$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/27702025-bb0c-46fb-9ca3-363a6d5be419.roa File: 27702025-bb0c-46fb-9ca3-363a6d5be419.roa (raw, json) Hash identifier: urHO4pxuLqcbOuoycnxcaNq+/+F1JfxGPtIWDpLUyAU= Subject key identifier: 85:3B:13:28:5B:5B:67:31:06:3B:81:DB:FC:CA:DF:6A:50:12:2B:A3 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 02D101A37DA93D09E3DB052FED74AE7D5A1FCA2D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/27702025-bb0c-46fb-9ca3-363a6d5be419.roa Signing time: Sat 18 Oct 2025 13:00:08 +0000 ROA not before: Sat 18 Oct 2025 13:00:08 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.154.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:d1:01:a3:7d:a9:3d:09:e3:db:05:2f:ed:74:ae:7d:5a:1f:ca:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 13:00:08 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=272057c63341cbcdc654d696bae26c5b7bbb47c069d11986829fa0455431e5b7, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3a:ee:d4:fa:7d:b5:92:98:6c:04:d0:45:7c: dc:ae:e7:c6:19:0d:56:db:b7:8f:10:d4:84:0c:01: d9:08:f9:37:45:be:0b:28:b2:9a:8b:7d:7f:60:c1: 79:26:81:63:75:c9:c4:c4:60:8a:ce:8e:f3:2c:55: 1a:16:36:ef:5d:de:ef:e1:c7:59:3e:bc:90:69:a7: 73:a6:28:b0:44:90:a9:73:c5:4f:5a:f8:13:92:ee: ee:b5:e6:f6:0b:9f:66:54:92:3d:fd:31:32:87:75: 37:40:64:59:3d:3c:41:bc:e8:26:30:e5:64:77:6c: cc:fa:55:12:7f:17:aa:f5:ca:a0:15:6b:5c:2c:e5: d7:df:31:80:de:18:60:6c:83:55:6e:66:d0:09:d9: bc:97:d5:41:aa:e3:56:d2:4a:ed:e2:cf:90:8d:d1: f6:b5:77:68:f3:88:b0:10:96:4b:78:fe:c1:33:21: 40:c5:fd:70:b8:84:e3:c4:67:03:62:d6:84:a0:e1: 40:c8:85:d6:56:ed:7a:c2:b8:88:67:9b:d5:f8:80: 90:3a:5b:dc:43:f9:7f:e3:b4:6a:ec:e2:25:51:e8: 56:61:1b:98:da:27:e2:e8:7c:a1:0b:6a:77:dc:1f: 6d:fb:ac:f5:af:4e:76:c9:5f:f3:ad:fd:dd:d3:dd: bd:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:3B:13:28:5B:5B:67:31:06:3B:81:DB:FC:CA:DF:6A:50:12:2B:A3 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/27702025-bb0c-46fb-9ca3-363a6d5be419.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.154.128.0/18 Signature Algorithm: sha256WithRSAEncryption 92:31:f0:63:38:7d:e9:21:0a:aa:f6:ad:24:ed:bd:52:82:22: 69:2c:e8:b5:e2:23:be:9f:f5:9e:4c:f2:ed:4b:d2:79:fd:d2: 54:1e:1b:31:af:fe:0b:ac:0d:00:cb:5a:94:a3:b2:c8:8f:70: ce:29:b7:de:51:b0:19:ef:27:40:23:bf:6c:1a:6c:71:5c:f4: c7:dc:81:0b:82:29:34:68:64:9e:81:f9:c4:a7:60:38:58:c5: 61:ff:74:d2:01:84:4f:7f:38:b1:c0:1f:df:e7:55:4d:4c:33: 57:a6:ff:49:0c:37:d7:e2:47:93:37:b5:11:f4:5c:2c:d3:0f: fc:a1:0f:e5:6d:c4:ab:cf:d9:bd:51:86:b1:fc:91:99:dc:07: c9:ea:0d:86:3f:03:e7:23:54:81:e7:7e:82:02:35:2b:34:c1: 5b:96:74:82:bc:bb:30:70:e4:06:2c:b6:77:93:e1:c7:44:25: 78:c5:46:db:2d:bb:16:5a:e7:0c:13:4b:54:07:7e:bf:91:88: fe:8d:c3:98:d6:d5:5f:76:41:07:06:f5:e7:10:03:28:11:49: 6e:11:e4:10:79:c9:5a:12:81:16:5e:9d:6e:84:2f:22:ab:ae: 30:57:eb:83:3c:ff:7c:b8:0d:b8:21:8e:63:54:be:d6:59:1a: d8:31:1f:e4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAtEBo32pPQnj2wUv7XSufVofyi0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTMwMDA4WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AyNzIwNTdjNjMzNDFjYmNkYzY1NGQ2OTZiYWUyNmM1Yjdi YmI0N2MwNjlkMTE5ODY4MjlmYTA0NTU0MzFlNWI3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKOu7U+n21kphsBNBFfNyu58YZDVbbt48Q1IQMAdkI+TdF vgsospqLfX9gwXkmgWN1ycTEYIrOjvMsVRoWNu9d3u/hx1k+vJBpp3OmKLBEkKlz xU9a+BOS7u615vYLn2ZUkj39MTKHdTdAZFk9PEG86CYw5WR3bMz6VRJ/F6r1yqAV a1ws5dffMYDeGGBsg1VuZtAJ2byX1UGq41bSSu3iz5CN0fa1d2jziLAQlkt4/sEz IUDF/XC4hOPEZwNi1oSg4UDIhdZW7XrCuIhnm9X4gJA6W9xD+X/jtGrs4iVR6FZh G5jaJ+LofKELanfcH237rPWvTnbJX/Ot/d3T3b29AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUhTsTKFtbZzEGO4Hb/MrfalASK6MwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzI3NzAyMDI1LWJiMGMtNDZmYi05Y2EzLTM2M2E2ZDViZTQxOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYSmoAwDQYJKoZIhvcNAQELBQADggEBAJIx8GM4fekhCqr2rSTtvVKCImks 6LXiI76f9Z5M8u1L0nn90lQeGzGv/gusDQDLWpSjssiPcM4pt95RsBnvJ0Ajv2wa bHFc9MfcgQuCKTRoZJ6B+cSnYDhYxWH/dNIBhE9/OLHAH9/nVU1MM1em/0kMN9fi R5M3tRH0XCzTD/yhD+VtxKvP2b1RhrH8kZncB8nqDYY/A+cjVIHnfoICNSs0wVuW dIK8uzBw5AYstneT4cdEJXjFRtstuxZa5wwTS1QHfr+RiP6Nw5jW1V92QQcG9ecQ AygRSW4R5BB5yVoSgRZenW6ELyKrrjBX64M8/3y4DbghjmNUvtZZGtgxH+Q= -----END CERTIFICATE-----Generated at Mon Oct 20 06:07:09 2025 by rpki-client