$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0716536b-6772-4302-a500-38bf4bd99b9c.roa File: 0716536b-6772-4302-a500-38bf4bd99b9c.roa (raw, json) Hash identifier: 08Whf9xfOj5t6j6thxJdXtMQeMh6RydTPYEvNEHqVlg= Subject key identifier: D9:AB:94:5B:54:5C:1B:0A:8A:77:FC:E3:F0:D9:50:E8:2C:77:A1:3C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2C80CC434A6F61FE6A4D08EA3B62CCE2C77D4DD0 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0716536b-6772-4302-a500-38bf4bd99b9c.roa Signing time: Sun 19 Oct 2025 16:32:37 +0000 ROA not before: Sun 19 Oct 2025 16:32:37 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.67.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:80:cc:43:4a:6f:61:fe:6a:4d:08:ea:3b:62:cc:e2:c7:7d:4d:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 16:32:37 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=aa0bb3b56b2c35672a69b3bd44ad96f2c82e5cbce162b8ce9cf9b7186ef91bdd, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a9:61:e2:3e:92:79:c7:61:81:4e:00:9b:99: 65:56:88:4a:92:9f:21:f9:59:66:f9:17:d7:ea:42: 0a:0b:13:42:19:d0:78:ad:f6:ed:64:e0:a3:98:7e: 31:76:b1:8c:2a:54:f0:fe:68:f4:75:53:fd:69:8d: 04:d2:9f:a8:40:e6:a5:b6:b4:fa:33:ea:db:c3:b6: 32:77:19:ec:3c:8e:0f:0e:3e:2a:d8:23:a6:be:03: 0d:06:b3:be:d0:82:fb:68:4e:7a:61:b0:28:f2:ec: 53:9e:e3:a4:7e:87:95:55:8d:eb:9c:94:56:ce:9b: 22:9b:ad:1f:f1:95:d9:14:75:b6:b7:4b:06:9a:7e: 63:02:0e:70:a1:ad:ef:4b:d2:cf:c1:1b:d5:88:17: 6d:0f:d8:63:04:10:7f:08:af:bb:be:fd:59:94:e7: 77:66:c2:35:fb:8c:1d:a7:ef:8d:88:75:49:d0:a4: 4d:cb:bd:f4:2e:a0:0d:c1:7f:16:db:8c:ac:7a:ee: 41:5a:30:09:15:d8:e3:90:30:98:3d:61:7d:36:48: ae:2c:e4:66:ca:e6:35:6d:56:7a:bf:d2:7d:f7:b6: c0:7a:da:fd:de:b1:bf:80:3b:c2:27:96:eb:f8:6f: 37:54:d7:e2:a9:0c:ae:0f:ad:c9:ec:3f:ed:81:89: a7:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:AB:94:5B:54:5C:1B:0A:8A:77:FC:E3:F0:D9:50:E8:2C:77:A1:3C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0716536b-6772-4302-a500-38bf4bd99b9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.67.51.0/24 Signature Algorithm: sha256WithRSAEncryption ae:1f:ff:ac:05:c2:d2:0e:90:5d:fc:64:30:63:aa:e9:a6:51: f5:5f:47:59:28:10:f4:67:b8:9c:52:1e:03:15:0d:5c:37:69: 0a:a2:ac:a9:e7:c8:47:27:5e:9b:59:fd:e6:52:6a:18:62:64: 3b:e0:0a:b8:20:99:de:db:aa:95:15:e2:50:37:52:bc:ec:67: c3:51:07:a6:16:3a:58:18:49:98:ac:90:de:1b:ca:bb:73:a0: e4:fe:10:20:ca:87:07:99:7a:b2:6d:86:4e:55:c0:18:c2:c2: e1:69:26:05:f3:cd:8c:56:d3:25:c8:62:d1:a0:ad:b0:bb:53: 15:3d:51:6e:2e:8f:e6:98:18:54:c9:97:45:00:20:f9:8e:7a: f5:f7:c8:4d:0c:6e:7c:8a:9b:bb:38:7c:ee:c3:18:07:c6:6a: 22:fa:e6:3f:fc:a7:19:67:a5:21:85:91:f9:b2:92:97:31:89: fa:7a:1d:81:5d:cc:f5:b0:a8:67:45:bc:c0:16:dc:4d:1f:d1: 0f:39:af:4b:ea:c4:56:23:25:9e:ae:55:b0:3a:65:29:54:9f: 3e:58:9d:c3:df:e8:80:8c:82:8e:03:4e:d9:ee:08:31:13:00: bb:1b:13:8a:6c:9e:a8:e8:60:cd:ee:f1:41:53:0a:86:46:d7: 34:14:1c:4c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULIDMQ0pvYf5qTQjqO2LM4sd9TdAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTYzMjM3WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BhYTBiYjNiNTZiMmMzNTY3MmE2OWIzYmQ0NGFkOTZmMmM4 MmU1Y2JjZTE2MmI4Y2U5Y2Y5YjcxODZlZjkxYmRkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFqWHiPpJ5x2GBTgCbmWVWiEqSnyH5WWb5F9fqQgoLE0IZ 0Hit9u1k4KOYfjF2sYwqVPD+aPR1U/1pjQTSn6hA5qW2tPoz6tvDtjJ3Gew8jg8O PirYI6a+Aw0Gs77QgvtoTnphsCjy7FOe46R+h5VVjeuclFbOmyKbrR/xldkUdba3 SwaafmMCDnChre9L0s/BG9WIF20P2GMEEH8Ir7u+/VmU53dmwjX7jB2n742IdUnQ pE3LvfQuoA3BfxbbjKx67kFaMAkV2OOQMJg9YX02SK4s5GbK5jVtVnq/0n33tsB6 2v3esb+AO8Inluv4bzdU1+KpDK4PrcnsP+2BiaeFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU2auUW1RcGwqKd/zj8NlQ6Cx3oTwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzA3MTY1MzZiLTY3NzItNDMwMi1hNTAwLTM4YmY0YmQ5OWI5Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASQzMwDQYJKoZIhvcNAQELBQADggEBAK4f/6wFwtIOkF38ZDBjqummUfVf R1koEPRnuJxSHgMVDVw3aQqirKnnyEcnXptZ/eZSahhiZDvgCrggmd7bqpUV4lA3 UrzsZ8NRB6YWOlgYSZiskN4byrtzoOT+ECDKhweZerJthk5VwBjCwuFpJgXzzYxW 0yXIYtGgrbC7UxU9UW4uj+aYGFTJl0UAIPmOevX3yE0MbnyKm7s4fO7DGAfGaiL6 5j/8pxlnpSGFkfmykpcxifp6HYFdzPWwqGdFvMAW3E0f0Q85r0vqxFYjJZ6uVbA6 ZSlUnz5YncPf6ICMgo4DTtnuCDETALsbE4psnqjoYM3u8UFTCoZG1zQUHEw= -----END CERTIFICATE-----Generated at Mon Oct 20 08:41:54 2025 by rpki-client