$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/143dd7e2-f84a-4b18-9824-bb8247a7f437.roa File: 143dd7e2-f84a-4b18-9824-bb8247a7f437.roa (raw, json) Hash identifier: h2rwRQ5Dh9KKrIRC6oxS1h+LgKECIMnDnNEIpDIdGZM= Subject key identifier: 97:6C:37:06:40:15:EC:0B:AD:33:2C:70:00:17:7A:05:8A:5A:EF:07 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 212A1D98ABFD801DFE8862083014A4F592C7817B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/143dd7e2-f84a-4b18-9824-bb8247a7f437.roa Signing time: Mon 22 Sep 2025 19:02:37 +0000 ROA not before: Mon 22 Sep 2025 19:02:37 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.160.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:2a:1d:98:ab:fd:80:1d:fe:88:62:08:30:14:a4:f5:92:c7:81:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 19:02:37 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=b1f1cfd986d00cef32f87d956edd335d29075571806998ecfec4740c358d3d0a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c9:a9:a6:16:67:c4:e4:76:52:48:d0:5d:83: 32:17:68:c4:10:a7:56:ba:00:b8:d9:11:78:cd:22: 3c:6f:ea:cd:00:da:61:9c:72:10:01:53:66:33:9c: 92:b3:73:1b:e9:8e:78:91:df:6c:bc:eb:fd:cf:41: d1:05:06:ae:2e:4d:57:b9:42:90:9b:a7:50:1b:88: 73:a6:89:e7:7e:24:93:25:c6:7b:98:9e:84:b8:e2: 22:9d:62:79:e3:c0:de:a2:6e:eb:23:45:86:ee:30: 02:5a:cf:c0:30:7a:3a:5d:32:66:e6:f7:c8:85:3d: aa:ea:86:69:eb:7d:cc:a4:38:5f:88:1e:12:97:bd: 59:00:2b:be:b6:b4:b6:23:7d:5c:4e:74:5f:b4:99: 21:15:6a:bf:15:18:a0:3f:72:69:77:11:93:a2:c2: 38:bc:68:5c:db:fa:fb:2c:21:72:08:3f:6d:9d:44: 03:c2:f7:89:b8:d3:ec:0b:e7:f2:14:35:5f:80:73: 45:d7:44:36:26:c9:6b:53:7a:aa:f9:ba:0d:2d:3e: e7:58:07:90:41:be:32:10:d1:9b:81:aa:ad:d8:9f: 89:a3:27:a8:83:04:d6:21:32:14:a3:e2:1d:b3:6f: f5:df:2e:09:5e:10:2a:4e:3f:55:14:e6:07:fc:df: 7b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:6C:37:06:40:15:EC:0B:AD:33:2C:70:00:17:7A:05:8A:5A:EF:07 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/143dd7e2-f84a-4b18-9824-bb8247a7f437.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.160.44.0/22 Signature Algorithm: sha256WithRSAEncryption 3b:8d:e7:2a:55:be:31:7c:81:0e:b5:90:0a:89:3e:e9:56:28: 72:b0:25:74:ab:4d:1d:b5:87:1a:73:fa:74:cc:fe:a3:fb:62: bc:76:3c:cb:b5:e4:93:35:c6:3b:f6:6d:92:8a:81:bf:3d:7b: 69:5d:bf:ff:1d:b0:4f:e4:b8:69:36:43:22:c0:16:a7:91:5b: c4:bd:19:a0:3c:5a:8f:fe:10:b2:86:3d:29:25:01:b8:55:98: 14:93:b6:fb:ea:4c:0e:e0:4d:51:38:fb:45:15:18:df:1b:40: 70:3b:cb:80:72:3b:42:91:67:c5:b1:b9:eb:a5:43:e4:8d:63: e7:5a:72:bd:ec:2f:3f:f8:2a:cc:0a:1e:7a:50:3e:ba:d8:8b: 4c:02:3d:5b:84:ea:a3:3d:36:02:f7:3b:81:5c:a8:2d:ae:9e: 0c:5f:4a:a3:2e:9a:68:17:27:54:43:87:06:85:89:a5:a0:1c: 94:d7:b6:92:09:0b:43:e7:b1:40:7d:b1:71:41:90:5d:4a:cf: 39:43:ae:fc:75:33:42:b5:ae:ee:15:23:e1:f5:56:45:41:bf: 6f:4f:4d:1b:d6:cf:16:3e:ee:dc:dc:b7:df:7d:5e:41:c0:11: d8:40:c6:c2:7a:48:64:10:b0:03:42:63:df:b6:2f:2c:f8:27: 35:d1:47:1a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUISodmKv9gB3+iGIIMBSk9ZLHgXswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMTkwMjM3WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMWYxY2ZkOTg2ZDAwY2VmMzJmODdkOTU2ZWRkMzM1ZDI5 MDc1NTcxODA2OTk4ZWNmZWM0NzQwYzM1OGQzZDBhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCqyammFmfE5HZSSNBdgzIXaMQQp1a6ALjZEXjNIjxv6s0A 2mGcchABU2YznJKzcxvpjniR32y86/3PQdEFBq4uTVe5QpCbp1AbiHOmied+JJMl xnuYnoS44iKdYnnjwN6ibusjRYbuMAJaz8AwejpdMmbm98iFParqhmnrfcykOF+I HhKXvVkAK762tLYjfVxOdF+0mSEVar8VGKA/cml3EZOiwji8aFzb+vssIXIIP22d RAPC94m40+wL5/IUNV+Ac0XXRDYmyWtTeqr5ug0tPudYB5BBvjIQ0ZuBqq3Yn4mj J6iDBNYhMhSj4h2zb/XfLgleECpOP1UU5gf833uHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUl2w3BkAV7AutMyxwABd6BYpa7wcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzE0M2RkN2UyLWY4NGEtNGIxOC05ODI0LWJiODI0N2E3ZjQzNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAISoCwwDQYJKoZIhvcNAQELBQADggEBADuN5ypVvjF8gQ61kAqJPulWKHKw JXSrTR21hxpz+nTM/qP7Yrx2PMu15JM1xjv2bZKKgb89e2ldv/8dsE/kuGk2QyLA FqeRW8S9GaA8Wo/+ELKGPSklAbhVmBSTtvvqTA7gTVE4+0UVGN8bQHA7y4ByO0KR Z8WxueulQ+SNY+dacr3sLz/4KswKHnpQPrrYi0wCPVuE6qM9NgL3O4FcqC2ungxf SqMummgXJ1RDhwaFiaWgHJTXtpIJC0PnsUB9sXFBkF1KzzlDrvx1M0K1ru4VI+H1 VkVBv29PTRvWzxY+7tzct999XkHAEdhAxsJ6SGQQsANCY9+2Lyz4JzXRRxo= -----END CERTIFICATE-----Generated at Sat Oct 18 00:13:33 2025 by rpki-client