$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/13972d7c-c0fa-4f9d-ad2a-010972fea108.roa File: 13972d7c-c0fa-4f9d-ad2a-010972fea108.roa (raw, json) Hash identifier: YlSH6h4s2Uaz3qLzb/VnxPHVcrGlVasFem6JePrY4/s= Subject key identifier: 79:74:67:81:9F:56:C2:74:DB:4C:8D:1D:D4:C8:EB:9B:C5:71:34:DF Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6D7B2CE5E17E96111EE617A1D643EEDDAEEB346C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/13972d7c-c0fa-4f9d-ad2a-010972fea108.roa Signing time: Mon 22 Sep 2025 20:15:05 +0000 ROA not before: Mon 22 Sep 2025 20:15:05 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.165.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:7b:2c:e5:e1:7e:96:11:1e:e6:17:a1:d6:43:ee:dd:ae:eb:34:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 20:15:05 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=c722010e590dbda38bc19a8eb0aedea0449012af5bb8aaab120ce253257429e9, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c3:1a:dc:05:d0:40:69:1b:9f:c1:fd:c8:13: ea:43:65:03:ae:46:b0:51:7e:3c:58:53:4c:74:32: 16:8e:60:c1:d1:ef:33:96:2f:f6:57:f1:91:a1:2a: 7c:3c:88:2a:5b:60:3e:22:d9:4c:04:6a:b3:45:8b: af:99:d6:19:4e:77:d1:9d:ba:8e:5a:28:29:35:2c: b8:8f:e4:06:e2:36:4d:b8:d2:16:f8:3b:7c:08:60: 76:2b:c5:ad:67:38:0a:cf:23:aa:c6:28:69:33:c7: e6:59:6b:33:a7:8d:96:f5:53:4c:b0:15:1e:50:bb: 2d:11:d3:36:8e:58:b9:a0:52:3d:5d:c1:ca:79:c5: bf:38:1c:28:69:f7:ab:fa:78:b5:d3:fd:ba:98:a4: 44:a1:eb:0d:42:1c:3b:65:91:9c:d3:ef:1b:44:fe: 3f:4b:3c:66:f4:35:11:26:4b:a9:21:ec:7e:6e:c6: 90:32:bd:ed:77:f0:d8:0a:92:8a:2c:72:d2:84:17: f5:d4:2d:c7:d7:0d:f5:57:63:71:c5:8c:bf:58:14: 9d:30:17:38:a0:c5:ca:b5:61:36:2b:90:39:37:66: 7c:bc:f3:4f:b0:09:a4:6b:1e:94:0a:11:b5:a9:e7: c7:30:5e:2b:01:74:6f:25:f0:30:4f:5f:32:21:86: 4d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:74:67:81:9F:56:C2:74:DB:4C:8D:1D:D4:C8:EB:9B:C5:71:34:DF X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/13972d7c-c0fa-4f9d-ad2a-010972fea108.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.165.0.0/21 Signature Algorithm: sha256WithRSAEncryption 6d:8e:64:cf:82:1a:bd:73:70:7e:94:6a:71:4b:f8:30:a7:6f: 83:a7:3c:dc:67:6b:a6:cd:c7:14:7b:fd:d5:aa:1a:37:c2:c2: e1:83:51:df:90:26:68:b1:02:3c:87:df:09:35:50:51:3a:ff: 56:30:c0:80:25:e5:6a:1a:da:d5:1a:a7:69:fe:47:73:03:91: 17:fc:69:96:a3:9e:1a:b2:43:a6:ca:c7:17:9c:52:9e:d2:3d: ce:3b:34:29:9d:86:d6:f5:47:d5:06:7f:4c:05:85:94:1d:29: d9:c4:8b:77:41:18:5d:16:cf:08:44:3c:1a:d3:8b:7b:eb:2f: 38:97:be:98:af:94:1f:c1:cb:2f:cf:27:63:d9:c2:d1:fb:ff: 06:d8:60:04:d8:28:23:b3:03:94:c2:da:df:b9:53:04:db:61: 7c:e8:8a:d6:38:a0:03:40:04:32:9b:94:59:2e:a3:64:89:ab: 9d:e8:7d:39:78:75:26:a0:1d:df:e6:9a:3b:51:c2:52:b5:52: 61:e3:55:e2:db:80:ac:49:86:19:47:44:13:a7:e4:32:5f:10: 67:be:db:c4:7d:97:0d:7f:b2:f6:ae:f8:18:a8:bd:0a:3e:4b: ca:99:76:66:ba:99:09:9c:12:1d:f0:46:ad:f5:ad:f8:2d:22: 58:48:f5:17 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbXss5eF+lhEe5heh1kPu3a7rNGwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjAxNTA1WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BjNzIyMDEwZTU5MGRiZGEzOGJjMTlhOGViMGFlZGVhMDQ0 OTAxMmFmNWJiOGFhYWIxMjBjZTI1MzI1NzQyOWU5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvwxrcBdBAaRufwf3IE+pDZQOuRrBRfjxYU0x0MhaOYMHR 7zOWL/ZX8ZGhKnw8iCpbYD4i2UwEarNFi6+Z1hlOd9Gduo5aKCk1LLiP5AbiNk24 0hb4O3wIYHYrxa1nOArPI6rGKGkzx+ZZazOnjZb1U0ywFR5Quy0R0zaOWLmgUj1d wcp5xb84HChp96v6eLXT/bqYpESh6w1CHDtlkZzT7xtE/j9LPGb0NREmS6kh7H5u xpAyve138NgKkoosctKEF/XULcfXDfVXY3HFjL9YFJ0wFzigxcq1YTYrkDk3Zny8 80+wCaRrHpQKEbWp58cwXisBdG8l8DBPXzIhhk1hAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUeXRngZ9WwnTbTI0d1Mjrm8VxNN8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzEzOTcyZDdjLWMwZmEtNGY5ZC1hZDJhLTAxMDk3MmZlYTEwOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMSpQAwDQYJKoZIhvcNAQELBQADggEBAG2OZM+CGr1zcH6UanFL+DCnb4On PNxna6bNxxR7/dWqGjfCwuGDUd+QJmixAjyH3wk1UFE6/1YwwIAl5Woa2tUap2n+ R3MDkRf8aZajnhqyQ6bKxxecUp7SPc47NCmdhtb1R9UGf0wFhZQdKdnEi3dBGF0W zwhEPBrTi3vrLziXvpivlB/Byy/PJ2PZwtH7/wbYYATYKCOzA5TC2t+5UwTbYXzo itY4oANABDKblFkuo2SJq53ofTl4dSagHd/mmjtRwlK1UmHjVeLbgKxJhhlHRBOn 5DJfEGe+28R9lw1/svau+BiovQo+S8qZdma6mQmcEh3wRq31rfgtIlhI9Rc= -----END CERTIFICATE-----Generated at Sat Oct 18 02:15:28 2025 by rpki-client