$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ecf5e8ac-59f6-440c-ad94-ddb422f28324.roa File: ecf5e8ac-59f6-440c-ad94-ddb422f28324.roa (raw, json) Hash identifier: mqt1jOa1eVOg0cuig4T/YzYEcV0I60L4XyA39LIFUys= Subject key identifier: 06:C6:A9:12:35:A4:86:9A:65:9B:77:8A:94:F9:5F:BA:BA:C2:63:BA Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1C13462E24AE7C2046C01901A7B3FAD9886FEB00 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ecf5e8ac-59f6-440c-ad94-ddb422f28324.roa Signing time: Sat 18 Oct 2025 07:32:51 +0000 ROA not before: Sat 18 Oct 2025 07:32:51 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.160.246.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:13:46:2e:24:ae:7c:20:46:c0:19:01:a7:b3:fa:d9:88:6f:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 07:32:51 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=40615c9584cbf3b72ddc03da10153e5f1158292b1154aabaeecd9246e5d29a21, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e5:c4:58:aa:aa:3d:20:d2:28:42:6d:20:5b: 64:4a:dd:ce:78:61:9d:f8:3a:3d:cc:e6:64:03:d5: be:5b:45:a2:ee:25:5b:54:e1:d3:80:75:96:0e:fa: 3a:26:2f:2b:2d:42:ed:5e:d4:bc:34:0e:e3:27:2b: 1b:63:d4:93:56:bd:d6:e9:7f:d5:51:10:3c:c4:bb: 6a:74:cb:8c:2e:a8:b7:2b:7f:02:40:b4:73:ac:8f: 9f:8b:7b:62:0d:4a:37:21:64:06:4f:cd:34:85:a8: 08:2f:17:dc:28:48:f8:27:85:89:3d:c4:f9:f2:33: 0e:23:b3:62:49:c7:6f:84:21:04:4f:56:3d:cb:87: 74:cb:93:ac:37:52:07:9b:66:c7:0a:7c:ed:b5:d8: db:0d:c2:4f:18:04:01:eb:43:51:1e:2f:9f:30:80: c0:35:56:08:18:5e:3e:9b:52:8c:18:52:2c:82:95: b7:5b:46:62:5a:f6:2a:30:33:ba:54:93:c8:cd:bf: 32:e8:1b:2f:d2:3e:83:a1:bf:32:08:09:c3:ea:1e: d3:45:c3:6a:21:ed:98:17:30:57:ed:a8:30:5b:32: 25:25:f3:70:24:ea:7b:b7:19:2a:77:59:7a:fe:8b: 74:59:f2:cc:5b:3d:4f:aa:75:85:6d:e9:44:d1:75: f7:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:C6:A9:12:35:A4:86:9A:65:9B:77:8A:94:F9:5F:BA:BA:C2:63:BA X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ecf5e8ac-59f6-440c-ad94-ddb422f28324.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.160.246.0/23 Signature Algorithm: sha256WithRSAEncryption 4e:d9:31:bc:f6:d0:a8:02:54:b5:ae:d2:9d:5b:2a:b7:fe:6f: e3:89:06:4b:e6:33:05:df:cf:2d:51:1e:f5:66:59:23:59:12: 2e:ad:d2:fa:31:7c:65:22:47:cc:f5:d5:c4:2e:14:03:c0:b1: 32:5c:c4:2f:f7:2d:7f:59:84:39:ce:5f:db:37:ca:a0:62:0a: 9b:c4:18:28:7f:94:63:57:cb:01:fd:01:55:63:23:bc:fc:40: fa:97:96:8c:8d:b3:65:3a:f6:1d:69:96:fd:86:38:eb:a5:9a: 05:15:2a:97:2e:73:a5:fd:8d:f2:61:c1:69:a2:9f:f9:c8:f0: 2a:41:06:f8:e2:17:aa:65:12:77:b5:1f:96:5c:d0:ce:af:63: 51:e3:be:92:92:c1:99:5d:b4:0d:dd:5a:ee:25:12:4a:98:f0: c7:f5:24:64:85:05:15:f7:6c:01:94:b1:28:69:eb:bd:c9:94: 92:36:84:2a:d3:ad:f7:d0:ce:8a:b1:a7:7c:fd:3b:e6:2b:70: db:0f:fc:83:54:d8:3c:57:b0:3e:28:70:bc:a0:69:f0:2b:49: 57:c6:5c:72:70:08:fd:90:38:62:cb:30:46:f1:fc:9a:96:7e: 63:4f:54:a6:91:7d:bd:36:2b:51:95:4d:b2:16:d9:db:3d:c9: c6:0e:38:b2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHBNGLiSufCBGwBkBp7P62Yhv6wAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MDczMjUxWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A0MDYxNWM5NTg0Y2JmM2I3MmRkYzAzZGExMDE1M2U1ZjEx NTgyOTJiMTE1NGFhYmFlZWNkOTI0NmU1ZDI5YTIxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDH5cRYqqo9INIoQm0gW2RK3c54YZ34Oj3M5mQD1b5bRaLu JVtU4dOAdZYO+jomLystQu1e1Lw0DuMnKxtj1JNWvdbpf9VREDzEu2p0y4wuqLcr fwJAtHOsj5+Le2INSjchZAZPzTSFqAgvF9woSPgnhYk9xPnyMw4js2JJx2+EIQRP Vj3Lh3TLk6w3UgebZscKfO212NsNwk8YBAHrQ1EeL58wgMA1VggYXj6bUowYUiyC lbdbRmJa9iowM7pUk8jNvzLoGy/SPoOhvzIICcPqHtNFw2oh7ZgXMFftqDBbMiUl 83Ak6nu3GSp3WXr+i3RZ8sxbPU+qdYVt6UTRdfelAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUBsapEjWkhpplm3eKlPlfurrCY7owHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2VjZjVlOGFjLTU5ZjYtNDQwYy1hZDk0LWRkYjQyMmYyODMyNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESoPYwDQYJKoZIhvcNAQELBQADggEBAE7ZMbz20KgCVLWu0p1bKrf+b+OJ BkvmMwXfzy1RHvVmWSNZEi6t0voxfGUiR8z11cQuFAPAsTJcxC/3LX9ZhDnOX9s3 yqBiCpvEGCh/lGNXywH9AVVjI7z8QPqXloyNs2U69h1plv2GOOulmgUVKpcuc6X9 jfJhwWmin/nI8CpBBvjiF6plEne1H5Zc0M6vY1HjvpKSwZldtA3dWu4lEkqY8Mf1 JGSFBRX3bAGUsShp673JlJI2hCrTrffQzoqxp3z9O+YrcNsP/INU2DxXsD4ocLyg afArSVfGXHJwCP2QOGLLMEbx/JqWfmNPVKaRfb02K1GVTbIW2ds9ycYOOLI= -----END CERTIFICATE-----Generated at Mon Oct 20 11:09:19 2025 by rpki-client