$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1dac9580-2de6-4c42-9915-c86545d33b46.roa File: 1dac9580-2de6-4c42-9915-c86545d33b46.roa (raw, json) Hash identifier: uSi2DmyG0roZ+XdBDm8k44SMhu/PspGxPHwg+pzmVi4= Subject key identifier: 6B:65:3D:D6:24:D3:2C:06:ED:8F:C4:0A:1E:EE:48:04:DD:19:0A:CA Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 27936B1ED1C5F69F02B32BCF7BC78343ADBEE5C2 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1dac9580-2de6-4c42-9915-c86545d33b46.roa Signing time: Mon 22 Sep 2025 19:06:42 +0000 ROA not before: Mon 22 Sep 2025 19:06:42 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.161.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:93:6b:1e:d1:c5:f6:9f:02:b3:2b:cf:7b:c7:83:43:ad:be:e5:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 19:06:42 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=5c7afaefb9727d41c53e0e19538e19dce9ce9d47ac94593a6bd3344f18f8af5d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:70:3d:7a:0e:75:86:8b:c2:2c:e2:4b:a4:a1: c9:8b:ef:91:3d:35:11:1b:6d:6d:f1:fc:0e:43:8c: 52:e1:da:d4:5e:39:e6:01:7f:0d:8c:b8:93:c6:8f: 98:f8:1c:d4:8b:0d:38:90:34:45:32:c5:8f:e2:79: c4:4c:62:97:ef:2b:a6:4d:81:5d:4d:9c:42:c3:db: d8:54:b5:cb:d2:b1:34:43:87:68:18:ef:7d:6f:c5: ba:2d:f4:9d:aa:be:e7:97:f0:97:4e:0e:5c:75:e2: b2:98:8b:0d:82:89:29:55:35:61:1f:32:b4:5e:ce: d1:cf:19:26:57:ff:46:1e:51:c3:49:23:bf:00:1a: 0b:f6:0b:8b:f1:dc:f9:76:a8:0b:90:9e:70:bd:2e: 24:0a:0e:64:ed:ab:5e:bb:44:ee:96:d3:3c:1b:36: 24:b8:d5:1f:79:90:7d:47:d8:39:5d:5b:16:0c:03: f8:5b:0c:26:a3:a5:bc:fb:e7:b8:50:7f:7d:9a:98: 08:32:f2:77:51:9b:e3:a0:c7:7e:82:04:fc:61:c3: 45:7a:8e:5c:b5:ff:dc:f5:c4:d7:be:3f:ca:2f:58: 9c:b4:68:38:47:ea:0d:d3:bd:67:5d:7f:75:2e:13: 05:15:46:79:93:fb:9d:a4:27:e8:39:94:5f:63:c1: 30:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:65:3D:D6:24:D3:2C:06:ED:8F:C4:0A:1E:EE:48:04:DD:19:0A:CA X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1dac9580-2de6-4c42-9915-c86545d33b46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.161.144.0/22 Signature Algorithm: sha256WithRSAEncryption 28:78:5e:e6:75:ef:fb:7f:d2:cd:97:2c:0a:07:57:6a:6f:d9: 12:c8:bb:40:47:db:22:aa:63:ab:20:32:02:6d:7d:7a:4f:ca: fe:81:65:35:3c:87:6a:e6:56:a0:34:7c:ea:07:b5:bc:05:c3: 49:b1:6f:60:c6:33:03:c9:fe:4e:c0:a8:e7:48:0c:f8:21:bc: f3:ff:94:7f:82:37:4d:bf:90:4e:c8:d8:99:91:f6:8b:21:ef: eb:58:cd:52:2d:89:3b:4e:43:4b:71:65:35:66:fb:87:7a:64: d2:7e:9f:8e:37:90:a9:95:47:73:94:29:d8:eb:9c:79:2f:94: 6f:04:98:2b:df:94:04:88:f6:c7:fc:5f:90:8e:74:27:bc:d4: 05:5e:a8:70:bc:98:cf:c3:58:f4:88:05:ca:cd:88:f4:b7:78: c2:cf:de:1d:ea:3c:e8:b3:e3:98:1f:5f:65:3a:f2:b1:1b:89: 84:1c:e2:94:cb:33:d7:eb:57:98:d3:ba:80:c6:04:dc:8a:fd: 0d:3b:f9:49:7a:2f:ab:65:54:0c:b0:73:53:ff:a1:ab:71:81: d6:b2:92:cc:ea:c9:2b:31:22:bb:77:6f:73:96:28:7d:50:45: a2:8e:8b:f7:9f:7b:a2:fa:a1:69:3a:1e:39:04:7b:d6:52:ec: a1:5e:97:5f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJ5NrHtHF9p8CsyvPe8eDQ62+5cIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMTkwNjQyWhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A1YzdhZmFlZmI5NzI3ZDQxYzUzZTBlMTk1MzhlMTlkY2U5 Y2U5ZDQ3YWM5NDU5M2E2YmQzMzQ0ZjE4ZjhhZjVkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDwcD16DnWGi8Is4kukocmL75E9NREbbW3x/A5DjFLh2tRe OeYBfw2MuJPGj5j4HNSLDTiQNEUyxY/iecRMYpfvK6ZNgV1NnELD29hUtcvSsTRD h2gY731vxbot9J2qvueX8JdODlx14rKYiw2CiSlVNWEfMrReztHPGSZX/0YeUcNJ I78AGgv2C4vx3Pl2qAuQnnC9LiQKDmTtq167RO6W0zwbNiS41R95kH1H2DldWxYM A/hbDCajpbz757hQf32amAgy8ndRm+Ogx36CBPxhw0V6jly1/9z1xNe+P8ovWJy0 aDhH6g3TvWddf3UuEwUVRnmT+52kJ+g5lF9jwTA/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUa2U91iTTLAbtj8QKHu5IBN0ZCsowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzFkYWM5NTgwLTJkZTYtNGM0Mi05OTE1LWM4NjU0NWQzM2I0Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAISoZAwDQYJKoZIhvcNAQELBQADggEBACh4XuZ17/t/0s2XLAoHV2pv2RLI u0BH2yKqY6sgMgJtfXpPyv6BZTU8h2rmVqA0fOoHtbwFw0mxb2DGMwPJ/k7AqOdI DPghvPP/lH+CN02/kE7I2JmR9osh7+tYzVItiTtOQ0txZTVm+4d6ZNJ+n443kKmV R3OUKdjrnHkvlG8EmCvflASI9sf8X5COdCe81AVeqHC8mM/DWPSIBcrNiPS3eMLP 3h3qPOiz45gfX2U68rEbiYQc4pTLM9frV5jTuoDGBNyK/Q07+Ul6L6tlVAywc1P/ oatxgdaykszqySsxIrt3b3OWKH1QRaKOi/efe6L6oWk6HjkEe9ZS7KFel18= -----END CERTIFICATE-----Generated at Sat Oct 18 00:00:15 2025 by rpki-client