$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2ca3a532-0729-45d3-ac04-8822b4e66ed2.roa File: 2ca3a532-0729-45d3-ac04-8822b4e66ed2.roa (raw, json) Hash identifier: 6uwcqFb6JK0Lt+QMpBaDNFn0egWJ4tkNI6o1/E36h3c= Subject key identifier: FD:3B:40:EF:07:0F:B6:13:09:42:77:FC:A7:0F:50:8C:1C:30:E1:27 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6A846923F0B4F7AD89F7E29F46EF3E6784A50D5D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2ca3a532-0729-45d3-ac04-8822b4e66ed2.roa Signing time: Mon 22 Sep 2025 19:13:21 +0000 ROA not before: Mon 22 Sep 2025 19:13:21 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.161.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:84:69:23:f0:b4:f7:ad:89:f7:e2:9f:46:ef:3e:67:84:a5:0d:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 19:13:21 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=8fb855c947b6f31915ae89815f94c03aa035d43d218ef002a504f1ab98f1c210, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:bb:0a:d0:d3:72:91:5b:61:2d:09:0f:c8:ed: cb:54:35:ea:37:45:99:68:20:a8:f7:20:cb:82:45: a0:59:1b:9d:c9:f2:e1:72:aa:7e:a7:85:3c:f2:96: c3:9e:d9:99:83:44:e1:53:f6:d4:99:94:f3:9d:21: 1d:27:d1:ac:c5:97:41:7f:f9:38:01:ba:96:8e:56: d8:1d:be:8d:9c:51:8d:47:3b:00:17:cd:ca:f2:e2: 99:ad:64:ec:47:39:36:dc:9e:37:59:bb:04:3b:dc: 19:d1:07:76:c7:78:f0:45:c0:96:06:96:f4:ad:c4: a8:52:dd:90:73:1c:fe:47:11:a1:00:76:a3:02:e3: 15:ee:db:47:4e:b9:e2:a6:1c:73:29:74:c6:b6:03: d5:08:42:55:65:ae:60:ea:29:25:67:6a:8a:d3:99: c7:c0:4d:7b:6f:a2:b7:56:92:98:d0:3c:d7:0b:f5: ac:d6:8e:61:4a:c3:df:cd:e9:6a:06:40:33:38:4b: 81:e4:2a:4e:92:af:f7:c6:59:74:6f:d5:ba:a6:88: e6:55:42:8b:db:d6:07:6a:23:6e:44:e7:77:90:de: ff:87:e7:59:15:0a:af:12:f4:4a:2d:c2:3a:fd:d9: 8d:fb:91:6b:e0:4a:2f:f0:40:0c:98:d4:a2:1f:72: 6d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:3B:40:EF:07:0F:B6:13:09:42:77:FC:A7:0F:50:8C:1C:30:E1:27 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2ca3a532-0729-45d3-ac04-8822b4e66ed2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.161.16.0/20 Signature Algorithm: sha256WithRSAEncryption 26:ef:6f:ef:56:fd:33:9f:83:3b:57:26:fa:85:02:e3:52:9f: 45:49:a6:7f:90:22:3a:49:7c:8f:dd:b6:00:b6:55:91:eb:ae: 0e:51:9b:f6:16:8d:ca:42:62:54:88:99:28:c8:bc:04:2b:2c: 94:ee:7d:ee:14:37:bc:fc:1e:32:19:2c:1f:ea:90:fd:b8:5b: 89:81:e7:70:14:3f:2c:2e:1b:1d:af:23:bd:d6:9a:58:a2:55: e0:d2:17:84:fa:08:72:b4:4c:81:16:09:df:4b:b8:ed:10:cb: f0:3a:29:c4:c0:3b:7e:96:e3:2e:5f:7f:38:97:ad:4c:29:84: ef:38:d7:74:ef:48:01:1c:0b:57:30:54:dc:9b:58:9e:6c:95: 11:4c:ee:2c:3b:cb:90:71:bc:e2:d3:8f:18:22:e1:d3:79:a6: 08:2f:4a:8f:3e:88:5d:ae:38:9f:6e:0a:29:db:e1:bf:3c:e3: b5:c2:ab:83:13:10:bc:d1:39:33:18:4a:15:c2:4a:57:20:d9: e0:7d:bc:46:66:e8:8c:a6:d6:fa:99:76:7e:42:f0:f6:a8:ed: 93:14:6c:db:c2:1c:92:05:a4:fa:9b:87:28:1a:76:5d:8d:95: d1:00:21:ad:08:41:9a:c2:43:9d:0b:a5:0d:c0:14:63:36:f2: 1e:e1:80:4c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUaoRpI/C0962J9+KfRu8+Z4SlDV0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMTkxMzIxWhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZmI4NTVjOTQ3YjZmMzE5MTVhZTg5ODE1Zjk0YzAzYWEw MzVkNDNkMjE4ZWYwMDJhNTA0ZjFhYjk4ZjFjMjEwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCeuwrQ03KRW2EtCQ/I7ctUNeo3RZloIKj3IMuCRaBZG53J 8uFyqn6nhTzylsOe2ZmDROFT9tSZlPOdIR0n0azFl0F/+TgBupaOVtgdvo2cUY1H OwAXzcry4pmtZOxHOTbcnjdZuwQ73BnRB3bHePBFwJYGlvStxKhS3ZBzHP5HEaEA dqMC4xXu20dOueKmHHMpdMa2A9UIQlVlrmDqKSVnaorTmcfATXtvordWkpjQPNcL 9azWjmFKw9/N6WoGQDM4S4HkKk6Sr/fGWXRv1bqmiOZVQovb1gdqI25E53eQ3v+H 51kVCq8S9Eotwjr92Y37kWvgSi/wQAyY1KIfcm1XAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU/TtA7wcPthMJQnf8pw9QjBww4ScwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzJjYTNhNTMyLTA3MjktNDVkMy1hYzA0LTg4MjJiNGU2NmVkMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQSoRAwDQYJKoZIhvcNAQELBQADggEBACbvb+9W/TOfgztXJvqFAuNSn0VJ pn+QIjpJfI/dtgC2VZHrrg5Rm/YWjcpCYlSImSjIvAQrLJTufe4UN7z8HjIZLB/q kP24W4mB53AUPywuGx2vI73WmliiVeDSF4T6CHK0TIEWCd9LuO0Qy/A6KcTAO36W 4y5ffziXrUwphO8413TvSAEcC1cwVNybWJ5slRFM7iw7y5BxvOLTjxgi4dN5pggv So8+iF2uOJ9uCinb4b8847XCq4MTELzROTMYShXCSlcg2eB9vEZm6Iym1vqZdn5C 8Pao7ZMUbNvCHJIFpPqbhygadl2NldEAIa0IQZrCQ50LpQ3AFGM28h7hgEw= -----END CERTIFICATE-----Generated at Sat Oct 18 05:09:28 2025 by rpki-client