$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/45a4ab25-be1a-437c-8830-06ddb770f6c8.roa File: 45a4ab25-be1a-437c-8830-06ddb770f6c8.roa (raw, json) Hash identifier: cF9gSAXPesx0MOXEBCxbgoFj7th/rka5GblNkKYvBrs= Subject key identifier: 82:1A:47:52:1D:97:06:DD:CD:E9:ED:4F:04:E8:21:E9:DB:95:2C:8C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 32F4678B8C3589EB7B6851619CBE38C2C1BFBABA Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/45a4ab25-be1a-437c-8830-06ddb770f6c8.roa Signing time: Mon 22 Sep 2025 18:51:57 +0000 ROA not before: Mon 22 Sep 2025 18:51:57 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.160.80.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:f4:67:8b:8c:35:89:eb:7b:68:51:61:9c:be:38:c2:c1:bf:ba:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 18:51:57 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=acbb3c053c24659ad80f3aa0f35c1c56221c756642961891366852e8ebe4c859, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a0:b9:bd:a8:61:e5:e3:54:c3:af:88:f0:9d: 30:5d:1c:e6:58:dc:5a:e9:68:d2:24:22:52:7d:87: 29:ab:8f:ac:63:e6:ac:5a:f0:20:63:9e:a7:fa:5d: 4f:d3:b3:c5:06:b5:6e:70:d7:6e:7c:7d:f7:c5:7a: 9b:6f:ce:8e:81:20:c4:ff:87:12:15:84:02:e2:ac: 0d:47:30:34:a8:28:6a:3f:86:d0:40:95:7b:c4:f2: 8b:2d:82:1e:b0:17:6a:15:ad:cf:d8:a3:af:1b:2d: 17:ec:e8:1d:c6:f5:56:13:67:3b:07:bc:53:05:06: ce:01:fa:40:67:0a:d9:c8:98:58:9e:bc:fd:dd:71: 02:0f:0a:ab:5f:4f:62:ba:aa:f7:50:7b:6e:7a:19: 65:11:bf:e9:df:4c:ee:ac:12:f1:0c:e6:39:1d:16: 52:f1:f5:5b:b7:9e:8a:e4:19:a7:6e:b1:b6:e7:d0: c6:6b:e2:bc:c6:13:b2:8f:2c:c7:64:fe:36:d2:52: 21:21:10:36:10:19:06:79:56:c7:ab:dd:aa:b1:b0: 42:61:e1:5e:30:f4:82:41:45:04:62:58:cd:d6:0d: e1:2d:3b:69:5d:e0:85:86:ca:01:b0:7f:7a:a1:ee: 22:4a:10:2d:db:5a:a3:d7:b0:16:f9:e9:f9:5e:cd: e9:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:1A:47:52:1D:97:06:DD:CD:E9:ED:4F:04:E8:21:E9:DB:95:2C:8C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/45a4ab25-be1a-437c-8830-06ddb770f6c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.160.80.0/23 Signature Algorithm: sha256WithRSAEncryption 4d:c3:0a:13:b1:04:ea:10:6a:85:04:aa:74:bc:8d:61:3d:b3: ac:d6:af:be:a3:04:65:2e:38:c2:7d:1a:22:9c:59:2c:5b:8d: 4a:f3:6c:05:a0:9f:1e:d2:07:0a:45:8e:90:e1:1b:e0:04:d0: c9:06:17:fd:c9:2c:00:e5:7d:a5:8f:99:bb:5f:1b:4e:15:7f: c0:c9:66:d7:f0:c4:45:24:64:38:3d:35:1e:44:52:89:8d:cb: 40:62:d3:f6:67:35:58:56:dc:6f:22:8a:d3:9a:64:f8:16:83: 4d:ef:52:00:f3:3c:3d:8c:88:c7:e4:24:f2:67:15:ef:3f:58: d0:4a:f5:32:9e:59:bb:83:b3:60:55:e2:04:71:18:3e:b4:54: 3d:d9:50:b7:64:e6:50:2e:d5:44:0a:fa:52:d2:1c:15:e5:82: 02:4c:f9:31:fe:bd:26:5c:a6:99:a2:49:67:0b:7f:cb:c6:08: 69:09:01:76:f4:3a:37:6a:e9:1b:97:b1:d4:62:48:a4:dc:15: ac:14:f3:54:40:24:7b:a5:62:3b:55:06:01:4d:44:e6:86:aa: b1:f3:ac:b1:94:d9:93:5e:d5:97:d6:8b:bd:ec:a1:64:1f:42: 2e:63:f5:58:52:07:ec:5f:52:b6:b7:30:3f:28:ab:9f:a1:bf: 07:8e:36:be -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMvRni4w1iet7aFFhnL44wsG/urowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMTg1MTU3WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BhY2JiM2MwNTNjMjQ2NTlhZDgwZjNhYTBmMzVjMWM1NjIy MWM3NTY2NDI5NjE4OTEzNjY4NTJlOGViZTRjODU5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCToLm9qGHl41TDr4jwnTBdHOZY3FrpaNIkIlJ9hymrj6xj 5qxa8CBjnqf6XU/Ts8UGtW5w1258fffFeptvzo6BIMT/hxIVhALirA1HMDSoKGo/ htBAlXvE8ostgh6wF2oVrc/Yo68bLRfs6B3G9VYTZzsHvFMFBs4B+kBnCtnImFie vP3dcQIPCqtfT2K6qvdQe256GWURv+nfTO6sEvEM5jkdFlLx9Vu3norkGadusbbn 0MZr4rzGE7KPLMdk/jbSUiEhEDYQGQZ5Vser3aqxsEJh4V4w9IJBRQRiWM3WDeEt O2ld4IWGygGwf3qh7iJKEC3bWqPXsBb56flezekxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUghpHUh2XBt3N6e1PBOgh6duVLIwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQ1YTRhYjI1LWJlMWEtNDM3Yy04ODMwLTA2ZGRiNzcwZjZjOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESoFAwDQYJKoZIhvcNAQELBQADggEBAE3DChOxBOoQaoUEqnS8jWE9s6zW r76jBGUuOMJ9GiKcWSxbjUrzbAWgnx7SBwpFjpDhG+AE0MkGF/3JLADlfaWPmbtf G04Vf8DJZtfwxEUkZDg9NR5EUomNy0Bi0/ZnNVhW3G8iitOaZPgWg03vUgDzPD2M iMfkJPJnFe8/WNBK9TKeWbuDs2BV4gRxGD60VD3ZULdk5lAu1UQK+lLSHBXlggJM +TH+vSZcppmiSWcLf8vGCGkJAXb0Ojdq6RuXsdRiSKTcFawU81RAJHulYjtVBgFN ROaGqrHzrLGU2ZNe1ZfWi73soWQfQi5j9VhSB+xfUra3MD8oq5+hvweONr4= -----END CERTIFICATE-----Generated at Fri Oct 17 22:19:22 2025 by rpki-client