$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0f985fe1-0741-40f1-92b1-cb7b4c6beb53.roa File: 0f985fe1-0741-40f1-92b1-cb7b4c6beb53.roa (raw, json) Hash identifier: UNU1Kmb96+1Ibw3DV4V+137f5PeEJZuMaOW6PjbHwdo= Subject key identifier: 50:B8:70:51:15:31:5D:13:18:9C:B5:D7:A5:E3:A4:F4:C5:D2:1A:EB Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1C2F4E3164223E92D7504320ED1ABDD8090375E4 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0f985fe1-0741-40f1-92b1-cb7b4c6beb53.roa Signing time: Mon 22 Sep 2025 19:16:45 +0000 ROA not before: Mon 22 Sep 2025 19:16:45 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.164.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:2f:4e:31:64:22:3e:92:d7:50:43:20:ed:1a:bd:d8:09:03:75:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 19:16:45 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=82b0af2b82386ac7bbbc6152d11d1059c2edfe7917560fea6d19b11114233f10, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:14:88:c0:4d:ac:db:93:86:24:df:62:8a:a0: 5f:fe:32:24:8e:0c:31:17:a8:b9:e2:25:05:59:2f: a9:7e:91:8f:5f:eb:0d:95:94:3f:86:65:21:67:69: 1e:3e:40:d3:6d:8c:14:17:82:ee:f7:ae:15:eb:ae: 44:d3:78:19:47:33:d6:61:cf:b5:46:db:b8:44:79: dd:66:e5:d4:27:ed:2e:a2:dc:35:00:41:35:aa:8b: 35:89:92:d0:96:86:ad:8d:d2:b4:31:6f:f7:16:c2: c0:dc:24:1b:aa:77:1e:a6:24:91:64:e2:ca:3f:ff: 61:ce:4b:b1:6f:50:f9:2d:6e:91:7e:74:77:86:61: ad:33:3e:ee:fa:da:e1:ee:0b:72:fc:c2:8f:30:53: c1:dd:f1:0f:10:03:16:97:a5:72:04:0b:4b:4d:45: c9:ac:cf:73:93:40:2f:68:4f:e0:cc:c9:e0:e3:4d: 7a:18:ef:90:1c:3f:9a:a2:81:ed:5c:92:fa:5e:e5: 0a:ee:5e:08:de:7c:c9:6d:74:73:7b:4a:0e:85:b8: c0:ba:47:3a:a1:c7:8d:1e:1c:6e:c4:aa:4b:d8:a0: 5c:6c:04:a4:c8:fb:b2:0c:f0:9a:74:25:81:81:0e: 1e:7c:8f:00:14:57:ca:19:c2:68:53:7a:a2:83:2a: 6c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:B8:70:51:15:31:5D:13:18:9C:B5:D7:A5:E3:A4:F4:C5:D2:1A:EB X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0f985fe1-0741-40f1-92b1-cb7b4c6beb53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.164.107.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:db:6f:d8:93:2c:f9:78:09:29:4b:b1:6d:13:33:25:44:52: 94:64:00:12:0e:bf:4d:75:96:73:26:ad:a9:6c:46:c4:eb:35: 32:84:34:3a:3d:39:41:4d:f8:e5:7f:c4:df:f1:2f:11:49:2d: 62:00:dd:1e:cc:0f:c8:97:6f:2f:55:78:88:2c:2a:3d:ff:75: 95:2c:75:07:f6:a9:8a:bd:18:ce:0d:0d:c2:71:d2:6f:0b:a9: 53:7e:40:94:5a:9e:9e:1a:68:37:c5:98:e8:91:02:dd:4d:c0: ff:13:6a:3c:99:07:ce:44:36:65:1e:e6:3a:f2:1a:6f:6e:91: a2:d9:f6:a7:fb:49:9d:be:31:b3:24:bb:c6:93:df:6f:56:43: 54:14:ed:10:c5:5b:1a:98:04:f7:a5:e4:a7:50:0b:51:3d:89: 2f:7e:d4:81:25:ba:5c:09:d0:28:bd:b5:5b:0d:5b:61:08:e3: 26:a7:21:21:9e:f4:65:ff:68:7a:22:11:a4:09:ca:12:d0:86: 1c:19:93:88:f3:43:9a:12:07:cd:cf:c5:ee:67:e8:0b:dc:22: f6:35:f5:71:80:8c:da:bd:4e:66:76:c7:b0:b1:0f:b8:7d:e7: 57:e9:00:15:0c:14:bf:2c:0b:3b:60:f9:6a:81:7f:77:cc:39: d3:a9:74:39 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHC9OMWQiPpLXUEMg7Rq92AkDdeQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMTkxNjQ1WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A4MmIwYWYyYjgyMzg2YWM3YmJiYzYxNTJkMTFkMTA1OWMy ZWRmZTc5MTc1NjBmZWE2ZDE5YjExMTE0MjMzZjEwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCdFIjATazbk4Yk32KKoF/+MiSODDEXqLniJQVZL6l+kY9f 6w2VlD+GZSFnaR4+QNNtjBQXgu73rhXrrkTTeBlHM9Zhz7VG27hEed1m5dQn7S6i 3DUAQTWqizWJktCWhq2N0rQxb/cWwsDcJBuqdx6mJJFk4so//2HOS7FvUPktbpF+ dHeGYa0zPu762uHuC3L8wo8wU8Hd8Q8QAxaXpXIEC0tNRcmsz3OTQC9oT+DMyeDj TXoY75AcP5qige1ckvpe5QruXgjefMltdHN7Sg6FuMC6Rzqhx40eHG7EqkvYoFxs BKTI+7IM8Jp0JYGBDh58jwAUV8oZwmhTeqKDKmyLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUULhwURUxXRMYnLXXpeOk9MXSGuswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzBmOTg1ZmUxLTA3NDEtNDBmMS05MmIxLWNiN2I0YzZiZWI1My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASpGswDQYJKoZIhvcNAQELBQADggEBAF/bb9iTLPl4CSlLsW0TMyVEUpRk ABIOv011lnMmralsRsTrNTKENDo9OUFN+OV/xN/xLxFJLWIA3R7MD8iXby9VeIgs Kj3/dZUsdQf2qYq9GM4NDcJx0m8LqVN+QJRanp4aaDfFmOiRAt1NwP8TajyZB85E NmUe5jryGm9ukaLZ9qf7SZ2+MbMku8aT329WQ1QU7RDFWxqYBPel5KdQC1E9iS9+ 1IElulwJ0Ci9tVsNW2EI4yanISGe9GX/aHoiEaQJyhLQhhwZk4jzQ5oSB83Pxe5n 6AvcIvY19XGAjNq9TmZ2x7CxD7h951fpABUMFL8sCztg+WqBf3fMOdOpdDk= -----END CERTIFICATE-----Generated at Fri Oct 17 22:19:08 2025 by rpki-client