$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bc15088f-2b7d-43b5-bfc7-9abae61fc03c.roa File: bc15088f-2b7d-43b5-bfc7-9abae61fc03c.roa (raw, json) Hash identifier: N+26MgTlk5uir054orwWW8xegRhcv8nT6vwoHkXAxr0= Subject key identifier: 1E:04:07:73:26:B1:56:89:5D:71:EF:1A:C5:5D:5A:40:44:01:34:96 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3A32EB535B6135992A685E9F7CA781C5AB301617 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bc15088f-2b7d-43b5-bfc7-9abae61fc03c.roa Signing time: Sat 18 Oct 2025 23:02:26 +0000 ROA not before: Sat 18 Oct 2025 23:02:26 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.160.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:32:eb:53:5b:61:35:99:2a:68:5e:9f:7c:a7:81:c5:ab:30:16:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 23:02:26 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=e18b9ffa42026f4b07141e70676a9cd946077344318d9a0e503d24298439290d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:8c:d3:1d:81:ca:4a:cd:cd:28:4e:73:5d:82: 9b:69:df:dc:1c:20:1d:96:8d:85:23:2a:65:a3:fd: 7d:aa:ad:1d:2a:d2:1c:0a:68:1c:ea:42:61:4d:05: 66:93:e2:21:43:83:d6:57:43:e8:c7:37:04:7e:ee: bb:10:b4:66:c3:ce:04:cc:81:bf:8c:19:d9:86:e9: 31:b2:d1:93:b0:5f:76:86:55:df:4d:97:4d:6d:d3: 89:f9:88:c2:94:18:6d:1d:04:e3:7e:19:cc:3c:a1: 0f:00:d7:91:83:7b:3e:94:82:d0:37:0a:a6:48:f0: 49:f9:a6:25:70:5c:80:98:fe:9b:e3:67:b8:4b:5f: 8f:a4:48:bf:c7:08:4f:f2:0d:90:a1:a0:57:3a:9d: 7d:f1:24:42:9a:f9:07:f9:17:ec:73:95:7e:1e:92: d0:da:78:27:7a:0c:3f:3c:67:b1:c5:48:48:a1:19: df:15:53:30:2c:c9:94:ed:de:05:87:83:1a:ec:ad: 58:40:3a:7f:b3:d2:94:f6:d4:2c:3f:27:e7:7f:c8: 8a:99:fa:4e:18:ad:a5:b7:c8:c7:c6:12:22:ca:cb: 47:c4:4b:f6:23:8c:a5:b2:bd:4a:f5:88:14:00:a5: 72:34:98:67:a2:6b:ac:2f:60:f9:a4:d1:dd:62:a9: ff:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:04:07:73:26:B1:56:89:5D:71:EF:1A:C5:5D:5A:40:44:01:34:96 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bc15088f-2b7d-43b5-bfc7-9abae61fc03c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.160.125.0/24 Signature Algorithm: sha256WithRSAEncryption 96:26:1c:cb:02:9a:91:28:a3:6f:ca:14:cb:9a:18:ee:22:cd: d0:0c:1a:3a:a7:f9:9c:d0:76:41:c1:1e:99:43:8a:d9:79:46: fa:5a:fa:76:13:8d:0d:76:a7:ba:23:a5:d6:8e:ac:42:27:e3: 4e:1c:94:74:92:64:2b:7d:c9:79:07:b3:0e:77:a2:81:20:7c: bc:68:27:ca:1d:6a:c6:db:0b:35:4a:3f:7e:13:e2:e8:3c:ad: 11:19:9a:e5:1d:98:c7:92:4f:a0:53:d8:66:d1:d0:a2:42:81: 4c:5b:63:29:bf:94:63:1b:b6:37:9e:bb:fd:e2:a2:66:1a:1f: 4c:08:c6:f3:f2:f3:70:1a:12:a3:ae:1d:df:d1:f7:c4:30:91: e4:90:38:93:01:bd:9e:84:24:a8:d9:08:82:5f:18:8b:bb:cc: 10:10:84:ee:e4:e6:94:52:b0:21:9b:af:f8:fb:2b:2c:09:8e: 94:a7:9c:55:6e:f3:ab:4b:cd:4e:6f:f0:c3:54:7f:06:49:57: 72:a9:5d:ff:93:76:b0:12:01:6b:b6:2c:d4:c2:7f:32:a5:66: dd:45:7b:14:48:71:82:00:0e:26:ba:85:52:f3:7c:72:22:90: 39:39:25:0b:9c:0c:0f:dd:e6:ef:95:1d:a3:ae:46:63:82:29: 71:58:3f:24 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOjLrU1thNZkqaF6ffKeBxaswFhcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MjMwMjI2WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BlMThiOWZmYTQyMDI2ZjRiMDcxNDFlNzA2NzZhOWNkOTQ2 MDc3MzQ0MzE4ZDlhMGU1MDNkMjQyOTg0MzkyOTBkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFjNMdgcpKzc0oTnNdgptp39wcIB2WjYUjKmWj/X2qrR0q 0hwKaBzqQmFNBWaT4iFDg9ZXQ+jHNwR+7rsQtGbDzgTMgb+MGdmG6TGy0ZOwX3aG Vd9Nl01t04n5iMKUGG0dBON+Gcw8oQ8A15GDez6UgtA3CqZI8En5piVwXICY/pvj Z7hLX4+kSL/HCE/yDZChoFc6nX3xJEKa+Qf5F+xzlX4ektDaeCd6DD88Z7HFSEih Gd8VUzAsyZTt3gWHgxrsrVhAOn+z0pT21Cw/J+d/yIqZ+k4YraW3yMfGEiLKy0fE S/YjjKWyvUr1iBQApXI0mGeia6wvYPmk0d1iqf+NAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUHgQHcyaxVoldce8axV1aQEQBNJYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2JjMTUwODhmLTJiN2QtNDNiNS1iZmM3LTlhYmFlNjFmYzAzYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASoH0wDQYJKoZIhvcNAQELBQADggEBAJYmHMsCmpEoo2/KFMuaGO4izdAM Gjqn+ZzQdkHBHplDitl5Rvpa+nYTjQ12p7ojpdaOrEIn404clHSSZCt9yXkHsw53 ooEgfLxoJ8odasbbCzVKP34T4ug8rREZmuUdmMeST6BT2GbR0KJCgUxbYym/lGMb tjeeu/3iomYaH0wIxvPy83AaEqOuHd/R98QwkeSQOJMBvZ6EJKjZCIJfGIu7zBAQ hO7k5pRSsCGbr/j7KywJjpSnnFVu86tLzU5v8MNUfwZJV3KpXf+TdrASAWu2LNTC fzKlZt1FexRIcYIADia6hVLzfHIikDk5JQucDA/d5u+VHaOuRmOCKXFYPyQ= -----END CERTIFICATE-----Generated at Mon Oct 20 17:29:23 2025 by rpki-client