$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/880bba27-9dd1-40f8-9910-94f09ff3fd2f.roa File: 880bba27-9dd1-40f8-9910-94f09ff3fd2f.roa (raw, json) Hash identifier: dRMKKWIrU94gASAbW/3WQLauVb0uG7Xilycg1sMl1fE= Subject key identifier: 61:C9:0B:10:32:53:98:EA:1F:36:87:6A:D1:7F:32:B0:6B:11:29:C0 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 42BF0C85DD321F0C38B10606BE4A8CF242D1DE3C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/880bba27-9dd1-40f8-9910-94f09ff3fd2f.roa Signing time: Mon 22 Sep 2025 20:06:49 +0000 ROA not before: Mon 22 Sep 2025 20:06:49 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.164.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:bf:0c:85:dd:32:1f:0c:38:b1:06:06:be:4a:8c:f2:42:d1:de:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 20:06:49 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=948def9c4e2f54ac39b9712f1bf97dbabe188feba94cde971496090239809424, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e3:84:52:f4:3e:8c:21:ca:f5:3c:38:f2:4f: ca:76:de:56:a3:2b:9c:f7:c6:11:9f:42:6c:e8:81: 50:1c:80:79:83:4d:a9:e0:04:8e:34:55:85:da:97: ea:94:e1:79:d1:55:f9:5c:e5:85:2a:4c:d8:b3:75: ee:e2:41:36:0e:fa:56:cb:a1:5e:b5:7d:61:71:7c: 49:ff:9a:1c:76:2c:6f:83:8e:19:40:4e:92:5c:e3: 86:be:64:88:96:e2:26:42:3f:ad:f6:7e:83:53:87: 2c:ca:53:62:d1:3b:cf:fe:f0:52:b9:b5:d0:cb:1d: 6b:d7:98:f9:d3:9e:90:09:f1:ac:0b:0a:f9:ed:59: 43:24:40:8a:76:ae:0b:17:05:a5:4f:5f:cb:06:6b: a5:16:45:94:9a:80:fd:60:25:ad:ca:67:29:6a:7f: ba:31:df:96:1f:97:f6:70:47:3c:f6:d9:59:54:62: e0:42:d0:42:46:4a:19:de:33:14:fc:4a:13:23:48: ac:63:4c:2c:4f:2c:a4:7a:db:19:4b:4d:0a:1d:0c: aa:90:73:98:69:84:9c:8e:5d:d7:4d:22:76:a5:48: f9:9c:9b:9d:0f:94:8e:8a:24:5d:e5:54:9b:e4:3e: 1a:dd:1e:0f:c4:7a:b3:2b:b8:7c:2f:9f:ec:c6:15: d6:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:C9:0B:10:32:53:98:EA:1F:36:87:6A:D1:7F:32:B0:6B:11:29:C0 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/880bba27-9dd1-40f8-9910-94f09ff3fd2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.164.136.0/22 Signature Algorithm: sha256WithRSAEncryption 0c:1e:0d:52:9f:a3:46:fa:cb:7a:0f:5e:d4:a6:e2:9c:26:38: 49:11:ef:85:4d:f5:6b:42:bf:30:1d:92:87:17:60:e2:b1:70: 26:53:ef:fd:cc:85:aa:8c:07:15:a4:09:a1:cb:ae:d8:06:70: 1b:fe:56:0b:7d:2a:dc:6b:39:a1:e7:82:ce:6d:99:4c:01:1f: 00:91:75:76:9d:0b:7f:94:5a:07:56:91:f9:0d:5b:b5:4f:54: 3b:00:ab:fa:0d:62:50:26:3a:ac:d6:19:47:cf:72:3c:c8:8e: ec:f1:5d:83:fb:6d:ef:7c:60:68:55:a5:31:8a:fd:8e:e3:8d: 25:95:61:41:2d:cc:8e:9b:01:fb:95:e6:bd:d8:b3:88:6f:0d: 61:61:cf:c7:be:1e:fe:be:1f:dd:7a:38:4a:e3:50:8d:58:c1: 7d:4a:25:c7:80:15:4f:37:cc:5a:a5:d6:f3:d5:4c:82:06:1e: d8:62:55:10:25:1d:e8:e2:ad:46:65:3d:f3:85:3b:07:d4:5c: a5:79:68:4f:ff:53:f0:58:38:4c:b0:cf:45:3e:13:d4:20:42: 37:c4:9d:1d:31:d7:ea:5c:90:c3:6a:19:61:f4:5a:a0:c3:73: 95:b6:d9:4d:58:cf:16:c5:62:46:41:12:32:c1:ad:71:79:e6: 46:63:54:12 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQr8Mhd0yHww4sQYGvkqM8kLR3jwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjAwNjQ5WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A5NDhkZWY5YzRlMmY1NGFjMzliOTcxMmYxYmY5N2RiYWJl MTg4ZmViYTk0Y2RlOTcxNDk2MDkwMjM5ODA5NDI0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC144RS9D6MIcr1PDjyT8p23lajK5z3xhGfQmzogVAcgHmD TangBI40VYXal+qU4XnRVflc5YUqTNizde7iQTYO+lbLoV61fWFxfEn/mhx2LG+D jhlATpJc44a+ZIiW4iZCP632foNThyzKU2LRO8/+8FK5tdDLHWvXmPnTnpAJ8awL CvntWUMkQIp2rgsXBaVPX8sGa6UWRZSagP1gJa3KZylqf7ox35Yfl/ZwRzz22VlU YuBC0EJGShneMxT8ShMjSKxjTCxPLKR62xlLTQodDKqQc5hphJyOXddNInalSPmc m50PlI6KJF3lVJvkPhrdHg/EerMruHwvn+zGFdYDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUYckLEDJTmOofNodq0X8ysGsRKcAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzg4MGJiYTI3LTlkZDEtNDBmOC05OTEwLTk0ZjA5ZmYzZmQyZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAISpIgwDQYJKoZIhvcNAQELBQADggEBAAweDVKfo0b6y3oPXtSm4pwmOEkR 74VN9WtCvzAdkocXYOKxcCZT7/3MhaqMBxWkCaHLrtgGcBv+Vgt9KtxrOaHngs5t mUwBHwCRdXadC3+UWgdWkfkNW7VPVDsAq/oNYlAmOqzWGUfPcjzIjuzxXYP7be98 YGhVpTGK/Y7jjSWVYUEtzI6bAfuV5r3Ys4hvDWFhz8e+Hv6+H916OErjUI1YwX1K JceAFU83zFql1vPVTIIGHthiVRAlHejirUZlPfOFOwfUXKV5aE//U/BYOEywz0U+ E9QgQjfEnR0x1+pckMNqGWH0WqDDc5W22U1YzxbFYkZBEjLBrXF55kZjVBI= -----END CERTIFICATE-----Generated at Fri Oct 17 23:41:49 2025 by rpki-client