$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bd32ad18-7e65-41dc-8040-3cbfe3d1b653.roa File: bd32ad18-7e65-41dc-8040-3cbfe3d1b653.roa (raw, json) Hash identifier: 9ZYGl1zUVFGtxKsvc+Zmw28IASG8m+8f66FpICDiPJA= Subject key identifier: 70:73:2D:04:5E:BD:AF:04:FC:18:5A:69:D8:18:E0:A4:20:BF:2B:C7 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3542820CE2E5665597DCE37F807CF5791DDD04CB Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bd32ad18-7e65-41dc-8040-3cbfe3d1b653.roa Signing time: Sun 19 Oct 2025 19:12:35 +0000 ROA not before: Sun 19 Oct 2025 19:12:35 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.65.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:42:82:0c:e2:e5:66:55:97:dc:e3:7f:80:7c:f5:79:1d:dd:04:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 19:12:35 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=844e87dd692693221a622e40773d57dc002a66ee709579f2eb0c99b1bae75fcb, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ae:e1:59:15:17:2e:60:42:15:14:7c:45:de: 82:bd:b2:76:d4:75:3a:f7:f6:22:48:53:b2:28:13: ae:65:48:60:8f:7c:7d:2b:5c:07:eb:dc:80:fc:b7: 7e:0b:dd:8d:99:92:68:c2:cb:72:d1:6e:8d:a1:73: 8f:f4:c2:f0:de:23:5b:a3:63:17:db:44:b3:4c:44: d5:3f:92:d4:62:0b:fa:b0:f1:63:af:a6:26:cf:05: 7a:e9:2d:a3:33:4e:a8:43:37:e4:21:2c:c5:4d:6d: 0a:92:bc:47:a7:34:63:f8:7f:1e:6d:36:92:0c:9a: b5:0f:ef:f7:9f:ff:13:e8:b4:58:68:74:cc:2b:58: ff:99:68:86:0e:e4:ac:89:07:87:40:4f:81:33:b4: 3f:36:5e:4f:44:91:c0:57:c3:36:47:41:50:7a:4b: f7:2c:cf:ae:85:91:f1:8e:df:d7:26:78:02:f5:b8: f8:11:84:e2:3e:f3:25:d6:8f:f0:b0:d6:61:35:50: 40:49:4b:3b:b3:56:2a:b0:83:73:a2:34:0e:2b:92: 61:82:88:d9:96:bf:ca:c3:69:f5:01:6a:f0:0f:1d: dc:66:fb:bc:33:68:ed:7a:92:e6:6b:1a:b4:77:f8: f8:ec:8a:99:17:0e:c4:82:23:47:95:db:38:8c:f3: cb:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:73:2D:04:5E:BD:AF:04:FC:18:5A:69:D8:18:E0:A4:20:BF:2B:C7 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bd32ad18-7e65-41dc-8040-3cbfe3d1b653.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.65.160.0/20 Signature Algorithm: sha256WithRSAEncryption 36:3d:f6:7d:06:62:7c:fc:6a:a3:8e:90:17:e0:8f:c5:0c:b9: ba:25:34:b9:e0:0f:a7:68:91:71:c8:d1:94:c9:5b:ec:ea:83: 9e:94:c9:a5:aa:5a:6b:02:d6:a9:0a:66:f1:a2:ac:a3:66:06: 45:47:3b:6e:10:90:0e:2b:1e:85:73:7f:7c:3f:d7:24:cc:95: b6:f0:cc:20:b2:db:46:75:76:51:a6:1e:cc:3c:46:32:b3:b4: 18:bc:32:eb:5a:1e:1b:b2:74:fe:46:3a:59:db:27:bd:c5:74: 78:93:bb:cc:56:5e:6a:9b:ff:bc:f5:f5:55:06:04:60:3f:d9: d4:51:fc:f9:cc:ba:e8:c4:8a:75:8f:52:f3:22:ad:9c:a5:7f: 00:d6:7b:e8:d5:2d:33:cd:a5:90:ab:0f:35:a2:52:1d:3f:15: 0f:2d:6b:77:97:66:37:86:63:08:56:3e:62:22:69:b7:ae:c0: 36:68:ae:e1:fc:87:b2:20:cf:b4:3f:f6:e5:29:83:8d:96:66: 39:5f:d9:75:2e:11:db:19:c5:4c:84:42:6b:f5:80:23:5f:ad: bd:7e:bb:36:ae:98:2a:57:11:e8:9a:83:68:c8:3c:ad:fe:88: 84:54:54:09:3b:29:ba:94:f9:03:89:87:5a:70:f1:da:46:73: e3:5e:63:ee -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNUKCDOLlZlWX3ON/gHz1eR3dBMswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTkxMjM1WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A4NDRlODdkZDY5MjY5MzIyMWE2MjJlNDA3NzNkNTdkYzAw MmE2NmVlNzA5NTc5ZjJlYjBjOTliMWJhZTc1ZmNiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDZruFZFRcuYEIVFHxF3oK9snbUdTr39iJIU7IoE65lSGCP fH0rXAfr3ID8t34L3Y2ZkmjCy3LRbo2hc4/0wvDeI1ujYxfbRLNMRNU/ktRiC/qw 8WOvpibPBXrpLaMzTqhDN+QhLMVNbQqSvEenNGP4fx5tNpIMmrUP7/ef/xPotFho dMwrWP+ZaIYO5KyJB4dAT4EztD82Xk9EkcBXwzZHQVB6S/csz66FkfGO39cmeAL1 uPgRhOI+8yXWj/Cw1mE1UEBJSzuzViqwg3OiNA4rkmGCiNmWv8rDafUBavAPHdxm +7wzaO16kuZrGrR3+PjsipkXDsSCI0eV2ziM88v1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUcHMtBF69rwT8GFpp2BjgpCC/K8cwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2JkMzJhZDE4LTdlNjUtNDFkYy04MDQwLTNjYmZlM2QxYjY1My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQSQaAwDQYJKoZIhvcNAQELBQADggEBADY99n0GYnz8aqOOkBfgj8UMubol NLngD6dokXHI0ZTJW+zqg56UyaWqWmsC1qkKZvGirKNmBkVHO24QkA4rHoVzf3w/ 1yTMlbbwzCCy20Z1dlGmHsw8RjKztBi8MutaHhuydP5GOlnbJ73FdHiTu8xWXmqb /7z19VUGBGA/2dRR/PnMuujEinWPUvMirZylfwDWe+jVLTPNpZCrDzWiUh0/FQ8t a3eXZjeGYwhWPmIiabeuwDZoruH8h7Igz7Q/9uUpg42WZjlf2XUuEdsZxUyEQmv1 gCNfrb1+uzaumCpXEeiag2jIPK3+iIRUVAk7KbqU+QOJh1pw8dpGc+NeY+4= -----END CERTIFICATE-----Generated at Mon Oct 20 08:44:05 2025 by rpki-client