$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/701c6951-09fc-4ee6-9fb5-93ac7fb0178f.roa File: 701c6951-09fc-4ee6-9fb5-93ac7fb0178f.roa (raw, json) Hash identifier: kTlB56aRH34zbxngcAIkxsxZ7NP7FhP37G3nBBXyGk8= Subject key identifier: 00:57:98:35:B8:5C:89:23:35:E5:7A:C9:76:16:72:52:D5:15:FF:31 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 12CC97524B4CFC55873172B98F786B1422F56F2D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/701c6951-09fc-4ee6-9fb5-93ac7fb0178f.roa Signing time: Sat 18 Oct 2025 19:41:32 +0000 ROA not before: Sat 18 Oct 2025 19:41:32 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.161.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:cc:97:52:4b:4c:fc:55:87:31:72:b9:8f:78:6b:14:22:f5:6f:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 19:41:32 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=5348a6e46f80a1221a5d4f3bd2cd47687c6a6337cd6cb504df7a79b1e86595e1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:57:14:38:9c:9c:45:cb:e3:e5:09:84:92:f0: f4:73:3a:40:a3:a4:b1:3b:45:6b:07:f8:44:5f:34: 47:ae:27:78:14:56:6a:57:41:b9:46:62:8d:88:d2: 75:c6:dc:ea:b3:42:a9:6b:48:e4:97:c6:0e:02:7d: 56:e4:11:33:07:ba:f8:06:6e:d0:80:1a:ef:01:da: cd:c8:d2:bb:8a:3e:c1:13:a3:07:82:ae:58:e7:a4: c9:5a:06:06:1d:81:01:ac:75:1f:f7:74:13:c4:ac: be:d0:47:3c:cb:80:bc:f7:02:57:7d:09:9e:cf:cf: f6:05:56:2a:88:d0:bd:ac:43:e5:6e:7a:4c:8b:6e: 49:c8:a0:42:8e:95:2f:52:37:7a:06:25:0d:13:93: b8:5a:6a:0b:04:72:57:b5:31:9f:fc:f4:cd:e7:3f: 72:79:9d:74:9a:21:c8:51:dc:f6:ea:19:08:51:f7: bd:99:72:5d:9f:b5:a0:f7:04:8d:52:e4:00:c2:f7: 17:ac:98:32:0c:62:a8:08:2c:72:d5:1e:6d:e3:89: 61:c6:c1:f1:7e:09:99:44:aa:cc:e6:ac:8c:cd:ec: 82:2c:0b:d4:ee:a4:2f:5b:6c:27:38:64:64:0d:12: 07:a1:12:d9:ed:8c:b0:70:6a:88:ff:07:d5:1b:0f: 94:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:57:98:35:B8:5C:89:23:35:E5:7A:C9:76:16:72:52:D5:15:FF:31 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/701c6951-09fc-4ee6-9fb5-93ac7fb0178f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.161.144.0/21 Signature Algorithm: sha256WithRSAEncryption 1f:48:65:0f:aa:14:1e:ca:18:71:90:6c:4e:ed:6b:ab:0c:c3: 48:14:3c:96:da:f5:33:62:05:8a:aa:54:01:ab:01:63:22:ed: d6:db:88:49:db:e0:2b:ca:4a:8e:14:93:d0:b4:64:3d:d7:d8: 28:a1:aa:09:dc:94:5f:be:48:ca:ce:ac:9e:44:a6:ac:4a:51: 71:76:8d:20:29:0f:39:de:18:6c:e4:54:0a:5e:c9:e5:3e:de: bb:c5:af:22:1a:8b:35:67:c9:ae:08:3b:23:86:1a:25:ab:07: aa:4f:87:a7:22:75:d6:a6:b6:00:23:64:7b:28:09:0e:71:e9: fa:4f:ac:f0:13:aa:1d:0a:42:1a:09:ce:32:34:bd:95:e0:02: 81:a4:5c:f1:2d:80:9d:d8:3c:8a:31:05:3e:17:28:56:3c:81: 3d:54:75:67:33:ed:ad:15:c4:be:cc:98:65:dc:60:b7:fd:d2: d3:d4:de:5c:6c:22:b2:87:f7:b0:81:8b:46:74:15:cf:8f:f2: 90:54:79:e0:da:2d:0d:da:49:16:df:65:63:4a:fb:ba:90:1d: c0:38:44:92:f7:56:bb:b0:e3:f9:b1:b3:ae:e9:9a:21:7d:d0: b4:2d:82:19:c2:27:ae:ac:c2:d1:11:53:13:8f:72:62:9a:0c: 41:62:e1:7d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEsyXUktM/FWHMXK5j3hrFCL1by0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTk0MTMyWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A1MzQ4YTZlNDZmODBhMTIyMWE1ZDRmM2JkMmNkNDc2ODdj NmE2MzM3Y2Q2Y2I1MDRkZjdhNzliMWU4NjU5NWUxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHVxQ4nJxFy+PlCYSS8PRzOkCjpLE7RWsH+ERfNEeuJ3gU VmpXQblGYo2I0nXG3OqzQqlrSOSXxg4CfVbkETMHuvgGbtCAGu8B2s3I0ruKPsET oweCrljnpMlaBgYdgQGsdR/3dBPErL7QRzzLgLz3Ald9CZ7Pz/YFViqI0L2sQ+Vu ekyLbknIoEKOlS9SN3oGJQ0Tk7haagsEcle1MZ/89M3nP3J5nXSaIchR3PbqGQhR 972Zcl2ftaD3BI1S5ADC9xesmDIMYqgILHLVHm3jiWHGwfF+CZlEqszmrIzN7IIs C9TupC9bbCc4ZGQNEgehEtntjLBwaoj/B9UbD5RPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUAFeYNbhciSM15XrJdhZyUtUV/zEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzcwMWM2OTUxLTA5ZmMtNGVlNi05ZmI1LTkzYWM3ZmIwMTc4Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMSoZAwDQYJKoZIhvcNAQELBQADggEBAB9IZQ+qFB7KGHGQbE7ta6sMw0gU PJba9TNiBYqqVAGrAWMi7dbbiEnb4CvKSo4Uk9C0ZD3X2CihqgnclF++SMrOrJ5E pqxKUXF2jSApDzneGGzkVApeyeU+3rvFryIaizVnya4IOyOGGiWrB6pPh6ciddam tgAjZHsoCQ5x6fpPrPATqh0KQhoJzjI0vZXgAoGkXPEtgJ3YPIoxBT4XKFY8gT1U dWcz7a0VxL7MmGXcYLf90tPU3lxsIrKH97CBi0Z0Fc+P8pBUeeDaLQ3aSRbfZWNK +7qQHcA4RJL3Vruw4/mxs67pmiF90LQtghnCJ66swtERUxOPcmKaDEFi4X0= -----END CERTIFICATE-----Generated at Mon Oct 20 02:59:32 2025 by rpki-client