$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1bd60d2c-d72c-4ed9-b0de-caa0b3dc96a1.roa File: 1bd60d2c-d72c-4ed9-b0de-caa0b3dc96a1.roa (raw, json) Hash identifier: d/j1DfUCvaXd5+7B/9oPQj2pgCJOYfnQanZfwOXmlBM= Subject key identifier: E6:DB:A2:AF:F9:FA:A9:92:50:E6:97:07:A8:5C:01:D2:E6:7E:A4:32 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 21AB81108E91512FE211EEF6A2B636461F90C941 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1bd60d2c-d72c-4ed9-b0de-caa0b3dc96a1.roa Signing time: Sun 19 Oct 2025 12:23:58 +0000 ROA not before: Sun 19 Oct 2025 12:23:58 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.67.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:ab:81:10:8e:91:51:2f:e2:11:ee:f6:a2:b6:36:46:1f:90:c9:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 12:23:58 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=0ec97c2119c4fac213db4ee0fd6d00785871cb8d38e5f462f51622d4777fa6ab, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d2:40:ba:ae:f9:f2:f1:2b:73:83:cd:16:6f: d3:8e:9f:7d:be:04:93:a1:df:56:d0:7b:7a:db:01: ab:f1:87:3c:7b:ca:e4:6d:18:3b:92:a2:b9:fe:c4: 17:f8:25:39:b9:bf:00:f0:66:64:e9:03:11:14:b6: 28:6f:14:36:64:51:09:03:67:48:98:a6:63:f9:1a: 83:1b:d1:b5:9b:3f:92:34:be:4a:f3:b1:b0:7e:31: 20:25:c4:62:e2:c8:7e:66:8a:1c:2c:11:07:7a:5e: 90:1a:e0:26:c7:44:ae:c3:6f:62:7b:06:e0:76:02: 0f:25:bb:43:d5:55:ae:7b:2e:cc:9d:7c:6c:0f:6d: 7b:6a:22:bd:f4:ac:b3:75:51:b9:a1:b5:b3:ac:86: a6:8f:a3:92:c8:f9:3b:9d:74:fa:21:e5:be:0a:77: f9:c6:50:a9:8f:b0:6e:1a:6f:a8:c9:5e:88:08:19: cf:a3:a2:9c:40:8e:37:d0:04:46:c7:a3:ed:5e:d6: 7a:a4:26:6c:4d:f9:4b:2b:0e:43:e6:28:6b:af:be: 37:43:92:1a:f9:6a:5e:28:29:44:02:43:ed:fb:60: cf:8c:13:63:05:17:f6:63:d6:c8:1c:33:36:71:3c: 93:35:b8:9b:81:79:b8:be:d5:4d:02:a6:ee:44:99: d4:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:DB:A2:AF:F9:FA:A9:92:50:E6:97:07:A8:5C:01:D2:E6:7E:A4:32 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1bd60d2c-d72c-4ed9-b0de-caa0b3dc96a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.67.8.0/21 Signature Algorithm: sha256WithRSAEncryption 18:4c:c4:69:04:d2:44:2f:7b:8b:57:a6:ae:84:eb:45:b2:9c: 2c:75:6e:90:63:13:83:ab:9d:1b:4b:b8:f5:9f:6a:df:e0:59: de:66:70:f8:9b:25:74:5e:91:13:1f:50:67:4c:4a:38:57:d7: 83:bc:08:b1:9e:78:fc:77:24:45:da:25:f2:a6:e1:60:c8:18: 0f:90:b4:32:9c:75:54:3e:75:8d:b0:0b:8b:90:cb:39:b5:ba: 27:16:f9:08:e7:c1:26:08:0a:3d:dc:a6:e7:74:a7:d7:c4:f6: 0d:e7:ba:1b:76:1b:52:5c:d4:2e:24:14:9b:fd:dd:2c:d3:ea: bf:04:b5:ed:75:f7:72:c9:f6:52:ba:72:5d:d5:c0:7d:e7:24: 25:a3:f0:b4:02:29:ef:26:d4:48:2e:ba:98:62:62:38:1d:1d: 67:97:21:95:c5:16:fc:de:ff:12:b0:1a:97:ae:a8:b4:af:fa: 99:2a:29:75:da:26:66:04:17:1c:7d:0b:22:eb:d5:eb:3c:ee: 1f:59:e7:cd:da:78:d5:f3:87:e9:03:24:d8:77:2f:4e:d3:b2: b5:9b:0f:79:a1:28:3f:b0:70:64:b0:b2:b0:66:f7:b8:86:85: 13:29:c9:24:2e:da:30:c9:0d:e6:85:8b:a6:a1:16:e4:f4:d5: 75:01:bf:1d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIauBEI6RUS/iEe72orY2Rh+QyUEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTIyMzU4WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AwZWM5N2MyMTE5YzRmYWMyMTNkYjRlZTBmZDZkMDA3ODU4 NzFjYjhkMzhlNWY0NjJmNTE2MjJkNDc3N2ZhNmFiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDW0kC6rvny8Stzg80Wb9OOn32+BJOh31bQe3rbAavxhzx7 yuRtGDuSorn+xBf4JTm5vwDwZmTpAxEUtihvFDZkUQkDZ0iYpmP5GoMb0bWbP5I0 vkrzsbB+MSAlxGLiyH5mihwsEQd6XpAa4CbHRK7Db2J7BuB2Ag8lu0PVVa57Lsyd fGwPbXtqIr30rLN1UbmhtbOshqaPo5LI+TuddPoh5b4Kd/nGUKmPsG4ab6jJXogI Gc+jopxAjjfQBEbHo+1e1nqkJmxN+UsrDkPmKGuvvjdDkhr5al4oKUQCQ+37YM+M E2MFF/Zj1sgcMzZxPJM1uJuBebi+1U0Cpu5EmdQ/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU5tuir/n6qZJQ5pcHqFwB0uZ+pDIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzFiZDYwZDJjLWQ3MmMtNGVkOS1iMGRlLWNhYTBiM2RjOTZhMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMSQwgwDQYJKoZIhvcNAQELBQADggEBABhMxGkE0kQve4tXpq6E60WynCx1 bpBjE4OrnRtLuPWfat/gWd5mcPibJXRekRMfUGdMSjhX14O8CLGeePx3JEXaJfKm 4WDIGA+QtDKcdVQ+dY2wC4uQyzm1uicW+QjnwSYICj3cpud0p9fE9g3nuht2G1Jc 1C4kFJv93SzT6r8Ete1193LJ9lK6cl3VwH3nJCWj8LQCKe8m1EguuphiYjgdHWeX IZXFFvze/xKwGpeuqLSv+pkqKXXaJmYEFxx9CyLr1es87h9Z583aeNXzh+kDJNh3 L07TsrWbD3mhKD+wcGSwsrBm97iGhRMpySQu2jDJDeaFi6ahFuT01XUBvx0= -----END CERTIFICATE-----Generated at Mon Oct 20 17:29:10 2025 by rpki-client