$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/054fae47-c338-432b-8e12-92d8e61cf3ac.roa File: 054fae47-c338-432b-8e12-92d8e61cf3ac.roa (raw, json) Hash identifier: bZxvrXp9j6TvexeaZuqyWuLPoJ0Y4c3PJaOTXJVQsM0= Subject key identifier: A9:6E:5E:2F:F1:03:11:2B:D0:01:5A:61:44:96:49:34:2A:3A:22:75 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 351C06B58A74A917FD73673972AB54FBAAEE184E Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/054fae47-c338-432b-8e12-92d8e61cf3ac.roa Signing time: Sun 19 Oct 2025 14:50:13 +0000 ROA not before: Sun 19 Oct 2025 14:50:13 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.67.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:1c:06:b5:8a:74:a9:17:fd:73:67:39:72:ab:54:fb:aa:ee:18:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 14:50:13 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=9a269564fd775f45fdecd94a86585163d89f20665e58ddcc4bce46d32f46705d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:77:1c:f1:ab:89:83:49:44:b1:54:3d:a1:f1: 1c:69:68:e8:2d:80:58:0e:a4:8b:87:c3:aa:35:38: 55:35:fb:dc:d3:e4:09:a2:31:ed:e0:26:36:04:b1: 5a:82:ac:3a:08:b6:c8:9f:c5:23:72:06:43:13:14: af:66:42:5b:4d:8a:e1:25:ba:f4:5b:8a:18:eb:b3: 71:17:b4:a8:2d:de:9b:1a:26:d9:2a:0b:8f:3a:da: c4:f1:e0:c2:b2:77:45:ab:1a:33:e6:d8:c3:9b:cf: 9c:bb:49:61:7b:ae:6d:35:12:ec:95:ae:7c:f5:23: 2f:b7:1f:3d:23:a8:86:4e:64:7a:1a:d6:2d:38:7d: ce:c3:17:54:b1:4e:5d:45:6e:55:29:1f:e6:44:40: 34:16:7a:01:d2:e5:91:25:ea:51:af:4e:7f:9f:ab: 16:e2:9b:b2:99:cf:f7:8b:f5:17:de:80:76:6e:3a: ee:a5:83:8b:c4:c2:f0:14:52:be:16:85:12:f5:c3: 09:57:97:44:a6:07:18:a5:74:4f:1c:97:2f:f2:09: 5b:98:e3:7f:eb:b3:c6:32:a7:92:eb:8f:54:33:b0: ae:78:a9:9a:5c:18:cf:46:bb:5f:6b:27:db:51:f2: 85:89:dc:b9:89:08:dd:f8:9b:86:ae:1a:66:c1:9f: 6d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:6E:5E:2F:F1:03:11:2B:D0:01:5A:61:44:96:49:34:2A:3A:22:75 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/054fae47-c338-432b-8e12-92d8e61cf3ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.67.96.0/24 Signature Algorithm: sha256WithRSAEncryption 73:69:16:b0:21:43:32:2d:c7:ab:b8:50:70:bc:0f:c2:ab:79: ee:18:48:8a:d6:5b:fb:3a:d4:21:2e:5f:58:79:24:92:3b:d8: 52:16:c6:10:b2:bf:6c:48:67:f2:bf:ac:9b:f8:23:f8:f5:7f: a5:9a:a4:31:67:24:af:fa:ea:b8:7c:0d:52:a0:c7:9c:6f:c3: 13:39:b3:90:bc:8d:9e:53:c8:85:83:f1:1b:7c:e1:94:1c:e8: a9:b2:6c:51:24:7d:d0:92:95:7f:48:82:35:24:e4:71:6b:75: 49:77:99:41:af:8b:e2:4d:d7:44:c3:c7:58:b5:0c:08:9e:02: d0:fe:f2:13:41:f2:cd:e3:4e:91:d6:16:f1:e6:86:b0:33:55: a6:f6:a1:b8:4d:b5:12:45:25:5c:ad:f6:2d:e4:97:16:cb:f7: 80:48:7c:7a:e1:e3:53:1e:b9:7f:51:f7:9f:c5:fd:78:59:3d: 5d:32:d7:61:e5:33:57:60:1b:a3:6a:0f:f8:aa:83:7c:50:0a: 40:0e:dd:5e:bd:bf:f6:b3:a6:36:71:41:c0:9e:9b:53:2b:e7: bc:38:22:cb:f5:99:65:ac:75:ae:47:44:20:09:50:17:71:06: 5f:29:22:39:9d:e3:6d:e8:e7:3d:dc:9e:06:57:22:3a:70:72: a2:42:cb:c3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNRwGtYp0qRf9c2c5cqtU+6ruGE4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTQ1MDEzWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A5YTI2OTU2NGZkNzc1ZjQ1ZmRlY2Q5NGE4NjU4NTE2M2Q4 OWYyMDY2NWU1OGRkY2M0YmNlNDZkMzJmNDY3MDVkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2dxzxq4mDSUSxVD2h8RxpaOgtgFgOpIuHw6o1OFU1+9zT 5AmiMe3gJjYEsVqCrDoItsifxSNyBkMTFK9mQltNiuEluvRbihjrs3EXtKgt3psa JtkqC4862sTx4MKyd0WrGjPm2MObz5y7SWF7rm01EuyVrnz1Iy+3Hz0jqIZOZHoa 1i04fc7DF1SxTl1FblUpH+ZEQDQWegHS5ZEl6lGvTn+fqxbim7KZz/eL9RfegHZu Ou6lg4vEwvAUUr4WhRL1wwlXl0SmBxildE8cly/yCVuY43/rs8Yyp5Lrj1QzsK54 qZpcGM9Gu19rJ9tR8oWJ3LmJCN34m4auGmbBn23pAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUqW5eL/EDESvQAVphRJZJNCo6InUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzA1NGZhZTQ3LWMzMzgtNDMyYi04ZTEyLTkyZDhlNjFjZjNhYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASQ2AwDQYJKoZIhvcNAQELBQADggEBAHNpFrAhQzItx6u4UHC8D8Kree4Y SIrWW/s61CEuX1h5JJI72FIWxhCyv2xIZ/K/rJv4I/j1f6WapDFnJK/66rh8DVKg x5xvwxM5s5C8jZ5TyIWD8Rt84ZQc6KmybFEkfdCSlX9IgjUk5HFrdUl3mUGvi+JN 10TDx1i1DAieAtD+8hNB8s3jTpHWFvHmhrAzVab2obhNtRJFJVyt9i3klxbL94BI fHrh41MeuX9R95/F/XhZPV0y12HlM1dgG6NqD/iqg3xQCkAO3V69v/azpjZxQcCe m1Mr57w4Isv1mWWsda5HRCAJUBdxBl8pIjmd423o5z3cngZXIjpwcqJCy8M= -----END CERTIFICATE-----Generated at Mon Oct 20 03:06:28 2025 by rpki-client