$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6c36ac31-85a6-4b41-bc2c-084e6e80c443.roa File: 6c36ac31-85a6-4b41-bc2c-084e6e80c443.roa (raw, json) Hash identifier: eIHE4KrRLWVQabn07Zf+j1RRNvLHOqW9uIudQZ1WgEU= Subject key identifier: 29:EA:9B:7E:BA:B0:92:6F:7D:2B:76:D1:FB:B7:22:73:E3:24:8C:95 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5F4793FF6C2D6692BDBDB29D2AA2B2A8E34850B1 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6c36ac31-85a6-4b41-bc2c-084e6e80c443.roa Signing time: Mon 22 Sep 2025 20:11:13 +0000 ROA not before: Mon 22 Sep 2025 20:11:13 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.165.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:47:93:ff:6c:2d:66:92:bd:bd:b2:9d:2a:a2:b2:a8:e3:48:50:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 20:11:13 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=5f46f4bafbd8d2bebcfe7052097a56bcf2413b0e7f9a05a3364126d3b2f40c12, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ce:b1:3c:f7:88:78:98:f7:80:1a:b4:9e:d1: 2b:8d:0f:88:95:ca:cc:08:5d:eb:5c:56:98:0c:ce: 22:0c:0f:41:55:3f:31:32:e7:13:34:1e:e4:00:9b: 68:fd:d3:75:1c:b5:c7:e8:e2:fe:86:cc:91:fd:50: 53:27:87:b6:15:7d:a9:0d:c0:d3:05:22:77:d4:f3: 4e:73:12:85:de:8f:22:84:a3:f2:4b:7d:c2:97:dc: 17:db:6d:ee:ae:e7:1b:de:1c:75:dc:3a:f7:5a:79: e9:6f:1f:bd:2a:09:da:0e:b7:aa:ce:5b:de:58:da: e1:37:ff:11:5d:99:52:80:38:45:98:c3:e4:66:70: e3:81:7b:70:f7:9c:a7:f2:17:72:62:da:bd:ec:0f: db:db:4f:89:bf:17:17:6d:fe:9a:04:90:41:93:b1: bd:00:91:eb:42:4f:1c:81:4c:e1:ee:51:61:de:97: 72:0c:fb:5b:0e:ad:2d:5c:fb:a5:05:a4:28:74:45: d0:a7:3c:ee:07:39:8a:37:e7:c6:b4:64:61:11:f2: 35:3c:2b:22:ab:7c:07:9d:5f:4c:2c:bf:4d:0e:25: 41:4b:bf:d2:51:25:9d:55:20:40:e7:2c:ea:3c:29: bc:08:4e:14:36:01:50:df:e6:8a:87:a6:60:19:0f: a6:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:EA:9B:7E:BA:B0:92:6F:7D:2B:76:D1:FB:B7:22:73:E3:24:8C:95 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6c36ac31-85a6-4b41-bc2c-084e6e80c443.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.165.208.0/22 Signature Algorithm: sha256WithRSAEncryption 84:c2:4c:cf:74:ae:75:20:2e:7f:9b:30:9b:b0:aa:8b:e3:56: 3d:16:9f:49:00:ae:b5:9a:ce:9c:8f:60:44:ed:5d:1a:a3:32: 3e:e7:bc:45:25:d9:7b:67:32:02:c8:02:55:86:44:32:d7:fd: b7:65:73:c9:d0:14:90:d9:bd:d6:16:26:78:b8:3d:03:90:16: 70:99:c4:9f:63:aa:ab:19:42:98:c2:56:7e:a9:f2:c9:08:81: b8:e8:7a:7c:de:4b:9a:d6:c5:53:06:1c:10:da:92:58:a0:b1: 34:cf:f7:de:75:f3:24:d4:11:46:27:86:6c:bb:d3:d1:e1:72: b3:28:8d:d9:85:02:b6:37:a1:59:27:01:a9:e3:9b:dd:c7:af: a8:44:5f:c1:8b:b4:5c:e0:ec:f2:6e:7b:b4:66:7b:20:00:73: e3:fd:67:6a:47:bb:c3:d1:77:94:0b:36:4e:79:78:ee:09:6d: 95:49:5d:db:e7:9c:54:02:c4:13:c8:34:75:2b:47:fc:db:67: 92:e2:bb:12:bb:74:d0:45:49:c9:3e:d8:f9:84:a2:a2:a3:9b: 74:fc:22:49:96:a8:e5:6f:3f:b0:e2:95:df:8a:3d:72:a6:f0: b2:3b:6e:f0:83:a4:ed:d2:81:64:2d:90:96:17:75:05:5b:af: b1:31:97:9a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUX0eT/2wtZpK9vbKdKqKyqONIULEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjAxMTEzWhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZjQ2ZjRiYWZiZDhkMmJlYmNmZTcwNTIwOTdhNTZiY2Yy NDEzYjBlN2Y5YTA1YTMzNjQxMjZkM2IyZjQwYzEyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3zrE894h4mPeAGrSe0SuND4iVyswIXetcVpgMziIMD0FV PzEy5xM0HuQAm2j903Uctcfo4v6GzJH9UFMnh7YVfakNwNMFInfU805zEoXejyKE o/JLfcKX3Bfbbe6u5xveHHXcOvdaeelvH70qCdoOt6rOW95Y2uE3/xFdmVKAOEWY w+RmcOOBe3D3nKfyF3Ji2r3sD9vbT4m/Fxdt/poEkEGTsb0AketCTxyBTOHuUWHe l3IM+1sOrS1c+6UFpCh0RdCnPO4HOYo358a0ZGER8jU8KyKrfAedX0wsv00OJUFL v9JRJZ1VIEDnLOo8KbwIThQ2AVDf5oqHpmAZD6bXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUKeqbfrqwkm99K3bR+7cic+MkjJUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzZjMzZhYzMxLTg1YTYtNGI0MS1iYzJjLTA4NGU2ZTgwYzQ0My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAISpdAwDQYJKoZIhvcNAQELBQADggEBAITCTM90rnUgLn+bMJuwqovjVj0W n0kArrWazpyPYETtXRqjMj7nvEUl2XtnMgLIAlWGRDLX/bdlc8nQFJDZvdYWJni4 PQOQFnCZxJ9jqqsZQpjCVn6p8skIgbjoenzeS5rWxVMGHBDakligsTTP99518yTU EUYnhmy709HhcrMojdmFArY3oVknAanjm93Hr6hEX8GLtFzg7PJue7RmeyAAc+P9 Z2pHu8PRd5QLNk55eO4JbZVJXdvnnFQCxBPINHUrR/zbZ5LiuxK7dNBFSck+2PmE oqKjm3T8IkmWqOVvP7Dild+KPXKm8LI7bvCDpO3SgWQtkJYXdQVbr7Exl5o= -----END CERTIFICATE-----Generated at Fri Oct 17 22:03:26 2025 by rpki-client