$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1ebde338-6389-4be9-b789-ab2efd51b7e9.roa File: 1ebde338-6389-4be9-b789-ab2efd51b7e9.roa (raw, json) Hash identifier: lwTP4Oexm42yBkf3Uo67+1JHOh/0UakoeP+IWMGhqCE= Subject key identifier: 20:ED:7C:15:73:E1:5B:26:66:E6:01:03:54:97:C6:E0:A0:D8:66:4F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 53C08262FB0AEE06D188CFC791A23D7BADBD23C2 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1ebde338-6389-4be9-b789-ab2efd51b7e9.roa Signing time: Mon 22 Sep 2025 18:55:45 +0000 ROA not before: Mon 22 Sep 2025 18:55:45 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.161.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:c0:82:62:fb:0a:ee:06:d1:88:cf:c7:91:a2:3d:7b:ad:bd:23:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 18:55:45 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=91ce785bb8d00cc0c79bb03bf784f659475f6bb2a98a5d10124df9e6f9a930a8, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8a:64:ea:d2:f3:4a:ed:f1:f6:2b:06:17:0a: 44:64:d9:5d:2d:99:97:39:b0:48:e7:a3:c5:78:d8: 5c:c5:a1:99:20:c3:31:31:4c:34:89:e5:07:f3:4a: 1b:eb:2f:33:fc:72:ed:01:fb:d9:62:3a:fb:e6:9f: 16:47:f6:86:5f:6d:10:fb:d6:a3:f0:5f:de:80:a3: 9a:22:4a:4c:67:aa:4f:0e:73:dd:e6:c6:72:03:ad: 84:73:0c:25:62:ad:42:ca:2d:ac:44:9a:d5:4c:ab: 0b:f6:51:6e:5b:15:1f:47:fb:f6:f8:f0:98:31:c7: a8:c9:be:ba:48:b8:64:46:ef:49:2a:5c:6c:75:e7: 55:a2:78:11:a9:51:e0:25:09:d6:31:cc:b5:fc:5f: 84:22:84:ef:34:1a:4f:f1:58:33:79:46:41:3c:50: ce:59:68:91:b1:c7:c5:58:57:15:ee:fa:37:6d:73: f8:a5:37:65:12:21:77:f8:cf:54:19:f9:e1:b3:4d: bd:6c:30:05:91:fc:e8:37:43:d8:05:34:18:e6:6b: c7:96:d4:3c:c9:c9:34:fb:f5:6f:df:83:f4:65:80: fd:3f:ad:e3:9e:7b:65:e5:33:b4:8f:95:4e:5d:66: b5:4a:48:6b:1c:c2:ca:6a:66:33:3a:52:8e:73:ad: 5b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:ED:7C:15:73:E1:5B:26:66:E6:01:03:54:97:C6:E0:A0:D8:66:4F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1ebde338-6389-4be9-b789-ab2efd51b7e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.161.2.0/23 Signature Algorithm: sha256WithRSAEncryption 46:8c:8e:96:62:81:0c:f6:96:3a:99:39:90:cb:f4:ec:2e:fd: 98:35:11:60:8e:0c:7b:0b:e0:97:5b:a7:e2:46:fd:f2:82:3b: 51:1b:99:f6:52:64:a5:e6:66:6e:71:41:41:35:4b:9e:f6:66: e1:a1:7b:b5:f5:25:71:73:aa:40:cd:7f:cc:ba:5b:24:b8:19: b9:39:29:f4:5b:c0:9e:af:9e:32:2f:37:96:9b:42:0f:73:42: 60:c4:a8:b8:a7:7d:ba:91:ea:70:7a:c5:a8:ad:e5:74:7c:04: 47:73:7b:50:de:cf:91:ce:c2:70:ee:39:41:f7:9e:74:a5:89: a1:a8:27:13:d0:c3:16:f4:ff:75:ff:f5:60:f0:42:35:c1:4f: ca:f3:79:2a:b1:bc:1a:c3:06:5c:e9:77:a1:6d:55:3a:2b:d8: 09:c3:14:6f:67:67:98:ba:5b:f7:d5:c1:1d:6d:e5:4e:ec:0c: e1:74:f8:d8:44:28:9d:9b:a4:5c:a0:be:01:13:c2:1a:7a:8a: 86:4e:f0:14:7f:a8:80:9d:49:b4:ea:c6:87:6c:72:c7:c4:57: ca:31:82:f2:b9:ef:be:7c:d5:51:a5:af:69:8f:af:d8:bb:27: 00:15:08:a0:c6:63:28:27:11:00:0a:b7:e7:b7:eb:85:d4:95: e3:e4:66:0a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUU8CCYvsK7gbRiM/HkaI9e629I8IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMTg1NTQ1WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A5MWNlNzg1YmI4ZDAwY2MwYzc5YmIwM2JmNzg0ZjY1OTQ3 NWY2YmIyYTk4YTVkMTAxMjRkZjllNmY5YTkzMGE4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4imTq0vNK7fH2KwYXCkRk2V0tmZc5sEjno8V42FzFoZkg wzExTDSJ5QfzShvrLzP8cu0B+9liOvvmnxZH9oZfbRD71qPwX96Ao5oiSkxnqk8O c93mxnIDrYRzDCVirULKLaxEmtVMqwv2UW5bFR9H+/b48Jgxx6jJvrpIuGRG70kq XGx151WieBGpUeAlCdYxzLX8X4QihO80Gk/xWDN5RkE8UM5ZaJGxx8VYVxXu+jdt c/ilN2USIXf4z1QZ+eGzTb1sMAWR/Og3Q9gFNBjma8eW1DzJyTT79W/fg/RlgP0/ reOee2XlM7SPlU5dZrVKSGscwspqZjM6Uo5zrVtDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUIO18FXPhWyZm5gEDVJfG4KDYZk8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzFlYmRlMzM4LTYzODktNGJlOS1iNzg5LWFiMmVmZDUxYjdlOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESoQIwDQYJKoZIhvcNAQELBQADggEBAEaMjpZigQz2ljqZOZDL9Owu/Zg1 EWCODHsL4Jdbp+JG/fKCO1EbmfZSZKXmZm5xQUE1S572ZuGhe7X1JXFzqkDNf8y6 WyS4Gbk5KfRbwJ6vnjIvN5abQg9zQmDEqLinfbqR6nB6xait5XR8BEdze1Dez5HO wnDuOUH3nnSliaGoJxPQwxb0/3X/9WDwQjXBT8rzeSqxvBrDBlzpd6FtVTor2AnD FG9nZ5i6W/fVwR1t5U7sDOF0+NhEKJ2bpFygvgETwhp6ioZO8BR/qICdSbTqxods csfEV8oxgvK577581VGlr2mPr9i7JwAVCKDGYygnEQAKt+e364XUlePkZgo= -----END CERTIFICATE-----Generated at Fri Oct 17 22:17:32 2025 by rpki-client