$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/399c955b-4785-400c-893a-269d5702c3ba.roa File: 399c955b-4785-400c-893a-269d5702c3ba.roa (raw, json) Hash identifier: p9OqHo1aEQltoeZa6Jk4r2gTH8dhF+AE6kUZdqbVv0s= Subject key identifier: FD:2C:17:46:EC:6A:E2:E0:E4:DD:10:C6:6F:B9:EF:11:1F:FD:53:9A Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 08E6178346BED754DC8595B0E45FA26E737CDE60 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/399c955b-4785-400c-893a-269d5702c3ba.roa Signing time: Sun 19 Oct 2025 04:42:18 +0000 ROA not before: Sun 19 Oct 2025 04:42:18 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.164.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:e6:17:83:46:be:d7:54:dc:85:95:b0:e4:5f:a2:6e:73:7c:de:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 04:42:18 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=bc8108011ebd44652bdb615b1d4185829ba1f3b4b8da499159db8b56d0b2c9f4, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c8:0a:ba:a1:70:e8:a2:90:a0:e1:34:cc:d7: 20:6c:ad:6e:41:db:fa:e3:7b:b6:22:df:1e:07:f9: 6d:5e:a0:c1:77:e1:e2:40:6e:e6:e6:44:b6:ca:b8: ee:ad:19:aa:b1:51:cf:08:06:a0:cd:3e:03:b2:59: 4c:c7:d2:83:fd:29:b1:83:f2:a8:66:ef:5a:4c:59: 11:79:a3:c8:90:5e:0e:fa:97:bf:e4:1a:12:b0:65: 54:90:cb:4f:95:47:52:ec:e1:16:98:71:4e:ce:26: c8:a3:ff:b0:9d:8b:8d:44:f7:b7:57:36:7e:09:dc: 5e:cb:e6:66:12:7f:e3:30:4e:23:39:da:ba:19:d2: e0:80:3f:ad:b8:5f:ce:04:5e:79:03:77:1e:e2:af: 70:cc:57:d4:cf:fd:b9:dd:50:34:0e:d5:ad:f4:7a: 22:bd:b1:3d:c6:70:7f:08:2e:3b:9e:ab:a6:5b:33: 48:48:81:69:57:53:b7:85:d5:54:1f:37:13:37:2e: f9:de:88:b2:05:24:99:a4:47:87:6d:2d:a3:bb:bb: 9c:aa:17:bf:08:f5:bd:16:5e:6f:5f:40:95:92:ca: c2:7d:44:f3:65:94:18:c9:0a:19:6d:95:41:4f:75: a4:61:09:4a:db:86:d7:c9:13:7b:f3:2b:4a:83:6e: 8f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:2C:17:46:EC:6A:E2:E0:E4:DD:10:C6:6F:B9:EF:11:1F:FD:53:9A X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/399c955b-4785-400c-893a-269d5702c3ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.164.73.0/24 Signature Algorithm: sha256WithRSAEncryption 35:7b:66:d8:37:c0:fa:4d:f9:76:6a:2e:57:d8:dd:89:6f:14: 70:f6:c5:18:f5:48:af:12:74:6e:22:75:36:2d:d1:73:d6:9d: fc:3c:95:1f:3c:1a:75:7e:57:2d:e5:57:82:8b:88:7d:b8:8a: 7d:1b:07:10:bf:28:db:36:a2:e5:bd:74:44:ad:37:2a:f2:a8: 9c:66:64:33:84:2c:38:a0:cf:f3:80:e5:ce:40:3b:ef:dd:53: fa:fb:01:84:80:eb:57:2a:1a:80:6c:f8:ce:98:5d:6d:87:7d: bc:ed:9a:30:fc:7d:b3:d3:86:69:a0:0a:95:6c:c9:65:e2:f8: 8e:dd:5b:a2:72:78:4b:bd:aa:29:ce:7d:72:95:1e:e6:4d:16: 10:ed:67:af:2e:56:ff:01:7f:09:da:ff:4a:3a:7e:bf:83:bf: a9:ed:e8:6f:ce:e1:16:d0:d9:59:30:49:da:91:99:b6:71:1c: 0f:35:82:13:26:23:03:45:36:ce:db:31:2c:59:ed:c1:88:6e: 8d:47:f4:c7:82:fc:67:d1:81:88:15:d0:53:f7:a5:6a:13:75: 43:ff:9a:d5:9d:ae:e6:ef:ae:05:3b:3a:69:0f:58:95:1f:36: 9c:e4:73:0f:9d:99:da:ee:87:12:8b:62:fd:93:d9:8d:a1:fc: f3:db:2d:c6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCOYXg0a+11TchZWw5F+ibnN83mAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MDQ0MjE4WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BiYzgxMDgwMTFlYmQ0NDY1MmJkYjYxNWIxZDQxODU4Mjli YTFmM2I0YjhkYTQ5OTE1OWRiOGI1NmQwYjJjOWY0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCsyAq6oXDoopCg4TTM1yBsrW5B2/rje7Yi3x4H+W1eoMF3 4eJAbubmRLbKuO6tGaqxUc8IBqDNPgOyWUzH0oP9KbGD8qhm71pMWRF5o8iQXg76 l7/kGhKwZVSQy0+VR1Ls4RaYcU7OJsij/7Cdi41E97dXNn4J3F7L5mYSf+MwTiM5 2roZ0uCAP624X84EXnkDdx7ir3DMV9TP/bndUDQO1a30eiK9sT3GcH8ILjueq6Zb M0hIgWlXU7eF1VQfNxM3LvneiLIFJJmkR4dtLaO7u5yqF78I9b0WXm9fQJWSysJ9 RPNllBjJChltlUFPdaRhCUrbhtfJE3vzK0qDbo8DAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU/SwXRuxq4uDk3RDGb7nvER/9U5owHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzM5OWM5NTViLTQ3ODUtNDAwYy04OTNhLTI2OWQ1NzAyYzNiYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASpEkwDQYJKoZIhvcNAQELBQADggEBADV7Ztg3wPpN+XZqLlfY3YlvFHD2 xRj1SK8SdG4idTYt0XPWnfw8lR88GnV+Vy3lV4KLiH24in0bBxC/KNs2ouW9dESt NyryqJxmZDOELDigz/OA5c5AO+/dU/r7AYSA61cqGoBs+M6YXW2HfbztmjD8fbPT hmmgCpVsyWXi+I7dW6JyeEu9qinOfXKVHuZNFhDtZ68uVv8Bfwna/0o6fr+Dv6nt 6G/O4RbQ2VkwSdqRmbZxHA81ghMmIwNFNs7bMSxZ7cGIbo1H9MeC/GfRgYgV0FP3 pWoTdUP/mtWdrubvrgU7OmkPWJUfNpzkcw+dmdruhxKLYv2T2Y2h/PPbLcY= -----END CERTIFICATE-----Generated at Mon Oct 20 03:06:44 2025 by rpki-client