$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9e13f821-e46b-47b6-8502-1c0d042a484b.roa File: 9e13f821-e46b-47b6-8502-1c0d042a484b.roa (raw, json) Hash identifier: uEOhVlWh1vKlV2SIRQHvhikmFh2aojYodw7+3TOfyIE= Subject key identifier: 14:A0:1C:98:E3:66:B7:7C:5E:BF:FE:E8:10:7E:19:FE:0F:A9:A0:38 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 22CAF95AECDDA773A9D7126EE52F7D6EBF45C6EF Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9e13f821-e46b-47b6-8502-1c0d042a484b.roa Signing time: Mon 22 Sep 2025 18:24:06 +0000 ROA not before: Mon 22 Sep 2025 18:24:06 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.160.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:ca:f9:5a:ec:dd:a7:73:a9:d7:12:6e:e5:2f:7d:6e:bf:45:c6:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 18:24:06 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=233620c140b024789ef23d98d4b3b3a79f41bb91df9f3ff7f52ecad38ad1bcb1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:94:aa:9c:22:0d:1a:7b:a5:97:c8:20:78:f8: df:8f:42:83:32:03:fb:2d:79:82:1a:be:89:4a:81: 5e:d2:ec:fc:75:23:70:f1:9e:56:57:41:36:a0:aa: 08:c6:73:bf:2c:46:a7:b6:0a:f4:82:45:7d:a9:f3: a2:8f:28:2a:3a:8d:5b:b0:20:ba:f6:6e:9b:03:1e: 9d:b7:ee:95:2f:2e:6a:36:84:9a:3f:ff:33:75:e9: 2d:05:f4:de:76:9f:f3:f9:9c:25:ac:89:9f:b5:72: 87:a4:be:75:c9:0c:7d:01:ec:e7:b0:ed:e9:c4:51: db:3c:d2:3e:04:9a:47:11:86:b9:98:79:60:58:31: 87:cc:61:3b:51:7a:5f:9d:5f:9f:e0:28:a7:57:a9: 22:85:94:70:74:04:f9:7a:e0:6d:96:03:13:3f:4e: 9a:a8:66:8b:82:17:fb:32:d5:86:78:c7:65:9e:2b: b3:ff:57:4b:d4:62:3a:42:ec:1f:c0:a4:3a:30:cf: e0:29:32:0d:f1:48:64:93:8f:9a:3e:a1:0e:0b:0d: 66:50:5e:6f:05:5a:12:62:5f:01:28:43:b8:e4:00: c4:43:40:05:bc:a2:ae:ae:73:66:92:3b:8d:7d:a9: ca:d0:ad:e5:5e:39:86:cc:8f:cf:85:97:4f:39:8a: 79:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:A0:1C:98:E3:66:B7:7C:5E:BF:FE:E8:10:7E:19:FE:0F:A9:A0:38 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9e13f821-e46b-47b6-8502-1c0d042a484b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.160.48.0/24 Signature Algorithm: sha256WithRSAEncryption 98:63:a4:99:d0:b7:eb:e8:8d:55:41:97:7a:bf:f4:3b:62:53: 1a:1d:3e:6f:bc:23:be:f2:60:1f:39:62:bf:26:51:ad:7b:98: 0a:73:bd:73:48:29:e9:44:0c:1f:7a:2b:86:bb:35:a9:c4:1b: 68:42:22:11:e2:b9:3e:f9:aa:63:70:dc:cb:0a:11:7b:85:66: 24:a4:80:5b:7f:0c:0d:7d:76:1d:05:e0:f0:d8:f9:dd:7a:d8: 99:03:f1:7a:2d:39:ca:be:28:1b:41:c8:26:5d:7b:ff:bb:ef: 81:f4:80:92:8a:31:5e:ca:c9:6e:71:bd:72:e2:1a:43:32:fa: 1e:0a:97:79:3c:d6:80:39:a1:d1:8b:bb:00:61:38:5d:c3:85: e2:fc:38:d9:c2:52:bc:d4:78:76:4d:b2:b7:6d:29:f4:b4:20: 0d:33:d0:b1:48:6e:a0:10:9b:2c:d2:81:b3:1c:87:ef:45:2d: 21:da:f0:01:1e:7a:01:0c:6c:2b:ec:84:c4:6e:3f:36:08:d4: 8d:dd:83:db:45:53:4b:27:a4:69:e8:bf:41:29:0e:38:00:e7: bd:07:b8:b5:d8:ad:1a:a4:cd:0b:40:27:dd:ed:06:bf:21:6a: db:c2:4d:54:ad:c7:99:b6:b1:29:cb:39:83:cb:15:70:26:04: 6f:dc:4c:76 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIsr5Wuzdp3Op1xJu5S99br9Fxu8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMTgyNDA2WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AyMzM2MjBjMTQwYjAyNDc4OWVmMjNkOThkNGIzYjNhNzlm NDFiYjkxZGY5ZjNmZjdmNTJlY2FkMzhhZDFiY2IxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwlKqcIg0ae6WXyCB4+N+PQoMyA/steYIavolKgV7S7Px1 I3DxnlZXQTagqgjGc78sRqe2CvSCRX2p86KPKCo6jVuwILr2bpsDHp237pUvLmo2 hJo//zN16S0F9N52n/P5nCWsiZ+1coekvnXJDH0B7Oew7enEUds80j4EmkcRhrmY eWBYMYfMYTtRel+dX5/gKKdXqSKFlHB0BPl64G2WAxM/TpqoZouCF/sy1YZ4x2We K7P/V0vUYjpC7B/ApDowz+ApMg3xSGSTj5o+oQ4LDWZQXm8FWhJiXwEoQ7jkAMRD QAW8oq6uc2aSO419qcrQreVeOYbMj8+Fl085inkNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUFKAcmONmt3xev/7oEH4Z/g+poDgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzllMTNmODIxLWU0NmItNDdiNi04NTAyLTFjMGQwNDJhNDg0Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASoDAwDQYJKoZIhvcNAQELBQADggEBAJhjpJnQt+vojVVBl3q/9DtiUxod Pm+8I77yYB85Yr8mUa17mApzvXNIKelEDB96K4a7NanEG2hCIhHiuT75qmNw3MsK EXuFZiSkgFt/DA19dh0F4PDY+d162JkD8XotOcq+KBtByCZde/+774H0gJKKMV7K yW5xvXLiGkMy+h4Kl3k81oA5odGLuwBhOF3DheL8ONnCUrzUeHZNsrdtKfS0IA0z 0LFIbqAQmyzSgbMch+9FLSHa8AEeegEMbCvshMRuPzYI1I3dg9tFU0snpGnov0Ep DjgA570HuLXYrRqkzQtAJ93tBr8hatvCTVStx5m2sSnLOYPLFXAmBG/cTHY= -----END CERTIFICATE-----Generated at Fri Oct 17 22:03:21 2025 by rpki-client