$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/320b21db-b84c-4301-9c1f-5afaa9f97569.roa File: 320b21db-b84c-4301-9c1f-5afaa9f97569.roa (raw, json) Hash identifier: NjEQaREwImwXgFHyQphydsi20Xsn6sooBFL7Mw+xRPQ= Subject key identifier: 21:20:B1:35:10:B0:32:38:05:CB:C6:EE:9F:4E:7A:12:05:4C:96:B3 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 408630AC450A88805D7D23C4751D847EC1C63639 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/320b21db-b84c-4301-9c1f-5afaa9f97569.roa Signing time: Sat 18 Oct 2025 11:10:11 +0000 ROA not before: Sat 18 Oct 2025 11:10:11 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.165.162.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:86:30:ac:45:0a:88:80:5d:7d:23:c4:75:1d:84:7e:c1:c6:36:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 11:10:11 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=96d7cb2ab26e1cfd153e02d266fa48636bdb5b5cdb55e3baddfb01cba3925e2c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:34:ad:ab:e8:2d:32:07:94:d6:fc:b2:0c:35: f3:7f:19:77:01:f5:a9:70:cf:c7:ea:73:56:76:65: 10:aa:9d:21:41:fd:6a:f0:09:8c:a5:66:7f:de:af: 65:8f:4e:10:7e:fd:d4:51:91:97:da:c8:ff:12:16: aa:c3:e4:5d:bb:49:a1:09:cc:24:6a:35:37:2c:ac: 5e:ae:41:f9:45:31:50:6d:29:1d:b3:ad:5c:47:f9: f9:bc:37:65:0f:cb:55:ca:65:70:d1:05:06:3c:fc: 2c:e2:38:df:a8:0b:42:ba:42:98:52:8e:ba:79:7c: 5e:90:3d:e9:7a:51:be:3d:4b:20:a7:92:56:b0:5f: 3d:01:a5:e3:fe:de:28:8d:b4:b6:e3:a4:5c:93:b6: 3c:fe:b2:db:dd:40:8a:9a:ac:ae:60:e8:4a:73:60: ff:cc:de:cc:f8:5a:ce:c1:1b:e8:6d:ca:7c:d8:f9: d0:b7:fc:45:07:bc:66:f5:ab:3e:c3:4f:6b:c9:8b: 8c:46:05:6a:18:d9:c8:a3:cf:4e:8b:ad:c5:60:19: ac:13:f4:28:b3:5e:89:3a:9c:22:9f:9e:3a:3d:7b: 82:08:4b:02:35:03:fa:f4:93:f1:94:85:b0:93:90: 10:a8:88:50:45:b0:24:0e:7c:19:8d:bf:99:71:53: 50:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:20:B1:35:10:B0:32:38:05:CB:C6:EE:9F:4E:7A:12:05:4C:96:B3 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/320b21db-b84c-4301-9c1f-5afaa9f97569.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.165.162.0/23 Signature Algorithm: sha256WithRSAEncryption 7d:40:70:9c:65:28:b5:de:6b:cf:28:d5:0e:1e:fc:6a:22:28: 36:3e:2e:00:a7:98:6b:24:ee:c2:e7:0f:aa:13:88:14:8c:98: bd:37:e9:62:bd:a1:f4:57:b3:ed:ae:2e:00:2d:4a:54:3b:25: 94:55:47:68:6d:41:a9:ff:60:76:08:07:07:29:87:66:43:e1: 20:bd:c8:83:a4:bc:02:cd:c0:d1:55:4f:bd:51:c1:91:fe:33: 5d:5c:ae:43:1e:51:6a:e3:b6:68:14:43:39:1c:30:90:d5:cb: 60:f0:5d:55:57:6d:9e:06:f1:d7:06:5f:b6:07:9e:d8:c5:09: b2:69:be:7e:cb:11:0a:31:36:5a:58:cc:2c:75:2a:fd:57:d7: 62:2f:a7:39:93:3a:4c:8f:10:f7:54:f8:a0:97:65:f7:cd:22: 3d:bd:06:01:de:59:53:31:94:9e:eb:42:f3:b1:9f:39:39:a3: 86:f2:2e:58:0b:cf:aa:3f:61:29:ce:51:48:dc:89:3e:3d:3f: f8:98:5c:9b:a7:c5:5b:54:59:b4:21:62:21:85:c7:a4:48:4f: b2:23:56:99:ea:f1:f5:7d:10:03:f3:34:b0:c0:01:74:b1:0f: 8e:41:ae:ba:19:eb:c5:96:97:e5:57:1a:c1:e5:0d:28:b3:9e: b5:37:68:d9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQIYwrEUKiIBdfSPEdR2EfsHGNjkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTExMDExWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A5NmQ3Y2IyYWIyNmUxY2ZkMTUzZTAyZDI2NmZhNDg2MzZi ZGI1YjVjZGI1NWUzYmFkZGZiMDFjYmEzOTI1ZTJjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDgNK2r6C0yB5TW/LIMNfN/GXcB9alwz8fqc1Z2ZRCqnSFB /WrwCYylZn/er2WPThB+/dRRkZfayP8SFqrD5F27SaEJzCRqNTcsrF6uQflFMVBt KR2zrVxH+fm8N2UPy1XKZXDRBQY8/CziON+oC0K6QphSjrp5fF6QPel6Ub49SyCn klawXz0BpeP+3iiNtLbjpFyTtjz+stvdQIqarK5g6EpzYP/M3sz4Ws7BG+htynzY +dC3/EUHvGb1qz7DT2vJi4xGBWoY2cijz06LrcVgGawT9CizXok6nCKfnjo9e4II SwI1A/r0k/GUhbCTkBCoiFBFsCQOfBmNv5lxU1BtAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUISCxNRCwMjgFy8bun056EgVMlrMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzMyMGIyMWRiLWI4NGMtNDMwMS05YzFmLTVhZmFhOWY5NzU2OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESpaIwDQYJKoZIhvcNAQELBQADggEBAH1AcJxlKLXea88o1Q4e/GoiKDY+ LgCnmGsk7sLnD6oTiBSMmL036WK9ofRXs+2uLgAtSlQ7JZRVR2htQan/YHYIBwcp h2ZD4SC9yIOkvALNwNFVT71RwZH+M11crkMeUWrjtmgUQzkcMJDVy2DwXVVXbZ4G 8dcGX7YHntjFCbJpvn7LEQoxNlpYzCx1Kv1X12IvpzmTOkyPEPdU+KCXZffNIj29 BgHeWVMxlJ7rQvOxnzk5o4byLlgLz6o/YSnOUUjciT49P/iYXJunxVtUWbQhYiGF x6RIT7IjVpnq8fV9EAPzNLDAAXSxD45BrroZ68WWl+VXGsHlDSiznrU3aNk= -----END CERTIFICATE-----Generated at Mon Oct 20 12:21:50 2025 by rpki-client