$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dd692d81-d232-4d7e-a184-00f5eb87a9af.roa File: dd692d81-d232-4d7e-a184-00f5eb87a9af.roa (raw, json) Hash identifier: 2culA0Ukg4iprbtD7V1cE7HT6yD0OcKRp8T72uqASCM= Subject key identifier: B7:11:D3:70:20:A3:78:B0:30:89:7F:D3:44:19:1F:F7:53:45:47:B8 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6E2C89F920365C7804BC46E6E85744769C8C094F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dd692d81-d232-4d7e-a184-00f5eb87a9af.roa Signing time: Sat 18 Oct 2025 19:20:06 +0000 ROA not before: Sat 18 Oct 2025 19:20:06 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.160.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:2c:89:f9:20:36:5c:78:04:bc:46:e6:e8:57:44:76:9c:8c:09:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 19:20:06 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=626ffc19170df9a248d804fcc82cf1a49d068adf3e60d34709075002f376a264, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e1:02:0f:d5:29:17:90:ce:dd:80:4e:74:5b: 07:73:57:7e:a8:90:c3:ff:b3:31:24:76:bf:e0:c9: 4f:c6:f7:a0:6f:57:d0:a0:43:dd:96:1f:d4:b2:75: 5b:f1:bd:17:f4:bc:97:ac:a1:4b:95:3e:b9:4f:32: 32:a9:f3:34:ff:1b:96:fc:99:d6:5d:36:4a:50:74: 71:86:0a:d1:25:fa:34:0a:be:b2:ef:07:f1:c6:a3: 86:67:b0:6f:16:44:42:09:35:e8:fd:32:b6:61:94: 27:c4:eb:49:35:07:cb:c9:29:0a:2d:e5:1a:bb:ab: e1:0d:e9:9a:76:cc:d0:a7:09:fe:c2:1f:66:be:d2: 8b:df:f5:25:05:b2:14:a8:ad:b0:c1:ad:ac:6b:77: 03:a9:cc:e4:ee:74:15:66:e6:87:26:38:bd:9f:2b: d1:d0:ed:7d:f4:4a:f8:e7:2e:28:12:e4:8a:84:cb: 14:e4:c1:26:64:05:68:9d:02:14:12:de:9b:4f:78: 3e:13:6d:bf:ee:9a:3f:9d:d3:40:16:cd:3d:8e:da: 9a:3d:1b:40:b1:1e:d4:30:fe:d6:b4:8b:9f:59:a1: f1:ab:f5:4c:5c:c6:b1:3d:52:6a:cd:50:63:d0:e5: 0b:11:55:09:70:5a:0c:84:ad:9d:29:e7:c3:79:48: 72:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:11:D3:70:20:A3:78:B0:30:89:7F:D3:44:19:1F:F7:53:45:47:B8 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dd692d81-d232-4d7e-a184-00f5eb87a9af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.160.229.0/24 Signature Algorithm: sha256WithRSAEncryption 79:5a:83:73:c8:30:ec:db:05:f9:c2:e4:ba:39:fa:7f:e6:0b: 88:2a:df:49:da:be:0d:9c:b5:3e:a5:5f:df:49:27:03:4c:48: 03:4d:ce:8a:aa:46:24:50:23:89:c1:ec:25:9b:b6:e1:17:bb: 1b:04:d3:bb:00:06:85:d6:46:71:0c:1c:7f:56:3d:98:ac:c7: 76:89:94:d2:b8:5f:47:7e:de:9e:32:5e:9c:0c:97:10:39:5e: f0:8f:33:a5:f6:cb:2f:b0:af:d3:86:3e:fd:e3:7b:a7:03:63: 31:ae:1a:d0:68:8e:5f:b1:e4:a2:48:5d:fd:bc:5c:84:79:15: 8b:20:a5:0c:4e:58:44:33:96:56:11:d5:d5:7b:f6:c4:ca:6f: fa:86:4e:4c:b8:15:f6:bf:4a:ed:d0:ad:f9:5d:35:6e:fe:b5: 2d:a8:77:e2:4c:5e:c7:ec:6f:c6:83:36:53:85:27:6a:bc:fc: 17:46:65:fd:a6:0f:01:39:77:58:96:4f:eb:0e:70:cc:85:c4: 9a:1e:af:15:0f:9c:4e:49:9a:4b:56:bf:bb:76:56:04:e5:93: 94:0a:57:a6:2a:90:fe:2c:98:c9:20:9b:0c:e0:0f:56:1d:b3: ca:25:18:8f:f7:b8:18:c3:53:2b:ed:73:10:76:84:d4:a3:16: cf:d0:a4:5b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbiyJ+SA2XHgEvEbm6FdEdpyMCU8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTkyMDA2WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A2MjZmZmMxOTE3MGRmOWEyNDhkODA0ZmNjODJjZjFhNDlk MDY4YWRmM2U2MGQzNDcwOTA3NTAwMmYzNzZhMjY0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCs4QIP1SkXkM7dgE50WwdzV36okMP/szEkdr/gyU/G96Bv V9CgQ92WH9SydVvxvRf0vJesoUuVPrlPMjKp8zT/G5b8mdZdNkpQdHGGCtEl+jQK vrLvB/HGo4ZnsG8WREIJNej9MrZhlCfE60k1B8vJKQot5Rq7q+EN6Zp2zNCnCf7C H2a+0ovf9SUFshSorbDBraxrdwOpzOTudBVm5ocmOL2fK9HQ7X30SvjnLigS5IqE yxTkwSZkBWidAhQS3ptPeD4Tbb/umj+d00AWzT2O2po9G0CxHtQw/ta0i59ZofGr 9UxcxrE9UmrNUGPQ5QsRVQlwWgyErZ0p58N5SHLRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUtxHTcCCjeLAwiX/TRBkf91NFR7gwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2RkNjkyZDgxLWQyMzItNGQ3ZS1hMTg0LTAwZjVlYjg3YTlhZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASoOUwDQYJKoZIhvcNAQELBQADggEBAHlag3PIMOzbBfnC5Lo5+n/mC4gq 30navg2ctT6lX99JJwNMSANNzoqqRiRQI4nB7CWbtuEXuxsE07sABoXWRnEMHH9W PZisx3aJlNK4X0d+3p4yXpwMlxA5XvCPM6X2yy+wr9OGPv3je6cDYzGuGtBojl+x 5KJIXf28XIR5FYsgpQxOWEQzllYR1dV79sTKb/qGTky4Ffa/Su3QrfldNW7+tS2o d+JMXsfsb8aDNlOFJ2q8/BdGZf2mDwE5d1iWT+sOcMyFxJoerxUPnE5JmktWv7t2 VgTlk5QKV6YqkP4smMkgmwzgD1Yds8olGI/3uBjDUyvtcxB2hNSjFs/QpFs= -----END CERTIFICATE-----Generated at Mon Oct 20 10:58:54 2025 by rpki-client