$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/10aaf613-c2fa-4900-bcfc-cb756b8149f1.roa File: 10aaf613-c2fa-4900-bcfc-cb756b8149f1.roa (raw, json) Hash identifier: 1KWtCj3X1nChCPNNw3bJJWpCqQ7k85gqY6AOw22Dh7A= Subject key identifier: 18:E9:22:C4:A6:F0:50:71:3D:14:A7:C7:D9:5C:4D:44:C9:BE:4B:7D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 400E4958BD2872AC1B2F6DA209AD6BB4C8275B59 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/10aaf613-c2fa-4900-bcfc-cb756b8149f1.roa Signing time: Mon 22 Sep 2025 18:22:03 +0000 ROA not before: Mon 22 Sep 2025 18:22:03 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.160.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:0e:49:58:bd:28:72:ac:1b:2f:6d:a2:09:ad:6b:b4:c8:27:5b:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 18:22:03 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=8187921493fef2f6968526e746ae533d5da089e82c18adccb3480997bde9565c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:1f:1a:74:f1:2d:d8:1b:c0:a1:8f:1d:13:d5: 02:4a:83:19:48:40:6e:05:1c:bf:fd:cb:d9:94:2c: 39:6c:bd:8e:1c:61:65:8e:4a:7a:1e:e5:6f:54:9d: 53:66:db:af:44:5d:d5:f8:15:e1:e6:ec:02:e1:23: 41:c0:dc:06:3b:81:d5:c7:dc:a3:34:e9:88:f1:1c: af:f8:25:80:1a:bd:d0:13:1e:7d:2a:bc:5f:d5:6e: aa:2a:13:28:97:bf:70:cf:81:54:50:46:79:5a:e2: e3:99:76:cf:2f:04:69:53:3e:85:30:86:3a:98:6d: 28:ad:24:c1:7a:35:78:4e:f7:b9:82:70:d1:ec:d6: 13:9c:21:cd:bb:a0:57:7d:70:e1:c8:82:29:5e:68: 4c:8a:9a:f2:b1:e3:3a:ba:32:48:25:f3:6d:5e:6c: c7:e7:44:fc:e8:b3:42:ed:c0:d1:bc:c7:0b:ed:73: 2d:d1:09:67:ab:e2:3c:55:56:5c:d0:41:da:75:d9: 9b:a3:1d:95:a1:7b:68:d7:48:d1:f6:8f:cd:31:8f: 08:d4:c6:d7:2f:bc:f5:1f:21:f0:cc:20:28:51:9b: 45:5a:5d:12:9d:69:c6:a0:9d:8d:c2:de:99:c7:c8: ef:6f:2a:8c:bb:6f:e0:cc:af:07:b9:f0:82:e1:45: e6:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:E9:22:C4:A6:F0:50:71:3D:14:A7:C7:D9:5C:4D:44:C9:BE:4B:7D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/10aaf613-c2fa-4900-bcfc-cb756b8149f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.160.23.0/24 Signature Algorithm: sha256WithRSAEncryption ae:ba:04:81:fe:eb:81:04:70:36:2b:e3:70:b9:d5:31:3f:75: 78:62:83:c7:1c:ee:df:10:de:c3:a4:45:0a:f6:98:74:c4:65: 4d:03:1f:1b:90:f9:a5:84:38:6f:87:a3:34:75:03:13:c8:2a: 10:b8:24:e8:bb:e2:63:9e:6e:6a:ea:f1:2b:fa:04:80:95:83: 8c:d0:be:e2:a5:d3:cb:4e:34:c8:54:c2:f2:00:94:57:cd:6e: f6:c6:c9:37:5d:0b:56:55:34:a1:9e:ba:45:0f:96:29:be:4f: 83:4f:dc:67:6c:61:32:f7:76:14:6b:0b:24:75:15:90:ba:52: a1:e9:f0:ba:28:a4:c9:ab:29:d3:38:74:30:87:ba:20:37:36: ef:5e:f2:00:f0:6c:1f:40:ca:c6:c1:f1:b5:98:0e:30:ba:c0: 23:d2:88:cf:4d:33:8e:f1:3f:94:e7:71:1c:af:60:3d:b8:f3: 40:3a:2d:27:e6:2d:fd:a2:49:9f:65:b7:86:d9:ae:76:62:e1: d4:03:65:50:f4:06:e1:4d:90:0c:6c:ad:51:48:9d:c5:53:7c: 6d:28:2e:2b:d8:27:f7:4c:3c:c3:b4:97:06:a1:77:df:47:ce: 3c:ba:88:9e:6f:a5:40:8c:9c:e5:66:05:fa:52:0d:fa:da:a6: 74:1d:67:56 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQA5JWL0ocqwbL22iCa1rtMgnW1kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMTgyMjAzWhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A4MTg3OTIxNDkzZmVmMmY2OTY4NTI2ZTc0NmFlNTMzZDVk YTA4OWU4MmMxOGFkY2NiMzQ4MDk5N2JkZTk1NjVjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDSHxp08S3YG8Chjx0T1QJKgxlIQG4FHL/9y9mULDlsvY4c YWWOSnoe5W9UnVNm269EXdX4FeHm7ALhI0HA3AY7gdXH3KM06YjxHK/4JYAavdAT Hn0qvF/VbqoqEyiXv3DPgVRQRnla4uOZds8vBGlTPoUwhjqYbSitJMF6NXhO97mC cNHs1hOcIc27oFd9cOHIgileaEyKmvKx4zq6Mkgl821ebMfnRPzos0LtwNG8xwvt cy3RCWer4jxVVlzQQdp12ZujHZWhe2jXSNH2j80xjwjUxtcvvPUfIfDMIChRm0Va XRKdacagnY3C3pnHyO9vKoy7b+DMrwe58ILhReZDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUGOkixKbwUHE9FKfH2VxNRMm+S30wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzEwYWFmNjEzLWMyZmEtNDkwMC1iY2ZjLWNiNzU2YjgxNDlmMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASoBcwDQYJKoZIhvcNAQELBQADggEBAK66BIH+64EEcDYr43C51TE/dXhi g8cc7t8Q3sOkRQr2mHTEZU0DHxuQ+aWEOG+HozR1AxPIKhC4JOi74mOebmrq8Sv6 BICVg4zQvuKl08tONMhUwvIAlFfNbvbGyTddC1ZVNKGeukUPlim+T4NP3GdsYTL3 dhRrCyR1FZC6UqHp8LoopMmrKdM4dDCHuiA3Nu9e8gDwbB9AysbB8bWYDjC6wCPS iM9NM47xP5TncRyvYD2480A6LSfmLf2iSZ9lt4bZrnZi4dQDZVD0BuFNkAxsrVFI ncVTfG0oLivYJ/dMPMO0lwahd99Hzjy6iJ5vpUCMnOVmBfpSDfrapnQdZ1Y= -----END CERTIFICATE-----Generated at Sat Oct 18 05:14:32 2025 by rpki-client