$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9baab6b6-3ba0-421a-9892-4dceae55ad07.roa File: 9baab6b6-3ba0-421a-9892-4dceae55ad07.roa (raw, json) Hash identifier: JwiWHhPhu06SOdJFL8N8vHojY2IICzyTaAdqf6bnelY= Subject key identifier: 52:51:05:6D:B2:AA:6A:12:4A:94:64:61:65:C6:87:EC:D6:B5:93:BC Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 512772B5BA9B2CAF319E10D05C917888D0F4ED3E Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9baab6b6-3ba0-421a-9892-4dceae55ad07.roa Signing time: Mon 22 Sep 2025 18:28:08 +0000 ROA not before: Mon 22 Sep 2025 18:28:08 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.161.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:27:72:b5:ba:9b:2c:af:31:9e:10:d0:5c:91:78:88:d0:f4:ed:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 18:28:08 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=791a5b894bd5e2a4f317387106fc0fa8c5b0b6fe78906b738dbb347fc549d996, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:67:40:a4:9f:cf:fb:ad:44:9c:5b:19:33:39: 88:88:11:b4:b7:23:1c:11:6b:13:4f:01:58:97:29: 7b:07:fc:23:17:04:42:9d:a6:bf:33:d5:fc:72:12: c2:df:95:c3:84:7d:47:32:b4:e9:b0:86:68:7c:35: b8:0f:24:04:ef:eb:74:27:5f:b9:28:4c:84:f5:cc: 69:2a:9c:de:8c:15:33:d9:a6:20:81:ba:0b:86:41: f1:64:20:01:1c:18:29:ad:55:0f:03:13:d1:c0:7e: 7c:e9:1c:e2:8f:d9:1b:79:42:97:30:d7:11:1e:c7: 10:07:2e:67:cf:fa:fa:bd:f2:8b:6a:44:8d:33:1c: de:41:01:0d:7b:c3:e7:61:81:7a:a1:1a:8b:a2:6f: c6:dc:33:67:a5:bc:57:23:77:2e:8d:d4:b9:37:4b: ca:32:d5:3c:31:06:ed:c3:f6:7e:a5:d2:73:a7:1c: 0a:5b:90:b4:d2:9a:4e:aa:f6:1a:5f:4d:39:94:e0: bf:a1:4a:44:55:2e:23:00:6c:a4:3c:e6:b0:60:94: ee:3c:d7:d4:9f:c8:aa:ae:c2:39:08:07:80:cc:34: 40:08:98:6d:e7:99:e6:e6:64:4c:0c:a7:4a:88:f5: c6:e1:14:b7:55:e6:71:cf:91:16:f1:4e:e4:9e:b8: 5f:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:51:05:6D:B2:AA:6A:12:4A:94:64:61:65:C6:87:EC:D6:B5:93:BC X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9baab6b6-3ba0-421a-9892-4dceae55ad07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.161.114.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:93:83:0d:7d:0d:cf:29:b6:5a:ed:9e:72:75:e9:d4:06:09: ee:0d:be:50:65:9b:c0:96:c1:8c:6b:2e:2b:0f:d3:e4:f8:d0: d0:7c:19:47:fb:eb:9e:e5:18:4d:ab:71:0d:f0:91:a8:3f:83: 22:e2:10:c7:9e:ce:74:e8:1d:cd:e4:a2:5d:6d:06:e9:69:63: d0:4c:81:85:b5:dd:86:09:61:c2:ad:bc:27:3f:ce:e1:78:e8: c2:f8:c2:57:07:18:cf:03:5b:0a:d6:48:9c:fc:1d:2c:08:9f: 57:f9:7d:87:3c:51:67:fd:cc:c6:e5:8b:34:e3:09:b1:24:8f: 8d:cb:46:81:5f:7f:9e:b6:8f:12:7a:5e:50:2b:63:d2:17:cb: 44:8a:42:e0:68:8c:b1:be:d5:50:97:6b:33:60:b0:b8:51:14: 7c:4a:ad:ae:69:a7:05:6f:ce:10:99:fc:ae:a0:3c:80:41:95: 37:e7:a9:63:57:98:e5:16:26:6e:ae:08:e9:27:81:2d:83:98: 06:cf:78:7a:6e:e0:14:d6:ed:45:7f:a8:4a:31:66:c3:16:d0: 2d:50:79:d0:dd:81:a7:38:c9:25:e1:1f:16:b6:09:f0:0b:66: 68:de:87:41:f1:e4:d3:af:a1:6f:e9:13:57:d4:ac:b9:e7:bc: 90:04:97:e6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUSdytbqbLK8xnhDQXJF4iND07T4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMTgyODA4WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A3OTFhNWI4OTRiZDVlMmE0ZjMxNzM4NzEwNmZjMGZhOGM1 YjBiNmZlNzg5MDZiNzM4ZGJiMzQ3ZmM1NDlkOTk2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzZ0Ckn8/7rUScWxkzOYiIEbS3IxwRaxNPAViXKXsH/CMX BEKdpr8z1fxyEsLflcOEfUcytOmwhmh8NbgPJATv63QnX7koTIT1zGkqnN6MFTPZ piCBuguGQfFkIAEcGCmtVQ8DE9HAfnzpHOKP2Rt5Qpcw1xEexxAHLmfP+vq98otq RI0zHN5BAQ17w+dhgXqhGouib8bcM2elvFcjdy6N1Lk3S8oy1TwxBu3D9n6l0nOn HApbkLTSmk6q9hpfTTmU4L+hSkRVLiMAbKQ85rBglO4819SfyKquwjkIB4DMNEAI mG3nmebmZEwMp0qI9cbhFLdV5nHPkRbxTuSeuF+BAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUUlEFbbKqahJKlGRhZcaH7Na1k7wwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzliYWFiNmI2LTNiYTAtNDIxYS05ODkyLTRkY2VhZTU1YWQwNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASoXIwDQYJKoZIhvcNAQELBQADggEBAG6Tgw19Dc8ptlrtnnJ16dQGCe4N vlBlm8CWwYxrLisP0+T40NB8GUf7657lGE2rcQ3wkag/gyLiEMeeznToHc3kol1t BulpY9BMgYW13YYJYcKtvCc/zuF46ML4wlcHGM8DWwrWSJz8HSwIn1f5fYc8UWf9 zMblizTjCbEkj43LRoFff562jxJ6XlArY9IXy0SKQuBojLG+1VCXazNgsLhRFHxK ra5ppwVvzhCZ/K6gPIBBlTfnqWNXmOUWJm6uCOkngS2DmAbPeHpu4BTW7UV/qEox ZsMW0C1QedDdgac4ySXhHxa2CfALZmjeh0Hx5NOvoW/pE1fUrLnnvJAEl+Y= -----END CERTIFICATE-----Generated at Fri Oct 17 21:58:41 2025 by rpki-client