$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/37538ce2-787e-48df-8749-2d589d7dd16f.roa File: 37538ce2-787e-48df-8749-2d589d7dd16f.roa (raw, json) Hash identifier: rCMk4At8rlMNZhwvNgBuHE7oi38MRp7Wu6BIcVyZozg= Subject key identifier: B5:DB:46:E5:81:4D:76:7B:59:DC:19:81:63:6D:6B:CB:80:51:A4:3A Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6C42B867947F3DC4B3BEB847AAD27A90C02E838B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/37538ce2-787e-48df-8749-2d589d7dd16f.roa Signing time: Mon 22 Sep 2025 18:29:42 +0000 ROA not before: Mon 22 Sep 2025 18:29:42 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.161.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:42:b8:67:94:7f:3d:c4:b3:be:b8:47:aa:d2:7a:90:c0:2e:83:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 18:29:42 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=bd4ca58a71adda897b4b1cd663469ad24b40487f45b1fcee03c7534b196c1907, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:5b:af:10:f6:fe:65:f2:b2:a8:ef:82:88:b2: 96:31:10:73:02:16:41:2e:94:ca:53:0b:4c:f7:d4: 66:87:02:31:c5:a4:48:55:4b:84:06:ea:e1:b0:b9: 88:cf:67:f5:ae:c9:e6:80:59:67:68:12:be:2e:fa: 70:dd:58:00:73:27:f6:34:d4:a7:94:60:16:03:25: 76:ad:7e:cd:32:4e:1b:c7:f6:e5:87:5b:73:10:2b: 15:77:d1:50:92:94:34:13:84:a1:f8:59:a3:eb:88: ee:bf:d5:ed:6e:b5:29:02:1f:75:36:bd:42:f5:31: 5c:f7:2f:28:48:0f:d7:97:f3:7b:98:44:c7:c7:e6: 7c:7d:f3:f0:8f:9d:77:4e:4a:ac:d3:36:93:b3:32: 45:d0:76:73:3d:a8:c3:d4:30:ce:74:e3:df:22:49: b0:7c:66:3e:ff:30:7a:4c:20:9a:77:77:a5:f1:ac: 04:8f:9d:32:9e:e4:e3:b6:48:04:dc:8a:4b:87:77: 22:81:eb:32:f3:f0:6e:03:87:a2:cb:5d:5d:5c:a2: 78:c2:ce:d9:fc:9b:66:aa:0e:22:ba:53:68:ff:8e: ba:ba:f5:e1:a8:ae:64:60:b8:f0:c4:9e:40:a0:88: b4:97:19:32:e5:49:56:40:ba:a4:69:3d:27:2e:77: 1e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:DB:46:E5:81:4D:76:7B:59:DC:19:81:63:6D:6B:CB:80:51:A4:3A X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/37538ce2-787e-48df-8749-2d589d7dd16f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.161.120.0/24 Signature Algorithm: sha256WithRSAEncryption 71:d0:75:86:e0:37:a0:a2:81:f3:c2:ba:67:38:6e:e6:af:d7: 92:bb:c2:b7:fa:df:1f:9a:2f:6e:b9:23:4f:86:85:13:57:44: 4e:a8:1f:5b:ed:c1:f7:66:3e:61:8c:ec:6e:a6:35:14:63:ad: 23:12:69:08:1e:a4:65:90:cc:44:0a:90:a9:a5:31:70:5f:37: 6c:ac:d6:25:fc:78:dc:28:3d:bc:ac:ba:7e:16:14:23:f9:d3: 59:3e:76:ca:4f:61:40:25:91:71:7f:70:74:e3:39:02:9e:91: 16:59:81:42:25:16:5b:34:e9:a0:a7:36:18:d1:3d:24:15:57: 47:54:68:16:c9:59:38:c5:96:9d:76:76:6c:76:ae:fa:8a:40: 78:f1:20:c1:6b:4d:2f:f8:c3:6e:df:1f:ec:80:e9:80:26:cb: fb:82:b9:0e:e2:aa:56:4e:25:0b:26:f7:11:e0:76:56:6e:8c: 59:59:b0:f0:49:c9:8d:ed:e7:ab:89:cb:f2:20:8d:61:fc:a1: f4:67:bc:ac:f7:96:75:c7:b1:4a:ed:c7:e8:77:d7:33:3e:45: 93:79:60:e7:5f:07:ba:6b:3c:81:01:f2:26:80:ef:66:d4:5e: 93:5d:4e:fe:06:b0:16:d6:c1:8c:fe:28:7c:d0:54:97:fd:7d: 1a:d0:84:ee -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbEK4Z5R/PcSzvrhHqtJ6kMAug4swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMTgyOTQyWhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BiZDRjYTU4YTcxYWRkYTg5N2I0YjFjZDY2MzQ2OWFkMjRi NDA0ODdmNDViMWZjZWUwM2M3NTM0YjE5NmMxOTA3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCfW68Q9v5l8rKo74KIspYxEHMCFkEulMpTC0z31GaHAjHF pEhVS4QG6uGwuYjPZ/WuyeaAWWdoEr4u+nDdWABzJ/Y01KeUYBYDJXatfs0yThvH 9uWHW3MQKxV30VCSlDQThKH4WaPriO6/1e1utSkCH3U2vUL1MVz3LyhID9eX83uY RMfH5nx98/CPnXdOSqzTNpOzMkXQdnM9qMPUMM50498iSbB8Zj7/MHpMIJp3d6Xx rASPnTKe5OO2SATcikuHdyKB6zLz8G4Dh6LLXV1conjCztn8m2aqDiK6U2j/jrq6 9eGormRguPDEnkCgiLSXGTLlSVZAuqRpPScudx4XAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUtdtG5YFNdntZ3BmBY21ry4BRpDowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzM3NTM4Y2UyLTc4N2UtNDhkZi04NzQ5LTJkNTg5ZDdkZDE2Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASoXgwDQYJKoZIhvcNAQELBQADggEBAHHQdYbgN6CigfPCumc4buav15K7 wrf63x+aL265I0+GhRNXRE6oH1vtwfdmPmGM7G6mNRRjrSMSaQgepGWQzEQKkKml MXBfN2ys1iX8eNwoPbysun4WFCP501k+dspPYUAlkXF/cHTjOQKekRZZgUIlFls0 6aCnNhjRPSQVV0dUaBbJWTjFlp12dmx2rvqKQHjxIMFrTS/4w27fH+yA6YAmy/uC uQ7iqlZOJQsm9xHgdlZujFlZsPBJyY3t56uJy/IgjWH8ofRnvKz3lnXHsUrtx+h3 1zM+RZN5YOdfB7prPIEB8iaA72bUXpNdTv4GsBbWwYz+KHzQVJf9fRrQhO4= -----END CERTIFICATE-----Generated at Sat Oct 18 05:09:21 2025 by rpki-client