$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1561b986-d355-4bb7-92db-9e4ce3fbe5a6.roa File: 1561b986-d355-4bb7-92db-9e4ce3fbe5a6.roa (raw, json) Hash identifier: 3xCJkBhk6ePKp9qWQSY0fia6cFast7dLbiNYiWBzJQM= Subject key identifier: DC:D7:0B:B6:E3:DB:FC:18:87:78:EA:BE:1C:87:5E:3E:1D:04:84:08 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 16E421976442F149FBB9BD82C73D86DED6B7359A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1561b986-d355-4bb7-92db-9e4ce3fbe5a6.roa Signing time: Mon 22 Sep 2025 20:24:13 +0000 ROA not before: Mon 22 Sep 2025 20:24:13 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.172.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:e4:21:97:64:42:f1:49:fb:b9:bd:82:c7:3d:86:de:d6:b7:35:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 20:24:13 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=09661abb6c3b4c93b1ee1bb95062bdac283205af755113c7df0875f3b30d24b1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:86:75:2b:d7:58:9f:78:e3:10:f4:ca:26:0a: ea:5e:7f:80:af:50:02:10:f3:69:d3:30:c9:a9:71: c7:41:a0:2e:96:8d:0d:b1:30:9c:71:ed:b9:4f:72: 09:41:78:5c:7f:ed:7c:fe:27:a2:94:a6:0b:43:79: 6a:66:2e:2f:d1:50:fe:fc:09:ff:b8:ef:08:46:19: f9:f0:d1:e4:bd:c0:12:51:90:5e:77:eb:19:e4:4d: be:60:73:48:75:c8:9b:79:2b:9e:0f:c9:d0:8a:c4: 76:98:9e:13:a7:c5:46:4f:44:46:d7:f9:b1:2e:db: 3c:69:8a:01:a5:79:c5:32:eb:75:c6:5d:7d:22:38: 9d:c7:7d:46:a9:c8:29:cb:f9:f4:3c:a2:e5:86:e2: 87:e8:8e:5f:1b:f6:32:f9:3f:60:75:ed:36:e3:1f: c2:9f:e5:48:4a:a6:06:1b:56:8d:ff:29:eb:2b:99: 67:aa:36:a4:e8:46:0c:11:c1:01:b1:17:64:1e:1d: 93:34:c1:d0:40:e6:5d:c7:70:55:30:04:f0:c2:48: d1:0d:49:4f:a8:ba:4f:db:ef:c2:89:be:a6:92:db: f9:70:e4:40:86:1d:bf:54:bd:e1:9f:c7:e8:aa:93: 2d:03:0d:41:57:93:60:a7:41:02:b3:50:29:6d:20: 06:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:D7:0B:B6:E3:DB:FC:18:87:78:EA:BE:1C:87:5E:3E:1D:04:84:08 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1561b986-d355-4bb7-92db-9e4ce3fbe5a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.172.127.0/24 Signature Algorithm: sha256WithRSAEncryption ab:9f:1c:42:f9:75:2b:0d:c4:88:77:88:7f:fc:05:df:60:bb: 5f:3a:74:b7:6f:b6:3e:c8:d5:36:3f:0a:54:5f:74:8a:f0:5b: c4:86:8d:d2:c1:0b:2c:84:d7:44:fb:98:09:81:81:4c:e6:20: 79:bf:7f:29:0d:ac:bc:41:1b:24:84:15:73:9d:fa:7e:26:58: 5e:05:27:91:1d:0d:59:0d:e0:fd:eb:1d:26:1c:7d:4e:a1:75: 42:0b:df:de:49:c6:ed:9d:9b:33:75:fb:e7:9f:50:24:9d:58: fb:1e:e6:34:b0:15:bf:b0:a4:be:01:9a:39:79:41:cf:7c:25: 4b:96:c6:93:5b:97:7c:d0:34:e1:fd:ed:03:5a:1d:02:68:ca: 4d:9a:21:ff:30:11:45:07:47:22:9e:3d:7f:23:4f:4d:7f:c3: 53:1a:6b:e9:c5:5f:c2:06:d2:b5:94:27:e6:1e:5b:0f:25:7b: e1:fd:7b:b4:19:6f:ad:89:d8:9f:a2:d9:da:36:00:84:47:65: 43:62:e4:b8:45:b5:e8:27:f1:82:9c:be:3d:47:fd:ef:84:c4: 24:be:c4:52:6c:3f:f8:6f:d4:45:e7:a4:45:d8:16:94:d9:fb: 68:03:79:1f:3c:b9:8a:9a:b2:25:2d:8a:31:a3:51:ec:35:fd: 2f:c4:80:8e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFuQhl2RC8Un7ub2Cxz2G3ta3NZowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjAyNDEzWhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AwOTY2MWFiYjZjM2I0YzkzYjFlZTFiYjk1MDYyYmRhYzI4 MzIwNWFmNzU1MTEzYzdkZjA4NzVmM2IzMGQyNGIxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDahnUr11ifeOMQ9MomCupef4CvUAIQ82nTMMmpccdBoC6W jQ2xMJxx7blPcglBeFx/7Xz+J6KUpgtDeWpmLi/RUP78Cf+47whGGfnw0eS9wBJR kF536xnkTb5gc0h1yJt5K54PydCKxHaYnhOnxUZPREbX+bEu2zxpigGlecUy63XG XX0iOJ3HfUapyCnL+fQ8ouWG4ofojl8b9jL5P2B17TbjH8Kf5UhKpgYbVo3/Kesr mWeqNqToRgwRwQGxF2QeHZM0wdBA5l3HcFUwBPDCSNENSU+ouk/b78KJvqaS2/lw 5ECGHb9UveGfx+iqky0DDUFXk2CnQQKzUCltIAavAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU3NcLtuPb/BiHeOq+HIdePh0EhAgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzE1NjFiOTg2LWQzNTUtNGJiNy05MmRiLTllNGNlM2ZiZTVhNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASrH8wDQYJKoZIhvcNAQELBQADggEBAKufHEL5dSsNxIh3iH/8Bd9gu186 dLdvtj7I1TY/ClRfdIrwW8SGjdLBCyyE10T7mAmBgUzmIHm/fykNrLxBGySEFXOd +n4mWF4FJ5EdDVkN4P3rHSYcfU6hdUIL395Jxu2dmzN1++efUCSdWPse5jSwFb+w pL4Bmjl5Qc98JUuWxpNbl3zQNOH97QNaHQJoyk2aIf8wEUUHRyKePX8jT01/w1Ma a+nFX8IG0rWUJ+YeWw8le+H9e7QZb62J2J+i2do2AIRHZUNi5LhFtegn8YKcvj1H /e+ExCS+xFJsP/hv1EXnpEXYFpTZ+2gDeR88uYqasiUtijGjUew1/S/EgI4= -----END CERTIFICATE-----Generated at Sat Oct 18 02:11:55 2025 by rpki-client