$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f1bd5efc-6552-4a6b-b2b8-e0a913e18778.roa File: f1bd5efc-6552-4a6b-b2b8-e0a913e18778.roa (raw, json) Hash identifier: mIod7j4zLjtqYp7sm+rEvxGrpNxT/rbTi11CdsWnh+s= Subject key identifier: 76:1E:F8:E1:0F:4B:84:66:F5:61:D9:6F:09:41:22:9B:9D:3B:1C:E2 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 608CF33961EF68B67A8F97F65CD8E83A37E9E2C6 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f1bd5efc-6552-4a6b-b2b8-e0a913e18778.roa Signing time: Sat 18 Oct 2025 12:03:38 +0000 ROA not before: Sat 18 Oct 2025 12:03:38 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.245.160.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:8c:f3:39:61:ef:68:b6:7a:8f:97:f6:5c:d8:e8:3a:37:e9:e2:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 12:03:38 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=ca5a28f7b85bc23ebe8beaf28b43072c0764eade093f049ba4e27fb8ceb6613a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a9:d3:6c:01:05:a2:b8:e3:4d:1a:81:26:7b: ae:f0:04:38:25:10:aa:4f:c0:f0:5a:1e:bb:71:eb: d5:67:9b:31:9c:0f:6d:e6:3b:ee:77:35:44:27:ee: fd:1c:23:1f:63:6d:82:c7:b3:69:b3:8d:a5:83:18: 3b:fe:71:84:1d:51:26:cd:2b:93:c2:c3:4a:a1:c2: 68:9e:61:70:bd:71:da:bc:8d:a7:d1:49:51:ec:66: d5:a5:20:96:3a:90:ce:9b:61:db:90:85:63:78:a1: e1:29:4c:8c:f2:a2:84:43:22:c8:bc:3d:06:8f:0c: 7b:56:10:85:8b:12:a3:d3:1c:ba:d8:13:75:8a:d7: ca:de:a4:d7:d6:fe:3d:40:63:28:cb:cd:ab:a7:de: 46:e3:f9:85:dc:e1:60:2c:0c:81:b5:13:ef:75:da: b9:63:cc:99:5d:8b:7a:e8:26:cc:08:78:fc:1c:f7: 08:f0:8f:f2:61:83:cb:91:08:f2:2c:f9:2d:d5:e4: 68:02:06:48:e6:58:2e:f8:64:49:4b:f5:f6:85:a1: 4e:35:3c:ca:b1:73:bc:fd:de:29:36:8b:f9:48:cd: 79:0d:0b:65:7f:48:ae:82:73:c4:df:64:a8:c6:6e: e6:07:d3:a9:57:0d:aa:be:74:ff:09:38:04:cf:e6: 77:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:1E:F8:E1:0F:4B:84:66:F5:61:D9:6F:09:41:22:9B:9D:3B:1C:E2 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f1bd5efc-6552-4a6b-b2b8-e0a913e18778.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.245.160.0/23 Signature Algorithm: sha256WithRSAEncryption af:ef:22:49:4f:3f:9b:60:05:9e:2f:d1:d8:de:6f:16:25:b2: 90:a9:db:96:d4:a4:e2:e3:7b:3f:d6:8b:dc:5d:c8:bf:ee:9a: db:37:1c:a0:84:85:85:bc:ee:d1:2f:c9:62:24:e7:9c:98:34: 0d:f3:c9:18:bb:b2:75:a1:1b:d5:02:43:85:d9:25:35:b5:d6: 1d:4a:ce:38:2f:db:98:73:0e:69:e6:d6:56:75:d8:75:c6:34: 4c:c0:66:20:43:cc:73:60:bd:b9:c4:7b:21:0f:7e:b7:85:e5: e4:e9:7b:0d:71:a6:bd:6c:9b:be:f3:23:21:a8:3d:d6:f5:53: 3b:87:97:84:55:9a:05:ec:4d:0c:4b:fb:ba:02:33:cb:bd:b4: ff:4e:34:f9:15:97:ff:ea:fe:3d:d9:ee:85:79:d1:df:69:47: 21:bd:b0:5a:30:f3:e5:ec:94:4f:df:40:7b:7f:ba:d9:4e:a0: 68:27:c9:cb:35:59:29:17:4f:d3:8a:54:77:a4:b9:f4:a1:b5: 03:26:d8:bb:7c:78:44:3b:b4:82:dc:90:17:94:7b:5a:de:1b: c7:ac:b9:7c:e5:27:f8:86:86:9d:29:8e:68:01:06:03:26:7c: 6d:63:55:4e:8c:62:46:a7:8b:c8:9e:4f:62:19:bd:07:99:1c: a7:65:7d:9b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYIzzOWHvaLZ6j5f2XNjoOjfp4sYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTIwMzM4WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BjYTVhMjhmN2I4NWJjMjNlYmU4YmVhZjI4YjQzMDcyYzA3 NjRlYWRlMDkzZjA0OWJhNGUyN2ZiOGNlYjY2MTNhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtqdNsAQWiuONNGoEme67wBDglEKpPwPBaHrtx69VnmzGc D23mO+53NUQn7v0cIx9jbYLHs2mzjaWDGDv+cYQdUSbNK5PCw0qhwmieYXC9cdq8 jafRSVHsZtWlIJY6kM6bYduQhWN4oeEpTIzyooRDIsi8PQaPDHtWEIWLEqPTHLrY E3WK18repNfW/j1AYyjLzaun3kbj+YXc4WAsDIG1E+912rljzJldi3roJswIePwc 9wjwj/Jhg8uRCPIs+S3V5GgCBkjmWC74ZElL9faFoU41PMqxc7z93ik2i/lIzXkN C2V/SK6Cc8TfZKjGbuYH06lXDaq+dP8JOATP5ncvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUdh744Q9LhGb1YdlvCUEim507HOIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2YxYmQ1ZWZjLTY1NTItNGE2Yi1iMmI4LWUwYTkxM2UxODc3OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAES9aAwDQYJKoZIhvcNAQELBQADggEBAK/vIklPP5tgBZ4v0djebxYlspCp 25bUpOLjez/Wi9xdyL/umts3HKCEhYW87tEvyWIk55yYNA3zyRi7snWhG9UCQ4XZ JTW11h1Kzjgv25hzDmnm1lZ12HXGNEzAZiBDzHNgvbnEeyEPfreF5eTpew1xpr1s m77zIyGoPdb1UzuHl4RVmgXsTQxL+7oCM8u9tP9ONPkVl//q/j3Z7oV50d9pRyG9 sFow8+XslE/fQHt/utlOoGgnycs1WSkXT9OKVHekufShtQMm2Lt8eEQ7tILckBeU e1reG8esuXzlJ/iGhp0pjmgBBgMmfG1jVU6MYkani8ieT2IZvQeZHKdlfZs= -----END CERTIFICATE-----Generated at Mon Oct 20 11:10:46 2025 by rpki-client