$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/243b970a-c5a9-4aea-b25f-e3ed23b04022.roa File: 243b970a-c5a9-4aea-b25f-e3ed23b04022.roa (raw, json) Hash identifier: EISNjGKT7gDhaQ4BuAaRxl1hDc2+Qex+QntToPljnGA= Subject key identifier: 57:4C:B9:1E:04:A8:F7:FB:AC:A5:AA:D3:2B:C0:39:76:16:45:6F:EE Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5287344AFCB8EB2B0ADFA8F2E69C58C591092452 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/243b970a-c5a9-4aea-b25f-e3ed23b04022.roa Signing time: Mon 22 Sep 2025 18:25:52 +0000 ROA not before: Mon 22 Sep 2025 18:25:52 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.160.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:87:34:4a:fc:b8:eb:2b:0a:df:a8:f2:e6:9c:58:c5:91:09:24:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 18:25:52 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=df4940157540baa4dd135bffb9e06ed349582be30a950002a870f07e67c9f5d6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:da:18:51:12:d1:ec:15:36:3d:1e:82:ca:09: 38:92:7a:83:d5:1e:10:57:99:f3:65:fa:a0:75:e4: 03:a6:16:21:b7:ae:7b:8a:17:33:8a:60:0e:84:33: f5:b3:49:74:1f:30:f3:54:5a:d7:42:4f:cf:c3:f8: 43:0b:5c:f5:0e:b3:71:e8:01:95:52:e5:30:89:65: 93:2f:d3:24:b9:85:cd:32:36:d4:b2:12:9c:87:b7: de:32:f1:7d:fb:a0:2a:c7:72:5e:97:ba:df:e0:16: 8b:37:47:35:9b:3d:32:8e:25:51:f2:2c:d9:a9:ca: 7c:e0:43:4d:e9:2b:dc:0d:c5:d6:d6:b7:f7:32:95: 09:9d:34:ae:13:ab:f0:07:33:d1:58:8c:83:f4:ad: 05:d7:c0:84:ee:aa:24:26:59:8b:f5:98:f2:e1:eb: 1f:80:6e:cc:6c:f8:92:a3:74:6b:94:e3:a2:50:38: d9:82:2d:4a:1f:42:d8:00:fe:c4:4d:72:1e:ac:36: f4:d6:2d:eb:8d:91:ad:fc:a3:e2:41:59:a0:60:3a: 71:4b:5a:5f:10:16:90:db:78:bc:4a:9b:e8:7f:4e: a9:e6:47:f8:33:82:47:2d:4d:b0:3a:90:17:b9:dd: f9:de:97:0d:0b:38:83:c4:e1:e8:bf:81:cb:08:7a: 8d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:4C:B9:1E:04:A8:F7:FB:AC:A5:AA:D3:2B:C0:39:76:16:45:6F:EE X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/243b970a-c5a9-4aea-b25f-e3ed23b04022.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.160.67.0/24 Signature Algorithm: sha256WithRSAEncryption 87:bd:45:ca:d1:5e:80:1d:24:dc:b4:98:87:c7:11:08:d2:12: 46:53:dd:b0:e8:fc:e3:01:39:c5:67:f7:50:5a:5f:52:50:f3: 9b:a8:69:d0:9c:c8:d3:8e:f7:c7:ca:10:24:4f:63:2d:95:41: b8:1d:c9:f2:5f:e2:19:eb:55:69:e3:ae:c0:9b:81:07:5f:1a: 3e:fd:29:5c:98:11:13:46:49:bd:f5:32:28:8e:14:c0:e7:55: 82:7b:06:f2:f9:f7:8d:1a:c5:b3:80:77:67:76:14:72:e6:41: 86:83:4e:43:53:61:13:13:b5:73:3d:67:e5:58:e2:85:85:71: 66:6e:ba:1d:49:41:ee:85:8a:d0:c5:fd:08:0c:e9:65:e7:f3: be:88:09:60:d5:b2:10:66:3d:90:16:5b:3d:ac:31:6b:95:f0: 6e:97:05:c9:37:87:b0:8d:2e:ef:44:4f:5f:34:a5:12:06:28: a8:ff:f5:74:3d:1e:b4:29:30:39:9f:ed:d2:57:7e:54:10:b3: f7:b2:d0:af:ae:7f:7a:89:7c:14:a7:9c:73:f3:85:f5:a1:27: 67:da:c3:af:02:b0:f2:0b:9a:7a:0f:90:ae:64:f7:57:f2:4b: c9:b1:37:82:04:85:a6:4e:3d:28:92:43:8f:c1:c2:35:e0:0e: ed:d8:11:25 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUoc0Svy46ysK36jy5pxYxZEJJFIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMTgyNTUyWhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BkZjQ5NDAxNTc1NDBiYWE0ZGQxMzViZmZiOWUwNmVkMzQ5 NTgyYmUzMGE5NTAwMDJhODcwZjA3ZTY3YzlmNWQ2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCs2hhREtHsFTY9HoLKCTiSeoPVHhBXmfNl+qB15AOmFiG3 rnuKFzOKYA6EM/WzSXQfMPNUWtdCT8/D+EMLXPUOs3HoAZVS5TCJZZMv0yS5hc0y NtSyEpyHt94y8X37oCrHcl6Xut/gFos3RzWbPTKOJVHyLNmpynzgQ03pK9wNxdbW t/cylQmdNK4Tq/AHM9FYjIP0rQXXwITuqiQmWYv1mPLh6x+Absxs+JKjdGuU46JQ ONmCLUofQtgA/sRNch6sNvTWLeuNka38o+JBWaBgOnFLWl8QFpDbeLxKm+h/Tqnm R/gzgkctTbA6kBe53fnelw0LOIPE4ei/gcsIeo1NAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUV0y5HgSo9/usparTK8A5dhZFb+4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzI0M2I5NzBhLWM1YTktNGFlYS1iMjVmLWUzZWQyM2IwNDAyMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASoEMwDQYJKoZIhvcNAQELBQADggEBAIe9RcrRXoAdJNy0mIfHEQjSEkZT 3bDo/OMBOcVn91BaX1JQ85uoadCcyNOO98fKECRPYy2VQbgdyfJf4hnrVWnjrsCb gQdfGj79KVyYERNGSb31MiiOFMDnVYJ7BvL5940axbOAd2d2FHLmQYaDTkNTYRMT tXM9Z+VY4oWFcWZuuh1JQe6FitDF/QgM6WXn876ICWDVshBmPZAWWz2sMWuV8G6X Bck3h7CNLu9ET180pRIGKKj/9XQ9HrQpMDmf7dJXflQQs/ey0K+uf3qJfBSnnHPz hfWhJ2faw68CsPILmnoPkK5k91fyS8mxN4IEhaZOPSiSQ4/BwjXgDu3YESU= -----END CERTIFICATE-----Generated at Fri Oct 17 22:15:29 2025 by rpki-client