$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d333b99f-f333-4c88-8d6d-6ce170413f39.roa File: d333b99f-f333-4c88-8d6d-6ce170413f39.roa (raw, json) Hash identifier: mqIyfkj5hSUKKMASzjMnbhcHckuFXo6ApnUErW0CFrg= Subject key identifier: 27:85:EB:86:5E:DF:01:E2:F9:4C:3F:2A:1C:D0:87:F3:02:C2:C2:03 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 396ACC041FC4363773800F2C5DA1C62D698D1218 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d333b99f-f333-4c88-8d6d-6ce170413f39.roa Signing time: Sat 18 Oct 2025 16:41:24 +0000 ROA not before: Sat 18 Oct 2025 16:41:24 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.160.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:6a:cc:04:1f:c4:36:37:73:80:0f:2c:5d:a1:c6:2d:69:8d:12:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 16:41:24 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=c5bde72bf00dcf79c84ec1c27014aec84d8e416e498ec4cb0ebe311ae255624c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5f:21:30:40:cf:4c:1d:ff:5d:c9:66:1e:5d: e0:b8:0f:7b:21:46:1e:7b:1b:ed:4c:5b:00:0e:66: 7d:a2:e7:4c:df:ff:8a:b8:2e:f5:79:9f:70:4a:ad: 93:5c:d0:8d:68:8b:95:07:1b:5b:2d:2a:1e:51:0f: 16:57:8d:1a:d3:52:f7:9a:f1:13:3f:87:6a:7a:cd: e9:1f:aa:f6:a7:27:63:5a:81:b3:bc:0c:b5:9a:21: 3e:f2:b6:ee:13:e9:64:af:35:11:7a:c8:7f:34:03: 36:b0:b4:7f:64:3f:22:4a:46:01:2a:b7:6a:80:4e: 3c:81:3c:2e:0c:b3:1c:7a:b3:cf:de:28:f5:9c:71: 0e:8c:32:6d:7d:78:54:8a:d2:8e:de:2b:66:f6:8e: f4:01:ba:97:fc:58:de:7f:b1:25:55:61:fa:3c:39: b0:09:a3:e4:15:dc:5f:10:e6:f3:c4:dd:1e:a7:a6: 59:7f:aa:47:54:d6:88:63:5e:a2:f6:50:bd:e2:27: 96:48:18:0f:02:75:05:87:28:17:86:fc:80:1d:74: 57:f4:6c:5e:09:2f:da:c0:fc:fe:15:a4:e6:d6:40: cb:01:56:7d:2d:04:3f:53:95:15:d3:d2:a3:0a:13: 07:d2:cd:c0:20:84:51:a0:45:1c:b1:f6:9f:5f:01: 9a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:85:EB:86:5E:DF:01:E2:F9:4C:3F:2A:1C:D0:87:F3:02:C2:C2:03 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d333b99f-f333-4c88-8d6d-6ce170413f39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.160.232.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:1e:e2:3b:6e:db:95:ce:18:db:d2:e0:b4:9b:3b:70:42:d2: 32:86:c6:1b:ed:96:e2:79:7e:c8:04:79:c5:c0:d8:1f:b2:20: 1c:06:86:dc:ca:75:6b:26:73:8e:53:f8:61:e6:77:04:83:2b: 68:c2:46:5e:df:50:3b:4a:ea:55:0a:72:8f:ee:c9:6b:d2:f0: cb:72:c5:4e:5b:9c:20:bd:47:2a:34:f9:8b:f1:95:c0:09:11: b4:70:61:40:11:35:12:6c:93:63:f8:96:71:63:b0:1c:78:a7: 36:d1:49:60:d7:03:40:e3:d5:58:fc:db:8a:b6:fb:01:b7:a4: e2:69:07:e0:53:cd:68:f6:17:59:d5:1f:51:98:bd:c6:74:2b: 59:cf:a7:cf:b5:96:ab:0c:c7:eb:25:5a:95:fd:0a:57:91:a1: 08:63:b5:c8:e1:6d:4e:08:5d:00:87:f4:e0:88:4b:16:a6:89: a7:b8:82:e7:cb:cb:58:53:a6:60:50:a0:11:3d:2b:1e:b7:c8: 49:c9:34:82:bb:d7:68:e5:bc:2a:bf:ee:0f:b6:5a:db:86:9c: ea:9a:a2:27:ff:7f:af:8f:2e:01:a9:5e:14:31:2c:b2:f3:5d: 04:58:64:03:4d:0d:4d:d7:fe:a9:94:9c:62:6e:07:b0:b5:f8: 27:b4:03:d2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOWrMBB/ENjdzgA8sXaHGLWmNEhgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTY0MTI0WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BjNWJkZTcyYmYwMGRjZjc5Yzg0ZWMxYzI3MDE0YWVjODRk OGU0MTZlNDk4ZWM0Y2IwZWJlMzExYWUyNTU2MjRjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvXyEwQM9MHf9dyWYeXeC4D3shRh57G+1MWwAOZn2i50zf /4q4LvV5n3BKrZNc0I1oi5UHG1stKh5RDxZXjRrTUvea8RM/h2p6zekfqvanJ2Na gbO8DLWaIT7ytu4T6WSvNRF6yH80AzawtH9kPyJKRgEqt2qATjyBPC4Msxx6s8/e KPWccQ6MMm19eFSK0o7eK2b2jvQBupf8WN5/sSVVYfo8ObAJo+QV3F8Q5vPE3R6n pll/qkdU1ohjXqL2UL3iJ5ZIGA8CdQWHKBeG/IAddFf0bF4JL9rA/P4VpObWQMsB Vn0tBD9TlRXT0qMKEwfSzcAghFGgRRyx9p9fAZphAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJ4Xrhl7fAeL5TD8qHNCH8wLCwgMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2QzMzNiOTlmLWYzMzMtNGM4OC04ZDZkLTZjZTE3MDQxM2YzOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASoOgwDQYJKoZIhvcNAQELBQADggEBABse4jtu25XOGNvS4LSbO3BC0jKG xhvtluJ5fsgEecXA2B+yIBwGhtzKdWsmc45T+GHmdwSDK2jCRl7fUDtK6lUKco/u yWvS8MtyxU5bnCC9Ryo0+YvxlcAJEbRwYUARNRJsk2P4lnFjsBx4pzbRSWDXA0Dj 1Vj824q2+wG3pOJpB+BTzWj2F1nVH1GYvcZ0K1nPp8+1lqsMx+slWpX9CleRoQhj tcjhbU4IXQCH9OCISxamiae4gufLy1hTpmBQoBE9Kx63yEnJNIK712jlvCq/7g+2 WtuGnOqaoif/f6+PLgGpXhQxLLLzXQRYZANNDU3X/qmUnGJuB7C1+Ce0A9I= -----END CERTIFICATE-----Generated at Mon Oct 20 08:43:30 2025 by rpki-client