$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/955f1e60-9f50-4e7a-8c65-ccf8512b77e3.roa File: 955f1e60-9f50-4e7a-8c65-ccf8512b77e3.roa (raw, json) Hash identifier: jBiQiOdFRqcWhFXc6TgjgKcz1FJpP6AwPHBETwIt0BE= Subject key identifier: E7:9A:CD:A1:DB:6B:1B:75:6E:4B:58:30:04:9E:51:22:EC:E2:CD:E6 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 06C94C37AFEC7C54811B7465253452D82E4CD082 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/955f1e60-9f50-4e7a-8c65-ccf8512b77e3.roa Signing time: Mon 22 Sep 2025 20:42:54 +0000 ROA not before: Mon 22 Sep 2025 20:42:54 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.173.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:c9:4c:37:af:ec:7c:54:81:1b:74:65:25:34:52:d8:2e:4c:d0:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 20:42:54 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=573b511134418823fcb7dd7a3009f1f8189395dcc181e67efe4f8677ce07b9b1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1e:74:d3:4e:cb:95:71:ef:6c:07:5b:a6:e5: f1:96:dd:68:3f:90:02:81:4c:8d:eb:b3:43:b5:ca: 46:a8:12:61:c3:b7:c6:3a:7e:2b:1a:1c:a6:5d:b6: ad:7f:bc:86:18:17:2d:3e:50:b9:56:7c:05:58:0b: a5:02:76:f2:a0:8f:74:08:17:26:92:e4:a4:77:3e: 2b:cb:aa:a4:78:6a:53:72:62:3a:73:c3:63:bf:39: 23:90:b3:ca:35:14:33:29:29:4c:0c:fd:bf:f1:ad: e5:9e:f0:8d:82:48:cc:23:ad:7e:cb:75:4f:79:ce: ed:c5:bd:52:82:43:a5:d1:03:0e:fd:0f:01:c7:b9: 5e:4f:dc:17:c6:08:74:43:59:13:15:ae:42:5a:35: f7:12:bf:15:52:79:18:d2:ff:50:b9:9c:74:9d:0e: 39:16:41:e2:97:88:52:df:db:07:7d:19:32:a1:1c: 44:45:70:2b:bb:be:1f:2a:b5:e2:8c:0e:b6:b6:89: 11:07:b3:75:ad:cc:45:c0:9c:ee:6e:c4:01:13:58: 8a:6c:68:7b:96:bb:d4:88:8a:11:99:65:f6:d3:86: 1a:17:7b:00:48:c6:f3:fc:22:5c:f6:7d:32:33:c5: 5d:c7:7f:ac:68:66:99:f5:ec:59:fb:c8:c6:20:54: 1b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:9A:CD:A1:DB:6B:1B:75:6E:4B:58:30:04:9E:51:22:EC:E2:CD:E6 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/955f1e60-9f50-4e7a-8c65-ccf8512b77e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.173.180.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:62:b5:25:94:f0:24:dd:9f:0c:90:12:14:38:89:de:76:4c: f3:fa:11:37:89:e6:c0:bf:ed:23:dc:6b:a8:70:c5:c7:a9:c5: 76:5c:95:bb:d6:30:cc:a7:80:ea:b2:8f:d8:0b:c2:fb:76:09: f8:72:64:2e:26:1c:b1:f2:3d:62:1c:42:4f:82:38:f6:81:71: 7b:a2:dc:89:e0:2b:9f:49:83:b0:99:fc:9a:e5:0f:28:3c:a6: 72:3e:36:eb:24:10:0e:42:24:98:d4:e5:3b:9f:12:ba:6b:1f: ec:06:96:32:aa:52:b3:2a:c2:0e:61:7f:44:3c:c0:49:5b:93: b9:00:b5:33:6d:78:94:f0:46:5f:d1:4c:6e:d3:d3:4d:16:f8: ac:f3:59:b2:ae:4e:b4:31:ea:6e:03:ec:fb:30:e7:5a:a4:7a: df:bc:a6:a7:4b:fc:dc:d5:22:47:8e:8f:f1:ee:1e:42:d6:68: e6:14:68:d4:41:1b:75:1d:47:a8:e0:8c:76:95:66:3b:28:18: 46:24:4b:53:3c:58:1a:43:b0:2f:56:bc:fd:8c:65:3b:98:7d: 21:50:b7:40:c6:aa:33:64:70:80:c2:92:88:29:c4:0b:aa:7a: 31:99:db:30:84:66:86:75:eb:67:ce:a6:b4:9a:19:fa:df:16: 5a:d9:82:95 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBslMN6/sfFSBG3RlJTRS2C5M0IIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjA0MjU0WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A1NzNiNTExMTM0NDE4ODIzZmNiN2RkN2EzMDA5ZjFmODE4 OTM5NWRjYzE4MWU2N2VmZTRmODY3N2NlMDdiOWIxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDHnTTTsuVce9sB1um5fGW3Wg/kAKBTI3rs0O1ykaoEmHD t8Y6fisaHKZdtq1/vIYYFy0+ULlWfAVYC6UCdvKgj3QIFyaS5KR3PivLqqR4alNy Yjpzw2O/OSOQs8o1FDMpKUwM/b/xreWe8I2CSMwjrX7LdU95zu3FvVKCQ6XRAw79 DwHHuV5P3BfGCHRDWRMVrkJaNfcSvxVSeRjS/1C5nHSdDjkWQeKXiFLf2wd9GTKh HERFcCu7vh8qteKMDra2iREHs3WtzEXAnO5uxAETWIpsaHuWu9SIihGZZfbThhoX ewBIxvP8Ilz2fTIzxV3Hf6xoZpn17Fn7yMYgVBsRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU55rNodtrG3VuS1gwBJ5RIuzizeYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzk1NWYxZTYwLTlmNTAtNGU3YS04YzY1LWNjZjg1MTJiNzdlMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASrbQwDQYJKoZIhvcNAQELBQADggEBAE9itSWU8CTdnwyQEhQ4id52TPP6 ETeJ5sC/7SPca6hwxcepxXZclbvWMMyngOqyj9gLwvt2CfhyZC4mHLHyPWIcQk+C OPaBcXui3IngK59Jg7CZ/JrlDyg8pnI+NuskEA5CJJjU5TufErprH+wGljKqUrMq wg5hf0Q8wElbk7kAtTNteJTwRl/RTG7T000W+KzzWbKuTrQx6m4D7Psw51qket+8 pqdL/NzVIkeOj/HuHkLWaOYUaNRBG3UdR6jgjHaVZjsoGEYkS1M8WBpDsC9WvP2M ZTuYfSFQt0DGqjNkcIDCkogpxAuqejGZ2zCEZoZ162fOprSaGfrfFlrZgpU= -----END CERTIFICATE-----Generated at Fri Oct 17 23:45:48 2025 by rpki-client