$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0a8cda0d-84c0-4c32-971a-69d17d19e168.roa File: 0a8cda0d-84c0-4c32-971a-69d17d19e168.roa (raw, json) Hash identifier: J0Uzs5Lb7e8w5ZcRIJkInqhGpeHRlBw+M0oY0oRCpHY= Subject key identifier: 22:80:9E:B7:72:1D:C0:FB:C9:69:5B:6A:58:8B:A9:37:EA:5E:1A:EC Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 14D6B9FDA5258C4F3B8C9A9F5DA7B647F081C47D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0a8cda0d-84c0-4c32-971a-69d17d19e168.roa Signing time: Mon 22 Sep 2025 18:12:05 +0000 ROA not before: Mon 22 Sep 2025 18:12:05 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.160.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:d6:b9:fd:a5:25:8c:4f:3b:8c:9a:9f:5d:a7:b6:47:f0:81:c4:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 18:12:05 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=edb81eecaad986620239162b4ca9809e44a25b9d315ca876f9d442dd51f5ab91, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:6c:95:eb:a8:f7:9d:5c:4e:9b:eb:af:6a:e2: 2b:16:6a:6c:99:1a:7f:26:f2:9a:44:80:e7:af:63: 0e:6a:bd:09:be:b9:be:de:03:4d:96:1c:2b:af:56: f3:bc:fc:2d:27:05:07:ac:41:7b:a2:79:46:93:da: 3e:57:15:e1:57:9f:dd:4f:36:bd:01:e2:00:bb:2b: 05:dd:1e:83:e2:4d:5c:f9:0b:12:66:9a:99:ea:59: 19:3c:5d:f2:d3:63:a6:e6:14:39:d5:fb:b5:b3:ec: 5a:f2:82:2e:96:b1:7c:dc:c4:da:16:9a:af:85:0f: d5:3d:3a:3d:f8:9b:e1:7d:13:d0:59:be:8c:0b:6a: f2:91:be:66:7e:8c:df:90:54:bc:75:8d:c1:f6:69: fb:8a:ce:dd:9f:b3:bb:52:06:2b:85:5b:d0:ee:f2: 5f:18:d4:25:1d:10:57:13:82:2f:b3:e7:bd:0d:20: c1:3e:c4:19:4d:c3:8a:16:92:fa:ea:13:b7:20:af: 61:96:78:dc:cc:76:35:c4:da:b4:cf:a0:d6:84:3e: 25:ee:dd:a3:9c:c3:9f:49:b3:f8:c5:6f:2b:f9:db: d1:09:28:aa:5d:ac:86:6a:b9:b5:89:a0:04:d8:c6: 90:f2:da:8c:eb:21:08:cd:b4:01:8e:04:06:3b:c7: 97:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:80:9E:B7:72:1D:C0:FB:C9:69:5B:6A:58:8B:A9:37:EA:5E:1A:EC X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0a8cda0d-84c0-4c32-971a-69d17d19e168.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.160.11.0/24 Signature Algorithm: sha256WithRSAEncryption 60:e3:fa:9d:09:1c:ee:36:9d:d0:26:44:67:6b:80:71:81:8a: 54:7c:b6:f8:62:ed:04:3b:22:b7:50:11:be:64:71:0d:e9:86: 05:04:63:b5:b1:36:ea:45:ab:f8:87:0b:88:95:2d:aa:b9:6b: 24:af:90:aa:82:eb:da:e0:3a:03:35:93:fa:59:92:1d:38:26: 5b:e5:9a:3d:5c:d9:8c:6c:50:dc:39:fc:0c:8d:f3:3e:8c:18: 7a:a5:68:88:39:f2:28:23:c4:d7:a8:c8:77:a7:cb:3b:80:dd: 86:2c:76:1a:52:29:6d:df:0d:d2:58:39:9e:d7:f6:af:44:c4: d7:19:65:2b:42:4a:24:ab:54:03:c2:69:e1:65:89:bb:bf:fe: 2f:ba:a7:6e:cb:69:6a:47:80:88:11:9e:b6:ad:af:44:6d:52: 72:1e:1f:fa:bb:97:58:78:69:31:1b:3f:b0:65:24:33:b2:6b: 9b:31:e8:30:de:e8:0d:47:ec:77:0f:8d:94:b9:5d:7a:7a:13: 2d:ad:ba:92:b8:43:60:8b:0d:50:a2:b8:8f:99:03:79:ff:5a: 34:1d:76:20:c2:e8:5f:0d:10:8b:93:e3:64:84:81:0f:53:3a: 2d:82:36:66:f9:85:4a:a4:58:20:d0:fc:30:ac:aa:a4:9e:50: 91:6b:ac:fe -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFNa5/aUljE87jJqfXae2R/CBxH0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMTgxMjA1WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BlZGI4MWVlY2FhZDk4NjYyMDIzOTE2MmI0Y2E5ODA5ZTQ0 YTI1YjlkMzE1Y2E4NzZmOWQ0NDJkZDUxZjVhYjkxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDhbJXrqPedXE6b669q4isWamyZGn8m8ppEgOevYw5qvQm+ ub7eA02WHCuvVvO8/C0nBQesQXuieUaT2j5XFeFXn91PNr0B4gC7KwXdHoPiTVz5 CxJmmpnqWRk8XfLTY6bmFDnV+7Wz7Frygi6WsXzcxNoWmq+FD9U9Oj34m+F9E9BZ vowLavKRvmZ+jN+QVLx1jcH2afuKzt2fs7tSBiuFW9Du8l8Y1CUdEFcTgi+z570N IME+xBlNw4oWkvrqE7cgr2GWeNzMdjXE2rTPoNaEPiXu3aOcw59Js/jFbyv529EJ KKpdrIZqubWJoATYxpDy2ozrIQjNtAGOBAY7x5fDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUIoCet3IdwPvJaVtqWIupN+peGuwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzBhOGNkYTBkLTg0YzAtNGMzMi05NzFhLTY5ZDE3ZDE5ZTE2OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASoAswDQYJKoZIhvcNAQELBQADggEBAGDj+p0JHO42ndAmRGdrgHGBilR8 tvhi7QQ7IrdQEb5kcQ3phgUEY7WxNupFq/iHC4iVLaq5aySvkKqC69rgOgM1k/pZ kh04Jlvlmj1c2YxsUNw5/AyN8z6MGHqlaIg58igjxNeoyHenyzuA3YYsdhpSKW3f DdJYOZ7X9q9ExNcZZStCSiSrVAPCaeFlibu//i+6p27LaWpHgIgRnratr0RtUnIe H/q7l1h4aTEbP7BlJDOya5sx6DDe6A1H7HcPjZS5XXp6Ey2tupK4Q2CLDVCiuI+Z A3n/WjQddiDC6F8NEIuT42SEgQ9TOi2CNmb5hUqkWCDQ/DCsqqSeUJFrrP4= -----END CERTIFICATE-----Generated at Fri Oct 17 22:14:52 2025 by rpki-client