$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5d934475-f34f-4ed2-af73-6ce3ff3088fd.roa File: 5d934475-f34f-4ed2-af73-6ce3ff3088fd.roa (raw, json) Hash identifier: acDJm/SuaMDv8zBw+Edb19wqfT2seTHqPRQCTZOmRDQ= Subject key identifier: 11:B3:90:DB:43:A8:AB:A9:32:8F:A4:72:79:74:EC:B6:78:9B:2F:A4 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 328DE957CA36F932EB607BA9523EBFDB14A46BF4 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5d934475-f34f-4ed2-af73-6ce3ff3088fd.roa Signing time: Sat 18 Oct 2025 19:30:15 +0000 ROA not before: Sat 18 Oct 2025 19:30:15 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.161.122.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:8d:e9:57:ca:36:f9:32:eb:60:7b:a9:52:3e:bf:db:14:a4:6b:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 19:30:15 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=6a9c60f78e5b6289d9693cef4a83b70f56e15bfc2ee597c8486796bf3757ee28, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:38:ca:27:63:5d:7c:d5:ca:0f:69:57:bb:45: 6e:c3:cb:f9:57:55:05:dd:c9:f2:b5:3c:cd:7f:6a: 58:a1:da:35:67:65:5b:d9:04:67:84:7b:58:38:57: a1:32:93:2f:d0:3b:a4:4f:da:bd:11:99:df:08:58: 53:c8:40:1f:68:7f:0d:00:a6:c8:f8:5e:f8:f4:e1: 1e:fa:89:92:92:67:62:26:84:90:1d:b7:fa:b9:1a: cb:e0:f1:6f:9a:9f:a2:97:32:62:89:cf:7a:84:88: 15:2a:ca:44:9a:51:51:6a:de:9e:98:b6:6c:59:92: b1:af:32:d0:43:09:43:fe:ac:38:3e:5e:02:f4:9e: bd:12:98:83:62:41:ca:ce:cd:36:23:a0:da:04:8b: e0:0a:3f:ef:e2:a1:f8:93:26:61:49:b4:0e:36:2a: 5c:70:95:25:b4:6f:d1:1b:16:d8:57:37:62:ae:8f: 9e:fb:ec:d8:d3:2d:43:07:ab:f2:0a:30:1c:a2:8e: 1b:c8:32:96:ec:34:73:68:5c:e9:4b:f4:9b:5d:74: d6:cc:45:4b:33:ae:65:67:6a:36:44:36:16:43:18: db:fa:ea:f7:31:f8:dd:ee:44:3d:e3:07:ca:ff:cb: d2:e3:57:b1:3f:38:57:d2:52:58:33:bd:af:24:d2: 80:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:B3:90:DB:43:A8:AB:A9:32:8F:A4:72:79:74:EC:B6:78:9B:2F:A4 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5d934475-f34f-4ed2-af73-6ce3ff3088fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.161.122.0/23 Signature Algorithm: sha256WithRSAEncryption 4f:27:70:b0:c1:d5:80:0e:d1:54:8a:0b:53:50:b2:af:c0:a5: 06:bc:a8:54:55:d0:41:d6:15:f1:db:28:a1:21:87:9d:a6:ef: 82:a4:d6:67:5c:c4:1d:aa:21:ff:50:1c:21:51:7a:96:59:8d: 19:e6:87:4f:2f:ef:ea:6e:15:01:45:42:79:e0:77:40:55:06: 92:58:0f:9b:ea:52:37:70:cb:e3:6f:b5:80:a3:bd:46:c9:70: c4:c7:ce:9f:22:55:2d:a0:4e:89:53:ce:a8:19:22:f4:61:ed: a3:a5:22:eb:d2:1f:38:2f:e1:fd:dc:29:4b:fa:c0:c2:9f:63: 8b:7b:97:e4:21:c3:ec:f6:e0:f0:eb:b2:b6:e5:27:18:2e:a4: 3e:6b:48:d1:fc:66:e9:74:ce:fc:63:46:8d:40:d2:a6:9f:51: 97:35:c0:af:26:5b:85:18:97:34:65:bb:8c:26:04:79:ea:68: 36:54:75:cb:ac:81:77:8f:b0:49:1c:0a:49:bf:87:93:b2:cb: f3:30:16:2e:01:61:b3:8b:6f:64:fe:46:f2:c2:a8:1f:77:30: fa:c2:e6:93:d4:42:a4:e1:bb:2c:9e:0a:74:38:cb:74:e7:ab: 05:8d:10:6f:0c:5a:af:c9:a5:af:b1:56:c6:05:fe:8b:7a:ce: 43:73:65:c1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMo3pV8o2+TLrYHupUj6/2xSka/QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTkzMDE1WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A2YTljNjBmNzhlNWI2Mjg5ZDk2OTNjZWY0YTgzYjcwZjU2 ZTE1YmZjMmVlNTk3Yzg0ODY3OTZiZjM3NTdlZTI4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDOMonY1181coPaVe7RW7Dy/lXVQXdyfK1PM1/alih2jVn ZVvZBGeEe1g4V6Eyky/QO6RP2r0Rmd8IWFPIQB9ofw0Apsj4Xvj04R76iZKSZ2Im hJAdt/q5Gsvg8W+an6KXMmKJz3qEiBUqykSaUVFq3p6YtmxZkrGvMtBDCUP+rDg+ XgL0nr0SmINiQcrOzTYjoNoEi+AKP+/iofiTJmFJtA42KlxwlSW0b9EbFthXN2Ku j5777NjTLUMHq/IKMByijhvIMpbsNHNoXOlL9JtddNbMRUszrmVnajZENhZDGNv6 6vcx+N3uRD3jB8r/y9LjV7E/OFfSUlgzva8k0oBfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUEbOQ20Ooq6kyj6RyeXTstnibL6QwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzVkOTM0NDc1LWYzNGYtNGVkMi1hZjczLTZjZTNmZjMwODhmZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESoXowDQYJKoZIhvcNAQELBQADggEBAE8ncLDB1YAO0VSKC1NQsq/ApQa8 qFRV0EHWFfHbKKEhh52m74Kk1mdcxB2qIf9QHCFRepZZjRnmh08v7+puFQFFQnng d0BVBpJYD5vqUjdwy+NvtYCjvUbJcMTHzp8iVS2gTolTzqgZIvRh7aOlIuvSHzgv 4f3cKUv6wMKfY4t7l+Qhw+z24PDrsrblJxgupD5rSNH8Zul0zvxjRo1A0qafUZc1 wK8mW4UYlzRlu4wmBHnqaDZUdcusgXePsEkcCkm/h5Oyy/MwFi4BYbOLb2T+RvLC qB93MPrC5pPUQqThuyyeCnQ4y3TnqwWNEG8MWq/Jpa+xVsYF/ot6zkNzZcE= -----END CERTIFICATE-----Generated at Mon Oct 20 08:42:14 2025 by rpki-client