$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0cff10a6-04b6-4d0c-a0c6-d54d190d1c7b.roa File: 0cff10a6-04b6-4d0c-a0c6-d54d190d1c7b.roa (raw, json) Hash identifier: fqKSjewxkhqDg7v8OTiNhp28Z6/0zB19/vwab46Q85U= Subject key identifier: A2:15:96:5D:F1:59:AD:E6:B6:D4:67:F0:E7:EB:29:45:2C:59:78:1C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5B5AF8D6043E31502F087A702B07FA09915DE536 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0cff10a6-04b6-4d0c-a0c6-d54d190d1c7b.roa Signing time: Sat 18 Oct 2025 23:32:44 +0000 ROA not before: Sat 18 Oct 2025 23:32:44 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.172.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:5a:f8:d6:04:3e:31:50:2f:08:7a:70:2b:07:fa:09:91:5d:e5:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 23:32:44 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=e23c659ff9f6ebf8de99821ad3366f46c070f28466885db7fb81767a61f04f45, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ce:11:38:1f:4f:2e:79:b0:ee:c3:b4:5a:9d: 78:e7:9c:2b:d4:19:aa:76:d4:02:0f:9c:84:a8:41: 1e:03:30:ac:ac:42:28:64:dc:04:91:58:ef:77:68: 28:28:0b:13:af:8b:7b:59:ba:ea:26:53:64:d3:29: b3:96:85:65:d9:a2:ec:e9:bd:54:12:2d:70:63:40: e8:21:c3:87:fb:55:9d:89:31:bd:c8:c6:cb:63:31: bf:13:eb:61:29:3a:6c:0d:08:c6:63:2d:f2:64:96: f3:9b:38:8e:ad:19:48:73:7d:55:11:99:92:c9:8d: 2d:d8:49:77:ca:24:6b:e8:4d:1b:e8:38:59:09:aa: 3a:3c:56:63:c7:39:e8:fe:6d:95:1b:a1:16:6f:dc: 05:11:77:c5:68:79:e6:7e:78:7f:0e:ec:05:02:49: 98:95:a6:b3:b0:20:23:ad:cc:82:59:b1:7f:c1:9c: d1:75:18:e1:d7:01:05:ea:c0:40:43:80:f5:ce:2a: ed:a3:6c:33:3e:5e:48:f7:2c:d4:28:5b:66:4a:69: 2c:70:50:2c:73:21:f7:7f:9e:06:1c:97:e3:3a:9a: ae:53:e8:64:6e:4d:b6:ce:7b:ee:64:db:ff:27:3e: 6c:c8:38:c4:64:5e:09:1b:f9:5f:8b:0a:09:1a:5d: 00:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:15:96:5D:F1:59:AD:E6:B6:D4:67:F0:E7:EB:29:45:2C:59:78:1C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0cff10a6-04b6-4d0c-a0c6-d54d190d1c7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.172.160.0/19 Signature Algorithm: sha256WithRSAEncryption 10:b4:5e:57:e1:e7:cb:c6:f3:2c:6c:22:d5:9d:39:4f:a9:5c: 7c:a1:62:fa:2d:6e:d6:cc:6a:51:33:9c:0f:92:27:2a:dd:66: 6c:36:b8:aa:4b:dd:82:5f:18:38:4e:d3:7c:9b:4e:41:32:34: e1:59:d2:3a:8b:1d:ca:b5:45:30:0b:f0:95:3b:43:be:99:b1: 48:25:31:da:33:0b:fc:21:08:cc:dc:95:63:58:43:5d:3d:c3: b5:22:3f:27:96:41:88:dd:c0:da:e3:39:cf:44:0e:13:e6:ee: 6b:79:d3:55:76:a6:05:0d:95:0e:3f:3f:95:23:04:95:c6:01: 4e:4d:f2:dd:b6:2a:a5:db:fd:e7:04:c0:c5:2d:94:e3:83:40: 92:c4:3a:25:9a:25:e9:2d:83:f2:6c:1d:94:72:af:e6:b8:28: 91:df:8e:68:43:dd:0d:41:bf:24:4a:1d:4b:f4:18:cc:22:28: 1f:81:d5:22:a9:a8:29:8e:23:59:46:11:42:9c:9a:fb:11:7f: c8:9d:fd:77:2b:4a:01:45:43:73:0a:4b:72:d7:4c:39:d5:6e: b8:7c:06:a8:50:af:66:7b:8a:f8:ec:bc:af:09:14:38:56:78: d3:ae:c1:b3:67:b2:16:cb:10:09:6f:d3:1d:43:fb:62:95:98: 9a:f1:53:b3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUW1r41gQ+MVAvCHpwKwf6CZFd5TYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MjMzMjQ0WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BlMjNjNjU5ZmY5ZjZlYmY4ZGU5OTgyMWFkMzM2NmY0NmMw NzBmMjg0NjY4ODVkYjdmYjgxNzY3YTYxZjA0ZjQ1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCUzhE4H08uebDuw7RanXjnnCvUGap21AIPnISoQR4DMKys Qihk3ASRWO93aCgoCxOvi3tZuuomU2TTKbOWhWXZouzpvVQSLXBjQOghw4f7VZ2J Mb3IxstjMb8T62EpOmwNCMZjLfJklvObOI6tGUhzfVURmZLJjS3YSXfKJGvoTRvo OFkJqjo8VmPHOej+bZUboRZv3AURd8VoeeZ+eH8O7AUCSZiVprOwICOtzIJZsX/B nNF1GOHXAQXqwEBDgPXOKu2jbDM+Xkj3LNQoW2ZKaSxwUCxzIfd/ngYcl+M6mq5T 6GRuTbbOe+5k2/8nPmzIOMRkXgkb+V+LCgkaXQDJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUohWWXfFZrea21Gfw5+spRSxZeBwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzBjZmYxMGE2LTA0YjYtNGQwYy1hMGM2LWQ1NGQxOTBkMWM3Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUSrKAwDQYJKoZIhvcNAQELBQADggEBABC0Xlfh58vG8yxsItWdOU+pXHyh YvotbtbMalEznA+SJyrdZmw2uKpL3YJfGDhO03ybTkEyNOFZ0jqLHcq1RTAL8JU7 Q76ZsUglMdozC/whCMzclWNYQ109w7UiPyeWQYjdwNrjOc9EDhPm7mt501V2pgUN lQ4/P5UjBJXGAU5N8t22KqXb/ecEwMUtlOODQJLEOiWaJektg/JsHZRyr+a4KJHf jmhD3Q1BvyRKHUv0GMwiKB+B1SKpqCmOI1lGEUKcmvsRf8id/XcrSgFFQ3MKS3LX TDnVbrh8BqhQr2Z7ivjsvK8JFDhWeNOuwbNnshbLEAlv0x1D+2KVmJrxU7M= -----END CERTIFICATE-----Generated at Mon Oct 20 17:29:29 2025 by rpki-client