$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1cbb65b3-55db-42c5-9307-89cfcec6932d.roa File: 1cbb65b3-55db-42c5-9307-89cfcec6932d.roa (raw, json) Hash identifier: 5sZE1u/T50tsa7C1VRVDzkcH8er0W0IKhvCuME2TNE0= Subject key identifier: 62:06:ED:10:7A:7B:4B:FD:68:D3:E7:66:77:5A:68:38:60:26:61:EC Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5A177FB5D01A063DCBA5ECFD7F22CF57D5B45E7C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1cbb65b3-55db-42c5-9307-89cfcec6932d.roa Signing time: Sat 18 Oct 2025 08:52:27 +0000 ROA not before: Sat 18 Oct 2025 08:52:27 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.161.46.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:17:7f:b5:d0:1a:06:3d:cb:a5:ec:fd:7f:22:cf:57:d5:b4:5e:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 08:52:27 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=9e9820a2053890184dc0d23a9e1d0199f60c987b8837b9e9d1bd8bfc39360be5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:34:03:99:32:3d:c8:12:df:8c:3d:d5:c4:60: 7b:08:74:f1:22:b3:fb:ad:a3:1b:55:cd:d0:59:83: d3:bf:9a:ee:8c:51:9b:de:39:95:19:68:21:64:18: 7f:75:f8:26:53:1d:74:e2:09:dc:26:44:5a:6c:b9: 77:18:75:8e:cb:a8:df:16:08:0a:27:a0:b7:d9:f2: 50:64:f4:0b:17:b5:16:c7:d0:30:9b:a0:5e:47:4a: 01:3c:68:52:2d:29:71:06:1a:07:02:81:96:0d:04: e4:59:dd:ac:1b:ca:6c:68:06:43:17:57:9b:13:41: ab:18:4f:5d:32:58:00:67:c7:6c:ac:28:e7:fd:5e: ec:85:b6:80:f8:9a:0e:fa:40:b0:59:f4:7e:50:b1: 44:28:b2:6e:6b:f3:95:ba:17:f5:45:74:68:8d:9a: f6:e8:f5:5d:fa:c0:6f:a6:95:34:11:50:7f:2b:e1: c7:54:94:50:51:22:95:27:7f:d9:1a:29:75:7b:c2: 59:21:1f:77:5c:48:85:9a:2f:84:82:e4:29:12:f1: 29:14:61:d4:a5:53:3b:ed:59:ff:fb:71:b3:ff:6f: 07:51:10:ae:e5:b3:1b:05:f0:f2:ad:ed:49:5a:fb: 12:77:2a:4e:28:ef:8d:58:c2:6b:48:1e:bc:8f:91: 3a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:06:ED:10:7A:7B:4B:FD:68:D3:E7:66:77:5A:68:38:60:26:61:EC X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1cbb65b3-55db-42c5-9307-89cfcec6932d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.161.46.0/23 Signature Algorithm: sha256WithRSAEncryption 25:8d:ea:00:b8:e9:27:cd:45:07:ca:c3:35:ca:ca:8b:95:5b: 92:49:e6:94:ae:7f:71:90:46:98:67:f0:cf:02:78:c7:35:c8: 13:ba:74:ef:b8:f3:6f:8a:0b:e9:64:31:f4:5f:af:09:54:2c: 43:43:de:93:a7:3c:cc:f9:ae:fb:ad:60:97:9c:c9:25:b0:c3: d6:0f:61:af:0e:dd:18:f2:7d:f0:47:fb:68:3d:b2:a9:4b:81: f4:c4:3a:af:8b:be:d4:3d:c1:9c:f8:f6:6b:35:cb:93:58:cf: cb:c5:87:61:62:5b:61:41:9c:11:59:44:00:e1:2b:30:ed:e8: 4c:80:dd:e9:9a:08:b2:5d:3c:21:62:6b:7b:aa:44:4f:29:5e: 46:ae:66:87:a7:86:8a:71:a1:50:71:f1:6c:4c:1b:b2:79:87: 01:32:9f:fe:83:e3:a4:4c:78:a6:65:f9:58:b3:7a:69:eb:90: 40:1b:1b:6b:96:53:b8:01:01:fb:5f:f9:5b:2d:41:4b:e9:ad: c0:e8:75:c8:ac:66:7e:d0:b6:3a:68:50:ee:45:ef:25:02:4a: 13:fe:54:51:36:ae:c5:7f:ca:8b:6a:38:60:d2:94:5c:38:d8: a4:1b:06:06:c8:84:a8:99:89:ba:bb:94:43:73:4a:36:ea:5a: 6d:50:66:f4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWhd/tdAaBj3Lpez9fyLPV9W0XnwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MDg1MjI3WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZTk4MjBhMjA1Mzg5MDE4NGRjMGQyM2E5ZTFkMDE5OWY2 MGM5ODdiODgzN2I5ZTlkMWJkOGJmYzM5MzYwYmU1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDoNAOZMj3IEt+MPdXEYHsIdPEis/utoxtVzdBZg9O/mu6M UZveOZUZaCFkGH91+CZTHXTiCdwmRFpsuXcYdY7LqN8WCAonoLfZ8lBk9AsXtRbH 0DCboF5HSgE8aFItKXEGGgcCgZYNBORZ3awbymxoBkMXV5sTQasYT10yWABnx2ys KOf9XuyFtoD4mg76QLBZ9H5QsUQosm5r85W6F/VFdGiNmvbo9V36wG+mlTQRUH8r 4cdUlFBRIpUnf9kaKXV7wlkhH3dcSIWaL4SC5CkS8SkUYdSlUzvtWf/7cbP/bwdR EK7lsxsF8PKt7Ula+xJ3Kk4o741YwmtIHryPkTpnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUYgbtEHp7S/1o0+dmd1poOGAmYewwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzFjYmI2NWIzLTU1ZGItNDJjNS05MzA3LTg5Y2ZjZWM2OTMyZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESoS4wDQYJKoZIhvcNAQELBQADggEBACWN6gC46SfNRQfKwzXKyouVW5JJ 5pSuf3GQRphn8M8CeMc1yBO6dO+482+KC+lkMfRfrwlULEND3pOnPMz5rvutYJec ySWww9YPYa8O3RjyffBH+2g9sqlLgfTEOq+LvtQ9wZz49ms1y5NYz8vFh2FiW2FB nBFZRADhKzDt6EyA3emaCLJdPCFia3uqRE8pXkauZoenhopxoVBx8WxMG7J5hwEy n/6D46RMeKZl+VizemnrkEAbG2uWU7gBAftf+VstQUvprcDodcisZn7QtjpoUO5F 7yUCShP+VFE2rsV/yotqOGDSlFw42KQbBgbIhKiZibq7lENzSjbqWm1QZvQ= -----END CERTIFICATE-----Generated at Mon Oct 20 17:29:31 2025 by rpki-client