$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1d42cee3-521d-475d-bae6-d7975b671327.roa File: 1d42cee3-521d-475d-bae6-d7975b671327.roa (raw, json) Hash identifier: L2rD2AjSvBX0LSmTC2REAsdbwnbChhyvFQaQNgPYJT8= Subject key identifier: 4C:7A:F3:DF:D2:B7:8C:ED:3D:07:A5:87:33:21:36:8C:D6:14:49:A0 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6B10830D63FCBAB13439AE75E133165EC25E9631 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1d42cee3-521d-475d-bae6-d7975b671327.roa Signing time: Mon 22 Sep 2025 20:11:05 +0000 ROA not before: Mon 22 Sep 2025 20:11:05 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.165.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:10:83:0d:63:fc:ba:b1:34:39:ae:75:e1:33:16:5e:c2:5e:96:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 20:11:05 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=595e91313c38031a86181db9e6d0e2514c8d417301e8811009946f5b15770d5a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:67:5d:b9:10:a2:23:1b:09:d1:7c:41:00:e9: 72:b5:b3:93:ed:81:8c:4c:bd:68:d9:ff:75:cc:49: 68:85:9c:68:b6:b7:17:9f:f3:56:f7:d3:55:39:67: 8f:3a:d2:4f:a2:5e:89:54:a9:67:e1:85:b3:9b:d6: d6:45:9b:d0:28:74:94:9c:87:cb:84:3c:2e:9f:47: 9a:e7:56:8f:61:7a:22:28:dc:20:f8:ec:45:89:dd: 13:5f:53:5d:78:98:34:73:51:fb:b2:6c:21:9b:ad: 2f:04:5a:c2:7e:f6:18:b7:46:cd:44:e6:74:74:f1: eb:4d:7a:f3:1a:8c:2e:f6:96:47:82:dc:78:10:94: 76:66:8d:53:4b:a9:5f:f2:8c:38:c2:d4:1d:92:43: 8d:3d:97:7e:e1:fe:15:0a:dc:11:1f:83:b0:f0:e4: 82:56:87:d6:04:c3:91:00:e7:d9:ee:f5:1e:2a:cb: a9:67:02:e4:2e:28:07:87:99:8f:95:20:3b:93:42: 4c:50:df:59:cc:e6:ce:42:bf:eb:6b:8c:62:cd:76: 61:02:06:c4:b3:4a:b5:59:aa:7a:c3:6e:e0:c0:da: 47:71:1e:0d:57:b8:a7:99:7a:30:29:9d:ba:9a:55: 77:8f:4f:2b:73:52:de:f0:8d:77:7e:7d:91:7a:28: 5a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:7A:F3:DF:D2:B7:8C:ED:3D:07:A5:87:33:21:36:8C:D6:14:49:A0 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1d42cee3-521d-475d-bae6-d7975b671327.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.165.184.0/22 Signature Algorithm: sha256WithRSAEncryption 7a:b3:38:de:87:32:79:aa:95:c6:dd:e5:3a:52:7d:95:b1:be: 3c:bc:c2:5d:3d:cb:82:85:4b:a9:c7:f2:a0:d1:f9:fa:8b:fb: 72:5d:42:1f:65:e2:34:fc:bd:97:62:84:58:d6:66:2a:71:62: 94:52:b9:d9:fd:9b:a9:fb:91:72:c7:c2:20:9e:1a:3d:96:a3: 4b:fe:49:8e:90:ea:88:39:8b:e5:be:47:7c:ab:6a:94:e2:f1: 70:01:86:96:93:ff:58:3c:19:8c:b3:36:bf:5e:fe:04:13:79: 2a:2e:7d:d5:2c:26:b2:48:2a:38:ac:1e:79:09:4f:97:7d:ab: f5:83:23:27:44:10:f1:3a:f6:10:56:06:7b:72:b3:96:42:bd: 76:39:0c:bc:81:5e:0e:ff:70:99:b3:f3:5b:6c:7c:1c:07:af: 2f:e3:eb:05:81:00:66:a8:07:fa:3a:3e:b8:2e:cf:fd:dc:1c: 4d:60:0c:d4:e7:c0:86:1d:11:a2:91:ba:6e:6e:7a:5c:ed:37: 4b:da:0d:b1:a5:18:e4:1c:74:c2:d3:98:63:1c:22:04:47:1f: 7f:b4:f0:fb:9e:6f:24:94:88:f9:e9:a1:59:d9:bd:2a:a8:f4: c6:88:20:3e:c8:db:1d:cf:ea:4c:56:fd:0c:f1:2a:34:97:dc: 37:53:ad:2b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUaxCDDWP8urE0Oa514TMWXsJeljEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjAxMTA1WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A1OTVlOTEzMTNjMzgwMzFhODYxODFkYjllNmQwZTI1MTRj OGQ0MTczMDFlODgxMTAwOTk0NmY1YjE1NzcwZDVhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCnZ125EKIjGwnRfEEA6XK1s5PtgYxMvWjZ/3XMSWiFnGi2 txef81b301U5Z4860k+iXolUqWfhhbOb1tZFm9AodJSch8uEPC6fR5rnVo9heiIo 3CD47EWJ3RNfU114mDRzUfuybCGbrS8EWsJ+9hi3Rs1E5nR08etNevMajC72lkeC 3HgQlHZmjVNLqV/yjDjC1B2SQ409l37h/hUK3BEfg7Dw5IJWh9YEw5EA59nu9R4q y6lnAuQuKAeHmY+VIDuTQkxQ31nM5s5Cv+trjGLNdmECBsSzSrVZqnrDbuDA2kdx Hg1XuKeZejApnbqaVXePTytzUt7wjXd+fZF6KFpDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUTHrz39K3jO09B6WHMyE2jNYUSaAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzFkNDJjZWUzLTUyMWQtNDc1ZC1iYWU2LWQ3OTc1YjY3MTMyNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAISpbgwDQYJKoZIhvcNAQELBQADggEBAHqzON6HMnmqlcbd5TpSfZWxvjy8 wl09y4KFS6nH8qDR+fqL+3JdQh9l4jT8vZdihFjWZipxYpRSudn9m6n7kXLHwiCe Gj2Wo0v+SY6Q6og5i+W+R3yrapTi8XABhpaT/1g8GYyzNr9e/gQTeSoufdUsJrJI KjisHnkJT5d9q/WDIydEEPE69hBWBntys5ZCvXY5DLyBXg7/cJmz81tsfBwHry/j 6wWBAGaoB/o6Prguz/3cHE1gDNTnwIYdEaKRum5uelztN0vaDbGlGOQcdMLTmGMc IgRHH3+08PuebySUiPnpoVnZvSqo9MaIID7I2x3P6kxW/QzxKjSX3DdTrSs= -----END CERTIFICATE-----Generated at Fri Oct 17 23:58:25 2025 by rpki-client