$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b373fcdb-e215-41d6-a5d8-bc87e1e0f657.roa File: b373fcdb-e215-41d6-a5d8-bc87e1e0f657.roa (raw, json) Hash identifier: YeMDH/ACX+U8Ruil4eiFxviP+bFEQqkP9G5Qhgg4CKU= Subject key identifier: CE:E7:B6:B0:59:4A:27:73:AC:BC:20:43:A4:4A:A6:C5:3E:A7:B6:4F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 51B3DEF57F0B0775D1918CACAF8FD4FE9ADDB6B0 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b373fcdb-e215-41d6-a5d8-bc87e1e0f657.roa Signing time: Sat 18 Oct 2025 08:41:24 +0000 ROA not before: Sat 18 Oct 2025 08:41:24 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.165.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:b3:de:f5:7f:0b:07:75:d1:91:8c:ac:af:8f:d4:fe:9a:dd:b6:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 08:41:24 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=d8e7a6bf783ae90c6eb85e53a825f585b7aa941d0274223c2d91edaac6cf1495, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:bd:69:20:ad:21:04:c9:2f:8a:92:1c:3c:9a: f9:cf:f0:85:dc:99:1d:f9:c4:5c:6e:d4:3d:02:4e: 23:d5:51:a6:78:ed:8c:c9:3d:84:70:2f:74:78:29: 40:91:9e:d8:48:99:81:c0:d4:19:c1:30:68:a0:7f: 8e:2d:84:c9:b7:e1:3d:fa:0d:bb:bc:ff:da:12:55: 46:6b:e6:0c:4b:6a:b8:06:e3:d1:db:4a:51:9c:b7: 0f:25:30:dd:f2:e9:f9:54:bf:41:2c:f0:3b:ca:ca: 6a:4d:e6:73:eb:52:92:fa:4f:e8:e0:bc:f0:76:70: f7:4d:b7:8d:bb:ef:63:98:f4:64:b0:98:ce:0e:d7: e0:40:bc:d2:df:a3:9d:4a:a5:5a:d0:f1:05:6f:3d: 60:03:10:60:b6:8c:75:b0:33:9a:5b:a6:33:31:76: 72:20:a1:0e:74:92:a7:7a:71:88:f5:14:3b:43:b7: 8d:67:5e:f2:48:e6:17:c8:cf:9e:79:27:93:1f:ec: a9:ac:16:da:cf:be:13:2f:5b:4f:5a:4e:57:cb:63: 2c:84:ed:94:ed:32:10:ab:03:bf:3d:b8:44:0c:6a: f8:92:14:1d:c3:cc:d9:dd:d5:2f:c2:07:bf:dc:c6: d0:18:e2:95:d3:8d:71:a5:ac:66:9f:0b:9a:c0:e0: 73:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:E7:B6:B0:59:4A:27:73:AC:BC:20:43:A4:4A:A6:C5:3E:A7:B6:4F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b373fcdb-e215-41d6-a5d8-bc87e1e0f657.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.165.151.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:a7:87:b6:ed:ad:3e:dc:8f:0b:a0:56:a6:f9:3c:bd:0c:8a: 14:25:19:3d:ef:28:4b:11:01:07:61:4a:0e:e7:45:73:d5:65: 99:19:4b:64:5a:02:4c:ee:bf:ed:d0:a0:29:31:a8:ea:dd:1c: 8c:d4:87:d5:86:27:fa:a5:f2:70:c3:6f:17:f1:e0:32:92:96: 24:e6:a3:43:dd:67:d8:3b:8b:ba:02:30:7b:d8:ea:1d:f8:99: 9a:c5:fd:ca:f0:eb:93:4f:fd:b5:e6:d6:22:55:a1:57:dc:19: 9a:12:8a:04:5a:24:17:32:dc:6f:d7:ab:6c:99:50:3f:7a:e1: 71:b5:c1:39:4b:d5:b5:fd:60:67:04:b3:62:f0:04:a0:5b:d1: b7:f6:40:e0:b1:06:ec:16:7e:89:86:52:02:95:7c:82:76:b4: 96:75:4e:eb:e1:d2:81:2e:b0:3a:b9:c5:b7:df:93:fb:23:a8: 48:26:61:4f:08:8a:f4:00:cf:6b:66:23:53:5e:c2:52:02:93: 57:ed:fc:1b:f9:56:44:9d:5b:3b:bb:f9:ca:89:b5:3c:7a:72: cc:62:37:07:47:dc:b8:4d:f6:76:aa:7f:68:9f:a7:8e:3c:22: fa:25:7c:d6:ed:21:10:ca:b1:18:6b:1b:42:eb:33:9a:7a:50: 59:d7:73:5f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUbPe9X8LB3XRkYysr4/U/prdtrAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MDg0MTI0WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BkOGU3YTZiZjc4M2FlOTBjNmViODVlNTNhODI1ZjU4NWI3 YWE5NDFkMDI3NDIyM2MyZDkxZWRhYWM2Y2YxNDk1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLvWkgrSEEyS+Kkhw8mvnP8IXcmR35xFxu1D0CTiPVUaZ4 7YzJPYRwL3R4KUCRnthImYHA1BnBMGigf44thMm34T36Dbu8/9oSVUZr5gxLargG 49HbSlGctw8lMN3y6flUv0Es8DvKympN5nPrUpL6T+jgvPB2cPdNt42772OY9GSw mM4O1+BAvNLfo51KpVrQ8QVvPWADEGC2jHWwM5pbpjMxdnIgoQ50kqd6cYj1FDtD t41nXvJI5hfIz555J5Mf7KmsFtrPvhMvW09aTlfLYyyE7ZTtMhCrA789uEQMaviS FB3DzNnd1S/CB7/cxtAY4pXTjXGlrGafC5rA4HO3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUzue2sFlKJ3OsvCBDpEqmxT6ntk8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2IzNzNmY2RiLWUyMTUtNDFkNi1hNWQ4LWJjODdlMWUwZjY1Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASpZcwDQYJKoZIhvcNAQELBQADggEBAB2nh7btrT7cjwugVqb5PL0MihQl GT3vKEsRAQdhSg7nRXPVZZkZS2RaAkzuv+3QoCkxqOrdHIzUh9WGJ/ql8nDDbxfx 4DKSliTmo0PdZ9g7i7oCMHvY6h34mZrF/crw65NP/bXm1iJVoVfcGZoSigRaJBcy 3G/Xq2yZUD964XG1wTlL1bX9YGcEs2LwBKBb0bf2QOCxBuwWfomGUgKVfIJ2tJZ1 Tuvh0oEusDq5xbffk/sjqEgmYU8IivQAz2tmI1NewlICk1ft/Bv5VkSdWzu7+cqJ tTx6csxiNwdH3LhN9naqf2ifp448IvolfNbtIRDKsRhrG0LrM5p6UFnXc18= -----END CERTIFICATE-----Generated at Mon Oct 20 12:21:40 2025 by rpki-client