$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1b5ead86-ef5a-45a4-aa15-f4ac5b382d36.roa File: 1b5ead86-ef5a-45a4-aa15-f4ac5b382d36.roa (raw, json) Hash identifier: ooUbrx6w08RkAFOGj3CWT662FxscNIMItMjDjnSXQVA= Subject key identifier: D9:97:4C:94:D9:87:8B:FF:5F:5B:31:5A:25:FD:2C:6D:12:68:AB:C7 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 094DEF19594BB5DB691327DC8711BF15D528D2EB Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1b5ead86-ef5a-45a4-aa15-f4ac5b382d36.roa Signing time: Sun 19 Oct 2025 18:23:42 +0000 ROA not before: Sun 19 Oct 2025 18:23:42 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.64.216.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:4d:ef:19:59:4b:b5:db:69:13:27:dc:87:11:bf:15:d5:28:d2:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 18:23:42 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=bbd73b4e14fee681e18154b9d0bf522de3b372a834bde5dd5f7ff4c67a76204f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:78:84:2e:86:26:48:e0:7f:e7:3e:36:88:75: d8:5b:5f:5b:87:85:0c:28:54:8e:e5:b9:ee:41:df: 82:be:b0:f8:c1:05:9e:87:bc:8c:9b:3f:df:9e:b8: 80:92:f1:c0:be:65:08:4e:02:22:1c:d4:57:f4:50: b6:c3:bc:1c:72:4a:31:56:ed:a4:cd:71:26:cc:2a: ae:2b:27:ca:e2:75:84:25:1e:4f:c2:d6:9e:d7:7f: b7:b9:c0:73:99:a2:cd:15:72:93:24:8a:1d:65:07: e3:38:72:eb:c9:57:87:03:33:77:87:c5:9a:35:6d: 8e:02:f9:ea:6f:c6:4d:c8:fb:6c:4f:45:47:23:1d: 9b:94:e3:63:84:da:5b:be:b3:55:7f:35:5d:8c:b7: 79:3d:f4:73:02:68:dc:9c:0c:94:53:f3:80:40:63: 8f:1e:c3:d0:15:23:7b:0d:64:3d:10:a4:8d:22:b3: 3e:92:81:8d:58:72:08:18:c1:68:ff:32:5c:fb:2e: 0a:df:97:4b:32:35:b1:e9:1e:3d:38:d3:6f:95:9f: a4:c4:11:9b:25:82:0d:1b:3a:07:00:66:3e:f1:5b: 70:ee:0f:5b:a8:73:bf:b4:a6:f6:eb:d5:7f:85:31: 1f:5e:16:8e:eb:f3:90:24:f0:ca:72:4b:05:44:7d: e5:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:97:4C:94:D9:87:8B:FF:5F:5B:31:5A:25:FD:2C:6D:12:68:AB:C7 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1b5ead86-ef5a-45a4-aa15-f4ac5b382d36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.64.216.0/23 Signature Algorithm: sha256WithRSAEncryption 17:7e:b7:ec:18:52:ab:30:34:cb:b7:1e:06:4f:22:36:52:61: 6a:ca:2b:0e:3c:1d:a5:a6:a1:80:9e:f5:61:9d:3f:7b:5c:d6: 7d:51:cf:e9:8a:69:5a:92:29:a2:e8:70:33:82:92:96:11:45: 31:32:f7:9f:26:03:89:83:e6:ca:f4:f3:67:66:f3:cf:92:36: e1:f1:45:d2:89:ff:ac:3f:fa:58:06:64:6a:bf:34:bb:8f:96: 14:5c:15:70:5a:19:00:12:ce:53:6d:3d:f0:2c:18:f5:00:0b: a2:58:40:84:5c:ca:53:ec:e1:66:f5:6d:8c:ec:c4:99:65:55: 11:fd:4d:1c:76:41:95:0e:db:84:2a:4a:bb:6b:da:41:f2:70: b6:64:77:1c:d9:60:3e:48:e8:db:a2:9c:a8:a1:c1:4b:ec:00: ba:69:71:28:f1:5c:b2:3e:f5:e1:5c:bd:e6:fd:b8:ed:4b:93: 15:49:16:45:52:e5:1d:a4:c6:b0:6b:1a:f7:79:7d:01:70:d9: a7:20:3f:ef:fb:bc:e6:07:f2:f8:13:ea:fb:62:aa:7d:0d:bb: b5:3f:05:d6:71:54:fd:00:5e:ea:1b:34:48:bd:03:8a:9d:12: 9a:7f:74:cc:30:00:da:82:fd:2a:3c:fa:72:82:14:2e:5f:f7: ef:78:92:ba -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCU3vGVlLtdtpEyfchxG/FdUo0uswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTgyMzQyWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BiYmQ3M2I0ZTE0ZmVlNjgxZTE4MTU0YjlkMGJmNTIyZGUz YjM3MmE4MzRiZGU1ZGQ1ZjdmZjRjNjdhNzYyMDRmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLeIQuhiZI4H/nPjaIddhbX1uHhQwoVI7lue5B34K+sPjB BZ6HvIybP9+euICS8cC+ZQhOAiIc1Ff0ULbDvBxySjFW7aTNcSbMKq4rJ8ridYQl Hk/C1p7Xf7e5wHOZos0VcpMkih1lB+M4cuvJV4cDM3eHxZo1bY4C+epvxk3I+2xP RUcjHZuU42OE2lu+s1V/NV2Mt3k99HMCaNycDJRT84BAY48ew9AVI3sNZD0QpI0i sz6SgY1YcggYwWj/Mlz7Lgrfl0syNbHpHj0402+Vn6TEEZslgg0bOgcAZj7xW3Du D1uoc7+0pvbr1X+FMR9eFo7r85Ak8MpySwVEfeUPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU2ZdMlNmHi/9fWzFaJf0sbRJoq8cwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzFiNWVhZDg2LWVmNWEtNDVhNC1hYTE1LWY0YWM1YjM4MmQzNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESQNgwDQYJKoZIhvcNAQELBQADggEBABd+t+wYUqswNMu3HgZPIjZSYWrK Kw48HaWmoYCe9WGdP3tc1n1Rz+mKaVqSKaLocDOCkpYRRTEy958mA4mD5sr082dm 88+SNuHxRdKJ/6w/+lgGZGq/NLuPlhRcFXBaGQASzlNtPfAsGPUAC6JYQIRcylPs 4Wb1bYzsxJllVRH9TRx2QZUO24QqSrtr2kHycLZkdxzZYD5I6NuinKihwUvsALpp cSjxXLI+9eFcveb9uO1LkxVJFkVS5R2kxrBrGvd5fQFw2acgP+/7vOYH8vgT6vti qn0Nu7U/BdZxVP0AXuobNEi9A4qdEpp/dMwwANqC/So8+nKCFC5f9+94kro= -----END CERTIFICATE-----Generated at Mon Oct 20 11:55:40 2025 by rpki-client