$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ab98925a-9087-41f5-9ffb-10973a502d37.roa File: ab98925a-9087-41f5-9ffb-10973a502d37.roa (raw, json) Hash identifier: GJkewJzc4omUAXY6rGimSlf8nVWpx6/KRn9u562oXMU= Subject key identifier: A5:E6:8E:F3:92:41:59:E2:EF:AC:27:1B:C3:DD:30:98:B6:AC:5A:F0 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5946B09F58BA16438C577210D543AD4A04EEA8E4 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ab98925a-9087-41f5-9ffb-10973a502d37.roa Signing time: Mon 22 Sep 2025 18:15:34 +0000 ROA not before: Mon 22 Sep 2025 18:15:34 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.160.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:46:b0:9f:58:ba:16:43:8c:57:72:10:d5:43:ad:4a:04:ee:a8:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 18:15:34 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=fa2cae024e23000c5ef92f0dd559b769182f3545b894c77e73b3ed6eeb32312c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d4:b9:07:ff:db:df:f0:a3:ef:0a:d6:73:4f: ba:96:7f:ce:92:8d:34:88:c5:13:fd:b8:0f:89:ff: d4:58:f0:49:0f:80:2e:cf:c4:8d:2c:d8:3e:13:04: b3:8b:28:80:5f:22:cf:4b:77:aa:ba:a4:fa:b8:e8: e7:35:8e:24:1f:5c:1d:d7:6e:bf:70:fc:42:83:a7: 76:5e:b3:23:ff:c5:8e:94:06:42:a0:b8:54:a4:29: ec:cc:c3:55:9d:cb:46:67:90:49:74:88:4f:3a:25: 9a:89:3a:cc:2d:59:0f:75:d0:6b:f8:90:b2:fc:4c: 10:15:09:19:30:81:0e:3e:10:bd:99:e0:a4:3f:54: d6:3d:82:fb:fe:06:da:a9:54:26:76:10:ff:4d:03: 9a:51:57:8d:36:e9:26:82:26:79:59:f8:7c:9c:cf: 06:51:a3:75:84:0b:ae:92:a7:5b:41:3f:74:72:f4: 38:99:d5:c4:7d:18:da:eb:94:33:24:9d:8c:4d:82: 96:b0:d5:d7:ba:44:bc:0a:85:73:f9:df:2b:57:c4: db:f4:24:0c:74:9b:8f:f4:e7:31:f4:2a:28:c0:20: 7a:bf:9f:65:73:40:de:52:e6:2f:94:eb:18:da:cf: 5b:5b:cc:2d:3a:c2:17:6d:a3:84:27:6a:ff:9d:29: cf:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:E6:8E:F3:92:41:59:E2:EF:AC:27:1B:C3:DD:30:98:B6:AC:5A:F0 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ab98925a-9087-41f5-9ffb-10973a502d37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.160.174.0/24 Signature Algorithm: sha256WithRSAEncryption 68:66:fc:01:6a:6d:4e:15:b4:d5:be:3b:32:6c:9c:b3:24:db: 13:38:48:35:77:02:38:65:8d:28:27:b7:0c:74:48:05:73:c6: b2:79:9a:a0:a8:5d:1d:be:77:76:ef:8b:a3:b8:cc:c0:97:12: 0e:42:8b:cc:5f:e5:74:f4:b2:91:0c:c5:25:40:e6:b0:ff:81: 9a:3f:34:d4:c6:7b:df:8b:ec:0a:6a:33:51:f7:76:44:b6:b0: 92:14:b6:f9:94:46:d7:79:b2:55:14:77:59:24:93:82:8c:e0: 83:cf:5c:16:b8:12:12:05:51:a8:20:60:3a:8e:4e:40:41:d9: 5c:20:54:10:c7:f2:07:a3:ae:19:42:d2:0d:a7:0c:56:e7:75: a4:e0:4a:ca:2b:2c:39:7c:a2:7e:0e:f8:c7:12:40:f5:e3:bd: 8c:3e:c7:5f:95:f7:f6:12:4c:4f:f7:ad:a3:09:5c:9e:3f:c3: 9a:41:45:a8:83:5e:d8:8c:c1:4c:24:eb:dc:bf:4f:64:aa:18: ca:3d:2b:c1:af:c1:cd:e4:d5:57:77:76:d6:47:d8:03:18:43: c9:0a:7e:0e:c2:45:9a:22:94:e4:b8:ef:93:5d:ec:6d:3f:6f: 24:45:71:61:02:f6:26:3e:47:ae:18:65:94:8c:5c:5e:78:9b: b2:74:27:51 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWUawn1i6FkOMV3IQ1UOtSgTuqOQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMTgxNTM0WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BmYTJjYWUwMjRlMjMwMDBjNWVmOTJmMGRkNTU5Yjc2OTE4 MmYzNTQ1Yjg5NGM3N2U3M2IzZWQ2ZWViMzIzMTJjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJ1LkH/9vf8KPvCtZzT7qWf86SjTSIxRP9uA+J/9RY8EkP gC7PxI0s2D4TBLOLKIBfIs9Ld6q6pPq46Oc1jiQfXB3Xbr9w/EKDp3ZesyP/xY6U BkKguFSkKezMw1Wdy0ZnkEl0iE86JZqJOswtWQ910Gv4kLL8TBAVCRkwgQ4+EL2Z 4KQ/VNY9gvv+BtqpVCZ2EP9NA5pRV4026SaCJnlZ+HyczwZRo3WEC66Sp1tBP3Ry 9DiZ1cR9GNrrlDMknYxNgpaw1de6RLwKhXP53ytXxNv0JAx0m4/05zH0KijAIHq/ n2VzQN5S5i+U6xjaz1tbzC06whdto4Qnav+dKc8JAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUpeaO85JBWeLvrCcbw90wmLasWvAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2FiOTg5MjVhLTkwODctNDFmNS05ZmZiLTEwOTczYTUwMmQzNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASoK4wDQYJKoZIhvcNAQELBQADggEBAGhm/AFqbU4VtNW+OzJsnLMk2xM4 SDV3AjhljSgntwx0SAVzxrJ5mqCoXR2+d3bvi6O4zMCXEg5Ci8xf5XT0spEMxSVA 5rD/gZo/NNTGe9+L7ApqM1H3dkS2sJIUtvmURtd5slUUd1kkk4KM4IPPXBa4EhIF UaggYDqOTkBB2VwgVBDH8gejrhlC0g2nDFbndaTgSsorLDl8on4O+McSQPXjvYw+ x1+V9/YSTE/3raMJXJ4/w5pBRaiDXtiMwUwk69y/T2SqGMo9K8Gvwc3k1Vd3dtZH 2AMYQ8kKfg7CRZoilOS475Nd7G0/byRFcWEC9iY+R64YZZSMXF54m7J0J1E= -----END CERTIFICATE-----Generated at Fri Oct 17 21:55:15 2025 by rpki-client