$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1a243864-1c8b-41c4-b402-12fee2eb43fb.roa File: 1a243864-1c8b-41c4-b402-12fee2eb43fb.roa (raw, json) Hash identifier: L4UJVdqbSqo3tRZhO1Aw1Sj1a0bssDHQroDWt8ONxYM= Subject key identifier: B5:2C:DC:6B:FC:87:3F:D4:CD:DD:1E:DF:39:29:BA:67:3F:7B:D7:CB Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 43F80D1AB9B112748423C4766BC22F59BD9E9855 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1a243864-1c8b-41c4-b402-12fee2eb43fb.roa Signing time: Sat 18 Oct 2025 06:43:22 +0000 ROA not before: Sat 18 Oct 2025 06:43:22 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.173.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:f8:0d:1a:b9:b1:12:74:84:23:c4:76:6b:c2:2f:59:bd:9e:98:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 06:43:22 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=8387c04343106da2ef31ef989d959355eeb4dbe6e124d643d6c93693e0e40d2c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:23:1d:5e:d6:a1:fc:1b:7c:0e:ed:f7:ba:9d: 7f:6a:05:e3:3e:8d:0e:b9:da:22:f0:36:bb:c7:0a: 28:d6:0a:95:b9:84:39:94:ea:9a:68:de:ee:55:47: 1a:7a:5c:d8:c8:c0:8c:69:49:8a:21:b1:b8:85:59: 4f:f6:88:e5:0a:fe:c8:ae:13:75:3a:29:3c:e9:08: 55:fe:04:69:a6:78:50:6a:fc:09:d6:30:85:d2:17: f2:e8:93:4c:ae:b3:2c:75:e9:c2:46:42:44:09:fb: ca:26:1b:aa:9d:6b:95:ad:33:60:80:44:2b:a8:ae: ab:08:d5:d3:b2:39:93:ca:33:fd:bc:6d:10:da:69: ab:63:22:bf:da:3a:81:d6:af:99:03:09:32:81:98: 73:ff:b6:eb:c6:0a:15:6c:34:32:43:6a:e7:ea:ae: 49:39:17:c5:19:d7:6a:d6:0e:f7:04:7b:c7:b8:7b: c7:b2:b8:a1:5f:98:c8:ef:7a:1d:f8:30:7d:25:22: 89:98:24:0b:58:8e:db:e2:77:ee:09:10:50:40:11: 92:72:3b:2b:ff:4c:79:d8:a7:16:1f:1b:4d:be:43: 6a:fd:35:89:f6:fb:ad:21:a4:f5:05:78:8d:23:99: ec:13:51:c2:f3:22:f7:96:af:95:f3:9f:37:f8:a9: 2e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:2C:DC:6B:FC:87:3F:D4:CD:DD:1E:DF:39:29:BA:67:3F:7B:D7:CB X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1a243864-1c8b-41c4-b402-12fee2eb43fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.173.120.0/22 Signature Algorithm: sha256WithRSAEncryption 13:5f:ed:7b:aa:14:0b:f6:ba:65:8a:50:23:a5:60:42:b2:cb: 7d:b9:69:25:c2:3b:bf:79:87:44:1a:7d:bb:e4:48:73:3c:6e: ef:bc:da:06:db:d2:c1:93:ad:6b:d0:61:1e:d6:4f:6a:9e:05: a2:ad:24:16:21:01:8b:3b:c0:ac:c9:74:92:f2:d2:7f:3c:73: f6:9e:ae:a6:34:78:8f:ae:27:45:6f:1a:41:14:dd:07:a6:04: ee:20:2b:b2:80:c8:fa:6a:45:89:b9:d0:a2:81:e8:5d:70:df: e2:67:26:c1:0b:06:56:11:07:28:31:e2:1a:8b:7e:31:53:34: 3f:1f:fb:04:22:c4:45:3e:9a:75:d3:48:ae:3c:13:a7:bb:ba: 91:00:86:27:03:2b:33:95:67:ae:98:3b:d7:52:6e:10:0e:81: f5:96:1d:16:54:ba:22:5d:ec:25:9c:a2:ad:68:32:9c:21:cc: 10:95:ab:f5:26:a8:29:30:1f:df:b0:67:06:aa:1e:5c:03:d9: 37:63:a5:bc:7c:34:63:df:55:49:18:01:39:b6:e5:4a:05:8a: 49:b8:9f:17:05:0b:eb:4b:23:2c:2f:a0:3b:72:43:ef:e1:bf: 48:4b:8c:e4:29:21:18:b1:06:31:d8:f3:51:89:d5:36:db:ce: 97:c7:a9:b0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQ/gNGrmxEnSEI8R2a8IvWb2emFUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MDY0MzIyWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A4Mzg3YzA0MzQzMTA2ZGEyZWYzMWVmOTg5ZDk1OTM1NWVl YjRkYmU2ZTEyNGQ2NDNkNmM5MzY5M2UwZTQwZDJjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNIx1e1qH8G3wO7fe6nX9qBeM+jQ652iLwNrvHCijWCpW5 hDmU6ppo3u5VRxp6XNjIwIxpSYohsbiFWU/2iOUK/siuE3U6KTzpCFX+BGmmeFBq /AnWMIXSF/Lok0yusyx16cJGQkQJ+8omG6qda5WtM2CARCuorqsI1dOyOZPKM/28 bRDaaatjIr/aOoHWr5kDCTKBmHP/tuvGChVsNDJDaufqrkk5F8UZ12rWDvcEe8e4 e8eyuKFfmMjveh34MH0lIomYJAtYjtvid+4JEFBAEZJyOyv/THnYpxYfG02+Q2r9 NYn2+60hpPUFeI0jmewTUcLzIveWr5Xznzf4qS4tAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUtSzca/yHP9TN3R7fOSm6Zz9718swHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzFhMjQzODY0LTFjOGItNDFjNC1iNDAyLTEyZmVlMmViNDNmYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAISrXgwDQYJKoZIhvcNAQELBQADggEBABNf7XuqFAv2umWKUCOlYEKyy325 aSXCO795h0QafbvkSHM8bu+82gbb0sGTrWvQYR7WT2qeBaKtJBYhAYs7wKzJdJLy 0n88c/aerqY0eI+uJ0VvGkEU3QemBO4gK7KAyPpqRYm50KKB6F1w3+JnJsELBlYR Bygx4hqLfjFTND8f+wQixEU+mnXTSK48E6e7upEAhicDKzOVZ66YO9dSbhAOgfWW HRZUuiJd7CWcoq1oMpwhzBCVq/UmqCkwH9+wZwaqHlwD2Tdjpbx8NGPfVUkYATm2 5UoFikm4nxcFC+tLIywvoDtyQ+/hv0hLjOQpIRixBjHY81GJ1TbbzpfHqbA= -----END CERTIFICATE-----Generated at Mon Oct 20 19:16:28 2025 by rpki-client