$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/21b18e64-4ed6-47e9-b16b-d318b31827e9.roa File: 21b18e64-4ed6-47e9-b16b-d318b31827e9.roa (raw, json) Hash identifier: YOuvlc1+P08k9IR+pDyVBZU13Y7wcCtV0mHLmrS/ghg= Subject key identifier: B6:61:4E:C5:67:87:0E:AD:35:B0:F3:88:9A:33:EE:5C:C5:12:19:6A Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2A9544112C01169ABF5756E0F780211584ED60C9 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/21b18e64-4ed6-47e9-b16b-d318b31827e9.roa Signing time: Sun 19 Oct 2025 15:01:18 +0000 ROA not before: Sun 19 Oct 2025 15:01:18 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.65.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:95:44:11:2c:01:16:9a:bf:57:56:e0:f7:80:21:15:84:ed:60:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 15:01:18 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=1aa83ebad66ab261cc6c7311e27d5156f798cb40af628c0d3909aac7c6d23b25, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:83:87:e7:98:a8:62:84:d1:32:4e:e9:e4:de: d8:9b:53:6c:15:19:3f:70:f6:b3:1d:94:d3:d3:7c: 3e:ca:b1:67:d0:55:87:a7:26:28:71:ee:9b:c3:5f: b9:a5:65:73:34:07:b2:48:62:7e:56:a2:7d:66:ee: c4:d1:14:bb:36:1c:26:3d:9e:d8:b9:93:30:87:80: 9d:07:56:6a:e3:b6:80:1c:22:39:1c:c3:5c:fb:55: 8a:81:c5:aa:9c:29:68:99:06:cb:e2:3f:5f:d6:39: 5b:6a:6c:41:03:91:53:1e:f2:4b:05:9f:17:c6:7e: e5:e0:69:f4:19:d1:6e:36:21:e5:dd:11:ee:37:68: f7:c5:a2:4c:58:8c:bd:84:14:88:cf:f7:91:2f:59: c8:f2:c7:15:8d:23:80:3c:84:a6:74:8c:a7:a1:56: af:1a:bc:75:ac:6c:16:46:21:8e:cd:f7:38:aa:70: e3:0a:72:8c:13:a7:5a:19:3b:fd:49:9e:c7:ab:46: 3a:e2:4d:f2:43:23:52:a8:1f:7f:e8:81:73:ba:66: 56:fc:dd:6e:13:9b:2f:d0:31:c8:4d:dc:9f:04:21: 25:93:99:4d:ae:52:a4:48:bb:e4:09:6d:34:8c:47: 9a:1e:9f:5a:c5:dc:ef:69:7c:c3:73:55:e3:c6:9f: 89:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:61:4E:C5:67:87:0E:AD:35:B0:F3:88:9A:33:EE:5C:C5:12:19:6A X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/21b18e64-4ed6-47e9-b16b-d318b31827e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.65.9.0/24 Signature Algorithm: sha256WithRSAEncryption 03:de:3f:c3:97:cb:13:a5:54:31:29:f1:d1:0b:cc:28:48:e2: fc:03:a6:1e:c3:70:46:e9:4f:4a:34:e8:a4:6c:66:cd:ca:44: 75:d9:c9:b1:d7:b1:c1:31:73:46:6a:ef:ee:2b:ad:8c:f6:51: 18:95:a8:58:85:2f:86:32:fd:57:4e:19:cb:a0:c0:32:3b:c1: 5a:e2:66:cc:40:d2:3b:2d:3d:a6:a8:81:78:56:68:8f:15:50: c3:34:3f:85:b9:4a:8b:b6:af:ef:e2:e1:55:d4:a1:38:68:2e: 05:8f:9a:23:67:a0:79:78:14:e3:76:c2:61:2a:ed:ea:51:76: a4:17:d3:4d:b2:d0:05:43:77:b8:8c:71:b1:6f:7c:49:df:e2: 9c:a9:49:61:c0:41:e1:8b:c2:11:03:06:11:92:7a:66:ff:c7: 29:e8:a8:c0:ad:63:3e:65:25:be:35:ab:2f:14:be:f3:b6:ef: b0:85:da:1b:0d:d6:99:b9:74:bb:5f:61:45:ab:c7:61:5c:33: ca:af:5f:3d:d6:e2:b1:0d:dc:bb:b7:61:17:23:e1:e1:0b:4f: 4b:97:0f:bc:a3:4d:90:92:1b:be:64:d5:60:09:a3:2e:be:a0: 16:b7:fc:23:8e:f9:2f:26:94:f7:3a:de:72:ad:44:8f:2a:7a: 4f:c3:30:cc -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKpVEESwBFpq/V1bg94AhFYTtYMkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTUwMTE4WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AxYWE4M2ViYWQ2NmFiMjYxY2M2YzczMTFlMjdkNTE1NmY3 OThjYjQwYWY2MjhjMGQzOTA5YWFjN2M2ZDIzYjI1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCug4fnmKhihNEyTunk3tibU2wVGT9w9rMdlNPTfD7KsWfQ VYenJihx7pvDX7mlZXM0B7JIYn5Won1m7sTRFLs2HCY9nti5kzCHgJ0HVmrjtoAc Ijkcw1z7VYqBxaqcKWiZBsviP1/WOVtqbEEDkVMe8ksFnxfGfuXgafQZ0W42IeXd Ee43aPfFokxYjL2EFIjP95EvWcjyxxWNI4A8hKZ0jKehVq8avHWsbBZGIY7N9ziq cOMKcowTp1oZO/1JnserRjriTfJDI1KoH3/ogXO6Zlb83W4Tmy/QMchN3J8EISWT mU2uUqRIu+QJbTSMR5oen1rF3O9pfMNzVePGn4nvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUtmFOxWeHDq01sPOImjPuXMUSGWowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzIxYjE4ZTY0LTRlZDYtNDdlOS1iMTZiLWQzMThiMzE4MjdlOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASQQkwDQYJKoZIhvcNAQELBQADggEBAAPeP8OXyxOlVDEp8dELzChI4vwD ph7DcEbpT0o06KRsZs3KRHXZybHXscExc0Zq7+4rrYz2URiVqFiFL4Yy/VdOGcug wDI7wVriZsxA0jstPaaogXhWaI8VUMM0P4W5Sou2r+/i4VXUoThoLgWPmiNnoHl4 FON2wmEq7epRdqQX002y0AVDd7iMcbFvfEnf4pypSWHAQeGLwhEDBhGSemb/xyno qMCtYz5lJb41qy8UvvO277CF2hsN1pm5dLtfYUWrx2FcM8qvXz3W4rEN3Lu3YRcj 4eELT0uXD7yjTZCSG75k1WAJoy6+oBa3/COO+S8mlPc63nKtRI8qek/DMMw= -----END CERTIFICATE-----Generated at Mon Oct 20 08:30:26 2025 by rpki-client