$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/133399f6-b5b1-4147-b401-c88ef5fa6186.roa File: 133399f6-b5b1-4147-b401-c88ef5fa6186.roa (raw, json) Hash identifier: xIT7dx/IXwghtSQ/0uKeo4cw2EeVPDkJa5uha8OMeXU= Subject key identifier: 7D:6F:3F:D8:6E:84:6A:EA:B3:30:08:57:42:C7:E8:F9:FF:EE:3B:45 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5DF4E6E6008B802B6B2A0087F8FB583F194B9E0C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/133399f6-b5b1-4147-b401-c88ef5fa6186.roa Signing time: Sun 19 Oct 2025 21:10:12 +0000 ROA not before: Sun 19 Oct 2025 21:10:12 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.64.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:f4:e6:e6:00:8b:80:2b:6b:2a:00:87:f8:fb:58:3f:19:4b:9e:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 21:10:12 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=39679cac34fd43f0c912b547fbc577730a8de8a8cfc72b03bfd768e7be8ddbff, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:eb:3e:c1:09:3f:bc:95:24:96:b6:af:42:44: a5:72:37:1b:3a:69:61:3d:2f:dd:ae:b4:42:10:45: f1:c2:4c:57:99:25:e6:ab:7c:bf:36:f4:0b:b6:da: 08:4a:27:f8:c7:70:c1:02:22:95:05:a5:29:1e:d0: 9e:13:01:2c:be:c0:80:01:22:d9:ad:b6:5a:5e:28: e5:9a:73:95:64:6e:71:f1:39:13:6c:30:7a:93:c1: 0a:07:33:c6:34:d0:03:25:cf:a7:43:5d:47:a1:a0: 1a:75:cc:ea:ad:ec:57:da:8b:94:43:7b:1a:c0:89: 9a:90:a1:ac:94:17:1b:00:36:d9:1b:8f:63:f0:43: 72:19:dc:88:af:47:2a:1e:41:72:8c:86:fb:49:74: 93:4c:98:b9:19:a5:2b:32:76:d6:ca:06:e3:4c:ee: a6:87:95:57:c1:87:cc:d8:34:02:32:a4:f0:40:c1: d4:59:77:d1:69:e3:62:bb:e0:f3:f8:b5:1b:1c:97: 9c:f6:5b:59:ce:ea:1b:50:c4:b5:67:e8:95:f1:bb: a4:48:5b:31:7f:d1:d4:ce:04:81:9e:36:fc:e6:e2: 35:c6:53:a6:2d:71:5e:5c:40:d8:f3:83:fc:7d:91: 54:6d:ed:0c:75:25:22:b4:3d:dc:5f:db:99:53:df: e0:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:6F:3F:D8:6E:84:6A:EA:B3:30:08:57:42:C7:E8:F9:FF:EE:3B:45 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/133399f6-b5b1-4147-b401-c88ef5fa6186.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.64.208.0/22 Signature Algorithm: sha256WithRSAEncryption 28:bc:f5:31:44:8a:d2:8e:69:d8:06:c5:f9:ba:e9:ce:d6:ab: f3:73:28:88:3e:5f:58:3b:4e:7c:d5:88:b2:25:93:a8:e1:1e: 9f:3f:9b:80:b5:81:f9:08:f8:17:8c:13:84:80:9e:44:65:a0: 93:3c:c1:0b:5d:ae:74:57:0b:7a:b9:90:ae:5c:3f:82:18:c3: 22:67:75:5c:0b:3b:b9:e7:9f:f9:84:d1:dd:bd:c3:b1:36:72: a7:34:40:f0:0c:68:b4:2f:3c:c6:b7:d1:e6:1e:bd:c8:40:37: 46:4b:a4:30:df:48:c9:0a:a6:b2:29:5d:b9:3e:93:de:f3:09: 78:03:e2:8c:f5:f4:83:4d:72:14:12:2b:52:22:cb:12:a8:b6: 52:e4:5c:ce:39:2e:21:22:c6:4c:fa:b7:a0:97:3e:b3:00:7e: 6c:bc:92:fe:7d:d6:1b:50:60:f7:64:4f:a4:5c:66:1c:85:3e: 63:88:2c:2c:e7:24:cf:3d:5c:0f:4a:24:e5:d8:55:fb:bc:08: 6d:c9:7a:42:41:ec:e5:fc:a4:01:1b:ce:15:17:b6:28:bd:d2: 5c:bc:f5:f5:15:58:cf:fa:c2:02:95:4d:77:7e:24:13:0a:9f: 82:6b:d3:21:81:fd:0d:a8:67:90:b2:ef:4e:17:50:09:0b:1b: e8:79:42:a7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXfTm5gCLgCtrKgCH+PtYPxlLngwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MjExMDEyWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AzOTY3OWNhYzM0ZmQ0M2YwYzkxMmI1NDdmYmM1Nzc3MzBh OGRlOGE4Y2ZjNzJiMDNiZmQ3NjhlN2JlOGRkYmZmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDA6z7BCT+8lSSWtq9CRKVyNxs6aWE9L92utEIQRfHCTFeZ JearfL829Au22ghKJ/jHcMECIpUFpSke0J4TASy+wIABItmttlpeKOWac5VkbnHx ORNsMHqTwQoHM8Y00AMlz6dDXUehoBp1zOqt7Ffai5RDexrAiZqQoayUFxsANtkb j2PwQ3IZ3IivRyoeQXKMhvtJdJNMmLkZpSsydtbKBuNM7qaHlVfBh8zYNAIypPBA wdRZd9Fp42K74PP4tRscl5z2W1nO6htQxLVn6JXxu6RIWzF/0dTOBIGeNvzm4jXG U6YtcV5cQNjzg/x9kVRt7Qx1JSK0Pdxf25lT3+BpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUfW8/2G6EauqzMAhXQsfo+f/uO0UwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzEzMzM5OWY2LWI1YjEtNDE0Ny1iNDAxLWM4OGVmNWZhNjE4Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAISQNAwDQYJKoZIhvcNAQELBQADggEBACi89TFEitKOadgGxfm66c7Wq/Nz KIg+X1g7TnzViLIlk6jhHp8/m4C1gfkI+BeME4SAnkRloJM8wQtdrnRXC3q5kK5c P4IYwyJndVwLO7nnn/mE0d29w7E2cqc0QPAMaLQvPMa30eYevchAN0ZLpDDfSMkK prIpXbk+k97zCXgD4oz19INNchQSK1IiyxKotlLkXM45LiEixkz6t6CXPrMAfmy8 kv591htQYPdkT6RcZhyFPmOILCznJM89XA9KJOXYVfu8CG3JekJB7OX8pAEbzhUX tii90ly89fUVWM/6wgKVTXd+JBMKn4Jr0yGB/Q2oZ5Cy704XUAkLG+h5Qqc= -----END CERTIFICATE-----Generated at Mon Oct 20 10:59:07 2025 by rpki-client