$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9fc06242-a1a3-4c8c-9e9b-dfc06fc151ed.roa File: 9fc06242-a1a3-4c8c-9e9b-dfc06fc151ed.roa (raw, json) Hash identifier: VtVmDpqLFeEn2z1S2kHSunb+fdLCYSW+7RkX8RVRLFY= Subject key identifier: 31:49:0C:C8:CE:19:0E:00:5F:CC:71:22:E2:D6:AE:69:00:21:3D:78 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 14E5256C596B246F74342CCE5AADC8DEE1B801BA Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9fc06242-a1a3-4c8c-9e9b-dfc06fc151ed.roa Signing time: Mon 22 Sep 2025 20:07:05 +0000 ROA not before: Mon 22 Sep 2025 20:07:05 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.164.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:e5:25:6c:59:6b:24:6f:74:34:2c:ce:5a:ad:c8:de:e1:b8:01:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 20:07:05 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=2e8834d3d3fefb4f482d115e2a2d5fa96894c556a333f69993aeab9e3afea5c9, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:aa:c7:1f:8d:49:56:a8:90:ce:8a:89:b3:27: 00:f0:a8:15:38:3b:4d:36:ca:40:d0:9e:04:f5:a2: ba:2c:ae:e0:01:b0:a5:39:8f:69:62:60:ae:ad:c4: 5d:e4:ed:bf:4e:e3:17:36:a5:d2:26:ba:08:89:74: 95:e7:dc:e8:f8:97:7c:64:3a:75:d1:05:10:dc:2e: 32:d6:a4:31:8c:7f:0f:78:66:00:f3:3c:3c:d1:6a: c4:22:6d:dd:21:b2:74:14:3d:2d:87:d2:7d:5b:ac: 9d:f5:ee:62:aa:89:b2:c8:8e:38:fc:ae:3d:20:b2: 62:29:2f:fb:b9:3c:98:1f:0c:b7:88:0f:7a:4a:05: 5b:29:67:9c:58:9e:f0:ce:bf:0e:e4:43:cd:6a:f4: 99:04:b3:96:88:d4:bb:15:ac:e9:d0:bf:c6:da:cf: 16:74:6d:aa:6d:6a:4b:4f:0a:e1:31:2b:dd:4b:e2: cb:37:40:5e:4d:b0:71:fb:f5:d7:a6:3a:e2:aa:27: 17:0f:ea:15:db:7e:3d:a7:d3:09:c3:2c:77:ab:94: 4d:ff:e0:b8:a7:fe:9b:ac:81:e2:ff:f7:a6:c5:e9: 6c:89:4f:1b:bd:ee:fc:ae:bc:07:72:6e:3d:33:79: 49:6e:4d:92:b0:69:b5:3d:3a:4d:a0:fe:db:7a:b9: a0:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:49:0C:C8:CE:19:0E:00:5F:CC:71:22:E2:D6:AE:69:00:21:3D:78 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9fc06242-a1a3-4c8c-9e9b-dfc06fc151ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.164.20.0/22 Signature Algorithm: sha256WithRSAEncryption 3b:d1:80:d3:dc:22:08:f4:6b:9a:e8:db:ac:41:75:9b:fc:8e: bf:70:90:12:72:4a:89:98:fc:58:09:3e:a5:08:c1:bd:6f:ee: e6:f2:fb:b7:eb:a9:ac:e8:c8:ce:63:a9:06:7f:25:84:e7:61: f5:eb:62:d3:db:b2:e9:15:d0:11:7c:e4:76:75:3b:76:12:fd: 7a:a6:09:cb:a0:ac:d9:fa:18:2f:00:48:5f:eb:9d:9d:33:0a: 4a:32:a8:a6:3a:bf:b4:ee:f0:84:72:00:ff:de:bc:ed:17:e4: 2d:f3:81:cd:01:ab:cc:ef:d0:81:62:af:d7:84:79:22:dd:48: 41:b4:85:f2:a1:73:78:6a:08:4a:96:00:de:df:6b:a4:6d:e8: d5:d4:90:ef:9a:13:a2:c1:3b:b3:8a:75:88:af:c2:a5:f8:fc: bf:6e:28:fd:dc:3d:f4:e1:2b:4e:fb:43:12:41:a6:79:14:11: 47:68:4e:cc:26:f5:ee:ad:0a:31:33:f6:c7:eb:cb:d4:0c:b3: b5:d8:d8:ca:9b:8e:33:d2:be:99:d1:44:5c:68:35:64:51:8a: fb:ac:b2:ff:2e:ef:24:8b:d9:42:e6:23:81:57:b5:a5:15:45: 3c:cc:c2:fd:d7:25:22:2a:2c:2d:26:ad:c7:ee:fa:c9:ec:c6: f6:fa:a2:d5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFOUlbFlrJG90NCzOWq3I3uG4AbowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMjAwNzA1WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AyZTg4MzRkM2QzZmVmYjRmNDgyZDExNWUyYTJkNWZhOTY4 OTRjNTU2YTMzM2Y2OTk5M2FlYWI5ZTNhZmVhNWM5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDdqscfjUlWqJDOiomzJwDwqBU4O002ykDQngT1orosruAB sKU5j2liYK6txF3k7b9O4xc2pdImugiJdJXn3Oj4l3xkOnXRBRDcLjLWpDGMfw94 ZgDzPDzRasQibd0hsnQUPS2H0n1brJ317mKqibLIjjj8rj0gsmIpL/u5PJgfDLeI D3pKBVspZ5xYnvDOvw7kQ81q9JkEs5aI1LsVrOnQv8bazxZ0baptaktPCuExK91L 4ss3QF5NsHH79demOuKqJxcP6hXbfj2n0wnDLHerlE3/4Lin/pusgeL/96bF6WyJ Txu97vyuvAdybj0zeUluTZKwabU9Ok2g/tt6uaC/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUMUkMyM4ZDgBfzHEi4tauaQAhPXgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzlmYzA2MjQyLWExYTMtNGM4Yy05ZTliLWRmYzA2ZmMxNTFlZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAISpBQwDQYJKoZIhvcNAQELBQADggEBADvRgNPcIgj0a5ro26xBdZv8jr9w kBJySomY/FgJPqUIwb1v7uby+7frqazoyM5jqQZ/JYTnYfXrYtPbsukV0BF85HZ1 O3YS/XqmCcugrNn6GC8ASF/rnZ0zCkoyqKY6v7Tu8IRyAP/evO0X5C3zgc0Bq8zv 0IFir9eEeSLdSEG0hfKhc3hqCEqWAN7fa6Rt6NXUkO+aE6LBO7OKdYivwqX4/L9u KP3cPfThK077QxJBpnkUEUdoTswm9e6tCjEz9sfry9QMs7XY2MqbjjPSvpnRRFxo NWRRivussv8u7ySL2ULmI4FXtaUVRTzMwv3XJSIqLC0mrcfu+snsxvb6otU= -----END CERTIFICATE-----Generated at Fri Oct 17 23:41:24 2025 by rpki-client