$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/12641305-54d8-4790-9196-742cc5aca863.roa File: 12641305-54d8-4790-9196-742cc5aca863.roa (raw, json) Hash identifier: YH3qi2ZkpBfcqYjtwt6jF9kOMjcrnh6IZy/y2AbK4gc= Subject key identifier: EE:8F:40:25:50:B1:A6:B8:21:4C:03:4E:ED:E9:6D:C1:88:B1:B4:DA Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0D0FCC850E62E424F1207EDBDF0AEA604722D090 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/12641305-54d8-4790-9196-742cc5aca863.roa Signing time: Sat 18 Oct 2025 20:30:16 +0000 ROA not before: Sat 18 Oct 2025 20:30:16 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.165.72.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:0f:cc:85:0e:62:e4:24:f1:20:7e:db:df:0a:ea:60:47:22:d0:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 20:30:16 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=77b1ce7a5f5eb12be18d27740c5531cf25d5a01d9bb9f903b0abad0afc10c4a3, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9c:c2:07:6e:ee:56:ec:bc:d4:03:97:42:82: 4c:f8:c6:24:d5:f6:61:04:18:64:5a:82:5c:b9:d8: 9f:d6:e4:15:fc:ad:42:95:73:a1:4a:62:02:00:3d: 1a:a9:e5:80:b7:29:35:c4:a5:39:5d:0c:8e:51:c7: ba:ac:db:67:95:df:dc:a7:5c:68:ec:84:b9:da:62: ac:93:bc:48:82:45:1d:15:1e:83:be:4a:62:7b:2c: ad:82:2d:91:29:ba:22:d6:0d:c4:8e:ae:0a:5b:75: 7b:89:ca:1c:7d:69:ce:98:57:ab:07:1e:b8:4d:c5: 16:25:35:71:4f:6c:2f:97:55:d5:82:cc:5b:65:9d: de:59:43:c7:16:fb:a7:8f:e5:0e:f3:59:19:64:9d: 98:02:f0:e4:8d:a6:2c:2e:42:eb:8a:40:d2:a0:99: 43:a4:89:8e:85:1d:98:81:ca:00:1d:77:18:2d:15: 44:c0:b5:44:ac:22:92:34:0a:79:e4:13:d9:a3:a7: 2f:4a:7b:3d:cd:bb:c5:8f:4c:20:41:fc:18:3f:b1: b4:dc:85:69:19:09:f7:94:25:01:2a:82:aa:84:f9: 6c:9b:ac:e6:b2:96:a4:9b:c8:ea:db:a3:2e:cb:38: ee:a2:55:d6:b6:82:2d:fc:69:7f:83:68:39:70:24: 4b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:8F:40:25:50:B1:A6:B8:21:4C:03:4E:ED:E9:6D:C1:88:B1:B4:DA X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/12641305-54d8-4790-9196-742cc5aca863.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.165.72.0/23 Signature Algorithm: sha256WithRSAEncryption 9a:85:3b:05:f5:b9:b2:0d:d7:0a:5f:7a:e1:4a:40:43:11:ef: 79:19:eb:2b:c3:c4:eb:b8:67:9e:6c:60:c8:cf:43:b5:ff:d4: e2:c0:c6:12:31:af:28:fa:1c:93:23:1d:47:cd:2a:10:f2:34: 7d:ed:fa:76:e6:2b:ed:00:ea:26:c1:15:ba:58:3a:25:45:7f: 42:d5:7d:33:87:b5:29:b1:2e:8e:db:88:f6:fc:2b:4d:6e:f5: 3f:ae:c3:2e:ca:c5:3e:e8:05:66:38:d0:ae:30:79:30:85:19: b2:a0:89:30:c5:44:8b:3e:5f:a8:a6:15:64:86:3d:24:4a:d0: 56:9d:d0:3f:80:d0:c1:f8:ab:c8:26:ef:8b:b9:a6:c3:5e:24: 45:fb:82:80:93:c8:12:f5:26:ad:a9:d5:a3:24:44:95:d5:4c: b3:7f:e9:fc:65:03:d3:71:e9:9b:7a:77:3f:8f:34:bf:d5:f6: 8e:90:61:d7:cb:64:fb:fa:7e:44:6c:72:9b:6c:80:74:68:56: d3:49:28:7c:95:a0:94:fc:90:a3:cd:9a:cc:3b:3a:0d:c2:01: d7:cf:b0:c2:a4:72:09:08:9f:b0:f3:4e:d1:25:0b:86:dd:b2: fc:ac:b5:c8:7d:ed:09:16:b7:02:bf:0c:df:6f:fd:5f:aa:6b: 80:c9:f9:a6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDQ/MhQ5i5CTxIH7b3wrqYEci0JAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MjAzMDE2WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A3N2IxY2U3YTVmNWViMTJiZTE4ZDI3NzQwYzU1MzFjZjI1 ZDVhMDFkOWJiOWY5MDNiMGFiYWQwYWZjMTBjNGEzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9nMIHbu5W7LzUA5dCgkz4xiTV9mEEGGRagly52J/W5BX8 rUKVc6FKYgIAPRqp5YC3KTXEpTldDI5Rx7qs22eV39ynXGjshLnaYqyTvEiCRR0V HoO+SmJ7LK2CLZEpuiLWDcSOrgpbdXuJyhx9ac6YV6sHHrhNxRYlNXFPbC+XVdWC zFtlnd5ZQ8cW+6eP5Q7zWRlknZgC8OSNpiwuQuuKQNKgmUOkiY6FHZiBygAddxgt FUTAtUSsIpI0CnnkE9mjpy9Kez3Nu8WPTCBB/Bg/sbTchWkZCfeUJQEqgqqE+Wyb rOaylqSbyOrboy7LOO6iVda2gi38aX+DaDlwJEtFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU7o9AJVCxprghTANO7eltwYixtNowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzEyNjQxMzA1LTU0ZDgtNDc5MC05MTk2LTc0MmNjNWFjYTg2My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESpUgwDQYJKoZIhvcNAQELBQADggEBAJqFOwX1ubIN1wpfeuFKQEMR73kZ 6yvDxOu4Z55sYMjPQ7X/1OLAxhIxryj6HJMjHUfNKhDyNH3t+nbmK+0A6ibBFbpY OiVFf0LVfTOHtSmxLo7biPb8K01u9T+uwy7KxT7oBWY40K4weTCFGbKgiTDFRIs+ X6imFWSGPSRK0Fad0D+A0MH4q8gm74u5psNeJEX7goCTyBL1Jq2p1aMkRJXVTLN/ 6fxlA9Nx6Zt6dz+PNL/V9o6QYdfLZPv6fkRscptsgHRoVtNJKHyVoJT8kKPNmsw7 Og3CAdfPsMKkcgkIn7DzTtElC4bdsvystch97QkWtwK/DN9v/V+qa4DJ+aY= -----END CERTIFICATE-----Generated at Mon Oct 20 03:14:12 2025 by rpki-client