$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/377266ef-5e89-46f7-83d9-e7b1bd025e20.roa File: 377266ef-5e89-46f7-83d9-e7b1bd025e20.roa (raw, json) Hash identifier: 5WDGIsHzZtw1U4dDpb/lzdIeulHhWr8CuMp5robaEzg= Subject key identifier: A4:EC:B9:4F:DD:20:B5:16:05:B0:EE:DB:E2:EB:C0:A1:2F:2E:24:53 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0B4DB8E76388B6EFDC0BF392010B1C7552FAE711 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/377266ef-5e89-46f7-83d9-e7b1bd025e20.roa Signing time: Mon 22 Sep 2025 19:13:12 +0000 ROA not before: Mon 22 Sep 2025 19:13:12 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.160.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:4d:b8:e7:63:88:b6:ef:dc:0b:f3:92:01:0b:1c:75:52:fa:e7:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 19:13:12 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=c977b2d7c67e01c3f98d48c6053b4dccef1d020c7f70983f49a91bb5fdf8fa45, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:13:cf:5e:7d:64:e4:29:78:71:ad:cf:cf:d6: d0:aa:47:95:13:2b:9d:f1:60:2b:7e:32:c6:7d:5d: 07:83:93:85:42:31:c4:cc:14:f4:5b:b7:1d:43:26: 27:bb:65:40:36:59:0f:09:09:5e:b3:c3:35:bb:65: 06:01:9a:45:d0:cd:0d:67:a7:d5:39:10:ea:d5:6a: db:b4:78:94:bf:a1:82:41:ad:bb:19:3b:8a:24:5d: 13:9b:fd:7d:ca:60:64:cd:db:82:18:ee:db:98:8b: 36:f6:ce:18:f0:71:a8:68:c8:fe:6a:2a:7f:d4:36: 81:a0:1a:02:03:24:cc:9a:a5:00:23:bb:98:c0:4f: 00:14:69:78:dd:8c:20:3f:17:1e:09:79:86:f5:0b: 52:d4:a8:56:ca:32:88:0e:76:1f:c9:eb:13:6e:b3: dc:f5:45:90:5e:30:20:a1:4e:ae:07:40:f3:c2:a5: 9e:19:bd:37:c7:33:eb:dd:fe:07:19:da:23:08:7e: e1:31:31:10:5b:88:04:14:64:6d:e8:17:d2:ed:ad: 47:84:da:bd:1a:45:d6:ed:02:84:91:6b:24:30:4c: 1a:f0:da:b0:4f:2b:b3:42:07:7a:fe:98:09:89:a6: 15:f5:85:2f:42:61:41:f0:55:be:85:89:7c:2a:35: 5d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:EC:B9:4F:DD:20:B5:16:05:B0:EE:DB:E2:EB:C0:A1:2F:2E:24:53 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/377266ef-5e89-46f7-83d9-e7b1bd025e20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.160.64.0/20 Signature Algorithm: sha256WithRSAEncryption 43:b0:ce:10:cb:53:7b:5b:90:5b:07:12:5e:6e:22:97:d9:b8: c8:57:9f:57:8d:2d:f2:d6:85:9b:58:6e:45:20:9f:a4:48:cf: 80:30:4c:a2:0d:64:07:1d:fe:52:8d:67:1c:5c:63:ec:40:ae: 3f:ff:ee:21:a1:74:9e:cf:18:9f:27:93:ce:aa:76:f2:95:c9: ba:12:7f:df:33:6d:ba:b0:0d:9e:d7:45:51:f2:ab:14:c7:a1: 4a:97:e2:11:3a:90:8c:87:7a:d5:c5:86:e7:37:c3:7e:0b:f8: 51:20:86:30:0f:c7:c9:d0:b3:d5:cb:32:d1:30:f5:4c:69:0a: 4c:c6:d7:a7:91:d1:eb:00:7e:57:d4:30:e2:66:8e:e7:85:22: 70:1e:27:0a:d7:71:4f:37:ff:5e:89:c8:83:48:b2:3c:7e:8a: 11:87:31:a5:2c:44:bb:1e:d1:47:50:aa:ae:62:24:6a:c3:36: 29:85:61:d7:2e:1c:ca:3d:88:6c:bb:db:cc:82:b4:b3:e7:9e: 66:3a:ea:6d:cf:bf:f0:f0:42:b0:c7:30:5a:1c:1d:35:65:f0: c4:66:ff:e6:8f:69:1b:0d:07:c0:34:c2:a9:02:1d:da:38:f9: e6:73:b6:46:04:b4:20:4e:71:b8:31:42:2e:1a:54:f3:4f:a8: 4e:d0:c1:d5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUC02452OItu/cC/OSAQscdVL65xEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMTkxMzEyWhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BjOTc3YjJkN2M2N2UwMWMzZjk4ZDQ4YzYwNTNiNGRjY2Vm MWQwMjBjN2Y3MDk4M2Y0OWE5MWJiNWZkZjhmYTQ1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKE89efWTkKXhxrc/P1tCqR5UTK53xYCt+MsZ9XQeDk4VC McTMFPRbtx1DJie7ZUA2WQ8JCV6zwzW7ZQYBmkXQzQ1np9U5EOrVatu0eJS/oYJB rbsZO4okXROb/X3KYGTN24IY7tuYizb2zhjwcahoyP5qKn/UNoGgGgIDJMyapQAj u5jATwAUaXjdjCA/Fx4JeYb1C1LUqFbKMogOdh/J6xNus9z1RZBeMCChTq4HQPPC pZ4ZvTfHM+vd/gcZ2iMIfuExMRBbiAQUZG3oF9LtrUeE2r0aRdbtAoSRayQwTBrw 2rBPK7NCB3r+mAmJphX1hS9CYUHwVb6FiXwqNV3jAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUpOy5T90gtRYFsO7b4uvAoS8uJFMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzM3NzI2NmVmLTVlODktNDZmNy04M2Q5LWU3YjFiZDAyNWUyMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQSoEAwDQYJKoZIhvcNAQELBQADggEBAEOwzhDLU3tbkFsHEl5uIpfZuMhX n1eNLfLWhZtYbkUgn6RIz4AwTKINZAcd/lKNZxxcY+xArj//7iGhdJ7PGJ8nk86q dvKVyboSf98zbbqwDZ7XRVHyqxTHoUqX4hE6kIyHetXFhuc3w34L+FEghjAPx8nQ s9XLMtEw9UxpCkzG16eR0esAflfUMOJmjueFInAeJwrXcU83/16JyINIsjx+ihGH MaUsRLse0UdQqq5iJGrDNimFYdcuHMo9iGy728yCtLPnnmY66m3Pv/DwQrDHMFoc HTVl8MRm/+aPaRsNB8A0wqkCHdo4+eZztkYEtCBOcbgxQi4aVPNPqE7QwdU= -----END CERTIFICATE-----Generated at Fri Oct 17 22:17:57 2025 by rpki-client