$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/95349176-d671-4847-9240-f952396dc02e.roa File: 95349176-d671-4847-9240-f952396dc02e.roa (raw, json) Hash identifier: vyvvRxaHSiztRFP0rgWXmG8BIWkCJXYqA2i3feClkJ4= Subject key identifier: 69:DF:81:F5:76:F7:C6:74:A9:F8:0E:33:0B:1D:A8:06:AA:77:65:DC Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 164C6AE05DCCBFBB8AE72A8E8231B9BD8E88E7C4 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/95349176-d671-4847-9240-f952396dc02e.roa Signing time: Mon 22 Sep 2025 20:11:16 +0000 ROA not before: Mon 22 Sep 2025 20:11:16 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.165.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:4c:6a:e0:5d:cc:bf:bb:8a:e7:2a:8e:82:31:b9:bd:8e:88:e7:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 20:11:16 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=ffa7c8af3560ed1d929974ee302269272f62ea91dfeea9b6922b5a2b01fec796, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a3:10:f6:91:13:5e:e3:77:04:0c:09:dd:bd: 6a:dd:25:86:09:dc:44:45:29:3b:21:09:4f:4f:4a: da:3a:c6:6d:18:22:30:93:12:63:c0:a3:8f:9c:a5: c4:7e:20:7f:dc:b2:13:b4:3f:0b:0e:a6:ab:2c:de: 2a:85:89:c7:bb:cd:16:02:45:26:68:5f:f6:60:b9: 57:ec:fd:35:dd:fd:eb:e8:7e:74:97:74:61:51:34: 3a:a6:59:ad:1a:1d:8f:58:8a:34:a5:8c:c5:a0:86: 34:b5:f3:e7:c2:4a:bd:52:c5:53:20:7e:91:e4:f3: 04:d9:d4:0b:a5:53:4f:ca:4d:87:3d:e9:9a:25:91: ff:d4:42:f9:e6:8b:bb:fe:47:63:e9:c8:7c:cc:d2: 23:cc:f9:fc:4a:1b:dd:87:5a:68:9b:fd:22:f5:09: 62:b8:3e:ab:a9:37:80:4e:42:64:e4:21:85:2d:5c: 21:34:58:33:88:a4:47:5b:18:c2:97:72:bc:b2:a3: d9:8d:42:e9:88:21:31:24:78:40:36:56:bc:71:ec: 27:20:65:cf:91:d2:94:4a:5c:1b:28:e7:29:3a:7b: 77:f9:a1:98:2a:49:8c:5a:b2:1a:0d:aa:9f:fc:fd: ad:c6:91:5d:37:a3:1a:da:9f:65:3b:61:2b:7e:43: 7b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:DF:81:F5:76:F7:C6:74:A9:F8:0E:33:0B:1D:A8:06:AA:77:65:DC X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/95349176-d671-4847-9240-f952396dc02e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.165.224.0/22 Signature Algorithm: sha256WithRSAEncryption 0b:76:19:9e:43:c6:52:64:73:07:23:ed:4c:5d:fe:ed:2c:1a: 59:be:da:c9:af:ee:8f:04:44:d9:1a:8f:21:6e:ec:50:bf:e7: ae:82:6e:6b:c3:ed:3a:06:42:b7:1c:d9:07:d6:6e:1c:48:ca: b6:89:97:93:44:7a:f4:bb:cf:6f:57:fc:b0:a9:67:20:60:12: 94:77:43:87:c2:95:f2:a2:a6:d7:d5:dd:73:40:48:43:4a:e6: bf:05:90:f7:93:72:48:cc:ab:cf:d4:bd:ff:13:15:8a:c9:9b: 7b:88:f6:2d:94:4c:1f:b6:5b:ef:fe:07:3f:4e:0a:de:ba:5c: 6d:c8:be:66:77:af:1e:3e:2b:6b:af:da:13:2c:62:ef:6a:bf: 7b:89:70:33:3b:0b:13:31:8c:0a:6d:57:7a:01:ad:64:05:c4: da:0f:ef:14:d9:51:37:8e:27:2b:bd:e6:d8:83:1c:37:74:10: d5:20:ef:b4:25:31:d9:51:d0:b9:32:b5:81:60:4a:b1:72:40: ee:ea:61:7c:d7:73:bf:85:39:d1:66:38:a1:86:71:98:51:a6: c6:59:3c:21:d4:df:03:30:ec:18:0d:93:a0:53:45:ac:d6:54: 06:02:fb:7e:8b:df:60:b5:21:aa:a8:4d:84:47:d3:b6:76:dc: 18:5a:27:cf -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFkxq4F3Mv7uK5yqOgjG5vY6I58QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjAxMTE2WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BmZmE3YzhhZjM1NjBlZDFkOTI5OTc0ZWUzMDIyNjkyNzJm NjJlYTkxZGZlZWE5YjY5MjJiNWEyYjAxZmVjNzk2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCoxD2kRNe43cEDAndvWrdJYYJ3ERFKTshCU9PSto6xm0Y IjCTEmPAo4+cpcR+IH/cshO0PwsOpqss3iqFice7zRYCRSZoX/ZguVfs/TXd/evo fnSXdGFRNDqmWa0aHY9YijSljMWghjS18+fCSr1SxVMgfpHk8wTZ1AulU0/KTYc9 6Zolkf/UQvnmi7v+R2PpyHzM0iPM+fxKG92HWmib/SL1CWK4PqupN4BOQmTkIYUt XCE0WDOIpEdbGMKXcryyo9mNQumIITEkeEA2Vrxx7CcgZc+R0pRKXBso5yk6e3f5 oZgqSYxashoNqp/8/a3GkV03oxran2U7YSt+Q3ufAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUad+B9Xb3xnSp+A4zCx2oBqp3ZdwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzk1MzQ5MTc2LWQ2NzEtNDg0Ny05MjQwLWY5NTIzOTZkYzAyZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAISpeAwDQYJKoZIhvcNAQELBQADggEBAAt2GZ5DxlJkcwcj7Uxd/u0sGlm+ 2smv7o8ERNkajyFu7FC/566CbmvD7ToGQrcc2QfWbhxIyraJl5NEevS7z29X/LCp ZyBgEpR3Q4fClfKiptfV3XNASENK5r8FkPeTckjMq8/Uvf8TFYrJm3uI9i2UTB+2 W+/+Bz9OCt66XG3IvmZ3rx4+K2uv2hMsYu9qv3uJcDM7CxMxjAptV3oBrWQFxNoP 7xTZUTeOJyu95tiDHDd0ENUg77QlMdlR0LkytYFgSrFyQO7qYXzXc7+FOdFmOKGG cZhRpsZZPCHU3wMw7BgNk6BTRazWVAYC+36L32C1IaqoTYRH07Z23BhaJ88= -----END CERTIFICATE-----Generated at Fri Oct 17 22:04:03 2025 by rpki-client