$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5a96c5df-5c95-4d54-b59f-1bb24e3d84a8.roa File: 5a96c5df-5c95-4d54-b59f-1bb24e3d84a8.roa (raw, json) Hash identifier: cycLicI2dE2UoI68GWf5cSdZ4vorcCHGNAYRNUpYM90= Subject key identifier: D2:D7:61:DA:BF:D1:71:59:14:98:4C:C7:EE:B4:02:24:C6:55:39:C1 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 157E7D5E145F73BF445F9B6A94E4CA9DFBCD1E70 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5a96c5df-5c95-4d54-b59f-1bb24e3d84a8.roa Signing time: Sat 18 Oct 2025 06:52:09 +0000 ROA not before: Sat 18 Oct 2025 06:52:09 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.155.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:7e:7d:5e:14:5f:73:bf:44:5f:9b:6a:94:e4:ca:9d:fb:cd:1e:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 06:52:09 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=36009fa4a9d7775ee420d5e2d3bce30c5eba077f017bc7089d261e30a6efaec4, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:31:05:82:5f:da:12:2f:d0:ae:e0:83:0b:aa: 95:b0:c0:36:09:c1:c5:02:ed:f8:df:eb:af:9d:59: 3b:e3:c9:53:6c:bd:c0:97:30:18:01:58:ba:2f:5f: 8c:68:82:b0:8e:95:3b:e0:58:0c:1f:d9:1a:0a:93: 22:49:55:65:58:ec:71:dc:de:5d:3e:30:80:7e:94: 83:93:4c:eb:24:cd:30:be:7b:a2:b7:52:69:7c:c3: 7b:c5:be:16:8a:cb:4f:aa:e5:41:91:41:be:77:32: c6:c4:6a:bd:b6:72:37:75:0b:03:46:f9:81:9a:df: d2:b5:f4:a5:95:a1:c5:7f:9d:80:af:3c:de:82:f9: 86:d3:90:cc:fc:55:69:90:d9:86:a4:bd:26:7b:3f: ca:b0:6b:c8:37:5d:d5:48:3b:c3:f1:c2:9e:e1:5e: 6d:96:73:f5:98:e5:dc:01:5f:6f:23:31:e3:7d:e7: 32:02:b8:8d:c2:7b:67:af:aa:3d:f6:1c:42:02:39: 32:cd:aa:a3:81:78:59:23:bb:b9:64:d7:a0:89:16: d4:aa:1a:7b:44:5e:c0:dd:0a:7c:cc:79:56:c2:be: a1:14:e4:fb:9f:c6:b1:9d:6d:62:0e:ff:3d:3d:ec: 4e:fc:df:70:60:af:a7:9c:44:04:14:87:09:5b:00: b2:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:D7:61:DA:BF:D1:71:59:14:98:4C:C7:EE:B4:02:24:C6:55:39:C1 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5a96c5df-5c95-4d54-b59f-1bb24e3d84a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.155.68.0/23 Signature Algorithm: sha256WithRSAEncryption 8d:26:ba:a5:bc:cd:65:23:20:99:43:1f:d6:78:3a:3c:bd:59: b8:2d:be:40:07:00:3a:6a:f1:fc:1d:a5:8f:ec:a4:07:5d:bd: e1:5a:a6:61:17:4a:75:35:96:59:82:df:d4:4c:cb:d7:79:bc: 11:8c:8b:38:9c:b1:fe:40:7c:e7:05:a4:b7:7f:2a:db:d6:08: 14:19:36:d9:a7:04:ba:ff:f0:4d:d6:40:58:4c:15:75:e8:7f: 2f:8d:5d:6e:be:d2:97:fa:62:d2:8c:5b:4d:59:ad:67:65:d4: c7:6c:ec:0d:33:af:64:0e:a9:2b:f0:ba:83:e8:67:fe:db:f3: 14:2e:2d:15:0c:7c:a4:95:d1:2f:9e:e7:da:86:d6:f6:97:2f: 9e:10:db:b3:4a:e0:f5:6b:ba:6a:9a:b1:ca:1e:bc:88:ac:c1: 1e:22:5f:d5:ce:a2:76:b6:50:49:c7:91:4b:97:02:41:fb:38: d5:b6:13:63:3c:c2:53:82:c2:32:55:32:24:5f:c9:ca:ab:d9: e9:84:56:7b:c5:3c:f8:ac:14:bd:4f:53:e3:28:52:b6:04:73: 93:26:2a:0f:91:9c:8f:d9:cf:63:c6:dc:85:79:3f:45:b5:46: e4:d3:9f:e0:fd:4a:2d:15:35:bb:ae:54:a0:2e:9c:e6:33:22: 0c:c9:89:01 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFX59XhRfc79EX5tqlOTKnfvNHnAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MDY1MjA5WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AzNjAwOWZhNGE5ZDc3NzVlZTQyMGQ1ZTJkM2JjZTMwYzVl YmEwNzdmMDE3YmM3MDg5ZDI2MWUzMGE2ZWZhZWM0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCdMQWCX9oSL9Cu4IMLqpWwwDYJwcUC7fjf66+dWTvjyVNs vcCXMBgBWLovX4xogrCOlTvgWAwf2RoKkyJJVWVY7HHc3l0+MIB+lIOTTOskzTC+ e6K3Uml8w3vFvhaKy0+q5UGRQb53MsbEar22cjd1CwNG+YGa39K19KWVocV/nYCv PN6C+YbTkMz8VWmQ2YakvSZ7P8qwa8g3XdVIO8Pxwp7hXm2Wc/WY5dwBX28jMeN9 5zICuI3Ce2evqj32HEICOTLNqqOBeFkju7lk16CJFtSqGntEXsDdCnzMeVbCvqEU 5PufxrGdbWIO/z097E7833Bgr6ecRAQUhwlbALIJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU0tdh2r/RcVkUmEzH7rQCJMZVOcEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzVhOTZjNWRmLTVjOTUtNGQ1NC1iNTlmLTFiYjI0ZTNkODRhOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESm0QwDQYJKoZIhvcNAQELBQADggEBAI0muqW8zWUjIJlDH9Z4Ojy9Wbgt vkAHADpq8fwdpY/spAddveFapmEXSnU1llmC39RMy9d5vBGMizicsf5AfOcFpLd/ KtvWCBQZNtmnBLr/8E3WQFhMFXXofy+NXW6+0pf6YtKMW01ZrWdl1Mds7A0zr2QO qSvwuoPoZ/7b8xQuLRUMfKSV0S+e59qG1vaXL54Q27NK4PVrumqascoevIiswR4i X9XOona2UEnHkUuXAkH7ONW2E2M8wlOCwjJVMiRfycqr2emEVnvFPPisFL1PU+Mo UrYEc5MmKg+RnI/Zz2PG3IV5P0W1RuTTn+D9Si0VNbuuVKAunOYzIgzJiQE= -----END CERTIFICATE-----Generated at Mon Oct 20 02:56:58 2025 by rpki-client