$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/407157a6-cada-4bd2-b390-c845763e82f4.roa File: 407157a6-cada-4bd2-b390-c845763e82f4.roa (raw, json) Hash identifier: 2nfhMhajhrKATmX3agmou4XHC97fOMUNY+xREET2xEA= Subject key identifier: 67:66:B3:64:20:CB:94:01:E3:ED:B7:34:FE:4F:74:3D:73:FF:DC:1A Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5CF3B881BF1E28CE0D5CF5E7FBEE04F1C1A04432 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/407157a6-cada-4bd2-b390-c845763e82f4.roa Signing time: Sat 18 Oct 2025 20:21:24 +0000 ROA not before: Sat 18 Oct 2025 20:21:24 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.165.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:f3:b8:81:bf:1e:28:ce:0d:5c:f5:e7:fb:ee:04:f1:c1:a0:44:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 20:21:24 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=6d2b8bf8deb24e9e732823011e11529087279c16b97bbdd80fd9964069a825f0, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:18:db:35:b0:f7:83:35:4a:bd:f2:be:3c:77: d6:24:29:0e:b3:b8:72:8a:5a:6f:3d:23:31:ce:17: ca:9d:be:81:c9:cc:b0:79:8d:c7:8b:7e:0b:2e:cd: 0c:67:c2:7a:e9:1d:11:d0:95:63:a0:66:d3:eb:0a: 04:8b:b4:32:6d:17:02:3c:37:b0:8b:b6:a5:a0:66: 68:35:0b:44:37:f4:ca:2a:08:a9:50:04:3c:81:17: 4b:ff:ff:14:2c:3e:78:59:0c:91:7d:8b:f1:1d:eb: fe:f7:3b:ae:25:a1:05:5a:71:9e:ce:e4:89:3d:84: 07:bf:7c:69:69:72:6e:2d:ae:78:cb:4a:aa:7c:b1: 9b:4a:65:cf:6d:00:1b:2e:44:72:a3:25:62:26:95: ea:36:d4:7c:17:28:2e:4d:34:aa:ec:21:8c:87:ef: 4a:c1:9d:35:81:3d:38:8c:bf:28:22:12:64:20:eb: 53:b7:39:bb:1e:ae:56:80:37:bb:65:2c:5e:8d:26: 5c:a9:53:bb:43:be:85:8d:47:b9:cb:bb:a2:4e:d8: f3:d8:98:37:04:05:68:7a:9c:c7:7f:ca:74:67:00: c7:31:bd:ae:3a:70:36:a1:66:69:d7:b3:f1:1a:5a: 3c:6d:3b:a2:10:d3:57:70:35:16:c5:74:ad:09:5d: da:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:66:B3:64:20:CB:94:01:E3:ED:B7:34:FE:4F:74:3D:73:FF:DC:1A X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/407157a6-cada-4bd2-b390-c845763e82f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.165.20.0/22 Signature Algorithm: sha256WithRSAEncryption 78:62:6b:c1:6c:c0:de:46:c1:79:c7:41:60:8b:c6:07:24:d1: 76:f1:c7:4f:26:ee:3a:f4:67:bd:ff:da:8b:1c:d5:c0:db:1f: 9c:87:10:78:d9:ed:b7:5a:98:58:ce:2a:54:18:80:27:56:1a: 51:e7:1d:26:a3:8b:5e:dc:5b:53:21:cf:19:5e:60:54:2f:2b: e9:57:d6:83:56:c5:d7:6c:bf:1c:d5:2a:96:e3:6b:4f:e9:9a: a6:c4:20:2a:aa:06:a2:3f:3c:11:67:61:fd:dd:bb:81:6a:20: 9c:9f:92:71:33:e7:9e:19:95:df:3f:09:31:0c:b9:12:d5:89: 24:c4:04:62:cd:51:02:35:72:ae:af:8a:ef:f8:f5:c2:2b:5f: 68:1d:9b:a9:0e:de:7e:7d:92:5b:a7:2f:27:14:9b:aa:60:dd: 4d:64:eb:a7:10:60:77:71:28:6c:bd:2d:1a:5b:df:6e:a8:8c: 7f:71:55:d9:9b:5a:0a:af:ef:67:20:55:bd:0f:40:30:d6:32: da:92:ee:dd:31:ce:c3:30:41:e7:5e:da:ec:8c:aa:fa:ff:aa: f8:39:79:f1:52:d2:67:45:53:7d:9f:ee:af:52:9d:15:98:76: fc:2e:f3:fa:08:77:a8:ac:9d:bd:bd:3f:19:b1:df:98:fa:4c: 03:b5:ee:2e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXPO4gb8eKM4NXPXn++4E8cGgRDIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MjAyMTI0WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZDJiOGJmOGRlYjI0ZTllNzMyODIzMDExZTExNTI5MDg3 Mjc5YzE2Yjk3YmJkZDgwZmQ5OTY0MDY5YTgyNWYwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCkGNs1sPeDNUq98r48d9YkKQ6zuHKKWm89IzHOF8qdvoHJ zLB5jceLfgsuzQxnwnrpHRHQlWOgZtPrCgSLtDJtFwI8N7CLtqWgZmg1C0Q39Moq CKlQBDyBF0v//xQsPnhZDJF9i/Ed6/73O64loQVacZ7O5Ik9hAe/fGlpcm4trnjL Sqp8sZtKZc9tABsuRHKjJWImleo21HwXKC5NNKrsIYyH70rBnTWBPTiMvygiEmQg 61O3ObserlaAN7tlLF6NJlypU7tDvoWNR7nLu6JO2PPYmDcEBWh6nMd/ynRnAMcx va46cDahZmnXs/EaWjxtO6IQ01dwNRbFdK0JXdqBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZ2azZCDLlAHj7bc0/k90PXP/3BowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQwNzE1N2E2LWNhZGEtNGJkMi1iMzkwLWM4NDU3NjNlODJmNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAISpRQwDQYJKoZIhvcNAQELBQADggEBAHhia8FswN5GwXnHQWCLxgck0Xbx x08m7jr0Z73/2osc1cDbH5yHEHjZ7bdamFjOKlQYgCdWGlHnHSaji17cW1Mhzxle YFQvK+lX1oNWxddsvxzVKpbja0/pmqbEICqqBqI/PBFnYf3du4FqIJyfknEz554Z ld8/CTEMuRLViSTEBGLNUQI1cq6viu/49cIrX2gdm6kO3n59klunLycUm6pg3U1k 66cQYHdxKGy9LRpb326ojH9xVdmbWgqv72cgVb0PQDDWMtqS7t0xzsMwQede2uyM qvr/qvg5efFS0mdFU32f7q9SnRWYdvwu8/oId6isnb29Pxmx35j6TAO17i4= -----END CERTIFICATE-----Generated at Mon Oct 20 06:11:36 2025 by rpki-client