$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/42ee6248-0a68-4c37-bc0c-b0dfb81c7410.roa File: 42ee6248-0a68-4c37-bc0c-b0dfb81c7410.roa (raw, json) Hash identifier: K4+5cyb8rplOTAp80w6e7FVKM1mfG8UeK6bf8CqJf34= Subject key identifier: BB:3E:90:BE:8B:88:99:46:36:0C:29:A8:CA:79:0D:F0:82:47:5E:5B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2EC64B690D854DD29892BC59A9A078A5E85B82FE Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/42ee6248-0a68-4c37-bc0c-b0dfb81c7410.roa Signing time: Sun 19 Oct 2025 17:43:48 +0000 ROA not before: Sun 19 Oct 2025 17:43:48 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.66.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:c6:4b:69:0d:85:4d:d2:98:92:bc:59:a9:a0:78:a5:e8:5b:82:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 17:43:48 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=70df93d156f15d76fc02e23d2bbb257c5310114665c134320a0c35cee3c71820, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:cb:f1:c7:17:06:c9:8a:51:36:81:03:25:ad: 73:5c:8d:47:7d:10:7e:3e:6f:78:31:96:ec:34:29: c9:69:1a:e2:9b:b1:57:5f:4b:7a:7b:3e:9c:3f:e1: a2:28:fc:6f:03:7f:cf:91:5e:19:f1:0c:2a:df:6e: 91:00:b5:db:8d:9d:92:45:91:17:a2:91:31:cd:3d: a6:15:e8:12:31:0a:fa:0f:92:fd:28:02:29:bf:26: e1:d9:93:2c:a9:a2:c1:5b:0c:c3:6e:a9:0b:d6:21: c2:33:70:66:0a:51:25:76:f0:5c:d9:3b:f7:c9:af: d8:6d:9c:fa:01:31:d5:8d:de:53:b5:ea:cf:18:e2: 0f:3e:19:68:f0:93:d6:40:91:a9:97:5d:7f:f5:16: 1d:04:9a:5e:22:01:59:51:d0:70:64:cb:9d:5d:ce: 7b:15:6b:86:a4:29:25:36:51:22:eb:da:c9:c7:6e: 85:ed:f6:77:89:7e:a9:62:de:0a:78:fa:4b:ad:11: a1:81:3d:15:81:a7:88:6c:ac:73:ed:0c:ed:f1:a9: c1:cc:9f:af:32:7a:85:6a:b1:af:81:4f:bf:e0:7a: d2:fb:61:65:c8:94:bc:c4:71:8e:2b:b7:06:38:f5: d9:e7:c4:52:4a:a1:dc:0b:ef:58:d7:85:91:7a:07: 7b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:3E:90:BE:8B:88:99:46:36:0C:29:A8:CA:79:0D:F0:82:47:5E:5B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/42ee6248-0a68-4c37-bc0c-b0dfb81c7410.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.66.128.0/24 Signature Algorithm: sha256WithRSAEncryption 76:26:04:3d:69:9a:5a:12:d7:05:3f:94:33:68:a1:9f:58:5b: 58:29:93:b0:46:d3:d8:af:bf:16:93:5d:b7:6e:5c:3f:68:29: 98:b6:4c:14:42:14:02:f2:f3:f1:99:01:f0:a0:f5:30:40:5b: d0:79:10:a8:d3:b0:38:37:27:e8:55:03:3b:2b:38:96:b9:05: d8:2b:7d:1e:48:d4:18:a7:45:81:88:51:9b:92:04:b1:c3:32: e6:21:73:48:e5:44:a1:6f:db:8f:34:53:6c:17:da:da:6d:76: 5f:7e:be:f6:96:e0:c4:1a:c6:31:15:56:04:35:4c:5f:9f:53: 59:25:23:17:2c:2a:28:c9:07:a2:e4:bf:fc:c2:41:51:71:07: 47:7d:07:f7:cb:98:0b:cf:30:96:27:c0:38:e1:02:93:52:df: fa:0b:1b:ae:50:2b:ea:33:d4:d9:52:3f:21:f6:d9:33:50:ad: a3:3d:e8:4a:c1:82:1e:74:0e:7a:e4:c7:46:b3:2c:70:53:8a: 10:cd:35:a8:37:4f:1b:85:1f:ca:f3:da:e7:f4:13:71:c3:dd: cf:e3:c2:55:f6:a3:c7:fe:49:b0:38:d4:3f:46:2f:8e:b4:f0: a2:00:59:43:af:ad:42:ad:5b:11:56:ab:d7:36:c2:5d:a5:ec: 45:f5:c1:2c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULsZLaQ2FTdKYkrxZqaB4pehbgv4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTc0MzQ4WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A3MGRmOTNkMTU2ZjE1ZDc2ZmMwMmUyM2QyYmJiMjU3YzUz MTAxMTQ2NjVjMTM0MzIwYTBjMzVjZWUzYzcxODIwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCry/HHFwbJilE2gQMlrXNcjUd9EH4+b3gxluw0KclpGuKb sVdfS3p7Ppw/4aIo/G8Df8+RXhnxDCrfbpEAtduNnZJFkReikTHNPaYV6BIxCvoP kv0oAim/JuHZkyyposFbDMNuqQvWIcIzcGYKUSV28FzZO/fJr9htnPoBMdWN3lO1 6s8Y4g8+GWjwk9ZAkamXXX/1Fh0Eml4iAVlR0HBky51dznsVa4akKSU2USLr2snH boXt9neJfqli3gp4+kutEaGBPRWBp4hsrHPtDO3xqcHMn68yeoVqsa+BT7/getL7 YWXIlLzEcY4rtwY49dnnxFJKodwL71jXhZF6B3v5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUuz6QvouImUY2DCmoynkN8IJHXlswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQyZWU2MjQ4LTBhNjgtNGMzNy1iYzBjLWIwZGZiODFjNzQxMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASQoAwDQYJKoZIhvcNAQELBQADggEBAHYmBD1pmloS1wU/lDNooZ9YW1gp k7BG09ivvxaTXbduXD9oKZi2TBRCFALy8/GZAfCg9TBAW9B5EKjTsDg3J+hVAzsr OJa5BdgrfR5I1BinRYGIUZuSBLHDMuYhc0jlRKFv2480U2wX2tptdl9+vvaW4MQa xjEVVgQ1TF+fU1klIxcsKijJB6Lkv/zCQVFxB0d9B/fLmAvPMJYnwDjhApNS3/oL G65QK+oz1NlSPyH22TNQraM96ErBgh50Dnrkx0azLHBTihDNNag3TxuFH8rz2uf0 E3HD3c/jwlX2o8f+SbA41D9GL4608KIAWUOvrUKtWxFWq9c2wl2l7EX1wSw= -----END CERTIFICATE-----Generated at Mon Oct 20 18:12:13 2025 by rpki-client