$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aea3b873-c179-427a-8b19-f447ca374f53.roa File: aea3b873-c179-427a-8b19-f447ca374f53.roa (raw, json) Hash identifier: kBLmDdTeZg/GfWIJOjdLYobjavVGSFbpmp5syZvUb/E= Subject key identifier: 80:4F:67:1D:F3:65:25:C0:2F:5A:97:0D:6D:A3:F8:A2:35:C6:2C:66 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1C5DAAA3FB43922149EE57C66FD1A8F0B48AA564 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aea3b873-c179-427a-8b19-f447ca374f53.roa Signing time: Sat 18 Oct 2025 18:02:35 +0000 ROA not before: Sat 18 Oct 2025 18:02:35 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.165.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:5d:aa:a3:fb:43:92:21:49:ee:57:c6:6f:d1:a8:f0:b4:8a:a5:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 18:02:35 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=e753e1c1bf9f26b98454d3759db8b50434dc0d7e8acea345616b78b4e18bb282, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:87:e0:0e:af:c5:71:d6:b4:64:0d:d1:87:43: 45:e6:d6:7e:91:ae:cd:8c:9c:3d:74:2a:c3:6f:ab: 4f:00:ad:ef:b0:f2:90:64:b7:25:07:03:b3:cf:6b: 8a:1c:0a:a3:5d:97:9d:a8:fe:62:10:e8:b6:70:dd: d0:d7:6b:ec:04:2f:bf:84:e3:da:d0:92:f8:27:99: fe:df:c6:5c:94:b0:55:0a:a9:98:4e:b8:b4:53:65: 2d:61:62:98:37:35:ec:8c:ba:23:13:4b:37:a7:98: 91:8d:87:c2:93:8f:5e:9e:e3:1c:13:d2:52:c6:90: ae:31:af:ad:55:0a:7d:7f:69:43:b0:df:35:38:60: 0b:d5:60:96:40:e9:72:9c:2e:31:00:81:99:7a:67: b5:75:9f:ed:da:7f:6a:2f:f4:cf:ea:ad:ab:f1:eb: e0:48:d8:36:cd:aa:6e:5d:d4:9e:fb:db:7b:67:13: 29:57:af:f1:c2:1c:f4:1f:d8:04:b2:9f:93:c8:de: 31:fc:41:44:b9:72:3b:0e:84:0d:a7:9e:7c:67:e4: a2:4d:d3:2b:c5:f4:d2:1e:56:20:0c:40:04:c7:66: 5f:66:80:03:5e:24:94:09:76:d4:5d:12:c0:92:c4: b9:54:4a:ab:2c:73:82:ba:a4:d7:55:4d:f3:64:78: ff:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:4F:67:1D:F3:65:25:C0:2F:5A:97:0D:6D:A3:F8:A2:35:C6:2C:66 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aea3b873-c179-427a-8b19-f447ca374f53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.165.160.0/19 Signature Algorithm: sha256WithRSAEncryption 4e:26:01:cb:09:4e:f2:10:38:05:33:33:be:0f:a3:33:23:28: aa:84:a5:b4:90:bd:bf:a7:a4:5e:25:d6:9a:d5:ec:98:70:e5: 9d:0d:06:76:ad:77:12:7a:19:d0:3b:e3:7b:a4:1b:8e:27:b8: 1c:ff:6d:6a:9b:11:99:b7:0c:13:5e:8d:7e:76:ab:19:f1:cb: 52:ee:de:eb:bd:4b:21:c2:67:56:5e:8b:49:ab:b0:05:8b:70: 8e:71:2a:8e:2b:cb:6c:fc:ff:8c:95:9a:67:50:da:91:de:52: c3:41:ec:6c:8d:79:ca:50:d7:8f:c9:fd:aa:44:b6:c6:98:c3: 94:a0:82:ef:8e:b0:99:59:d0:8f:54:6b:3a:90:54:d8:62:eb: 9e:51:c2:f9:f5:28:61:a1:46:83:0c:32:b7:d0:51:94:18:c3: 12:16:d1:21:f8:a0:3e:b7:8e:63:6b:c4:93:58:88:30:01:4b: 4b:1d:4f:19:0f:9b:d3:92:72:22:b2:d0:ef:d6:3b:41:d1:4c: 12:53:bf:1f:bc:ef:3b:b7:32:72:0f:01:3f:14:cf:5d:e9:5f: 59:61:ec:5d:78:14:79:cb:f8:11:ba:f8:60:24:c3:d1:2f:67: d9:40:3c:3b:da:88:a3:bb:a0:6d:12:2a:d4:d8:66:c4:b2:73: 7d:69:69:b5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHF2qo/tDkiFJ7lfGb9Go8LSKpWQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTgwMjM1WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BlNzUzZTFjMWJmOWYyNmI5ODQ1NGQzNzU5ZGI4YjUwNDM0 ZGMwZDdlOGFjZWEzNDU2MTZiNzhiNGUxOGJiMjgyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjh+AOr8Vx1rRkDdGHQ0Xm1n6Rrs2MnD10KsNvq08Are+w 8pBktyUHA7PPa4ocCqNdl52o/mIQ6LZw3dDXa+wEL7+E49rQkvgnmf7fxlyUsFUK qZhOuLRTZS1hYpg3NeyMuiMTSzenmJGNh8KTj16e4xwT0lLGkK4xr61VCn1/aUOw 3zU4YAvVYJZA6XKcLjEAgZl6Z7V1n+3af2ov9M/qravx6+BI2DbNqm5d1J7723tn EylXr/HCHPQf2ASyn5PI3jH8QUS5cjsOhA2nnnxn5KJN0yvF9NIeViAMQATHZl9m gANeJJQJdtRdEsCSxLlUSqssc4K6pNdVTfNkeP9LAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUgE9nHfNlJcAvWpcNbaP4ojXGLGYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2FlYTNiODczLWMxNzktNDI3YS04YjE5LWY0NDdjYTM3NGY1My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUSpaAwDQYJKoZIhvcNAQELBQADggEBAE4mAcsJTvIQOAUzM74PozMjKKqE pbSQvb+npF4l1prV7Jhw5Z0NBnatdxJ6GdA743ukG44nuBz/bWqbEZm3DBNejX52 qxnxy1Lu3uu9SyHCZ1Zei0mrsAWLcI5xKo4ry2z8/4yVmmdQ2pHeUsNB7GyNecpQ 14/J/apEtsaYw5Sggu+OsJlZ0I9UazqQVNhi655Rwvn1KGGhRoMMMrfQUZQYwxIW 0SH4oD63jmNrxJNYiDABS0sdTxkPm9OSciKy0O/WO0HRTBJTvx+87zu3MnIPAT8U z13pX1lh7F14FHnL+BG6+GAkw9EvZ9lAPDvaiKO7oG0SKtTYZsSyc31pabU= -----END CERTIFICATE-----Generated at Mon Oct 20 03:08:43 2025 by rpki-client