$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2766467f-d3a1-40c7-9aec-c5bbf0c8768f.roa File: 2766467f-d3a1-40c7-9aec-c5bbf0c8768f.roa (raw, json) Hash identifier: 9Rc1AQqxenRlQsSq1+nGFZfFy7Kh0kzBVelWda8HaOY= Subject key identifier: 2A:C0:CD:4F:19:18:C7:E5:66:84:CF:C4:14:CE:45:A1:BB:B9:C6:69 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0971AF5C1301C6291D776BA92ECC20F94ED95CCF Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2766467f-d3a1-40c7-9aec-c5bbf0c8768f.roa Signing time: Mon 22 Sep 2025 20:21:52 +0000 ROA not before: Mon 22 Sep 2025 20:21:52 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.165.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:71:af:5c:13:01:c6:29:1d:77:6b:a9:2e:cc:20:f9:4e:d9:5c:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 20:21:52 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=168c5733090de87bbc7a425aebfbedc2a4de439cc9816cfba6de6f0ae541d44c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:6e:e5:7b:1c:a9:41:10:9b:97:e0:15:34:57: 05:2c:4a:c0:29:92:01:db:f3:cd:38:ee:38:4d:9c: 5f:3c:33:ab:eb:53:7c:30:f4:18:fc:94:84:5c:76: 30:80:16:5e:35:ce:60:f1:f3:82:c6:71:d5:c9:60: e4:9b:11:dc:14:b5:22:8f:2f:e5:f1:21:f1:fc:7f: d9:9f:c6:54:3e:0e:12:05:d6:29:0b:87:c6:74:c3: df:24:31:8a:12:1b:c6:9b:8e:73:33:3a:37:2d:80: f9:cc:15:cb:4c:4b:6a:f9:cf:43:a0:bb:11:08:3b: fa:99:47:c3:7f:91:16:1f:42:be:6a:66:2d:32:60: 58:49:a1:95:13:0c:98:10:0b:9d:35:3d:4d:05:eb: 48:34:5f:fc:d5:7c:e7:8d:e5:ef:04:c3:21:a6:21: 00:5d:53:4f:87:ab:02:6b:52:f8:ec:ba:cf:12:21: 5d:83:01:66:4b:59:ec:7d:6d:20:6a:20:eb:9b:c3: 0c:1b:87:79:84:53:79:39:cb:3f:42:44:ec:fb:08: 5f:70:b4:0a:39:d9:e9:04:be:c0:9d:1f:ba:18:ec: 36:cc:3a:6f:5c:39:76:fe:a7:a6:1b:b2:21:67:30: 94:be:d7:c9:eb:f4:89:fd:62:b8:05:21:9e:9d:4d: a2:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:C0:CD:4F:19:18:C7:E5:66:84:CF:C4:14:CE:45:A1:BB:B9:C6:69 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2766467f-d3a1-40c7-9aec-c5bbf0c8768f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.165.0.0/17 Signature Algorithm: sha256WithRSAEncryption 0f:31:61:b0:06:97:0d:b4:fb:11:42:aa:30:69:f8:3d:f3:01: 9d:2d:77:60:3e:84:5a:91:2a:0a:33:c5:b4:31:89:a3:52:51: 16:b7:95:fe:99:7c:49:98:af:ea:80:96:9d:e9:b4:ba:21:bf: b7:35:d1:c8:7a:4e:62:e2:10:5a:df:0f:5a:60:b0:43:4e:84: 25:bf:32:4d:74:bd:07:c6:81:47:81:94:e9:f7:d7:45:8c:64: 94:f6:e4:f7:f9:ee:b0:2f:cf:3b:02:cf:c4:70:7a:14:1e:e9: 7e:a0:6f:27:47:6b:6a:52:28:6a:de:bd:27:e7:40:e9:3e:a9: 75:88:46:06:67:3a:1f:5a:ce:46:f1:f7:01:d4:af:ea:ee:8b: b4:9a:79:cc:27:fb:45:27:15:1f:10:27:ee:fa:52:50:90:52: 59:34:0a:7b:39:8a:00:dd:8b:00:df:df:16:a5:49:41:8d:e3: 48:bb:d1:bc:2c:7e:2c:89:fd:fc:ae:40:ca:ef:d6:f6:12:dc: f0:5d:c6:04:90:48:9d:ee:76:0a:63:d2:b9:47:91:bc:0b:83: e5:62:56:74:55:71:90:36:58:b3:af:b9:46:1b:2c:25:8b:6e: 98:34:4d:1b:89:b5:89:80:3c:bd:30:65:27:d9:1d:f2:e3:73: 08:27:3f:47 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCXGvXBMBxikdd2upLswg+U7ZXM8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjAyMTUyWhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AxNjhjNTczMzA5MGRlODdiYmM3YTQyNWFlYmZiZWRjMmE0 ZGU0MzljYzk4MTZjZmJhNmRlNmYwYWU1NDFkNDRjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDkbuV7HKlBEJuX4BU0VwUsSsApkgHb88047jhNnF88M6vr U3ww9Bj8lIRcdjCAFl41zmDx84LGcdXJYOSbEdwUtSKPL+XxIfH8f9mfxlQ+DhIF 1ikLh8Z0w98kMYoSG8abjnMzOjctgPnMFctMS2r5z0OguxEIO/qZR8N/kRYfQr5q Zi0yYFhJoZUTDJgQC501PU0F60g0X/zVfOeN5e8EwyGmIQBdU0+HqwJrUvjsus8S IV2DAWZLWex9bSBqIOubwwwbh3mEU3k5yz9CROz7CF9wtAo52ekEvsCdH7oY7DbM Om9cOXb+p6YbsiFnMJS+18nr9In9YrgFIZ6dTaJJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUKsDNTxkYx+VmhM/EFM5Fobu5xmkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzI3NjY0NjdmLWQzYTEtNDBjNy05YWVjLWM1YmJmMGM4NzY4Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcSpQAwDQYJKoZIhvcNAQELBQADggEBAA8xYbAGlw20+xFCqjBp+D3zAZ0t d2A+hFqRKgozxbQxiaNSURa3lf6ZfEmYr+qAlp3ptLohv7c10ch6TmLiEFrfD1pg sENOhCW/Mk10vQfGgUeBlOn310WMZJT25Pf57rAvzzsCz8RwehQe6X6gbydHa2pS KGrevSfnQOk+qXWIRgZnOh9azkbx9wHUr+rui7Saecwn+0UnFR8QJ+76UlCQUlk0 Cns5igDdiwDf3xalSUGN40i70bwsfiyJ/fyuQMrv1vYS3PBdxgSQSJ3udgpj0rlH kbwLg+ViVnRVcZA2WLOvuUYbLCWLbpg0TRuJtYmAPL0wZSfZHfLjcwgnP0c= -----END CERTIFICATE-----Generated at Sat Oct 18 00:00:12 2025 by rpki-client