$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/47d7fe77-8797-4229-87ed-2805969309c4.roa File: 47d7fe77-8797-4229-87ed-2805969309c4.roa (raw, json) Hash identifier: T+j/KedrRn4tzg02dWI3iMB9+hDf+la9hLmPcsiJotw= Subject key identifier: EE:26:5C:C9:C6:96:BF:A3:6C:9C:79:DD:21:24:BE:64:00:85:1E:4F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3798C9A7C1B35951F12B467573283A91EC461866 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/47d7fe77-8797-4229-87ed-2805969309c4.roa Signing time: Sat 18 Oct 2025 17:40:08 +0000 ROA not before: Sat 18 Oct 2025 17:40:08 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.160.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:98:c9:a7:c1:b3:59:51:f1:2b:46:75:73:28:3a:91:ec:46:18:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 17:40:08 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=d43f801b1e061d8cdcade7759271dd6301d0c699322b2102a43ca8492307834c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:73:4b:5c:47:19:e4:3f:7f:d1:65:13:70:3f: 23:06:30:e7:cb:e6:71:f4:9a:1a:09:87:ba:09:e6: dd:f9:8d:60:7f:f4:c9:88:d2:4c:90:25:e0:04:5e: fa:3a:8b:54:1a:eb:51:4f:20:79:f3:62:85:71:6e: fb:35:29:00:91:d2:24:e0:7e:a4:34:6d:ff:cc:af: b8:42:c7:a7:83:a7:56:92:c8:e8:ee:ee:0a:3d:03: 14:36:a4:96:06:68:6a:f2:cd:b3:3c:18:95:37:2b: ef:b4:c3:c6:9d:9b:16:e3:4f:66:cf:db:bc:fd:20: 2f:2a:60:f4:df:01:22:8a:5e:41:24:4f:d8:26:09: a9:11:25:63:55:ad:98:6f:e0:bd:8b:a3:8d:d9:e9: 8a:4a:2d:f2:67:13:fc:f7:c2:97:04:5b:52:e3:9e: bd:47:af:d5:88:7e:36:8c:f6:73:cd:01:1a:aa:17: 82:77:55:b8:3a:2f:21:48:5f:61:c2:7c:c5:ca:40: fe:11:58:82:cd:63:0d:1b:11:70:5c:66:28:f2:e8: b1:a2:52:bb:c5:4a:f0:0b:c3:05:55:c3:fe:8f:ee: f1:bb:f2:a4:53:27:ae:ff:8d:3f:2e:ae:d2:94:65: fa:65:9e:23:19:10:9c:a3:79:80:0a:d9:7a:88:e7: 2a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:26:5C:C9:C6:96:BF:A3:6C:9C:79:DD:21:24:BE:64:00:85:1E:4F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/47d7fe77-8797-4229-87ed-2805969309c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.160.248.0/23 Signature Algorithm: sha256WithRSAEncryption 11:78:e6:a1:55:59:29:d9:09:d1:d6:92:7a:a8:62:90:8d:bb: 11:f7:09:f0:1f:8a:14:f8:ea:26:4b:87:d0:d4:91:d5:a3:53: 7c:27:0c:40:47:00:67:56:8f:c7:a4:90:79:97:90:fe:8e:95: f1:80:f8:c8:5f:e1:a2:52:91:2c:bb:9f:aa:14:84:03:f3:67: 24:bc:c3:eb:3c:f5:2c:e7:5d:0e:4b:82:48:51:6b:5c:98:15: 45:16:0f:16:09:41:7f:9c:7a:58:05:81:4c:4d:64:32:d7:aa: ee:90:78:4c:ac:f2:ed:dc:58:63:d5:ea:26:ae:8b:50:ef:f3: dd:a1:f3:e6:9c:46:23:77:97:a6:2b:9b:a9:83:5b:09:af:9b: 57:6a:a5:8d:d1:1a:ea:71:91:25:fe:62:5c:06:aa:b3:dd:2d: a6:27:41:c0:f0:6e:5f:37:a0:22:0b:f6:c3:b3:2f:74:89:9f: 2b:90:f2:15:4e:bf:f6:ff:06:94:02:9f:29:0c:98:4b:f8:e5: 8e:74:55:d0:d0:7b:89:10:2a:6e:ca:7e:eb:b0:d2:7e:cc:cb: 42:c1:f7:14:da:cf:14:27:d8:a6:74:2a:9f:4c:2f:6d:41:b2: 74:70:67:6d:4b:6b:a1:af:44:bd:4e:0b:14:82:ce:b9:31:66: a9:7a:17:bd -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUN5jJp8GzWVHxK0Z1cyg6kexGGGYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTc0MDA4WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BkNDNmODAxYjFlMDYxZDhjZGNhZGU3NzU5MjcxZGQ2MzAx ZDBjNjk5MzIyYjIxMDJhNDNjYTg0OTIzMDc4MzRjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7c0tcRxnkP3/RZRNwPyMGMOfL5nH0mhoJh7oJ5t35jWB/ 9MmI0kyQJeAEXvo6i1Qa61FPIHnzYoVxbvs1KQCR0iTgfqQ0bf/Mr7hCx6eDp1aS yOju7go9AxQ2pJYGaGryzbM8GJU3K++0w8admxbjT2bP27z9IC8qYPTfASKKXkEk T9gmCakRJWNVrZhv4L2Lo43Z6YpKLfJnE/z3wpcEW1Ljnr1Hr9WIfjaM9nPNARqq F4J3Vbg6LyFIX2HCfMXKQP4RWILNYw0bEXBcZijy6LGiUrvFSvALwwVVw/6P7vG7 8qRTJ67/jT8urtKUZfplniMZEJyjeYAK2XqI5yqbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU7iZcycaWv6NsnHndISS+ZACFHk8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQ3ZDdmZTc3LTg3OTctNDIyOS04N2VkLTI4MDU5NjkzMDljNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESoPgwDQYJKoZIhvcNAQELBQADggEBABF45qFVWSnZCdHWknqoYpCNuxH3 CfAfihT46iZLh9DUkdWjU3wnDEBHAGdWj8ekkHmXkP6OlfGA+Mhf4aJSkSy7n6oU hAPzZyS8w+s89SznXQ5LgkhRa1yYFUUWDxYJQX+celgFgUxNZDLXqu6QeEys8u3c WGPV6iaui1Dv892h8+acRiN3l6Yrm6mDWwmvm1dqpY3RGupxkSX+YlwGqrPdLaYn QcDwbl83oCIL9sOzL3SJnyuQ8hVOv/b/BpQCnykMmEv45Y50VdDQe4kQKm7Kfuuw 0n7My0LB9xTazxQn2KZ0Kp9ML21BsnRwZ21La6GvRL1OCxSCzrkxZql6F70= -----END CERTIFICATE-----Generated at Mon Oct 20 11:13:45 2025 by rpki-client