$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/25cf3267-452c-4ecc-a57f-aa64edf14dcf.roa File: 25cf3267-452c-4ecc-a57f-aa64edf14dcf.roa (raw, json) Hash identifier: NnZ5ogRs4BH3UidMFtOQYZwV1cxjo5stf2nK2tk3Bcc= Subject key identifier: AC:86:B2:45:42:A5:B5:36:DF:34:A0:E0:6C:7F:94:32:BA:16:4F:BD Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3D45BBA87C53A7A4E71DA1516B86D4B9602EE111 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/25cf3267-452c-4ecc-a57f-aa64edf14dcf.roa Signing time: Sat 18 Oct 2025 13:40:12 +0000 ROA not before: Sat 18 Oct 2025 13:40:12 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.172.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:45:bb:a8:7c:53:a7:a4:e7:1d:a1:51:6b:86:d4:b9:60:2e:e1:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 13:40:12 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=91097b28cf5da5efcb0be28f9a0c476fe8eedb5825fa3ca9c2759800afec115f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:f1:35:7a:4c:09:0f:2f:d2:89:62:f0:cd:35: f8:40:44:48:56:53:36:2f:a9:85:12:20:10:3a:39: 86:f7:46:44:e5:f9:fe:ff:be:4b:a1:a7:bf:76:ae: 47:ed:1a:1c:31:b1:e1:47:60:dd:70:99:1e:c7:58: 68:5d:a0:72:b5:9e:aa:94:35:e6:4a:bf:d3:c6:19: c1:08:a6:04:84:0f:46:95:76:dd:2f:2a:36:13:f2: cd:09:e9:92:5f:66:59:29:1c:77:f3:8d:71:09:f4: 87:ca:3d:1f:42:72:ab:f3:6b:b4:65:1a:13:a9:01: 5e:05:b7:5d:51:96:72:65:a3:0d:64:36:55:57:c6: eb:68:98:74:40:b1:08:ed:2b:a7:5e:5c:1b:7b:91: 11:16:4e:f7:ad:0b:40:6c:38:08:63:d8:fd:b7:fc: ec:61:bf:81:6c:4b:f7:e6:25:7b:12:80:be:2e:f9: c4:5d:81:01:b5:8b:0f:e4:d7:5a:97:f0:a1:96:7a: fc:98:85:54:0a:a2:d8:7a:41:87:10:a3:c2:7c:9a: b9:ec:90:7d:45:83:4e:b9:21:2a:7c:c9:3d:83:0a: 72:2d:41:9a:66:f5:da:fa:6d:83:7f:41:c9:d9:da: 9e:94:27:c0:ca:05:ac:a9:8e:a8:94:27:90:cd:c3: b9:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:86:B2:45:42:A5:B5:36:DF:34:A0:E0:6C:7F:94:32:BA:16:4F:BD X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/25cf3267-452c-4ecc-a57f-aa64edf14dcf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.172.222.0/24 Signature Algorithm: sha256WithRSAEncryption 73:08:e5:86:f2:b3:f0:16:ba:1f:1e:37:e4:b4:a1:4f:d1:23: be:03:fb:44:3c:3d:8a:c9:2d:e3:53:fe:e2:e4:af:93:f2:28: d4:af:e8:a9:c1:93:3e:e8:aa:56:ea:4e:f3:c6:93:dc:76:37: 5f:4b:b4:fd:05:6d:1f:d7:11:98:8f:57:81:ee:a4:b0:c3:83: 64:5e:00:45:33:2f:db:18:50:6c:e8:04:85:fb:91:3f:99:23: 56:b2:34:c5:1e:75:86:9f:97:21:cd:24:fb:a8:6b:0b:cb:e1: 5e:d7:79:2e:9f:7d:ef:ef:1a:9c:96:c0:7b:ca:3d:9f:bc:c6: 21:72:a3:9e:a7:0d:1f:98:7a:68:b4:e6:82:30:07:54:b3:32: b0:20:c0:4a:62:aa:95:f0:af:d0:68:9c:db:39:59:cc:8b:29: f9:33:81:4f:b3:a3:12:3a:b2:25:53:d4:dd:48:28:df:53:ef: 05:7c:8d:e1:92:c6:f8:7d:00:ee:55:4e:51:9e:f1:05:5a:af: cd:9c:f4:ee:07:e8:ec:53:bd:db:51:4c:15:03:59:14:a9:77: 4a:56:de:52:3b:72:e5:cb:b3:e9:aa:df:1f:77:c6:eb:54:05: fa:45:ca:5e:ce:39:9e:af:9f:5f:6b:de:ad:33:d9:db:1d:bc: 6b:78:35:33 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPUW7qHxTp6TnHaFRa4bUuWAu4REwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTM0MDEyWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A5MTA5N2IyOGNmNWRhNWVmY2IwYmUyOGY5YTBjNDc2ZmU4 ZWVkYjU4MjVmYTNjYTljMjc1OTgwMGFmZWMxMTVmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCI8TV6TAkPL9KJYvDNNfhAREhWUzYvqYUSIBA6OYb3RkTl +f7/vkuhp792rkftGhwxseFHYN1wmR7HWGhdoHK1nqqUNeZKv9PGGcEIpgSED0aV dt0vKjYT8s0J6ZJfZlkpHHfzjXEJ9IfKPR9Ccqvza7RlGhOpAV4Ft11RlnJlow1k NlVXxutomHRAsQjtK6deXBt7kREWTvetC0BsOAhj2P23/Oxhv4FsS/fmJXsSgL4u +cRdgQG1iw/k11qX8KGWevyYhVQKoth6QYcQo8J8mrnskH1Fg065ISp8yT2DCnIt QZpm9dr6bYN/QcnZ2p6UJ8DKBaypjqiUJ5DNw7kBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUrIayRUKltTbfNKDgbH+UMroWT70wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzI1Y2YzMjY3LTQ1MmMtNGVjYy1hNTdmLWFhNjRlZGYxNGRjZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASrN4wDQYJKoZIhvcNAQELBQADggEBAHMI5Ybys/AWuh8eN+S0oU/RI74D +0Q8PYrJLeNT/uLkr5PyKNSv6KnBkz7oqlbqTvPGk9x2N19LtP0FbR/XEZiPV4Hu pLDDg2ReAEUzL9sYUGzoBIX7kT+ZI1ayNMUedYaflyHNJPuoawvL4V7XeS6ffe/v GpyWwHvKPZ+8xiFyo56nDR+Yemi05oIwB1SzMrAgwEpiqpXwr9BonNs5WcyLKfkz gU+zoxI6siVT1N1IKN9T7wV8jeGSxvh9AO5VTlGe8QVar82c9O4H6OxTvdtRTBUD WRSpd0pW3lI7cuXLs+mq3x93xutUBfpFyl7OOZ6vn19r3q0z2dsdvGt4NTM= -----END CERTIFICATE-----Generated at Mon Oct 20 02:55:33 2025 by rpki-client