$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9515e1f5-afd6-42f0-aace-38a722972bab.roa File: 9515e1f5-afd6-42f0-aace-38a722972bab.roa (raw, json) Hash identifier: QGSUQFNLkvlEyl7Di0FekfuIkIKct0AmbI3QI8zmmAM= Subject key identifier: 50:D6:73:32:20:92:6A:DF:3B:64:AC:9F:E7:D8:7C:81:32:97:72:FF Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 13A5F347298293ED0843B1ED6EDB828B9449CFF3 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9515e1f5-afd6-42f0-aace-38a722972bab.roa Signing time: Sat 18 Oct 2025 15:41:26 +0000 ROA not before: Sat 18 Oct 2025 15:41:26 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.160.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:a5:f3:47:29:82:93:ed:08:43:b1:ed:6e:db:82:8b:94:49:cf:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 15:41:26 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=bd88b8c7993c31c48c75901a2b704a529be857244a0f83537056daeed865570b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:65:b8:1c:4e:c8:37:c9:1d:05:a2:93:a6:58: 0c:0a:c6:69:38:f9:e1:4d:40:c9:fb:57:b9:1d:01: 2e:0b:3f:58:39:fd:d7:d1:4b:06:49:71:76:8c:1a: 6c:62:48:98:92:a3:c4:ef:f4:b1:4d:5c:49:f4:36: 2b:ed:a5:71:bf:2f:e9:4a:ac:04:ab:57:a4:ea:fe: 6b:13:37:d8:d2:e0:73:94:2d:90:4a:48:80:db:73: 7c:2f:8a:80:7d:55:e8:21:bc:42:0e:f0:04:0e:cf: 6e:aa:d1:81:d0:03:17:f8:f8:a8:44:a0:c9:15:e9: cc:4b:e2:8d:92:8c:4f:36:12:25:ac:86:87:92:0c: e2:28:88:31:de:60:a3:b2:e8:90:ed:f7:6e:7a:1a: 12:f5:8e:3b:54:0a:d6:9e:85:1f:54:29:f9:83:b8: 8b:e8:94:0b:7c:80:39:75:f3:99:fc:f4:da:8f:49: 49:e4:61:92:38:7a:25:b0:08:a6:ac:7f:70:00:55: bd:40:81:78:e7:60:1c:20:ea:7b:e4:92:db:99:d8: 76:61:e8:27:7e:a9:ed:ab:0b:d9:65:1d:dd:18:37: 39:4c:94:b3:c7:b5:b1:0b:e0:42:a8:c2:37:b9:06: db:a6:c9:f0:2d:9d:1c:c7:b7:56:90:a7:be:b7:8a: 13:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:D6:73:32:20:92:6A:DF:3B:64:AC:9F:E7:D8:7C:81:32:97:72:FF X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9515e1f5-afd6-42f0-aace-38a722972bab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.160.122.0/24 Signature Algorithm: sha256WithRSAEncryption 32:b2:74:6c:92:3b:de:81:f6:d9:48:0a:67:39:46:45:97:bd: 93:2e:68:78:46:4a:c2:e7:7d:89:d8:e1:6f:28:42:a2:e2:a7: 50:a0:3c:2d:80:f4:13:3a:3d:3e:64:9c:d2:a0:a6:7f:fb:10: 1a:8d:2f:e7:12:f5:73:82:4f:ae:71:af:99:14:7a:af:8f:90: b2:72:4d:00:4b:a2:2a:c1:38:9e:3f:83:c4:a0:4e:7d:88:fb: 25:75:13:79:83:81:59:ca:50:37:5b:b2:81:b4:5e:81:46:ae: 92:d7:90:fb:11:31:7c:58:32:4c:aa:a3:17:3b:cb:2f:45:54: fe:6e:97:f1:b9:1d:cd:a9:16:ce:2e:7d:30:26:25:e1:9d:c0: c4:30:f6:f3:0b:36:2d:24:5e:34:bb:af:8e:22:48:4d:c7:cb: 40:17:98:6a:42:aa:5b:fd:69:dc:99:a6:2c:7d:6d:29:ef:36: 44:49:6d:c3:df:a9:d2:d2:77:69:0b:66:8e:52:9d:e2:68:82: 24:d0:10:8a:81:0c:c1:b1:64:45:53:bf:3e:ba:07:2a:c6:53: c9:e9:fa:d7:9f:64:41:71:82:a1:74:c1:52:63:91:06:a4:ad: 4b:26:34:d1:69:51:a0:29:26:81:6f:f2:75:20:22:2b:58:8a: 03:ad:de:cd -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUE6XzRymCk+0IQ7HtbtuCi5RJz/MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTU0MTI2WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BiZDg4YjhjNzk5M2MzMWM0OGM3NTkwMWEyYjcwNGE1Mjli ZTg1NzI0NGEwZjgzNTM3MDU2ZGFlZWQ4NjU1NzBiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCiZbgcTsg3yR0FopOmWAwKxmk4+eFNQMn7V7kdAS4LP1g5 /dfRSwZJcXaMGmxiSJiSo8Tv9LFNXEn0NivtpXG/L+lKrASrV6Tq/msTN9jS4HOU LZBKSIDbc3wvioB9VeghvEIO8AQOz26q0YHQAxf4+KhEoMkV6cxL4o2SjE82EiWs hoeSDOIoiDHeYKOy6JDt9256GhL1jjtUCtaehR9UKfmDuIvolAt8gDl185n89NqP SUnkYZI4eiWwCKasf3AAVb1AgXjnYBwg6nvkktuZ2HZh6Cd+qe2rC9llHd0YNzlM lLPHtbEL4EKowje5BtumyfAtnRzHt1aQp763ihOnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUUNZzMiCSat87ZKyf59h8gTKXcv8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzk1MTVlMWY1LWFmZDYtNDJmMC1hYWNlLTM4YTcyMjk3MmJhYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASoHowDQYJKoZIhvcNAQELBQADggEBADKydGySO96B9tlICmc5RkWXvZMu aHhGSsLnfYnY4W8oQqLip1CgPC2A9BM6PT5knNKgpn/7EBqNL+cS9XOCT65xr5kU eq+PkLJyTQBLoirBOJ4/g8SgTn2I+yV1E3mDgVnKUDdbsoG0XoFGrpLXkPsRMXxY Mkyqoxc7yy9FVP5ul/G5Hc2pFs4ufTAmJeGdwMQw9vMLNi0kXjS7r44iSE3Hy0AX mGpCqlv9adyZpix9bSnvNkRJbcPfqdLSd2kLZo5SneJogiTQEIqBDMGxZEVTvz66 ByrGU8np+tefZEFxgqF0wVJjkQakrUsmNNFpUaApJoFv8nUgIitYigOt3s0= -----END CERTIFICATE-----Generated at Mon Oct 20 15:47:07 2025 by rpki-client