$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9d56172f-150f-427f-87e1-689d314c11ec.roa File: 9d56172f-150f-427f-87e1-689d314c11ec.roa (raw, json) Hash identifier: DcNvPF5kxgotdgJqp9Z3GOeD5004f4UDWdQVHEGj/MM= Subject key identifier: EB:A5:35:17:15:E2:8B:6A:E9:FD:50:57:C6:5E:60:D3:7C:ED:B7:35 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 62D23ECA88183D8855730B02C4D40E5CBDFE1C3D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9d56172f-150f-427f-87e1-689d314c11ec.roa Signing time: Wed 24 Sep 2025 23:08:50 +0000 ROA not before: Wed 24 Sep 2025 23:08:50 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.64.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:d2:3e:ca:88:18:3d:88:55:73:0b:02:c4:d4:0e:5c:bd:fe:1c:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 23:08:50 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=cd0a2137361d8c346e8b804bbe9ef44d2c372ffa3eef5f669cbbf13c29bc9b54, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:95:8f:f1:65:10:22:c2:15:f0:87:fb:be:58: 80:cc:89:2b:58:59:6d:85:ae:8f:8f:1f:3e:52:f3: 48:da:be:26:d9:de:a5:36:e5:38:b4:82:b2:9e:80: d3:59:6a:73:d5:a9:69:7b:24:be:06:8a:bf:ab:c7: 4b:ce:94:f9:f2:d4:87:6d:11:f9:76:18:c7:6e:3f: 32:d2:c7:c9:b2:dc:e5:12:ee:00:9f:c4:c0:d7:d5: 46:26:36:24:33:fb:3c:a7:36:b8:bf:b7:6f:03:58: cf:6b:ca:f4:c8:99:23:e0:29:8d:da:41:7c:c2:5e: 27:03:34:45:af:05:2a:d8:12:3a:de:fc:5d:3a:89: 6d:56:d6:f1:42:6c:1b:cf:84:9a:da:59:91:d7:ca: aa:6e:ad:df:f1:86:d1:5b:ec:2c:bc:93:5d:a0:ec: 6d:99:f2:e0:8b:c7:8e:0d:cd:f2:51:e7:14:58:fc: 32:86:f6:4c:66:53:82:a8:5a:70:46:37:65:e6:d5: 9d:17:35:54:0a:90:e9:97:d0:6f:f9:4f:15:75:86: bd:a6:36:42:6b:22:89:61:ac:5c:69:3d:4d:73:f6: 9d:e8:5e:56:b9:40:67:c7:c6:0a:ad:89:f5:b2:ea: b2:a7:c7:b3:4f:a4:ad:2f:4c:86:5a:fa:ac:a5:94: 81:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:A5:35:17:15:E2:8B:6A:E9:FD:50:57:C6:5E:60:D3:7C:ED:B7:35 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9d56172f-150f-427f-87e1-689d314c11ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.64.160.0/20 Signature Algorithm: sha256WithRSAEncryption 8e:07:6a:8d:eb:1e:d0:1d:51:36:ad:be:a5:11:ec:53:f1:9d: 19:eb:48:f2:22:43:43:28:6a:d5:7a:38:26:19:61:77:c5:d4: 51:94:04:3e:33:19:53:af:69:3f:d6:42:8a:ee:3b:ce:44:0f: f5:59:78:53:7c:35:7d:71:dd:b4:62:a9:8f:48:46:4d:84:69: 2f:01:fd:92:b2:09:e5:3d:84:dc:24:de:04:c4:ea:ec:43:d9: 39:4a:c0:91:0f:14:40:61:4e:84:a3:7e:e1:09:52:dc:6c:99: cc:23:5a:eb:38:60:ad:6b:44:77:57:04:70:83:db:df:76:13: 6b:66:f3:23:97:40:ba:ee:46:46:4c:67:36:e7:4a:5b:c5:c4: a0:53:7f:b2:36:78:2f:81:9e:02:2b:9b:ec:f6:27:a5:81:ab: 71:cf:5a:1b:b1:57:7a:2d:c1:b6:5c:3a:89:da:9c:34:b4:71: 49:cf:7c:e2:e7:80:33:94:44:60:5a:a1:e3:e7:6e:3a:b4:a0: 57:52:d5:b2:26:fe:b6:0a:e6:52:32:6d:dd:fb:af:56:c2:c5: d4:35:59:0e:0b:7b:c4:2f:df:8f:bb:e2:a7:6b:23:dc:2f:39: 45:b0:7e:f2:10:9b:5e:2c:6b:28:18:6c:56:c9:13:68:1a:1c: 88:f2:3d:3a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYtI+yogYPYhVcwsCxNQOXL3+HD0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MjMwODUwWhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BjZDBhMjEzNzM2MWQ4YzM0NmU4YjgwNGJiZTllZjQ0ZDJj MzcyZmZhM2VlZjVmNjY5Y2JiZjEzYzI5YmM5YjU0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCZlY/xZRAiwhXwh/u+WIDMiStYWW2Fro+PHz5S80javibZ 3qU25Ti0grKegNNZanPVqWl7JL4Gir+rx0vOlPny1IdtEfl2GMduPzLSx8my3OUS 7gCfxMDX1UYmNiQz+zynNri/t28DWM9ryvTImSPgKY3aQXzCXicDNEWvBSrYEjre /F06iW1W1vFCbBvPhJraWZHXyqpurd/xhtFb7Cy8k12g7G2Z8uCLx44NzfJR5xRY /DKG9kxmU4KoWnBGN2Xm1Z0XNVQKkOmX0G/5TxV1hr2mNkJrIolhrFxpPU1z9p3o Xla5QGfHxgqtifWy6rKnx7NPpK0vTIZa+qyllIFZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU66U1FxXii2rp/VBXxl5g03zttzUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzlkNTYxNzJmLTE1MGYtNDI3Zi04N2UxLTY4OWQzMTRjMTFlYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQSQKAwDQYJKoZIhvcNAQELBQADggEBAI4Hao3rHtAdUTatvqUR7FPxnRnr SPIiQ0MoatV6OCYZYXfF1FGUBD4zGVOvaT/WQoruO85ED/VZeFN8NX1x3bRiqY9I Rk2EaS8B/ZKyCeU9hNwk3gTE6uxD2TlKwJEPFEBhToSjfuEJUtxsmcwjWus4YK1r RHdXBHCD2992E2tm8yOXQLruRkZMZzbnSlvFxKBTf7I2eC+BngIrm+z2J6WBq3HP WhuxV3otwbZcOonanDS0cUnPfOLngDOURGBaoePnbjq0oFdS1bIm/rYK5lIybd37 r1bCxdQ1WQ4Le8Qv34+74qdrI9wvOUWwfvIQm14saygYbFbJE2gaHIjyPTo= -----END CERTIFICATE-----Generated at Fri Oct 17 22:05:06 2025 by rpki-client