$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0ef0e876-c3e5-444a-bb43-52d3548a12da.roa File: 0ef0e876-c3e5-444a-bb43-52d3548a12da.roa (raw, json) Hash identifier: LK80gdlTWtd1WFU1Sb4sQ1fMBuYrN/UtSg15r7Row7w= Subject key identifier: 52:7B:B2:E5:CD:23:B6:A4:BF:FF:B6:CF:B9:F4:5B:9C:88:63:C2:CF Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 63A75F32B5F43EDB8EDEDDE652CE5D6D599181D8 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0ef0e876-c3e5-444a-bb43-52d3548a12da.roa Signing time: Thu 16 Oct 2025 16:36:25 +0000 ROA not before: Thu 16 Oct 2025 16:36:25 +0000 ROA not after: Thu 20 Nov 2025 23:59:59 +0000 asID: 7224 IP address blocks: 3.2.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:a7:5f:32:b5:f4:3e:db:8e:de:dd:e6:52:ce:5d:6d:59:91:81:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 16 16:36:25 2025 GMT Not After : Nov 20 23:59:59 2025 GMT Subject: serialNumber=48341cb9d97dbe6b2d0c200390a609a7cde642ac07244eaacd750496f2ecc3c0, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:01:73:de:f5:fc:a7:66:97:f8:0b:5a:2a:4b: c3:99:b0:cf:db:2a:54:85:c7:d3:85:80:67:db:9b: 02:3f:f9:10:b8:de:3b:93:ec:5c:cc:e2:15:15:64: e7:39:7f:98:0f:75:9a:a1:a6:5d:92:88:3d:be:d2: a1:33:46:7f:fe:51:d9:e0:6f:78:f6:61:77:a0:66: a6:c2:bd:d6:46:7e:a9:fc:57:22:8a:1c:2c:f9:ce: 99:05:07:d4:9e:4a:0e:b1:4e:d1:0b:72:2c:98:54: 24:cc:8a:e0:af:de:a4:a4:4c:3f:a1:04:b1:61:1c: 8c:92:9d:6b:42:97:25:76:31:18:3e:6d:f0:3d:92: 7e:ff:e2:69:5b:fa:ea:bf:4d:d5:41:61:f0:95:50: aa:9c:26:c2:8f:f5:08:a8:99:10:d4:e1:6a:89:49: a1:cf:2f:b6:cf:d0:6b:29:73:4b:b9:35:23:9b:47: 80:98:56:86:5d:c9:45:b0:d5:e5:9e:96:46:40:e9: 93:5d:6a:ae:42:b3:b3:9f:6f:09:9e:61:f6:fb:3b: 4e:7c:41:d2:71:e6:5d:fd:55:06:d2:e4:43:fa:f2: 97:a8:f5:f3:cf:8d:37:93:6a:9c:17:b0:ee:5b:a9: 05:33:da:02:f8:c3:0f:0c:65:35:0c:ce:0b:e0:3f: ad:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:7B:B2:E5:CD:23:B6:A4:BF:FF:B6:CF:B9:F4:5B:9C:88:63:C2:CF X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0ef0e876-c3e5-444a-bb43-52d3548a12da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.2.18.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:7a:86:3c:74:b4:ac:b0:80:34:6a:07:04:11:f9:34:27:fe: 59:0a:3f:34:26:ea:57:c8:70:05:c4:90:2d:e9:b6:8c:00:40: 2e:be:cc:c6:9c:68:98:ad:ce:ff:75:b0:d0:89:45:5c:1b:d2: 6b:04:aa:82:56:50:97:ac:66:68:30:11:eb:65:72:5c:16:30: e9:a1:11:87:ad:f9:6d:ec:1d:23:d6:e4:0d:96:21:bc:2f:d3: 8b:f0:e6:1d:ba:e7:2c:be:64:ee:6c:42:90:ba:ca:cf:47:0c: ed:39:6b:ef:04:86:80:11:ab:db:24:72:5c:ef:e4:a3:eb:6e: ce:6d:47:f4:55:ad:c9:52:78:42:2b:42:ee:c5:54:98:7c:6b: 91:9f:24:ef:61:ec:b4:89:41:0e:37:b9:e0:ed:8a:a9:86:4b: f8:72:29:b4:d2:b8:d1:72:2e:79:3b:5e:d1:f8:84:d3:2a:52: 35:73:30:3d:6a:ac:68:b5:b3:e1:f2:65:2e:1a:58:c6:19:98: 3c:9c:78:f6:90:61:bb:c6:55:46:e9:16:63:1c:ba:dc:85:91: 03:e4:0e:91:2c:50:89:ed:4c:fb:4f:d8:fc:1c:80:3e:5f:42: 49:c6:26:53:e6:09:93:3f:5a:f6:2e:cd:6b:fa:b6:45:69:7f: dc:4e:22:23 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUY6dfMrX0PtuO3t3mUs5dbVmRgdgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE2MTYzNjI1WhcNMjUxMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A0ODM0MWNiOWQ5N2RiZTZiMmQwYzIwMDM5MGE2MDlhN2Nk ZTY0MmFjMDcyNDRlYWFjZDc1MDQ5NmYyZWNjM2MwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDbAXPe9fynZpf4C1oqS8OZsM/bKlSFx9OFgGfbmwI/+RC4 3juT7FzM4hUVZOc5f5gPdZqhpl2SiD2+0qEzRn/+Udngb3j2YXegZqbCvdZGfqn8 VyKKHCz5zpkFB9SeSg6xTtELciyYVCTMiuCv3qSkTD+hBLFhHIySnWtClyV2MRg+ bfA9kn7/4mlb+uq/TdVBYfCVUKqcJsKP9QiomRDU4WqJSaHPL7bP0Gspc0u5NSOb R4CYVoZdyUWw1eWelkZA6ZNdaq5Cs7OfbwmeYfb7O058QdJx5l39VQbS5EP68peo 9fPPjTeTapwXsO5bqQUz2gL4ww8MZTUMzgvgP639AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUUnuy5c0jtqS//7bPufRbnIhjws8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzBlZjBlODc2LWMzZTUtNDQ0YS1iYjQzLTUyZDM1NDhhMTJkYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADAhIwDQYJKoZIhvcNAQELBQADggEBADp6hjx0tKywgDRqBwQR+TQn/lkK PzQm6lfIcAXEkC3ptowAQC6+zMacaJitzv91sNCJRVwb0msEqoJWUJesZmgwEetl clwWMOmhEYet+W3sHSPW5A2WIbwv04vw5h265yy+ZO5sQpC6ys9HDO05a+8EhoAR q9skclzv5KPrbs5tR/RVrclSeEIrQu7FVJh8a5GfJO9h7LSJQQ43ueDtiqmGS/hy KbTSuNFyLnk7XtH4hNMqUjVzMD1qrGi1s+HyZS4aWMYZmDycePaQYbvGVUbpFmMc utyFkQPkDpEsUIntTPtP2PwcgD5fQknGJlPmCZM/WvYuzWv6tkVpf9xOIiM= -----END CERTIFICATE-----Generated at Sun Oct 19 23:16:38 2025 by rpki-client