$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/125cc436-b187-45ac-9d82-a366674878f1.roa File: 125cc436-b187-45ac-9d82-a366674878f1.roa (raw, json) Hash identifier: 5VlNEZ2yutLZpNrOggP427WPibzcAtqeDFVxcRImKjE= Subject key identifier: A0:EC:9F:5E:68:C2:0F:46:DB:A1:40:53:E6:1B:44:71:E5:DA:2F:F0 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3EE564EE14AF30A3F19B155180B5D02CD5458DB8 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/125cc436-b187-45ac-9d82-a366674878f1.roa Signing time: Mon 22 Sep 2025 20:21:44 +0000 ROA not before: Mon 22 Sep 2025 20:21:44 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.164.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:e5:64:ee:14:af:30:a3:f1:9b:15:51:80:b5:d0:2c:d5:45:8d:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 20:21:44 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=8e8618c64d93e44d4dabf585eca1c1e4b2d2860cce7d0865a5ad5a3e4ad08206, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f6:4b:4d:7f:4c:17:16:81:5b:55:2b:2d:70: c5:63:ba:21:ff:21:e3:1e:24:ac:e8:89:4b:b9:f3: db:71:43:4d:59:33:0c:f4:7f:de:0a:b2:29:5e:27: 27:3e:4f:bc:83:75:b9:8c:16:b3:82:b7:4c:de:73: 2d:e6:20:15:15:2a:61:fa:87:51:12:08:56:91:d9: 20:59:cf:ce:be:8a:3e:2b:5d:bb:35:68:50:0a:b2: cb:05:cb:b2:f9:be:d8:30:4e:24:20:54:a7:6e:e5: af:77:cd:07:93:e2:23:8c:19:7e:44:f8:6a:54:61: b2:6d:71:2a:a1:5d:d5:c2:6b:26:52:d3:82:04:e8: d3:5e:1c:d0:79:97:a3:d8:38:66:de:81:8e:10:6c: f6:79:a5:23:14:99:eb:85:f6:e6:55:be:6b:ba:c1: e7:35:72:27:ca:13:cb:2d:9d:ec:74:8d:24:c6:c2: 5b:b2:48:1c:f5:36:1a:db:7d:31:6f:f5:fc:52:58: 97:29:f1:c6:80:9e:f4:a8:7a:56:c6:6f:91:c7:e7: ba:c0:42:db:ea:99:2b:d2:16:2a:49:b4:2b:70:70: 46:a9:cf:61:22:bf:d2:0f:28:49:61:b7:1e:e1:1f: 00:9f:9d:1d:c4:24:f9:0b:6b:59:79:54:18:c2:c9: b1:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:EC:9F:5E:68:C2:0F:46:DB:A1:40:53:E6:1B:44:71:E5:DA:2F:F0 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/125cc436-b187-45ac-9d82-a366674878f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.164.64.0/18 Signature Algorithm: sha256WithRSAEncryption 96:d8:6c:1a:f1:e8:52:c5:55:0d:49:61:27:f1:b9:da:14:9f: aa:e5:98:a3:ec:13:60:96:3a:a1:7a:d3:e6:19:92:88:26:b9: fe:c0:e1:a6:5b:07:dd:26:ba:3d:28:6f:a0:90:c0:00:a9:54: 17:a0:2f:4b:f6:27:e3:75:3f:ba:e5:2a:5e:fb:7b:ec:4c:bf: 75:06:b3:03:e6:9c:7a:39:1f:4e:04:9f:e2:7a:70:02:a9:6d: ac:b9:ee:d5:6c:f6:14:88:49:df:df:9e:5a:8c:ee:08:a2:de: 96:b0:08:fe:d6:c3:27:d0:d1:f0:69:dc:00:54:7c:20:97:d1: b6:88:59:c0:20:4c:bb:ef:73:57:7c:b9:a7:3d:db:b0:df:d4: 12:59:f2:7e:d2:f0:4c:cd:ec:c0:55:41:b2:18:35:78:f5:3c: 7b:65:ec:49:e0:3e:64:9b:84:c2:9a:9e:6e:82:b2:14:46:de: e3:c9:03:9e:7b:71:49:ee:8b:21:6f:65:6b:07:f2:0e:33:b5: 6b:bf:08:e2:73:5a:cd:ee:85:e4:6d:b5:2f:6c:68:dd:5d:21: bf:4b:fc:9b:d2:05:a2:4f:d9:2b:39:d9:f1:ab:07:1a:6f:6b: 78:48:f3:a5:6b:98:e4:1b:22:15:28:af:64:d0:02:f2:81:74: 09:9a:a8:19 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPuVk7hSvMKPxmxVRgLXQLNVFjbgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjAyMTQ0WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZTg2MThjNjRkOTNlNDRkNGRhYmY1ODVlY2ExYzFlNGIy ZDI4NjBjY2U3ZDA4NjVhNWFkNWEzZTRhZDA4MjA2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDE9ktNf0wXFoFbVSstcMVjuiH/IeMeJKzoiUu589txQ01Z Mwz0f94KsileJyc+T7yDdbmMFrOCt0zecy3mIBUVKmH6h1ESCFaR2SBZz86+ij4r Xbs1aFAKsssFy7L5vtgwTiQgVKdu5a93zQeT4iOMGX5E+GpUYbJtcSqhXdXCayZS 04IE6NNeHNB5l6PYOGbegY4QbPZ5pSMUmeuF9uZVvmu6wec1cifKE8stnex0jSTG wluySBz1NhrbfTFv9fxSWJcp8caAnvSoelbGb5HH57rAQtvqmSvSFipJtCtwcEap z2Eiv9IPKElhtx7hHwCfnR3EJPkLa1l5VBjCybEhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUoOyfXmjCD0bboUBT5htEceXaL/AwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzEyNWNjNDM2LWIxODctNDVhYy05ZDgyLWEzNjY2NzQ4NzhmMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYSpEAwDQYJKoZIhvcNAQELBQADggEBAJbYbBrx6FLFVQ1JYSfxudoUn6rl mKPsE2CWOqF60+YZkogmuf7A4aZbB90muj0ob6CQwACpVBegL0v2J+N1P7rlKl77 e+xMv3UGswPmnHo5H04En+J6cAKpbay57tVs9hSISd/fnlqM7gii3pawCP7WwyfQ 0fBp3ABUfCCX0baIWcAgTLvvc1d8uac927Df1BJZ8n7S8EzN7MBVQbIYNXj1PHtl 7EngPmSbhMKanm6CshRG3uPJA557cUnuiyFvZWsH8g4ztWu/COJzWs3uheRttS9s aN1dIb9L/JvSBaJP2Ss52fGrBxpva3hI86VrmOQbIhUor2TQAvKBdAmaqBk= -----END CERTIFICATE-----Generated at Sat Oct 18 00:16:39 2025 by rpki-client