifier: A7:53:1D:92:C2:23:68:44:EC:A3:EA:A9:09:BC:04:21:92:11:6D:24 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 78FD6CD392FDF5B0F4896E3E2E6598B3B00AC2EC Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0427d96e-6351-47b0-ac3a-e88ba1a944b3.roa Signing time: Sat 18 Oct 2025 09:30:18 +0000 ROA not before: Sat 18 Oct 2025 09:30:18 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.161.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:fd:6c:d3:92:fd:f5:b0:f4:89:6e:3e:2e:65:98:b3:b0:0a:c2:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 09:30:18 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=2af57f335b9f3715d023a5da83b3ad90f00b232a0dd6cdf16a4442fa062e8b8f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d3:91:57:38:a4:0e:20:5c:4e:56:2b:61:d8: 82:f5:94:63:76:28:32:40:2a:39:78:9c:37:23:29: 38:29:18:8b:28:bb:54:14:7a:69:53:76:d6:a5:2b: 66:cb:1d:c8:33:dd:bb:4e:d2:04:90:e1:c0:11:74: 90:b8:ef:8a:7e:2b:0d:01:cb:09:f1:45:41:e8:67: fc:cc:e3:b6:69:62:91:c2:59:32:73:c1:5a:fb:56: 13:8a:05:2d:ba:7b:81:51:36:56:b6:09:0d:64:bf: 39:19:63:0b:6e:eb:d5:47:cc:b1:8c:a3:30:cb:39: 29:0c:32:65:92:39:a2:dd:8f:17:cd:a8:d8:6a:8b: df:ba:5d:a3:8c:6b:94:49:f3:3e:d3:f6:a2:96:f4: 48:83:88:2d:cc:5d:c1:74:fc:e8:5f:ed:3b:c5:e6: 7a:d7:b5:d7:91:b2:a6:88:ce:cf:22:97:d1:90:70: df:98:31:0a:29:e1:f2:97:7e:77:b7:5b:66:05:d1: a3:40:6a:6f:42:87:b6:fa:e2:66:f0:da:48:9d:14: 3e:18:dd:23:7e:07:c1:da:e1:53:f8:5d:a3:f4:1c: 41:74:a4:dc:8f:fd:8d:eb:6f:8f:f9:1e:f0:60:3f: 24:c6:56:d2:c0:1b:1c:af:f8:63:af:35:00:00:88: 3f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:53:1D:92:C2:23:68:44:EC:A3:EA:A9:09:BC:04:21:92:11:6D:24 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0427d96e-6351-47b0-ac3a-e88ba1a944b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.161.0.0/16 Signature Algorithm: sha256WithRSAEncryption 2b:c3:c0:a9:24:c8:71:3b:05:92:cb:b0:89:4c:2c:3f:76:ac: a7:2e:8d:b2:39:95:cd:e1:23:da:22:50:58:86:ee:2b:b9:82: 88:f3:5e:41:65:43:7b:ee:d7:ca:94:87:75:c7:37:d6:f5:ab: 2e:83:74:7d:26:8b:38:6e:27:06:39:dc:c4:81:e4:99:cc:ab: d6:f7:45:ce:17:86:57:83:89:85:ea:35:14:8c:ad:b6:14:4f: d6:17:eb:96:d4:76:2a:bd:5e:34:f7:ca:94:59:61:61:ba:6a: 15:9d:73:c8:50:5f:34:46:79:e2:e9:c1:d2:17:9f:2b:f9:b8: 61:8e:c5:6c:56:10:e6:9f:93:4a:ba:43:8f:a5:f8:1d:25:00: 83:c9:89:c3:52:a4:b1:93:5f:60:1a:e2:81:36:f2:26:61:29: c1:99:6d:c2:c9:95:e2:0c:72:3f:ad:6c:78:83:5e:7c:0f:45: 24:60:c9:91:a7:0e:76:b3:5b:dd:9e:51:b4:db:2c:7e:1a:83: 7e:ab:ad:25:a6:3f:93:f0:ac:33:03:bc:3f:63:19:ee:73:45: e7:62:eb:d8:d2:9c:7c:d9:f5:99:68:50:1e:56:7d:6c:58:21: 2b:ad:61:87:ee:f3:09:17:ae:65:b5:40:25:4a:a8:eb:14:80: f2:a8:50:12 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUeP1s05L99bD0iW4+LmWYs7AKwuwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MDkzMDE4WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AyYWY1N2YzMzViOWYzNzE1ZDAyM2E1ZGE4M2IzYWQ5MGYw MGIyMzJhMGRkNmNkZjE2YTQ0NDJmYTA2MmU4YjhmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQ05FXOKQOIFxOVith2IL1lGN2KDJAKjl4nDcjKTgpGIso u1QUemlTdtalK2bLHcgz3btO0gSQ4cARdJC474p+Kw0BywnxRUHoZ/zM47ZpYpHC WTJzwVr7VhOKBS26e4FRNla2CQ1kvzkZYwtu69VHzLGMozDLOSkMMmWSOaLdjxfN qNhqi9+6XaOMa5RJ8z7T9qKW9EiDiC3MXcF0/Ohf7TvF5nrXtdeRsqaIzs8il9GQ cN+YMQop4fKXfne3W2YF0aNAam9Ch7b64mbw2kidFD4Y3SN+B8Ha4VP4XaP0HEF0 pNyP/Y3rb4/5HvBgPyTGVtLAGxyv+GOvNQAAiD+5AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUp1MdksIjaETso+qpCbwEIZIRbSQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzA0MjdkOTZlLTYzNTEtNDdiMC1hYzNhLWU4OGJhMWE5NDRiMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwASoTANBgkqhkiG9w0BAQsFAAOCAQEAK8PAqSTIcTsFksuwiUwsP3aspy6N sjmVzeEj2iJQWIbuK7mCiPNeQWVDe+7XypSHdcc31vWrLoN0fSaLOG4nBjncxIHk mcyr1vdFzheGV4OJheo1FIytthRP1hfrltR2Kr1eNPfKlFlhYbpqFZ1zyFBfNEZ5 4unB0hefK/m4YY7FbFYQ5p+TSrpDj6X4HSUAg8mJw1KksZNfYBrigTbyJmEpwZlt wsmV4gxyP61seINefA9FJGDJkacOdrNb3Z5RtNssfhqDfqutJaY/k/CsMwO8P2MZ 7nNF52Lr2NKcfNn1mWhQHlZ9bFghK61hh+7zCReuZbVAJUqo6xSA8qhQEg== -----END CERTIFICATE-----Generated at Mon Oct 20 13:17:34 2025 by rpki-client