$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9fbc0c9d-5aad-41b8-95b5-1b9ac6cbd64f.roa File: 9fbc0c9d-5aad-41b8-95b5-1b9ac6cbd64f.roa (raw, json) Hash identifier: JHfy+zKTrR7aGiG7+FrFp5huOSefUoRteVjqhAIRhiA= Subject key identifier: 68:87:17:88:46:66:16:A1:B5:CF:33:FC:4A:62:29:EA:E7:4B:EB:80 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 75063EDAE33BB75DF241E2A54230634496982A95 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9fbc0c9d-5aad-41b8-95b5-1b9ac6cbd64f.roa Signing time: Mon 22 Sep 2025 20:13:04 +0000 ROA not before: Mon 22 Sep 2025 20:13:04 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.165.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:06:3e:da:e3:3b:b7:5d:f2:41:e2:a5:42:30:63:44:96:98:2a:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 20:13:04 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=1e2c2c7cf297134db52712cab85e1df0c51b4664e29b8addb067a015cd5c72f6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:9c:af:ac:e8:4f:e5:87:12:e8:fe:b6:eb:71: b9:50:da:ff:a3:56:76:b9:8c:38:4e:2c:4b:e2:52: fb:ab:42:f1:2d:2d:ef:31:67:27:30:9f:d6:d4:87: 23:3a:6a:a5:8e:14:f5:33:9e:7b:b9:ea:ee:d5:6e: fa:0b:cf:4c:09:1a:54:ff:9e:c9:b1:a0:b4:6d:4a: 65:4c:e1:89:86:3f:63:d8:69:30:e0:f4:18:bd:6f: 08:e8:ab:95:98:17:3d:17:ea:c0:6b:0f:46:f1:73: dc:59:15:48:9d:a3:00:7a:9b:1f:3a:c9:87:d3:18: 09:75:33:be:7e:e1:2b:3f:de:55:76:88:f7:05:9b: a2:67:1a:f2:6d:bc:e4:b8:21:e7:c5:e2:e3:0b:04: 3c:a3:cd:e0:da:79:5d:14:2d:d0:1e:a1:63:3c:8a: 20:79:8d:af:8f:a3:5f:04:71:27:88:46:2d:fa:e9: f6:c6:57:a0:c4:16:f1:af:a7:49:73:81:10:b5:3a: 56:fc:67:bc:7d:ba:d9:9b:98:73:0d:69:46:3e:a8: ae:4c:01:e1:13:91:17:e2:94:c8:be:a4:b3:ad:79: 41:e1:84:67:98:1f:06:aa:5d:22:c1:ed:26:2d:59: f5:e5:97:9f:d7:74:a7:da:19:ea:56:33:77:a8:84: 92:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:87:17:88:46:66:16:A1:B5:CF:33:FC:4A:62:29:EA:E7:4B:EB:80 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9fbc0c9d-5aad-41b8-95b5-1b9ac6cbd64f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.165.96.0/22 Signature Algorithm: sha256WithRSAEncryption 3c:64:c4:cc:81:27:36:48:df:58:61:0f:58:57:04:aa:77:73: 58:ac:ab:cb:de:4e:81:91:67:0a:a3:39:fa:e0:93:b1:c4:8b: 0b:09:8b:52:35:aa:cc:4f:3b:ad:9c:6f:83:85:05:dd:13:62: 01:d0:bd:c6:f6:0e:a0:63:be:e3:95:19:ff:e6:d2:62:ba:fd: 4e:20:d9:f0:60:f5:65:fe:8b:76:5a:5b:3e:4b:a3:72:b3:83: bf:86:48:3b:60:37:3f:30:8d:09:1a:2f:95:ac:4b:51:76:95: 19:c1:14:88:4a:c7:01:f2:93:f8:ef:b8:8c:20:61:c7:1b:e7: 9a:66:88:e4:e5:26:16:53:49:1c:f5:0b:4f:a4:b3:8e:7b:93: 55:46:80:a0:67:4c:61:55:47:6e:c0:f2:02:85:15:ed:05:ec: 3e:63:bf:77:4f:41:0a:e1:b1:e4:8a:88:28:14:ba:57:6a:07: 88:72:96:0d:2d:38:8e:a7:e2:60:c2:45:8f:11:ba:ff:b2:ee: 6b:2c:6c:34:38:47:cd:68:01:78:df:9c:e1:d9:35:88:ee:84: fa:ce:23:d0:ec:af:c1:12:fc:f5:77:9d:cb:ca:0b:b5:95:a1: 03:39:93:c0:93:24:44:f9:3b:c2:91:ec:e2:c9:fb:92:f2:c4: 76:c5:8a:9b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdQY+2uM7t13yQeKlQjBjRJaYKpUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjAxMzA0WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AxZTJjMmM3Y2YyOTcxMzRkYjUyNzEyY2FiODVlMWRmMGM1 MWI0NjY0ZTI5YjhhZGRiMDY3YTAxNWNkNWM3MmY2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCfnK+s6E/lhxLo/rbrcblQ2v+jVna5jDhOLEviUvurQvEt Le8xZycwn9bUhyM6aqWOFPUznnu56u7VbvoLz0wJGlT/nsmxoLRtSmVM4YmGP2PY aTDg9Bi9bwjoq5WYFz0X6sBrD0bxc9xZFUidowB6mx86yYfTGAl1M75+4Ss/3lV2 iPcFm6JnGvJtvOS4IefF4uMLBDyjzeDaeV0ULdAeoWM8iiB5ja+Po18EcSeIRi36 6fbGV6DEFvGvp0lzgRC1Olb8Z7x9utmbmHMNaUY+qK5MAeETkRfilMi+pLOteUHh hGeYHwaqXSLB7SYtWfXll5/XdKfaGepWM3eohJKtAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUaIcXiEZmFqG1zzP8SmIp6udL64AwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzlmYmMwYzlkLTVhYWQtNDFiOC05NWI1LTFiOWFjNmNiZDY0Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAISpWAwDQYJKoZIhvcNAQELBQADggEBADxkxMyBJzZI31hhD1hXBKp3c1is q8veToGRZwqjOfrgk7HEiwsJi1I1qsxPO62cb4OFBd0TYgHQvcb2DqBjvuOVGf/m 0mK6/U4g2fBg9WX+i3ZaWz5Lo3Kzg7+GSDtgNz8wjQkaL5WsS1F2lRnBFIhKxwHy k/jvuIwgYccb55pmiOTlJhZTSRz1C0+ks457k1VGgKBnTGFVR27A8gKFFe0F7D5j v3dPQQrhseSKiCgUuldqB4hylg0tOI6n4mDCRY8Ruv+y7mssbDQ4R81oAXjfnOHZ NYjuhPrOI9Dsr8ES/PV3ncvKC7WVoQM5k8CTJET5O8KR7OLJ+5LyxHbFips= -----END CERTIFICATE-----Generated at Fri Oct 17 22:02:09 2025 by rpki-client