$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dbe36063-737c-442d-935c-78615a03fe34.roa File: dbe36063-737c-442d-935c-78615a03fe34.roa (raw, json) Hash identifier: oCO3cZtrhzNgAlY/huaSb6rwhYWj3ZtF/fhPw4oEa4g= Subject key identifier: EF:C9:1B:2A:FE:99:7D:12:0B:EF:1A:8C:36:F5:7E:D9:F3:8A:67:EB Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3D473251380EC56DA602C733DB39DB70F1079C6F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dbe36063-737c-442d-935c-78615a03fe34.roa Signing time: Sat 18 Oct 2025 20:31:21 +0000 ROA not before: Sat 18 Oct 2025 20:31:21 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.165.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:47:32:51:38:0e:c5:6d:a6:02:c7:33:db:39:db:70:f1:07:9c:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 20:31:21 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=090d2a82f0a55cf55495fce02537d69ba2822127929f01e739f68774faf54310, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:14:e9:b4:6b:03:6e:33:8a:bb:60:e4:47:45: 9f:7f:16:a7:e3:83:5d:2f:2d:2d:e3:74:6f:8a:e3: 6c:4d:62:b3:fe:b9:87:f0:8a:98:71:96:5d:26:d5: 4e:cb:7b:ca:ff:af:6a:1a:dd:66:a3:0e:b7:ef:4d: c9:22:1b:96:26:5a:24:be:e0:1b:a3:27:f5:d4:95: ef:cb:96:b1:70:fe:74:1f:f6:e5:47:7e:b5:43:25: a3:7e:51:61:5b:20:6a:51:83:d1:ef:0b:3d:d2:db: f4:22:7c:18:ec:0f:6d:6a:df:f8:ac:ba:37:e8:ad: 1d:35:7e:5a:65:17:b2:6b:43:30:d7:8f:f8:57:01: ca:bc:fd:64:6d:dd:4c:db:fc:3b:0c:ad:8d:0b:4f: ab:ee:c7:55:a3:0a:66:ad:47:ba:1f:0f:57:e1:7e: 98:c1:1f:6d:4f:b1:30:47:96:87:ea:63:35:06:a5: cf:84:2b:1e:1d:ba:28:9e:f8:aa:1e:5e:da:5b:5d: 88:5a:86:14:8e:99:ee:e4:42:a1:70:b6:d8:01:ec: 24:a9:5e:27:2c:7d:0c:b1:90:18:9d:8b:6d:53:96: 34:1e:ae:98:0d:8a:fa:33:2c:48:a4:84:da:5c:ff: 31:1c:fd:44:5a:cc:1c:57:6e:7e:0c:42:f4:9b:bd: 15:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:C9:1B:2A:FE:99:7D:12:0B:EF:1A:8C:36:F5:7E:D9:F3:8A:67:EB X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dbe36063-737c-442d-935c-78615a03fe34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.165.161.0/24 Signature Algorithm: sha256WithRSAEncryption 31:b0:e2:30:ac:c4:c0:19:de:3b:53:d7:ee:c8:a3:5b:db:29: ac:0d:87:bb:31:f9:c4:8b:c6:26:a2:8c:2d:76:ee:e7:0f:5c: ae:74:b6:5c:c2:2c:af:71:58:34:ef:93:16:e9:3b:6f:15:e4: 35:cc:29:46:39:c1:1e:62:99:c4:53:9b:aa:2c:4d:1d:6b:2d: 96:f5:bc:57:7e:dd:03:44:45:1e:73:16:91:ad:f8:35:a5:99: 3a:cc:0c:02:9d:d5:0b:42:16:02:e0:24:d1:03:0b:2b:e1:3a: e5:34:4e:ad:81:84:5c:60:de:c9:46:dc:17:01:ac:72:77:32: 8b:3b:34:7d:0e:b8:71:9c:4f:67:4b:0c:35:da:fb:d1:97:0f: 61:15:44:0d:1f:5c:72:b9:00:6f:97:c0:a0:e2:e8:05:e1:8c: e4:5d:0b:5e:1b:af:e5:19:90:32:b9:7f:e5:4e:61:d7:a5:85: 2e:08:63:b3:0a:31:4e:00:8d:58:82:60:3d:e6:80:41:d8:8b: 9b:2e:0c:b8:39:e9:66:fd:fc:58:76:cb:5f:38:0e:69:60:60: 70:21:9e:19:af:a9:2f:37:7b:ee:3b:9d:49:a8:0a:88:c2:82: 3a:ec:6c:ae:cf:41:db:52:e3:e4:14:df:b7:5a:11:7e:66:be: 1e:b5:9f:33 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPUcyUTgOxW2mAscz2znbcPEHnG8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MjAzMTIxWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AwOTBkMmE4MmYwYTU1Y2Y1NTQ5NWZjZTAyNTM3ZDY5YmEy ODIyMTI3OTI5ZjAxZTczOWY2ODc3NGZhZjU0MzEwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzFOm0awNuM4q7YORHRZ9/Fqfjg10vLS3jdG+K42xNYrP+ uYfwiphxll0m1U7Le8r/r2oa3WajDrfvTckiG5YmWiS+4BujJ/XUle/LlrFw/nQf 9uVHfrVDJaN+UWFbIGpRg9HvCz3S2/QifBjsD21q3/isujforR01flplF7JrQzDX j/hXAcq8/WRt3Uzb/DsMrY0LT6vux1WjCmatR7ofD1fhfpjBH21PsTBHlofqYzUG pc+EKx4duiie+KoeXtpbXYhahhSOme7kQqFwttgB7CSpXicsfQyxkBidi21TljQe rpgNivozLEikhNpc/zEc/URazBxXbn4MQvSbvRVXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU78kbKv6ZfRIL7xqMNvV+2fOKZ+swHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2RiZTM2MDYzLTczN2MtNDQyZC05MzVjLTc4NjE1YTAzZmUzNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASpaEwDQYJKoZIhvcNAQELBQADggEBADGw4jCsxMAZ3jtT1+7Io1vbKawN h7sx+cSLxiaijC127ucPXK50tlzCLK9xWDTvkxbpO28V5DXMKUY5wR5imcRTm6os TR1rLZb1vFd+3QNERR5zFpGt+DWlmTrMDAKd1QtCFgLgJNEDCyvhOuU0Tq2BhFxg 3slG3BcBrHJ3Mos7NH0OuHGcT2dLDDXa+9GXD2EVRA0fXHK5AG+XwKDi6AXhjORd C14br+UZkDK5f+VOYdelhS4IY7MKMU4AjViCYD3mgEHYi5suDLg56Wb9/Fh2y184 DmlgYHAhnhmvqS83e+47nUmoCojCgjrsbK7PQdtS4+QU37daEX5mvh61nzM= -----END CERTIFICATE-----Generated at Mon Oct 20 06:04:10 2025 by rpki-client