$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bca89464-a293-4aae-a924-1b86e505072f.roa File: bca89464-a293-4aae-a924-1b86e505072f.roa (raw, json) Hash identifier: tjzs6Vqh/qKXJ9YYllIrijg2E4n56sqZtPp85ZCOzlE= Subject key identifier: 02:3B:8F:5B:09:50:A8:06:A2:B4:D6:A3:E4:DC:53:FB:83:E4:87:15 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 167974FDDC12B688B4F7C31E13834544F2F2BB8D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bca89464-a293-4aae-a924-1b86e505072f.roa Signing time: Sun 19 Oct 2025 03:51:16 +0000 ROA not before: Sun 19 Oct 2025 03:51:16 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.154.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:79:74:fd:dc:12:b6:88:b4:f7:c3:1e:13:83:45:44:f2:f2:bb:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 03:51:16 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=34524a24d4164a8565a4a36786984de0786690656dbb216f77f9e3ddd276784f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:dd:35:c3:a5:d0:74:78:69:1f:ce:39:c6:76: 80:5d:73:b7:7f:ef:be:96:e4:be:6e:1a:1e:06:c2: f7:6a:0c:aa:ab:de:be:f0:24:2a:8b:1c:f3:07:02: 6b:d9:94:49:9a:49:2d:3d:ef:03:8c:fe:5e:33:20: b0:a6:1c:49:aa:48:3d:03:a1:63:9d:87:20:80:f9: 78:e9:d4:ff:00:56:d6:a4:d1:b9:e9:88:a5:ec:80: e2:29:ff:ae:bd:f6:8b:ca:ad:8d:e2:14:f5:af:7f: b9:74:11:d5:65:6f:94:55:49:21:76:74:3d:b0:d4: 50:c1:25:ea:44:18:a7:c7:86:ad:e6:f9:18:03:c0: 3d:3c:be:27:67:89:2d:3b:9c:22:ec:86:4e:a6:45: 76:bc:0f:32:14:27:d4:50:12:a8:ec:27:5d:8d:bf: 64:e8:d7:9c:c4:e8:fe:31:d4:55:c8:2f:ac:b1:af: cf:47:32:94:06:d8:d8:b7:55:ce:cc:84:74:64:3d: 52:96:60:69:46:d3:61:ba:5a:d4:d6:f6:73:9c:9f: 3e:ff:00:2a:2e:2a:1a:61:9d:03:55:c7:49:ef:cc: 9b:d2:f1:94:b2:15:8f:1f:ba:29:29:ac:3e:fc:8c: a3:cf:56:f2:a0:88:45:8e:91:f6:99:4a:41:42:e8: 09:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:3B:8F:5B:09:50:A8:06:A2:B4:D6:A3:E4:DC:53:FB:83:E4:87:15 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bca89464-a293-4aae-a924-1b86e505072f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.154.128.0/20 Signature Algorithm: sha256WithRSAEncryption 69:41:48:4a:66:60:c3:c7:a8:82:48:87:18:9b:50:95:e2:c1: ca:6a:07:a8:00:e5:c1:9b:56:e2:52:66:db:23:68:84:1c:86: 3f:dd:98:c4:72:81:08:5c:36:d8:a9:12:b9:de:dc:86:30:8e: 6c:5b:ba:56:0f:8b:b7:22:6f:3d:ff:ae:7a:15:02:fb:c6:ed: 51:ca:07:ff:e6:b9:d4:36:51:df:1e:a1:45:a5:f4:36:03:72: 44:82:91:f7:74:8b:1d:db:57:27:d8:1d:50:c8:82:ac:87:ec: 8a:a4:b3:f2:2f:16:69:4f:56:d4:5b:ab:74:dd:e1:df:d5:86: 88:d8:91:d5:c6:65:c5:02:0c:0b:56:c7:af:3c:dc:0c:6d:e5: 5b:78:1e:83:7c:32:49:a6:b2:01:77:d9:ed:60:1f:50:5d:e1: 73:94:d6:87:2b:26:5c:72:aa:cd:67:45:dc:40:85:5a:4f:63: 69:d1:e8:30:f8:6b:47:a2:17:e9:55:7b:ea:33:37:20:f4:26: 6a:19:b1:f5:84:c3:19:93:b7:49:9d:b7:43:0e:55:7c:8a:4d: be:6d:d9:a3:b0:4f:26:89:7b:35:de:59:5a:2b:3e:5b:ad:41: b1:52:c0:2f:14:af:50:15:1c:dd:26:31:ec:9d:55:3c:83:bd: f6:21:fd:d7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFnl0/dwStoi098MeE4NFRPLyu40wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MDM1MTE2WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AzNDUyNGEyNGQ0MTY0YTg1NjVhNGEzNjc4Njk4NGRlMDc4 NjY5MDY1NmRiYjIxNmY3N2Y5ZTNkZGQyNzY3ODRmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCu3TXDpdB0eGkfzjnGdoBdc7d/776W5L5uGh4GwvdqDKqr 3r7wJCqLHPMHAmvZlEmaSS097wOM/l4zILCmHEmqSD0DoWOdhyCA+Xjp1P8AVtak 0bnpiKXsgOIp/6699ovKrY3iFPWvf7l0EdVlb5RVSSF2dD2w1FDBJepEGKfHhq3m +RgDwD08vidniS07nCLshk6mRXa8DzIUJ9RQEqjsJ12Nv2To15zE6P4x1FXIL6yx r89HMpQG2Ni3Vc7MhHRkPVKWYGlG02G6WtTW9nOcnz7/ACouKhphnQNVx0nvzJvS 8ZSyFY8fuikprD78jKPPVvKgiEWOkfaZSkFC6AlXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUAjuPWwlQqAaitNaj5NxT+4PkhxUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2JjYTg5NDY0LWEyOTMtNGFhZS1hOTI0LTFiODZlNTA1MDcyZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQSmoAwDQYJKoZIhvcNAQELBQADggEBAGlBSEpmYMPHqIJIhxibUJXiwcpq B6gA5cGbVuJSZtsjaIQchj/dmMRygQhcNtipErne3IYwjmxbulYPi7cibz3/rnoV AvvG7VHKB//mudQ2Ud8eoUWl9DYDckSCkfd0ix3bVyfYHVDIgqyH7Iqks/IvFmlP VtRbq3Td4d/VhojYkdXGZcUCDAtWx6883Axt5Vt4HoN8MkmmsgF32e1gH1Bd4XOU 1ocrJlxyqs1nRdxAhVpPY2nR6DD4a0eiF+lVe+ozNyD0JmoZsfWEwxmTt0mdt0MO VXyKTb5t2aOwTyaJezXeWVorPlutQbFSwC8Ur1AVHN0mMeydVTyDvfYh/dc= -----END CERTIFICATE-----Generated at Mon Oct 20 19:16:31 2025 by rpki-client