$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/87decbdc-2fd3-42bf-89a4-3ffc012e03b3.roa File: 87decbdc-2fd3-42bf-89a4-3ffc012e03b3.roa (raw, json) Hash identifier: SLU+HkRmkL2jxqr0q/U2TBtkzf+FR8v5levHlTHdPPg= Subject key identifier: 1C:E8:B1:72:88:AA:39:1F:73:2E:7B:14:57:84:7B:36:64:49:53:FA Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 25069FFE75B38922259B7C447FE419EDE03D30DB Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/87decbdc-2fd3-42bf-89a4-3ffc012e03b3.roa Signing time: Mon 22 Sep 2025 20:06:58 +0000 ROA not before: Mon 22 Sep 2025 20:06:58 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.164.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:06:9f:fe:75:b3:89:22:25:9b:7c:44:7f:e4:19:ed:e0:3d:30:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 20:06:58 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=e31180abb31b22d0766f6cb33b267fa9ab75bcdbbe40a88b78af793602ed4494, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:7b:47:58:58:21:d1:c3:9d:72:be:4f:9d:de: ed:aa:08:73:61:ae:c2:56:fd:83:e1:ad:10:a4:60: 73:65:c2:4a:d0:fe:fd:6e:37:a7:55:2e:99:59:18: d5:a2:8a:1c:93:c0:6b:0e:08:b4:d2:06:8d:2b:9c: d0:06:c7:6b:de:1d:67:7d:c3:83:e9:7b:5b:9f:18: 46:9d:81:6f:9c:7e:67:5a:0a:02:29:a4:4f:70:92: a5:55:4a:1e:f5:b2:cb:dd:9f:0c:bc:af:cc:2c:8f: ec:8c:72:a7:08:85:27:b0:6d:7e:3c:ee:8a:80:e8: 72:a0:b5:41:ca:67:85:9c:58:79:00:e4:a9:af:9f: 2f:87:29:47:56:9f:3d:18:87:ca:8d:2b:21:0b:ab: 75:6b:1a:b0:76:7a:ff:9a:a6:b3:96:c3:5d:56:86: 2c:9a:2c:34:81:a2:7a:6a:97:5f:fb:db:4f:e1:8d: 00:a3:03:0d:1e:88:6f:9d:b8:a2:89:9b:99:d5:f6: 50:60:1b:fc:0a:e1:05:15:87:0f:a1:bb:7f:d5:50: 00:19:18:77:cb:9d:ec:75:a4:9b:ef:fb:1d:0b:cf: 84:43:9a:40:4b:d6:90:47:35:30:4a:b1:ef:36:9c: 3a:91:e6:65:02:ee:d2:7a:76:c3:d3:21:49:32:9c: 6b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:E8:B1:72:88:AA:39:1F:73:2E:7B:14:57:84:7B:36:64:49:53:FA X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/87decbdc-2fd3-42bf-89a4-3ffc012e03b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.164.172.0/22 Signature Algorithm: sha256WithRSAEncryption b1:ab:65:dd:e9:7d:64:66:7c:a3:70:f2:9e:6b:e2:13:b6:dc: 7a:8f:ef:2a:4e:9d:31:01:62:54:91:e1:e1:4e:f2:a9:60:33: 24:ae:fb:41:1a:0f:1a:b2:7b:0d:1d:2f:3b:12:e7:b7:56:c1: bc:0e:25:f9:fc:99:28:a8:5d:de:c1:09:d8:86:be:4a:41:ea: 39:f5:0e:1b:f8:7a:e8:83:e7:31:a7:12:7b:f6:d2:1f:35:8a: 59:50:96:78:05:b1:b3:9a:5e:84:98:20:39:8d:7c:bc:49:5a: 66:d4:3f:4a:6d:dd:15:34:73:5c:c3:aa:b2:58:54:a8:0a:d0: 2c:2b:c4:4b:bd:70:61:b4:49:7e:99:83:4e:dd:42:cf:0e:b0: 3c:8a:93:6a:fa:8a:a2:30:ab:ea:39:c0:2f:1a:9e:d5:04:3e: 81:ef:9c:4e:e7:89:f0:c9:3b:48:f6:21:2c:e3:e9:ad:ad:17: 78:ee:36:5d:8b:8e:5a:bc:f4:24:21:93:ca:d1:9f:fd:46:40: a4:9e:c2:c6:10:2c:56:f4:04:d6:49:47:e9:c3:b3:8b:38:4c: 09:04:af:39:8f:68:7c:31:2d:c0:44:a9:e5:fd:7d:7d:35:74: 1c:6f:7f:03:93:35:cf:7c:4b:b6:70:c4:0a:d3:6a:d9:46:cf: 93:f9:b7:b1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJQaf/nWziSIlm3xEf+QZ7eA9MNswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjAwNjU4WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BlMzExODBhYmIzMWIyMmQwNzY2ZjZjYjMzYjI2N2ZhOWFi NzViY2RiYmU0MGE4OGI3OGFmNzkzNjAyZWQ0NDk0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCYe0dYWCHRw51yvk+d3u2qCHNhrsJW/YPhrRCkYHNlwkrQ /v1uN6dVLplZGNWiihyTwGsOCLTSBo0rnNAGx2veHWd9w4Ppe1ufGEadgW+cfmda CgIppE9wkqVVSh71ssvdnwy8r8wsj+yMcqcIhSewbX487oqA6HKgtUHKZ4WcWHkA 5Kmvny+HKUdWnz0Yh8qNKyELq3VrGrB2ev+aprOWw11WhiyaLDSBonpql1/720/h jQCjAw0eiG+duKKJm5nV9lBgG/wK4QUVhw+hu3/VUAAZGHfLnex1pJvv+x0Lz4RD mkBL1pBHNTBKse82nDqR5mUC7tJ6dsPTIUkynGvtAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUHOixcoiqOR9zLnsUV4R7NmRJU/owHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzg3ZGVjYmRjLTJmZDMtNDJiZi04OWE0LTNmZmMwMTJlMDNiMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAISpKwwDQYJKoZIhvcNAQELBQADggEBALGrZd3pfWRmfKNw8p5r4hO23HqP 7ypOnTEBYlSR4eFO8qlgMySu+0EaDxqyew0dLzsS57dWwbwOJfn8mSioXd7BCdiG vkpB6jn1Dhv4euiD5zGnEnv20h81illQlngFsbOaXoSYIDmNfLxJWmbUP0pt3RU0 c1zDqrJYVKgK0CwrxEu9cGG0SX6Zg07dQs8OsDyKk2r6iqIwq+o5wC8antUEPoHv nE7nifDJO0j2ISzj6a2tF3juNl2Ljlq89CQhk8rRn/1GQKSewsYQLFb0BNZJR+nD s4s4TAkErzmPaHwxLcBEqeX9fX01dBxvfwOTNc98S7ZwxArTatlGz5P5t7E= -----END CERTIFICATE-----Generated at Fri Oct 17 21:58:04 2025 by rpki-client