$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0d1dd91f-449c-4da4-83d4-2ddab9bee871.roa File: 0d1dd91f-449c-4da4-83d4-2ddab9bee871.roa (raw, json) Hash identifier: Ti5fJYeC5qn2eZekLog0Z8FERzH6Q7ufYTFQ4TztCZg= Subject key identifier: 02:B7:BB:1A:BD:A7:44:C3:B2:E4:90:23:79:E3:64:19:CB:BD:DE:69 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6129BAC7BF2DC8A178A0FEF59711F92334406FD2 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0d1dd91f-449c-4da4-83d4-2ddab9bee871.roa Signing time: Mon 22 Sep 2025 18:11:59 +0000 ROA not before: Mon 22 Sep 2025 18:11:59 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.160.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:29:ba:c7:bf:2d:c8:a1:78:a0:fe:f5:97:11:f9:23:34:40:6f:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 18:11:59 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=ff2a003b4daf5bd0fbfdea51d02e2e71c56b0fa489ffef1608e1736a85ac94d9, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0c:f8:55:f9:8f:33:8d:8a:de:c8:ae:9a:31: 0f:e8:02:a5:46:78:4e:19:6f:32:d6:56:01:41:0b: 09:9c:87:6b:7d:e4:cb:1c:b6:c0:78:93:93:d4:9f: a4:69:98:3e:96:4e:a8:ef:b0:ce:60:ba:cf:80:ce: f9:69:a1:88:99:87:b8:ce:9c:9b:e0:ff:e8:c6:e5: b5:b9:ea:c8:ec:76:5c:40:eb:d6:6c:fd:1f:76:78: 1d:6f:90:69:6e:4e:41:ab:33:bc:13:db:97:e2:a5: 5a:95:77:f1:ca:bc:07:a1:d2:06:2f:2e:a5:9e:a0: 7f:68:a2:74:2c:79:fe:0d:a6:01:8f:42:88:4f:ba: 32:74:b4:2a:b4:58:cf:f8:5b:3b:77:9b:c5:31:be: 2d:97:cc:da:bc:8c:59:6c:62:5d:7d:30:9a:e2:4a: 18:39:6f:e2:d1:57:fd:f2:7b:71:03:75:e2:22:90: d6:e7:07:fe:b1:a2:3f:94:b7:1b:11:f9:3b:f9:1a: a2:d4:bd:e2:e8:4a:4b:3f:4d:81:37:7f:1e:a6:40: b3:36:39:09:b3:32:f7:2e:8c:a5:bd:c4:a5:4c:9c: 6f:b9:1f:34:a7:09:3c:0c:43:ec:46:84:0b:eb:c6: 33:82:56:70:e3:fc:df:46:e8:67:0f:e3:ad:13:37: ce:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:B7:BB:1A:BD:A7:44:C3:B2:E4:90:23:79:E3:64:19:CB:BD:DE:69 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0d1dd91f-449c-4da4-83d4-2ddab9bee871.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.160.105.0/24 Signature Algorithm: sha256WithRSAEncryption 05:9c:82:65:ac:29:c7:7b:21:d1:31:1e:e3:05:23:0a:54:26: c8:ef:eb:21:b8:44:29:fd:c3:bc:a4:d6:73:3f:33:5c:5e:27: 9c:5a:73:a5:34:3e:c0:e9:88:33:38:25:76:79:ab:d2:49:f6: 7b:6c:6f:ef:7c:11:1c:d7:6e:c2:77:2d:8e:ab:a6:dc:53:d0: 48:b1:af:1d:3d:71:37:0e:16:93:6a:00:fc:d0:49:77:7f:2b: 88:8c:5d:9b:8b:5f:4f:f8:f1:8b:e7:f2:5d:fb:c4:43:31:1c: 57:37:cd:18:b5:9d:75:68:56:ef:19:f3:cc:28:1a:9e:4d:63: 67:26:47:0b:6b:0b:b7:a5:95:bf:81:ac:61:bb:a4:cd:ee:f6: d5:15:c4:fa:e2:1c:60:5f:87:7d:92:d2:38:e6:1e:04:9d:18: 17:48:5b:20:94:66:a0:f4:6f:14:bf:fc:25:c8:4d:2c:13:68: 3c:b7:2d:99:f3:88:e6:ec:58:bd:37:89:64:f8:63:b4:06:1b: f3:1f:0a:ec:a3:75:91:c0:ef:28:16:82:12:c3:e0:eb:55:54: af:24:82:01:87:15:75:6e:7f:d4:79:99:37:f0:eb:d5:93:8c: 84:bb:6b:99:a6:68:86:0d:9e:53:ba:7e:ea:40:e4:97:ce:0e: e3:d0:84:9b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYSm6x78tyKF4oP71lxH5IzRAb9IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMTgxMTU5WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BmZjJhMDAzYjRkYWY1YmQwZmJmZGVhNTFkMDJlMmU3MWM1 NmIwZmE0ODlmZmVmMTYwOGUxNzM2YTg1YWM5NGQ5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBDPhV+Y8zjYreyK6aMQ/oAqVGeE4ZbzLWVgFBCwmch2t9 5MsctsB4k5PUn6RpmD6WTqjvsM5gus+AzvlpoYiZh7jOnJvg/+jG5bW56sjsdlxA 69Zs/R92eB1vkGluTkGrM7wT25fipVqVd/HKvAeh0gYvLqWeoH9oonQsef4NpgGP QohPujJ0tCq0WM/4Wzt3m8Uxvi2XzNq8jFlsYl19MJriShg5b+LRV/3ye3EDdeIi kNbnB/6xoj+UtxsR+Tv5GqLUveLoSks/TYE3fx6mQLM2OQmzMvcujKW9xKVMnG+5 HzSnCTwMQ+xGhAvrxjOCVnDj/N9G6GcP460TN85rAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUAre7Gr2nRMOy5JAjeeNkGcu93mkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzBkMWRkOTFmLTQ0OWMtNGRhNC04M2Q0LTJkZGFiOWJlZTg3MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASoGkwDQYJKoZIhvcNAQELBQADggEBAAWcgmWsKcd7IdExHuMFIwpUJsjv 6yG4RCn9w7yk1nM/M1xeJ5xac6U0PsDpiDM4JXZ5q9JJ9ntsb+98ERzXbsJ3LY6r ptxT0Eixrx09cTcOFpNqAPzQSXd/K4iMXZuLX0/48Yvn8l37xEMxHFc3zRi1nXVo Vu8Z88woGp5NY2cmRwtrC7ellb+BrGG7pM3u9tUVxPriHGBfh32S0jjmHgSdGBdI WyCUZqD0bxS//CXITSwTaDy3LZnziObsWL03iWT4Y7QGG/MfCuyjdZHA7ygWghLD 4OtVVK8kggGHFXVuf9R5mTfw69WTjIS7a5mmaIYNnlO6fupA5JfODuPQhJs= -----END CERTIFICATE-----Generated at Sat Oct 18 02:15:28 2025 by rpki-client