$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/815e98da-bfe3-4ae6-bceb-7b3424854c2b.roa File: 815e98da-bfe3-4ae6-bceb-7b3424854c2b.roa (raw, json) Hash identifier: Ad7u/uaPXVp7Zmiv00RuN04j0rW4HzWyqn7SjHtzkMo= Subject key identifier: 56:1B:B2:41:1C:61:4E:6E:5F:69:F4:39:A3:5F:4E:A6:4E:AF:FE:1E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4B8C1661838F094C77C53D1F7AE1215ED2B1F545 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/815e98da-bfe3-4ae6-bceb-7b3424854c2b.roa Signing time: Mon 22 Sep 2025 20:26:16 +0000 ROA not before: Mon 22 Sep 2025 20:26:16 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.172.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:8c:16:61:83:8f:09:4c:77:c5:3d:1f:7a:e1:21:5e:d2:b1:f5:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 20:26:16 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=7f44858437531a9aabd1c88238d2c6b4bf057b71236e89e9c45d7e0d685536ad, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:8b:a8:7f:c0:83:92:54:5d:a3:32:c4:ad:e0: da:94:a1:ab:08:da:47:cb:32:07:e0:b5:11:f1:24: d5:b6:ea:4f:e7:c5:1a:be:ea:bb:23:e7:f1:6e:c5: e5:03:68:24:38:a1:2f:0d:ab:20:10:2b:4d:e2:93: fd:74:ac:dd:50:35:4b:c4:ee:ea:79:08:fb:11:05: b5:bb:b6:90:79:af:70:4d:02:8b:1a:0e:30:d2:8d: fa:8b:7f:17:76:eb:8b:cf:c0:1b:3e:7d:87:25:45: 0a:74:45:37:70:e8:93:8a:a3:de:c1:9c:3b:22:62: bb:c3:3c:50:77:8a:e8:02:4c:78:dd:5a:40:32:04: 1a:79:53:71:d3:a3:90:2c:f8:fa:2d:2c:96:e2:df: d6:3a:c2:b9:69:f6:dd:25:8d:5a:bc:75:b3:a0:70: 73:32:29:e2:a4:0b:2f:9a:f4:d7:bc:56:cf:99:7a: b2:d3:82:ae:48:7e:11:2a:7a:d0:ce:74:1e:86:70: f6:9a:b4:b3:39:a1:a7:90:9e:3c:4f:7c:97:8b:d6: c7:82:a6:cd:bb:bc:1a:6e:22:93:cb:05:d0:09:5b: 74:4a:ec:f7:a0:98:b2:e8:d3:55:cb:ce:67:6f:cb: 5c:79:60:d4:38:b9:b0:60:51:41:4a:c6:70:96:44: 45:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:1B:B2:41:1C:61:4E:6E:5F:69:F4:39:A3:5F:4E:A6:4E:AF:FE:1E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/815e98da-bfe3-4ae6-bceb-7b3424854c2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.172.160.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:d3:9b:64:46:56:19:e4:31:d9:95:19:be:8b:f2:10:9b:a9: 57:2a:1a:4f:57:eb:09:50:5a:78:11:46:a6:19:3e:57:33:5d: 45:da:f1:60:83:b1:3c:7b:85:1b:c7:92:c1:01:89:dd:83:6c: 6e:ee:92:19:f1:bf:d2:54:07:50:ea:4f:0f:4d:d1:14:77:21: dc:6f:13:88:dc:17:7e:ff:85:30:4b:3b:bd:9c:1d:e8:7e:73: 59:06:a1:61:ba:34:86:69:bc:29:0b:ad:78:be:44:91:c4:41: 58:96:57:52:89:4e:ea:7d:da:58:26:e1:7f:83:84:e5:53:06: 79:6a:ef:fe:ad:a3:11:93:06:7f:4a:b5:e3:59:88:ac:26:bd: ef:e0:7c:2a:09:fd:1c:e0:89:f7:ed:92:8d:f3:51:f7:ff:ca: 9a:e6:73:65:cc:ed:54:44:5b:13:7e:3a:d2:4e:59:77:72:91: 74:53:a6:3d:e2:a3:d9:7f:00:dd:f1:d1:cd:a6:26:01:2c:5d: 7a:b7:5d:90:37:5a:c1:d5:1b:48:0a:3b:fe:d7:3d:c1:da:79: 51:b5:3f:ac:b3:1b:3a:f2:1d:58:40:ff:79:db:23:7a:9a:94: b3:e0:c8:f6:5a:55:fe:8b:5a:4f:1b:53:8d:d0:08:0b:08:83: d8:ad:87:92 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUS4wWYYOPCUx3xT0feuEhXtKx9UUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjAyNjE2WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZjQ0ODU4NDM3NTMxYTlhYWJkMWM4ODIzOGQyYzZiNGJm MDU3YjcxMjM2ZTg5ZTljNDVkN2UwZDY4NTUzNmFkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCTi6h/wIOSVF2jMsSt4NqUoasI2kfLMgfgtRHxJNW26k/n xRq+6rsj5/FuxeUDaCQ4oS8NqyAQK03ik/10rN1QNUvE7up5CPsRBbW7tpB5r3BN AosaDjDSjfqLfxd264vPwBs+fYclRQp0RTdw6JOKo97BnDsiYrvDPFB3iugCTHjd WkAyBBp5U3HTo5As+PotLJbi39Y6wrlp9t0ljVq8dbOgcHMyKeKkCy+a9Ne8Vs+Z erLTgq5IfhEqetDOdB6GcPaatLM5oaeQnjxPfJeL1seCps27vBpuIpPLBdAJW3RK 7PegmLLo01XLzmdvy1x5YNQ4ubBgUUFKxnCWREVxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUVhuyQRxhTm5fafQ5o19Opk6v/h4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzgxNWU5OGRhLWJmZTMtNGFlNi1iY2ViLTdiMzQyNDg1NGMyYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASrKAwDQYJKoZIhvcNAQELBQADggEBAHvTm2RGVhnkMdmVGb6L8hCbqVcq Gk9X6wlQWngRRqYZPlczXUXa8WCDsTx7hRvHksEBid2DbG7ukhnxv9JUB1DqTw9N 0RR3IdxvE4jcF37/hTBLO72cHeh+c1kGoWG6NIZpvCkLrXi+RJHEQViWV1KJTup9 2lgm4X+DhOVTBnlq7/6toxGTBn9KteNZiKwmve/gfCoJ/Rzgifftko3zUff/yprm c2XM7VREWxN+OtJOWXdykXRTpj3io9l/AN3x0c2mJgEsXXq3XZA3WsHVG0gKO/7X PcHaeVG1P6yzGzryHVhA/3nbI3qalLPgyPZaVf6LWk8bU43QCAsIg9ith5I= -----END CERTIFICATE-----Generated at Fri Oct 17 22:04:31 2025 by rpki-client