$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/156b7432-6f11-4d5c-ad1c-5975d2047c98.roa File: 156b7432-6f11-4d5c-ad1c-5975d2047c98.roa (raw, json) Hash identifier: LdlWG7A/DYhPLqtRdFP/IszEP+wi0Yet/i4NMSdZRpo= Subject key identifier: 82:27:65:DC:08:DC:EC:84:9D:8D:3E:95:72:EE:4F:73:FE:9C:23:4C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 48252D9A57CB78B6B303FB5A2805456513E53D44 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/156b7432-6f11-4d5c-ad1c-5975d2047c98.roa Signing time: Sat 18 Oct 2025 16:22:32 +0000 ROA not before: Sat 18 Oct 2025 16:22:32 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.164.210.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:25:2d:9a:57:cb:78:b6:b3:03:fb:5a:28:05:45:65:13:e5:3d:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 16:22:32 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=fe965fb73362d06cf3ba27e259dfea38dc694b2e53ef604375e0257ea3fd8a1c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:3a:68:0c:40:9e:2f:c7:8c:97:0a:a9:2e:51: 44:c4:4c:96:ca:61:d3:49:f4:a6:55:83:e4:03:be: 0e:af:f2:e6:0f:80:a2:33:02:e0:07:32:c9:db:d4: 39:79:4d:9a:65:04:71:71:8b:dd:1c:0f:aa:de:c3: 5b:7e:2c:fb:a6:9f:0f:5a:2e:cc:54:85:06:cd:0e: 24:4a:e7:98:d8:ca:a5:38:22:59:84:73:79:f1:47: 05:6a:ca:e6:14:45:0d:53:34:e9:7e:12:26:97:3b: 87:ba:42:94:82:4b:f9:94:bc:b7:df:c2:c2:7b:ef: 5d:0a:19:04:14:81:03:f1:94:ad:0f:fe:d7:6f:95: 70:3d:a5:ae:6d:fc:8b:72:dc:ac:5d:2c:da:e4:7c: eb:d5:5d:33:9b:e9:49:ff:9e:6d:30:01:28:f9:a5: d1:64:4e:db:d8:4b:a6:4e:8c:f3:82:f5:ea:68:7a: ab:ef:27:48:24:0d:bb:21:2b:5e:2f:fe:fa:a3:f1: 20:a0:c3:f9:f2:0b:50:c0:6a:e9:19:75:9e:f8:2b: 48:f2:eb:41:3a:47:0c:e2:36:40:72:21:31:eb:fd: 70:75:6f:3f:21:21:59:c8:1f:13:db:e7:27:91:33: f9:c2:79:fb:80:73:a6:2d:1d:68:b9:4f:33:4c:49: 0c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:27:65:DC:08:DC:EC:84:9D:8D:3E:95:72:EE:4F:73:FE:9C:23:4C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/156b7432-6f11-4d5c-ad1c-5975d2047c98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.164.210.0/23 Signature Algorithm: sha256WithRSAEncryption 28:91:8d:31:da:4d:e9:e1:6d:5f:eb:17:a2:15:fe:34:32:24: b2:cc:34:f8:ee:7f:56:f0:0a:39:e0:68:08:a9:ce:bd:f3:fb: 7e:70:33:b8:29:c2:25:aa:02:42:ef:87:98:7e:ad:e1:d2:9a: e0:1e:85:0a:09:30:0e:ed:a7:5b:96:0e:52:4b:84:e1:8b:4b: 09:ca:65:cb:f9:0e:69:e7:f1:7c:1d:e7:cb:df:9b:20:d4:4c: 72:9c:8a:7e:3b:f7:a3:7d:55:7b:62:cc:54:b0:da:a0:f5:65: ea:1f:ce:be:de:46:bb:24:8f:e6:45:98:22:30:f4:39:cb:7b: 1c:fb:80:d7:17:5e:37:d2:e1:9d:87:8d:26:30:b6:3b:68:e3: cb:dc:d0:f3:7e:44:39:c6:a8:15:42:1f:45:39:58:ec:01:99: 74:6c:7c:89:05:29:ed:6e:3d:a1:b3:63:5f:04:f4:57:8b:49: 5f:e0:15:4d:6d:33:5f:41:4e:bb:c9:0a:f1:31:03:00:74:03: 38:eb:d2:e7:15:f9:10:b1:d1:6b:85:cc:a2:b1:c8:55:10:d9: d9:9e:94:1e:1a:fe:5f:61:e2:7e:58:b2:e5:26:b5:a1:12:8d: 6e:7e:34:70:a4:16:e7:ed:24:66:36:e7:ab:fe:2e:e2:c3:74: 87:84:0c:d9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSCUtmlfLeLazA/taKAVFZRPlPUQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTYyMjMyWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BmZTk2NWZiNzMzNjJkMDZjZjNiYTI3ZTI1OWRmZWEzOGRj Njk0YjJlNTNlZjYwNDM3NWUwMjU3ZWEzZmQ4YTFjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCOOmgMQJ4vx4yXCqkuUUTETJbKYdNJ9KZVg+QDvg6v8uYP gKIzAuAHMsnb1Dl5TZplBHFxi90cD6rew1t+LPumnw9aLsxUhQbNDiRK55jYyqU4 IlmEc3nxRwVqyuYURQ1TNOl+EiaXO4e6QpSCS/mUvLffwsJ7710KGQQUgQPxlK0P /tdvlXA9pa5t/Ity3KxdLNrkfOvVXTOb6Un/nm0wASj5pdFkTtvYS6ZOjPOC9epo eqvvJ0gkDbshK14v/vqj8SCgw/nyC1DAaukZdZ74K0jy60E6RwziNkByITHr/XB1 bz8hIVnIHxPb5yeRM/nCefuAc6YtHWi5TzNMSQzFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUgidl3Ajc7ISdjT6Vcu5Pc/6cI0wwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzE1NmI3NDMyLTZmMTEtNGQ1Yy1hZDFjLTU5NzVkMjA0N2M5OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESpNIwDQYJKoZIhvcNAQELBQADggEBACiRjTHaTenhbV/rF6IV/jQyJLLM NPjuf1bwCjngaAipzr3z+35wM7gpwiWqAkLvh5h+reHSmuAehQoJMA7tp1uWDlJL hOGLSwnKZcv5Dmnn8Xwd58vfmyDUTHKcin4796N9VXtizFSw2qD1Zeofzr7eRrsk j+ZFmCIw9DnLexz7gNcXXjfS4Z2HjSYwtjto48vc0PN+RDnGqBVCH0U5WOwBmXRs fIkFKe1uPaGzY18E9FeLSV/gFU1tM19BTrvJCvExAwB0Azjr0ucV+RCx0WuFzKKx yFUQ2dmelB4a/l9h4n5YsuUmtaESjW5+NHCkFuftJGY256v+LuLDdIeEDNk= -----END CERTIFICATE-----Generated at Mon Oct 20 15:45:37 2025 by rpki-client