$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0e1e31ae-23c2-46af-8d16-3face01bc70b.roa File: 0e1e31ae-23c2-46af-8d16-3face01bc70b.roa (raw, json) Hash identifier: NLER3D+/uNjk2GN8hmpa2WYYKL/MruDg4jLTDWaKdBk= Subject key identifier: 81:5D:65:9A:2A:BF:59:C5:40:95:10:1A:18:B0:92:D8:42:6A:FA:C2 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0BCC4891CBAE0429F626BFE6060940FD89D516D6 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0e1e31ae-23c2-46af-8d16-3face01bc70b.roa Signing time: Sun 19 Oct 2025 09:12:31 +0000 ROA not before: Sun 19 Oct 2025 09:12:31 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.64.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:cc:48:91:cb:ae:04:29:f6:26:bf:e6:06:09:40:fd:89:d5:16:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 09:12:31 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=4543882f672e2abb73daf2c9c578607cc5b51d1d7ae89a3adf340a885ef6ec3f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:60:6a:48:14:a5:f2:0b:8f:74:79:cc:69:d9: 03:8f:e4:69:36:f5:2e:d8:ab:fb:c9:62:5b:54:98: db:f0:67:43:08:0e:e3:22:6e:56:f1:1e:d9:5a:82: 14:37:cb:ab:5b:c9:e4:75:50:9b:94:80:61:f8:1c: bb:41:22:af:b0:31:8a:ee:0a:8e:06:16:a3:6e:7b: d8:6b:5c:33:e5:c0:84:bc:5a:db:a3:19:d5:f5:1f: 17:44:b9:59:bc:72:2f:c6:ba:9c:6e:58:03:e9:2e: a0:8e:2a:e3:e8:a5:6a:84:cc:b0:7b:55:c8:26:3f: 44:c9:00:26:4b:93:ff:c1:85:54:0b:96:fe:fb:80: 03:e6:78:c2:5c:2e:f9:65:0e:0d:0a:eb:96:15:8b: 29:b4:b0:a2:ff:17:17:2c:fb:ac:02:d6:6b:42:82: ea:7a:2a:18:f5:40:48:98:ef:d2:0a:d1:ca:84:ec: 65:a2:22:66:bf:68:dc:76:2f:93:04:34:c1:d7:0a: 07:75:34:c8:e4:6b:11:b9:04:5f:6b:22:03:37:2b: eb:ce:f9:a1:7e:bf:61:19:e1:0a:4f:9f:a0:f0:3d: a0:40:87:41:85:dc:81:4b:dd:b2:14:bb:24:7a:f5: 87:4c:0c:36:af:be:de:39:55:ae:60:4c:0f:7b:cf: f2:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:5D:65:9A:2A:BF:59:C5:40:95:10:1A:18:B0:92:D8:42:6A:FA:C2 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0e1e31ae-23c2-46af-8d16-3face01bc70b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.64.0.0/15 Signature Algorithm: sha256WithRSAEncryption 6a:96:e2:1f:f5:41:92:10:45:c3:fc:b2:e2:e0:dd:1d:53:b7: 0e:d2:b6:64:ac:91:80:e0:eb:53:c6:9d:6b:a1:67:05:52:ea: 24:44:c3:ba:e9:2f:3a:47:b0:3f:a9:d2:cf:f2:7c:4e:42:d6: 07:4d:cc:3d:ee:d3:54:19:35:14:ae:f6:48:54:ee:47:11:22: 8b:50:43:73:d7:cc:1e:6f:03:a8:d8:e5:70:03:2d:5c:48:e7: 64:9a:1d:6e:50:67:be:42:51:be:fc:6b:dc:ab:d0:e6:2a:f0: ac:4d:4a:68:f4:9b:8d:a2:78:b7:a8:f3:ec:85:82:28:a6:b3: 33:56:6b:b6:e3:b2:25:6a:f8:85:3e:c5:51:0e:0f:45:68:ed: d6:83:aa:28:e7:c0:57:19:d4:90:a4:28:a7:2d:b1:94:b5:25: a7:4e:92:a8:63:af:12:31:23:98:44:68:c7:1e:73:20:4d:c9: f6:97:26:4f:10:e1:34:55:1c:48:56:4d:da:50:be:ce:d1:ae: 45:25:ff:54:9c:6d:80:97:05:4a:ee:cf:01:78:6f:42:ef:1d: cc:dc:d5:7e:51:f8:78:ed:27:b1:3f:31:56:7d:77:06:08:b0: 16:e5:97:10:26:b0:fe:1f:ae:83:be:99:f3:fd:fc:9b:d3:8d: 15:a8:63:d1 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUC8xIkcuuBCn2Jr/mBglA/YnVFtYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MDkxMjMxWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A0NTQzODgyZjY3MmUyYWJiNzNkYWYyYzljNTc4NjA3Y2M1 YjUxZDFkN2FlODlhM2FkZjM0MGE4ODVlZjZlYzNmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCgYGpIFKXyC490ecxp2QOP5Gk29S7Yq/vJYltUmNvwZ0MI DuMiblbxHtlaghQ3y6tbyeR1UJuUgGH4HLtBIq+wMYruCo4GFqNue9hrXDPlwIS8 WtujGdX1HxdEuVm8ci/GupxuWAPpLqCOKuPopWqEzLB7VcgmP0TJACZLk//BhVQL lv77gAPmeMJcLvllDg0K65YViym0sKL/Fxcs+6wC1mtCgup6Khj1QEiY79IK0cqE 7GWiIma/aNx2L5MENMHXCgd1NMjkaxG5BF9rIgM3K+vO+aF+v2EZ4QpPn6DwPaBA h0GF3IFL3bIUuyR69YdMDDavvt45Va5gTA97z/KzAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUgV1lmiq/WcVAlRAaGLCS2EJq+sIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzBlMWUzMWFlLTIzYzItNDZhZi04ZDE2LTNmYWNlMDFiYzcwYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwESQDANBgkqhkiG9w0BAQsFAAOCAQEAapbiH/VBkhBFw/yy4uDdHVO3DtK2 ZKyRgODrU8ada6FnBVLqJETDuukvOkewP6nSz/J8TkLWB03MPe7TVBk1FK72SFTu RxEii1BDc9fMHm8DqNjlcAMtXEjnZJodblBnvkJRvvxr3KvQ5irwrE1KaPSbjaJ4 t6jz7IWCKKazM1ZrtuOyJWr4hT7FUQ4PRWjt1oOqKOfAVxnUkKQopy2xlLUlp06S qGOvEjEjmERoxx5zIE3J9pcmTxDhNFUcSFZN2lC+ztGuRSX/VJxtgJcFSu7PAXhv Qu8dzNzVflH4eO0nsT8xVn13BgiwFuWXECaw/h+ug76Z8/38m9ONFahj0Q== -----END CERTIFICATE-----Generated at Mon Oct 20 06:09:42 2025 by rpki-client