$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8ce2dee5-c8c2-47b5-b880-859fade90315.roa File: 8ce2dee5-c8c2-47b5-b880-859fade90315.roa (raw, json) Hash identifier: fLBsatLpBPXhlnHyPnI2EOQEHO/PHH+ZzVlfzmKNwVo= Subject key identifier: 37:D8:80:B1:0B:3B:2B:07:4A:32:23:3C:32:2E:51:13:90:1B:B7:51 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 53A66DAA882A6022EC1EFC89AF9D3AB47484D466 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8ce2dee5-c8c2-47b5-b880-859fade90315.roa Signing time: Mon 22 Sep 2025 18:25:53 +0000 ROA not before: Mon 22 Sep 2025 18:25:53 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.160.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:a6:6d:aa:88:2a:60:22:ec:1e:fc:89:af:9d:3a:b4:74:84:d4:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 18:25:53 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=4c841dd14db77047b01ab2387b2c7c461602dfef4e3c0f4b516b3e02e12bf11d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:53:0a:25:e1:3e:db:6d:f4:5b:33:18:17:e1: 28:fd:2f:6c:8f:fa:3a:95:00:e9:30:d4:ee:be:b3: 26:8e:73:2f:52:92:ce:03:0a:8f:6e:c4:d9:0d:63: d8:2d:75:8f:30:cf:75:e9:d2:0e:b7:09:1e:70:58: 02:b4:92:05:b6:a2:dd:da:b5:22:07:0c:71:f3:08: 3d:d1:9f:30:da:92:dd:94:33:01:a1:9f:12:b1:f0: 9d:51:5d:cf:3f:66:6a:87:99:aa:15:40:5f:6e:82: 95:b3:e8:ec:22:17:08:6e:c5:b0:dc:5c:c9:7d:9f: 03:72:5a:57:9e:71:db:3b:d3:79:33:e0:8b:15:97: 8a:d6:af:7c:d4:23:cd:d6:59:fa:66:b4:55:ec:d6: 07:3f:51:fd:4b:bf:40:41:df:b3:6a:b2:6d:77:b0: 0e:97:c6:fb:09:c5:a1:80:9f:ba:b7:0e:9a:95:92: 08:b5:c6:14:e6:64:62:28:ec:37:b2:53:05:69:eb: 59:96:38:50:60:04:8f:d3:44:52:8d:4a:8e:00:23: 26:85:d2:0b:13:8c:08:af:0d:0a:63:33:c4:f0:c1: ac:57:10:c4:f8:a5:e2:d0:9e:3d:b1:a1:2b:1e:98: 23:19:0b:f7:21:8d:c6:c9:4e:d8:ef:12:49:20:e7: 54:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:D8:80:B1:0B:3B:2B:07:4A:32:23:3C:32:2E:51:13:90:1B:B7:51 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8ce2dee5-c8c2-47b5-b880-859fade90315.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.160.68.0/24 Signature Algorithm: sha256WithRSAEncryption 47:99:48:44:86:8b:cf:10:ba:59:e1:14:02:b1:ce:ea:bb:ed: 2f:55:57:ea:75:d4:88:21:79:00:3c:76:fc:ac:64:27:72:1e: 6a:ff:29:de:75:bc:a8:4f:07:b9:da:04:91:04:29:94:b7:01: f8:c5:b4:86:51:8b:b0:36:cd:cd:fc:a2:90:5c:9e:44:66:81: 03:6a:99:77:ef:53:82:aa:13:61:02:a6:96:5d:6c:fd:19:84: fc:86:49:34:81:cf:68:6e:2e:24:6d:0c:68:32:4a:f5:41:4d: 11:41:79:ef:60:9c:fc:e2:cf:a4:a6:16:31:51:89:c5:18:cf: e2:f8:89:91:6d:fc:c7:35:81:8b:ec:7c:72:5d:3b:67:b7:85: 9e:42:fc:3e:99:08:85:2f:3b:36:91:a4:21:c9:53:68:9c:f6: a7:c9:e8:74:e7:3f:26:8c:52:82:3c:93:43:3e:ca:3d:b0:a4: cf:4f:be:f1:fc:3b:e8:3d:74:f4:a6:96:72:19:db:f0:c7:db: b7:ea:86:87:d7:46:87:f7:80:90:62:3a:ba:e3:45:df:6f:28: 74:c6:46:8b:12:60:02:20:77:5e:c6:6b:71:ae:64:4b:2e:9e: ee:f9:96:0c:57:fe:24:cd:0a:b8:2a:a7:b4:50:39:e6:de:b2: d6:4c:58:dd -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUU6ZtqogqYCLsHvyJr506tHSE1GYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMTgyNTUzWhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A0Yzg0MWRkMTRkYjc3MDQ3YjAxYWIyMzg3YjJjN2M0NjE2 MDJkZmVmNGUzYzBmNGI1MTZiM2UwMmUxMmJmMTFkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjUwol4T7bbfRbMxgX4Sj9L2yP+jqVAOkw1O6+syaOcy9S ks4DCo9uxNkNY9gtdY8wz3Xp0g63CR5wWAK0kgW2ot3atSIHDHHzCD3RnzDakt2U MwGhnxKx8J1RXc8/ZmqHmaoVQF9ugpWz6OwiFwhuxbDcXMl9nwNyWleecds703kz 4IsVl4rWr3zUI83WWfpmtFXs1gc/Uf1Lv0BB37Nqsm13sA6XxvsJxaGAn7q3DpqV kgi1xhTmZGIo7DeyUwVp61mWOFBgBI/TRFKNSo4AIyaF0gsTjAivDQpjM8TwwaxX EMT4peLQnj2xoSsemCMZC/chjcbJTtjvEkkg51RBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUN9iAsQs7KwdKMiM8Mi5RE5Abt1EwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzhjZTJkZWU1LWM4YzItNDdiNS1iODgwLTg1OWZhZGU5MDMxNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASoEQwDQYJKoZIhvcNAQELBQADggEBAEeZSESGi88QulnhFAKxzuq77S9V V+p11IgheQA8dvysZCdyHmr/Kd51vKhPB7naBJEEKZS3AfjFtIZRi7A2zc38opBc nkRmgQNqmXfvU4KqE2ECppZdbP0ZhPyGSTSBz2huLiRtDGgySvVBTRFBee9gnPzi z6SmFjFRicUYz+L4iZFt/Mc1gYvsfHJdO2e3hZ5C/D6ZCIUvOzaRpCHJU2ic9qfJ 6HTnPyaMUoI8k0M+yj2wpM9PvvH8O+g9dPSmlnIZ2/DH27fqhofXRof3gJBiOrrj Rd9vKHTGRosSYAIgd17Ga3GuZEsunu75lgxX/iTNCrgqp7RQOebestZMWN0= -----END CERTIFICATE-----Generated at Fri Oct 17 22:03:30 2025 by rpki-client