$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/02a53864-ea6c-4584-b935-829d42d67c48.roa File: 02a53864-ea6c-4584-b935-829d42d67c48.roa (raw, json) Hash identifier: vi15levRwHblPI3zBrvZfPzzAlUCx2Fs7KKdxa1L7JY= Subject key identifier: 68:C6:A6:96:02:60:0E:23:47:82:EE:1D:94:CA:2D:7A:78:16:67:28 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 230CD95CAFBE45A2C5E2BFCDC650094686B711D5 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/02a53864-ea6c-4584-b935-829d42d67c48.roa Signing time: Mon 22 Sep 2025 18:29:49 +0000 ROA not before: Mon 22 Sep 2025 18:29:49 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.161.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:0c:d9:5c:af:be:45:a2:c5:e2:bf:cd:c6:50:09:46:86:b7:11:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 18:29:49 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=10ce68f677c49bb8246215f818d30fbfdf2fc5af191df5a612ed45dfdae71a8f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8b:7c:1c:19:c5:4a:4e:55:2e:d3:bb:e6:76: bf:30:24:17:0f:d8:69:41:84:02:25:ef:85:09:6d: b9:f9:bc:82:b7:d0:1c:c3:b2:d2:8b:b9:1d:2d:28: a8:b4:8f:94:d0:0a:9b:73:29:e6:ca:53:23:de:eb: fd:0c:8f:70:2c:6d:60:f4:47:47:08:72:b9:dc:c3: 58:87:48:2f:34:df:19:7d:48:79:b7:b1:3e:ec:b5: 10:61:11:44:c4:ba:7d:cc:3a:8a:cb:41:01:a2:37: 99:ed:30:2b:4d:d1:67:b9:75:6a:f3:a6:ee:ec:13: 53:26:e1:9c:98:01:63:cf:66:41:a2:78:b8:46:63: fa:c3:0d:56:c3:3b:b8:06:c1:da:b2:11:ee:32:16: fb:d4:ce:3d:56:78:47:f9:17:0d:ac:fc:2c:f5:eb: 6a:e8:e6:fe:ef:34:60:93:87:a0:b6:20:03:d1:de: 37:57:3d:5c:63:f5:4a:77:ed:41:76:e5:d9:e0:16: 10:e9:c9:ee:5c:ce:8f:ba:56:7b:f6:93:44:dd:a0: f2:00:8c:a0:05:16:22:03:35:e6:07:5f:cc:6f:3c: a2:3e:cb:85:a1:49:cf:06:b9:d5:8c:cf:59:aa:80: e9:a9:06:23:2e:06:06:89:49:b9:ea:5e:84:45:d1: 94:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:C6:A6:96:02:60:0E:23:47:82:EE:1D:94:CA:2D:7A:78:16:67:28 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/02a53864-ea6c-4584-b935-829d42d67c48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.161.128.0/24 Signature Algorithm: sha256WithRSAEncryption a6:6d:25:10:0d:98:d9:c5:a7:63:39:0c:c9:71:49:db:ac:25: 97:dc:4a:9e:02:1b:fe:47:d8:ed:38:c4:26:c2:4e:ef:80:9e: 6e:a7:21:44:53:e4:13:67:e3:0f:fb:5c:5d:53:8e:c0:3d:e5: f8:40:44:25:92:e5:77:0f:a9:f7:e5:1c:90:bc:96:a8:95:b2: 0a:d7:fa:4e:ee:2d:35:a8:87:20:20:8c:b7:e6:c5:bc:42:db: 7e:82:42:61:4b:c3:2d:a0:c7:ae:af:c8:05:8f:60:51:d6:46: 4e:4a:c2:0a:82:22:07:bf:17:11:3c:5d:93:9a:fd:48:07:5a: 34:66:f3:24:70:be:02:23:7f:a8:26:4b:7e:1f:fa:95:ad:38: 05:4c:f4:90:c3:b6:35:77:4c:1b:4b:1f:16:fd:ed:62:2e:76: 09:07:ec:66:4e:fe:b6:1c:52:3b:10:05:5c:64:04:57:e3:2f: f4:1f:e8:97:08:87:a0:cf:dc:18:2f:62:8f:0d:57:7a:0f:79: a7:10:2e:52:21:52:46:51:07:95:8b:dc:cd:0d:e8:ab:62:97: 17:02:be:9f:ce:3d:fa:2a:fc:2a:7f:94:f3:c3:0f:86:44:61: 69:fe:d6:05:6e:25:ce:1e:30:27:eb:43:19:5e:0f:0a:68:6e: 83:a7:03:8d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIwzZXK++RaLF4r/NxlAJRoa3EdUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMTgyOTQ5WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AxMGNlNjhmNjc3YzQ5YmI4MjQ2MjE1ZjgxOGQzMGZiZmRm MmZjNWFmMTkxZGY1YTYxMmVkNDVkZmRhZTcxYThmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2i3wcGcVKTlUu07vmdr8wJBcP2GlBhAIl74UJbbn5vIK3 0BzDstKLuR0tKKi0j5TQCptzKebKUyPe6/0Mj3AsbWD0R0cIcrncw1iHSC803xl9 SHm3sT7stRBhEUTEun3MOorLQQGiN5ntMCtN0We5dWrzpu7sE1Mm4ZyYAWPPZkGi eLhGY/rDDVbDO7gGwdqyEe4yFvvUzj1WeEf5Fw2s/Cz162ro5v7vNGCTh6C2IAPR 3jdXPVxj9Up37UF25dngFhDpye5czo+6Vnv2k0TdoPIAjKAFFiIDNeYHX8xvPKI+ y4WhSc8GudWMz1mqgOmpBiMuBgaJSbnqXoRF0ZRzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUaMamlgJgDiNHgu4dlMotengWZygwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzAyYTUzODY0LWVhNmMtNDU4NC1iOTM1LTgyOWQ0MmQ2N2M0OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASoYAwDQYJKoZIhvcNAQELBQADggEBAKZtJRANmNnFp2M5DMlxSdusJZfc Sp4CG/5H2O04xCbCTu+Anm6nIURT5BNn4w/7XF1TjsA95fhARCWS5XcPqfflHJC8 lqiVsgrX+k7uLTWohyAgjLfmxbxC236CQmFLwy2gx66vyAWPYFHWRk5KwgqCIge/ FxE8XZOa/UgHWjRm8yRwvgIjf6gmS34f+pWtOAVM9JDDtjV3TBtLHxb97WIudgkH 7GZO/rYcUjsQBVxkBFfjL/Qf6JcIh6DP3BgvYo8NV3oPeacQLlIhUkZRB5WL3M0N 6KtilxcCvp/OPfoq/Cp/lPPDD4ZEYWn+1gVuJc4eMCfrQxleDwpoboOnA40= -----END CERTIFICATE-----Generated at Sat Oct 18 05:11:51 2025 by rpki-client