$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a0ed3930-9c9d-4992-b46f-b82ef25f7a8f.roa File: a0ed3930-9c9d-4992-b46f-b82ef25f7a8f.roa (raw, json) Hash identifier: RkqtopPsgM8FllR8oG+rb7XlCD/wkMo+4uwiL2X32x8= Subject key identifier: A9:10:78:5F:DF:B0:A6:70:7D:B0:E5:02:76:B6:19:32:14:E4:6C:1C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 132E9C24A6CE0C9D68275F382BF50133EDDAF965 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a0ed3930-9c9d-4992-b46f-b82ef25f7a8f.roa Signing time: Sat 18 Oct 2025 18:23:49 +0000 ROA not before: Sat 18 Oct 2025 18:23:49 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.155.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:2e:9c:24:a6:ce:0c:9d:68:27:5f:38:2b:f5:01:33:ed:da:f9:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 18:23:49 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=11d024338dea95d472073494d6779ddd24de94c726840ffb3546579f4969bb98, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:50:38:8e:53:24:03:51:d4:49:73:40:4d:c1: 62:76:53:25:b4:32:c6:9a:18:fc:35:b3:1f:34:7c: 06:8a:be:03:01:c1:f4:1e:71:45:12:1d:8a:20:13: 08:35:49:dc:19:ae:7a:68:36:2b:2c:c8:f3:52:53: c2:35:ff:9a:40:39:53:f5:de:45:6a:ae:49:b5:76: 8a:9c:a6:2d:84:ce:c2:14:7c:f1:b9:c7:4a:f1:b1: 8e:68:28:6c:80:c5:51:c9:13:33:57:0d:70:8a:3b: ff:05:8f:4c:89:3d:f4:4f:9c:36:5e:68:ef:21:33: 9f:2d:6c:54:b2:95:19:2d:ce:9f:dd:6b:1f:3a:d1: 68:2f:28:13:c9:e3:65:1d:6b:41:62:73:c1:a0:d5: b7:35:3d:97:56:37:e0:dd:5a:ad:0c:0c:a2:39:98: 4b:a0:4b:82:8b:25:2f:06:24:3f:85:37:c1:fb:c8: d7:15:c8:f4:4c:07:75:7f:ef:ca:73:4c:4e:fd:4c: b5:dc:28:12:c5:31:16:fd:25:14:fa:72:25:4a:a6: 70:97:6c:c1:99:84:c9:dd:c2:b8:df:07:69:ff:4f: 98:7a:f8:1e:18:f3:a9:0d:27:6a:33:d1:5e:15:01: 37:39:fd:bf:11:f9:b7:9d:3c:95:5c:ca:f1:5a:35: 81:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:10:78:5F:DF:B0:A6:70:7D:B0:E5:02:76:B6:19:32:14:E4:6C:1C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a0ed3930-9c9d-4992-b46f-b82ef25f7a8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.155.160.0/20 Signature Algorithm: sha256WithRSAEncryption 05:63:a8:b6:76:ce:0f:54:df:d5:b2:28:1b:47:d0:e9:bd:42: c7:d2:6d:ab:a1:76:50:00:ac:82:eb:40:59:6e:4e:8b:36:a6: e8:37:aa:f5:7c:06:c4:94:10:36:6f:b0:a3:da:5f:a6:62:b2: 08:2d:a1:b8:d2:b2:82:2c:1d:6e:44:74:0a:72:5a:d5:ee:4f: 68:0e:7f:72:4a:38:57:32:bc:ec:12:a6:72:21:28:bc:63:5f: 83:02:29:5e:14:9a:7c:f2:0c:9c:36:8c:29:49:3b:98:8b:20: 06:8e:28:b7:b7:2a:97:40:c6:b4:f1:95:c8:61:9a:1d:d0:2a: 10:0d:79:e1:a6:17:99:83:d8:79:28:a3:23:ec:99:c8:16:05: 6c:d7:e6:11:32:fa:16:db:85:2b:76:15:d3:92:87:53:d4:ee: 39:62:48:47:5f:8c:ca:98:d3:93:cc:26:46:27:ef:b1:93:0b: 1d:bf:4b:37:13:b7:60:3e:c8:4c:69:a7:23:bc:59:29:3c:5c: f0:0f:60:cc:0a:0f:64:63:89:3e:c9:c6:03:bf:e2:b4:a5:78: 5b:cd:b2:17:90:76:61:a5:fc:2c:c2:a5:56:00:b1:a3:e5:ec: 11:bc:c4:14:0a:c8:7c:df:5d:f1:34:17:d2:f8:e7:1d:68:be: 58:f9:70:5d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEy6cJKbODJ1oJ184K/UBM+3a+WUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTgyMzQ5WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AxMWQwMjQzMzhkZWE5NWQ0NzIwNzM0OTRkNjc3OWRkZDI0 ZGU5NGM3MjY4NDBmZmIzNTQ2NTc5ZjQ5NjliYjk4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDwUDiOUyQDUdRJc0BNwWJ2UyW0MsaaGPw1sx80fAaKvgMB wfQecUUSHYogEwg1SdwZrnpoNissyPNSU8I1/5pAOVP13kVqrkm1doqcpi2EzsIU fPG5x0rxsY5oKGyAxVHJEzNXDXCKO/8Fj0yJPfRPnDZeaO8hM58tbFSylRktzp/d ax860WgvKBPJ42Uda0Fic8Gg1bc1PZdWN+DdWq0MDKI5mEugS4KLJS8GJD+FN8H7 yNcVyPRMB3V/78pzTE79TLXcKBLFMRb9JRT6ciVKpnCXbMGZhMndwrjfB2n/T5h6 +B4Y86kNJ2oz0V4VATc5/b8R+bedPJVcyvFaNYEnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUqRB4X9+wpnB9sOUCdrYZMhTkbBwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2EwZWQzOTMwLTljOWQtNDk5Mi1iNDZmLWI4MmVmMjVmN2E4Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQSm6AwDQYJKoZIhvcNAQELBQADggEBAAVjqLZ2zg9U39WyKBtH0Om9QsfS bauhdlAArILrQFluTos2pug3qvV8BsSUEDZvsKPaX6ZisggtobjSsoIsHW5EdApy WtXuT2gOf3JKOFcyvOwSpnIhKLxjX4MCKV4UmnzyDJw2jClJO5iLIAaOKLe3KpdA xrTxlchhmh3QKhANeeGmF5mD2HkooyPsmcgWBWzX5hEy+hbbhSt2FdOSh1PU7jli SEdfjMqY05PMJkYn77GTCx2/SzcTt2A+yExppyO8WSk8XPAPYMwKD2RjiT7JxgO/ 4rSleFvNsheQdmGl/CzCpVYAsaPl7BG8xBQKyHzfXfE0F9L45x1ovlj5cF0= -----END CERTIFICATE-----Generated at Mon Oct 20 02:55:36 2025 by rpki-client