$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/756a3787-ed2c-43a0-b25b-213bd7bb137b.roa File: 756a3787-ed2c-43a0-b25b-213bd7bb137b.roa (raw, json) Hash identifier: kzHATX4lsNNAwZxgUI6HV0GH50nPuQnzdh+5ZNNAY2E= Subject key identifier: F8:84:25:83:DE:65:2D:7F:E3:0A:F5:0C:1F:62:04:99:AC:38:19:1B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1493F58A7EDD902C9EED5CB44B88A0D878D5E184 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/756a3787-ed2c-43a0-b25b-213bd7bb137b.roa Signing time: Mon 22 Sep 2025 18:47:00 +0000 ROA not before: Mon 22 Sep 2025 18:47:00 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.160.192.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:93:f5:8a:7e:dd:90:2c:9e:ed:5c:b4:4b:88:a0:d8:78:d5:e1:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 18:47:00 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=72cff86daf07c5cc43e5c683db1154445970b68dec0c81606798f3b2fc23f742, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5a:e2:71:e9:8c:21:8e:51:95:21:fe:f7:9c: 0e:00:a3:2b:8d:96:f9:2f:77:7a:12:da:9d:5d:e2: d2:b9:ba:4e:a6:37:4a:b3:67:30:3a:11:e5:2c:7f: 9e:ec:eb:f1:58:b2:15:27:07:2f:bf:e1:bf:e8:09: 07:97:4a:04:db:4f:94:3a:4f:66:1c:ee:1d:3f:6b: 12:84:f8:5f:72:2f:89:a6:b9:11:ac:08:a9:e4:6c: 27:df:00:92:e3:00:dc:c0:cd:fd:b9:11:2f:ae:36: c5:e0:48:00:da:76:38:be:33:e2:ea:17:fd:fd:1a: 84:69:51:7d:16:46:7c:b6:1e:aa:7a:34:b2:5a:ae: 5c:da:22:ef:17:81:cc:46:fa:76:ca:97:14:ec:36: 4c:51:ec:65:5b:fa:e1:08:b7:c1:5a:9f:43:1b:8c: 12:f6:d7:bf:7d:d6:ce:96:2a:5d:9f:0c:f3:cc:bf: 99:a2:d1:78:1e:7a:96:7c:36:36:ba:48:d0:6c:35: 89:fc:c5:0a:a6:4d:85:a7:43:bb:f9:0d:a7:d3:fd: f4:06:80:39:aa:b2:f1:a1:1b:2a:e3:5d:d4:6d:cb: e4:2f:69:d7:3e:14:3e:ca:c3:0d:0e:fd:85:b7:e9: 70:ff:8e:d0:2f:5e:5d:5b:7b:66:14:62:f6:1a:3e: f9:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:84:25:83:DE:65:2D:7F:E3:0A:F5:0C:1F:62:04:99:AC:38:19:1B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/756a3787-ed2c-43a0-b25b-213bd7bb137b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.160.192.0/23 Signature Algorithm: sha256WithRSAEncryption 24:c1:b7:26:1a:c3:aa:23:eb:80:f4:56:f8:01:66:ca:4f:b2: 5e:5a:9a:96:08:a9:f7:b7:45:5f:c0:fa:cd:08:82:7b:f9:98: f2:23:c0:a9:cc:0f:29:f5:56:95:2c:87:f3:1f:11:bd:48:61: 3a:f4:e2:ae:c6:65:56:56:42:9e:d5:75:1c:20:c0:c2:f8:ae: bf:4f:f2:54:07:91:db:e3:26:b5:ff:29:c8:6d:e7:4c:4f:8f: fe:56:4a:f1:1f:a6:ae:6d:99:1f:de:a5:4b:eb:82:4e:44:ba: 05:d5:c4:ba:34:bf:09:80:a2:63:11:e4:a0:d2:38:88:56:d5: cd:e6:d7:83:b1:90:76:ba:f3:e6:81:7e:d8:e7:33:3a:87:73: 36:be:e0:9e:83:7d:5e:ab:ee:3d:24:ae:54:75:fa:9c:23:87: 6d:6c:1b:4d:63:05:7e:dd:c3:03:6a:df:8d:26:af:02:89:62: f2:ec:9d:35:4c:5f:93:31:11:2a:ea:35:5d:f0:e7:6b:2b:38: 8e:a0:98:e3:fd:38:5b:16:fe:18:e7:af:55:0a:f8:58:77:52: ad:26:5c:e6:8e:5d:17:8d:ef:3c:70:1a:b4:89:76:44:be:f9: 71:6e:b5:19:62:42:23:3f:c0:47:ee:1e:e9:d7:21:75:90:90: 95:de:77:49 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFJP1in7dkCye7Vy0S4ig2HjV4YQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMTg0NzAwWhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A3MmNmZjg2ZGFmMDdjNWNjNDNlNWM2ODNkYjExNTQ0NDU5 NzBiNjhkZWMwYzgxNjA2Nzk4ZjNiMmZjMjNmNzQyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDEWuJx6YwhjlGVIf73nA4AoyuNlvkvd3oS2p1d4tK5uk6m N0qzZzA6EeUsf57s6/FYshUnBy+/4b/oCQeXSgTbT5Q6T2Yc7h0/axKE+F9yL4mm uRGsCKnkbCffAJLjANzAzf25ES+uNsXgSADadji+M+LqF/39GoRpUX0WRny2Hqp6 NLJarlzaIu8XgcxG+nbKlxTsNkxR7GVb+uEIt8Fan0MbjBL217991s6WKl2fDPPM v5mi0XgeepZ8Nja6SNBsNYn8xQqmTYWnQ7v5DafT/fQGgDmqsvGhGyrjXdRty+Qv adc+FD7Kww0O/YW36XD/jtAvXl1be2YUYvYaPvlJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU+IQlg95lLX/jCvUMH2IEmaw4GRswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzc1NmEzNzg3LWVkMmMtNDNhMC1iMjViLTIxM2JkN2JiMTM3Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESoMAwDQYJKoZIhvcNAQELBQADggEBACTBtyYaw6oj64D0VvgBZspPsl5a mpYIqfe3RV/A+s0Ignv5mPIjwKnMDyn1VpUsh/MfEb1IYTr04q7GZVZWQp7VdRwg wML4rr9P8lQHkdvjJrX/Kcht50xPj/5WSvEfpq5tmR/epUvrgk5EugXVxLo0vwmA omMR5KDSOIhW1c3m14OxkHa68+aBftjnMzqHcza+4J6DfV6r7j0krlR1+pwjh21s G01jBX7dwwNq340mrwKJYvLsnTVMX5MxESrqNV3w52srOI6gmOP9OFsW/hjnr1UK +Fh3Uq0mXOaOXReN7zxwGrSJdkS++XFutRliQiM/wEfuHunXIXWQkJXed0k= -----END CERTIFICATE-----Generated at Fri Oct 17 21:55:33 2025 by rpki-client