$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9c691b47-44dd-40e7-81e0-d034551e2ea1.roa File: 9c691b47-44dd-40e7-81e0-d034551e2ea1.roa (raw, json) Hash identifier: ILo4MHuERFn7k6XMf4G0YTl7QpjUpa+oDu8XBHbtDWE= Subject key identifier: 09:74:F3:71:53:CE:A7:D8:6E:8F:A5:28:48:82:EF:A6:F2:AB:A7:FD Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 48B672174C8FCE6011BBD425D4A6256FC1B5CD94 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9c691b47-44dd-40e7-81e0-d034551e2ea1.roa Signing time: Mon 22 Sep 2025 19:27:53 +0000 ROA not before: Mon 22 Sep 2025 19:27:53 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.164.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:b6:72:17:4c:8f:ce:60:11:bb:d4:25:d4:a6:25:6f:c1:b5:cd:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 19:27:53 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=081b5c4d6148e267712baf8410e93274d491ccb2de0995acf85dca59337b0470, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:39:69:2e:d9:14:08:87:aa:58:b8:a0:c2:99: 04:b9:ef:98:80:46:f8:b5:f6:16:83:47:f6:f3:34: 6c:44:a7:0e:59:60:20:22:ed:00:ff:0a:95:c4:5f: 6b:46:63:5e:65:da:32:de:9f:05:b1:1a:76:78:98: 1b:d7:97:e8:e9:c2:74:d2:b4:49:09:69:bd:03:d2: bc:50:1b:a1:b0:74:0e:40:3c:43:e4:bf:ad:aa:8f: 2b:50:36:d4:1a:5b:69:1e:73:cb:ac:f7:c8:f0:5b: 33:7f:1b:6c:e2:03:99:af:fb:66:e2:3c:e9:20:41: e3:77:8e:25:b0:16:58:90:2f:39:89:92:00:a9:a6: be:be:53:bd:50:67:06:d6:29:25:48:0f:74:8e:f5: 3c:af:c4:2f:32:e4:0c:7a:f6:33:87:51:91:19:6f: 26:a6:68:03:f3:58:c7:7c:f7:29:0b:08:9e:5c:60: 0f:ad:39:09:a3:33:ca:69:97:20:8c:35:ba:95:a4: db:6f:a8:ac:ac:d8:65:04:88:b0:e6:fe:5b:b7:dc: 48:08:49:f4:07:0a:7e:f2:ad:c9:17:ed:35:93:db: 48:ab:69:e6:8f:fc:3b:8f:40:d9:56:1f:e8:e8:e0: 60:72:7a:02:00:90:0c:77:68:67:15:cc:8f:c4:c0: 93:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:74:F3:71:53:CE:A7:D8:6E:8F:A5:28:48:82:EF:A6:F2:AB:A7:FD X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9c691b47-44dd-40e7-81e0-d034551e2ea1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.164.32.0/24 Signature Algorithm: sha256WithRSAEncryption 22:ce:85:31:81:b8:ac:31:ad:4c:bc:84:bf:0d:4d:45:c1:cf: da:b1:b0:f7:f6:90:d1:69:eb:b2:cd:c8:d3:60:a5:78:5e:9f: bb:ee:2d:0b:ca:43:05:5d:b0:d9:de:bc:81:ca:e8:02:f8:60: 18:95:3c:39:2b:22:57:8e:cf:09:11:71:4b:72:6f:2a:60:22: 9c:80:35:11:37:3f:1d:a3:48:a1:da:a0:f6:56:4f:2b:ac:ee: 63:11:ed:cd:1b:be:68:e4:30:29:2b:a4:ed:fa:4d:f0:d1:17: 21:a1:f7:05:a7:86:c6:0a:52:da:39:ae:80:60:8f:1e:02:ce: 31:83:22:57:75:cb:ff:55:76:95:f5:bd:e9:14:5c:58:26:65: e8:6a:ed:ea:48:8d:e3:24:e3:75:14:1f:02:17:10:0a:07:fc: 69:dd:f2:c6:06:22:7e:be:20:aa:b0:0b:5f:8a:1c:bc:2a:4d: 0a:e0:23:22:01:78:11:86:17:38:ad:82:4b:ee:7e:49:1e:db: c2:7d:5d:46:57:01:1d:0e:12:b1:43:59:ca:91:64:39:d3:b4: 09:21:23:7d:92:95:94:34:95:e7:c6:93:2f:e1:4b:f4:e9:f9: 6d:f9:e9:aa:30:74:36:63:94:79:33:67:0d:62:67:46:2c:b1: 2a:5b:86:df -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSLZyF0yPzmARu9Ql1KYlb8G1zZQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMTkyNzUzWhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AwODFiNWM0ZDYxNDhlMjY3NzEyYmFmODQxMGU5MzI3NGQ0 OTFjY2IyZGUwOTk1YWNmODVkY2E1OTMzN2IwNDcwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5OWku2RQIh6pYuKDCmQS575iARvi19haDR/bzNGxEpw5Z YCAi7QD/CpXEX2tGY15l2jLenwWxGnZ4mBvXl+jpwnTStEkJab0D0rxQG6GwdA5A PEPkv62qjytQNtQaW2kec8us98jwWzN/G2ziA5mv+2biPOkgQeN3jiWwFliQLzmJ kgCppr6+U71QZwbWKSVID3SO9TyvxC8y5Ax69jOHUZEZbyamaAPzWMd89ykLCJ5c YA+tOQmjM8pplyCMNbqVpNtvqKys2GUEiLDm/lu33EgISfQHCn7yrckX7TWT20ir aeaP/DuPQNlWH+jo4GByegIAkAx3aGcVzI/EwJPZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUCXTzcVPOp9huj6UoSILvpvKrp/0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzljNjkxYjQ3LTQ0ZGQtNDBlNy04MWUwLWQwMzQ1NTFlMmVhMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASpCAwDQYJKoZIhvcNAQELBQADggEBACLOhTGBuKwxrUy8hL8NTUXBz9qx sPf2kNFp67LNyNNgpXhen7vuLQvKQwVdsNnevIHK6AL4YBiVPDkrIleOzwkRcUty bypgIpyANRE3Px2jSKHaoPZWTyus7mMR7c0bvmjkMCkrpO36TfDRFyGh9wWnhsYK Uto5roBgjx4CzjGDIld1y/9VdpX1vekUXFgmZehq7epIjeMk43UUHwIXEAoH/Gnd 8sYGIn6+IKqwC1+KHLwqTQrgIyIBeBGGFzitgkvufkke28J9XUZXAR0OErFDWcqR ZDnTtAkhI32SlZQ0lefGky/hS/Tp+W356aowdDZjlHkzZw1iZ0YssSpbht8= -----END CERTIFICATE-----Generated at Sat Oct 18 02:17:25 2025 by rpki-client