$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/018020f4-5c97-4d9c-965c-90b5f8b546bf.roa File: 018020f4-5c97-4d9c-965c-90b5f8b546bf.roa (raw, json) Hash identifier: EKYd82OfHe5h3WwASl566/UR4Zi5wLRgc2bCkM49jhA= Subject key identifier: 66:74:0D:9C:1F:B8:4C:4A:EF:A0:95:A6:D1:27:E9:10:C2:6E:F5:FB Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4EEB131BBD44D4089EC36DB1577055151C771466 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/018020f4-5c97-4d9c-965c-90b5f8b546bf.roa Signing time: Mon 22 Sep 2025 18:43:07 +0000 ROA not before: Mon 22 Sep 2025 18:43:07 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.161.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:eb:13:1b:bd:44:d4:08:9e:c3:6d:b1:57:70:55:15:1c:77:14:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 18:43:07 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=22ca605ba703aa430aa5075aded7cd3f6da2fef1ef763cbbae383e8310c28ebc, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:0d:66:01:2e:68:20:b3:37:80:08:32:1e:25: 87:79:12:93:2b:f4:bc:38:43:9a:17:aa:9d:1c:d1: fa:3b:19:8a:16:43:7b:e2:18:8a:7d:09:84:6d:70: 5a:ff:52:7f:01:42:8a:32:e3:b4:1d:54:d9:ff:9e: 21:c4:85:97:b1:83:01:f9:1a:7e:c4:8f:26:d5:c6: 18:da:e8:ea:bd:89:c5:ed:8c:0b:be:b4:0b:fc:1c: 6a:b5:f0:58:02:9b:18:42:65:cc:9a:23:8b:fd:d9: 2a:de:46:d8:c1:dc:3a:ec:59:5a:11:2a:b7:9b:db: f5:39:69:85:17:b4:ba:49:98:7d:2a:ea:ab:e4:e5: c8:4e:2f:93:59:4c:41:1c:ac:b2:43:25:f1:b3:ec: 4e:f9:91:c3:53:3b:47:77:88:ff:a1:03:f5:40:5e: 1b:be:f6:f3:aa:54:3d:9c:0e:36:01:13:80:b9:8e: 46:a6:f6:f7:9e:dd:7a:38:3a:76:d8:1e:68:ae:c0: a9:f0:96:74:de:76:6f:30:46:04:4b:54:f8:81:6a: f2:93:81:f3:c8:71:ab:74:c4:df:c0:88:8f:e4:1e: 62:13:a8:69:a6:9d:10:5a:fb:d5:f0:e9:16:b4:a3: 88:13:28:2c:07:4f:f8:6c:cd:94:3d:ac:cc:40:ec: 57:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:74:0D:9C:1F:B8:4C:4A:EF:A0:95:A6:D1:27:E9:10:C2:6E:F5:FB X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/018020f4-5c97-4d9c-965c-90b5f8b546bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.161.82.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:6d:95:7a:10:b0:8e:26:3c:b8:e8:4c:5c:4a:48:53:53:51: fe:4a:b7:22:04:51:76:76:d9:58:c3:62:2f:f7:a6:38:a9:1a: b1:63:7e:cc:9c:09:7f:85:9b:c1:1c:58:e3:d1:08:c8:72:80: 66:60:c2:27:d4:e7:e8:5a:a5:6d:6b:d2:a7:c9:74:15:44:8e: 84:3c:bc:f8:e4:a9:30:c0:69:2c:4d:01:f3:21:4b:a4:7c:34: 56:f2:1b:7f:79:03:3a:7d:f9:4f:08:80:66:f7:2f:d2:7c:13: 98:37:cf:19:b0:83:fb:17:2b:78:27:ab:f2:a1:76:ff:a2:67: 4b:8d:b4:2f:94:a2:e9:e9:33:83:8b:af:58:58:e9:85:2d:1a: a8:e6:bb:b5:44:90:8d:da:21:79:ea:24:44:30:10:65:37:ed: 16:71:9e:a8:7f:8a:2e:cf:81:d2:e3:dc:19:84:5e:49:52:db: 8d:6d:3b:72:6c:6e:22:cb:17:8e:32:d5:4c:af:d5:03:b3:a0: 47:18:6b:17:33:fa:d7:50:7b:ed:44:08:0a:02:9b:a7:ce:32: 2d:86:64:c0:c7:2f:d0:78:24:84:12:bd:99:a1:a0:78:f2:d7: 1e:c1:54:98:8c:df:c9:90:b5:6a:2d:0c:cc:a4:07:8c:f5:04: 32:e2:a1:b0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTusTG71E1Aiew22xV3BVFRx3FGYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMTg0MzA3WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AyMmNhNjA1YmE3MDNhYTQzMGFhNTA3NWFkZWQ3Y2QzZjZk YTJmZWYxZWY3NjNjYmJhZTM4M2U4MzEwYzI4ZWJjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDYDWYBLmggszeACDIeJYd5EpMr9Lw4Q5oXqp0c0fo7GYoW Q3viGIp9CYRtcFr/Un8BQooy47QdVNn/niHEhZexgwH5Gn7EjybVxhja6Oq9icXt jAu+tAv8HGq18FgCmxhCZcyaI4v92SreRtjB3DrsWVoRKreb2/U5aYUXtLpJmH0q 6qvk5chOL5NZTEEcrLJDJfGz7E75kcNTO0d3iP+hA/VAXhu+9vOqVD2cDjYBE4C5 jkam9vee3Xo4OnbYHmiuwKnwlnTedm8wRgRLVPiBavKTgfPIcat0xN/AiI/kHmIT qGmmnRBa+9Xw6Ra0o4gTKCwHT/hszZQ9rMxA7FcdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZnQNnB+4TErvoJWm0SfpEMJu9fswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzAxODAyMGY0LTVjOTctNGQ5Yy05NjVjLTkwYjVmOGI1NDZiZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASoVIwDQYJKoZIhvcNAQELBQADggEBAGptlXoQsI4mPLjoTFxKSFNTUf5K tyIEUXZ22VjDYi/3pjipGrFjfsycCX+Fm8EcWOPRCMhygGZgwifU5+hapW1r0qfJ dBVEjoQ8vPjkqTDAaSxNAfMhS6R8NFbyG395Azp9+U8IgGb3L9J8E5g3zxmwg/sX K3gnq/Khdv+iZ0uNtC+UounpM4OLr1hY6YUtGqjmu7VEkI3aIXnqJEQwEGU37RZx nqh/ii7PgdLj3BmEXklS241tO3JsbiLLF44y1Uyv1QOzoEcYaxcz+tdQe+1ECAoC m6fOMi2GZMDHL9B4JIQSvZmhoHjy1x7BVJiM38mQtWotDMykB4z1BDLiobA= -----END CERTIFICATE-----Generated at Sat Oct 18 02:16:41 2025 by rpki-client