$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ac1566e6-f51b-453d-b4e7-2434b3c89fe1.roa File: ac1566e6-f51b-453d-b4e7-2434b3c89fe1.roa (raw, json) Hash identifier: S6JKPxIRUZoLmJ3CZK/9s9z+Cj9/E97e8OQpIsqNAdA= Subject key identifier: E7:03:0A:AE:81:76:DF:B4:1E:2A:E1:1B:11:C7:AD:9D:BF:7F:B7:2B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7416E1F3C42D7ECB0779D059D7E603014D3A858A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ac1566e6-f51b-453d-b4e7-2434b3c89fe1.roa Signing time: Mon 22 Sep 2025 19:58:34 +0000 ROA not before: Mon 22 Sep 2025 19:58:34 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.165.148.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:16:e1:f3:c4:2d:7e:cb:07:79:d0:59:d7:e6:03:01:4d:3a:85:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 19:58:34 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=3e0d90f97631ddcbc1aab11ea70849a26f6659f0ac56ac0822b15cc33d04ee60, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:cd:37:ca:4a:fa:2e:2f:a8:30:72:1b:30:65: 07:98:fd:a3:ae:70:97:4c:77:f5:36:46:0c:0b:87: 6c:f4:8c:4a:5e:e2:29:e9:f2:2c:fc:fb:4b:83:bb: 3e:f6:44:b8:34:a2:01:df:52:8e:85:12:60:4f:87: c3:51:96:13:77:7d:ab:8e:87:13:4a:ef:c0:87:63: ba:8c:dd:2c:d5:57:d4:5e:3e:a1:07:2d:58:33:ce: e6:71:9b:82:31:21:16:ae:cb:93:b5:f2:be:f5:6a: 3a:a6:31:4a:c5:c9:cc:b1:90:dc:43:32:f3:d7:c9: 60:2f:da:8c:77:d0:5a:5c:9f:ac:71:4c:73:f1:34: 70:5d:c5:71:0e:5c:ca:70:c9:c2:91:5f:63:af:c8: 87:13:33:d3:d4:3e:a3:34:59:39:aa:81:b2:2e:2c: ef:46:0f:15:82:2d:95:1c:90:4d:c2:6d:8b:3b:26: 5e:af:7d:c6:88:c8:2d:f9:e1:e7:d7:f4:c9:c7:c0: 59:9d:d8:c6:43:69:6a:9f:18:a7:73:cf:e4:37:68: 91:34:78:79:90:90:fd:9d:c1:a1:67:8a:aa:c4:13: f0:6f:8f:57:bf:4f:d7:5e:70:bc:4d:f3:43:57:06: d6:ef:d8:62:aa:cb:ac:a4:5a:c1:9f:94:6e:5f:97: 0a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:03:0A:AE:81:76:DF:B4:1E:2A:E1:1B:11:C7:AD:9D:BF:7F:B7:2B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ac1566e6-f51b-453d-b4e7-2434b3c89fe1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.165.148.0/23 Signature Algorithm: sha256WithRSAEncryption 41:35:6b:cf:6b:5a:b9:2f:f7:e3:c2:73:d3:1b:6a:91:5f:6b: 0c:5d:76:28:f5:0a:dd:c0:45:42:d1:c7:75:a3:1d:b8:d2:08: fc:fb:15:b2:7b:d6:56:b0:49:8e:cd:a2:1d:2e:c8:90:83:80: 89:a2:4d:97:51:88:4c:25:ec:ca:ee:90:31:23:f0:6d:59:d6: 03:ec:45:3c:b7:10:86:35:15:b4:94:5e:97:22:d9:81:ba:77: 06:0e:bf:9c:20:0d:10:ff:02:ba:8b:a2:10:9a:62:04:ba:af: d3:63:53:99:06:13:da:1f:f7:1e:fb:cb:e2:24:e7:62:a6:9b: 5b:86:32:e7:a6:24:7e:ad:99:57:76:4c:7e:87:c8:f1:b0:80: 3a:e2:2b:aa:39:d8:43:2b:2a:9e:ff:cf:3b:56:78:5f:98:0b: bf:76:45:1a:f3:58:10:5d:b5:c8:86:a6:ca:6d:85:77:fd:de: c7:c6:9e:9c:ba:13:c1:ad:3f:74:70:c7:57:3c:c9:5a:a1:05: b2:cd:9a:bb:a1:51:d7:e9:8c:52:74:3a:0a:ce:d4:ce:ac:e5: cf:97:f9:aa:a1:3c:ad:04:e6:46:72:1f:37:cd:82:99:d0:af: c0:77:36:62:3d:6a:6a:51:c9:de:fa:2d:6f:bf:22:f4:03:d7: 4e:15:5b:75 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdBbh88QtfssHedBZ1+YDAU06hYowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMTk1ODM0WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AzZTBkOTBmOTc2MzFkZGNiYzFhYWIxMWVhNzA4NDlhMjZm NjY1OWYwYWM1NmFjMDgyMmIxNWNjMzNkMDRlZTYwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDVzTfKSvouL6gwchswZQeY/aOucJdMd/U2RgwLh2z0jEpe 4inp8iz8+0uDuz72RLg0ogHfUo6FEmBPh8NRlhN3fauOhxNK78CHY7qM3SzVV9Re PqEHLVgzzuZxm4IxIRauy5O18r71ajqmMUrFycyxkNxDMvPXyWAv2ox30Fpcn6xx THPxNHBdxXEOXMpwycKRX2OvyIcTM9PUPqM0WTmqgbIuLO9GDxWCLZUckE3CbYs7 Jl6vfcaIyC354efX9MnHwFmd2MZDaWqfGKdzz+Q3aJE0eHmQkP2dwaFniqrEE/Bv j1e/T9decLxN80NXBtbv2GKqy6ykWsGflG5flwrrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU5wMKroF237QeKuEbEcetnb9/tyswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2FjMTU2NmU2LWY1MWItNDUzZC1iNGU3LTI0MzRiM2M4OWZlMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESpZQwDQYJKoZIhvcNAQELBQADggEBAEE1a89rWrkv9+PCc9MbapFfawxd dij1Ct3ARULRx3WjHbjSCPz7FbJ71lawSY7Noh0uyJCDgImiTZdRiEwl7MrukDEj 8G1Z1gPsRTy3EIY1FbSUXpci2YG6dwYOv5wgDRD/ArqLohCaYgS6r9NjU5kGE9of 9x77y+Ik52Kmm1uGMuemJH6tmVd2TH6HyPGwgDriK6o52EMrKp7/zztWeF+YC792 RRrzWBBdtciGpspthXf93sfGnpy6E8GtP3Rwx1c8yVqhBbLNmruhUdfpjFJ0OgrO 1M6s5c+X+aqhPK0E5kZyHzfNgpnQr8B3NmI9ampRyd76LW+/IvQD104VW3U= -----END CERTIFICATE-----Generated at Fri Oct 17 23:48:30 2025 by rpki-client