$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5df3c943-628a-41dc-9f90-87b0fb762860.roa File: 5df3c943-628a-41dc-9f90-87b0fb762860.roa (raw, json) Hash identifier: QwCF5thl5S315YJUG2l+MWI+5JYzYWl8MzJUwue3DQ4= Subject key identifier: 06:17:2C:93:49:74:8E:C1:64:02:C5:32:EC:F8:5C:A9:0D:47:36:9B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 04F294794E7F700F61E46861117E9A44F549D087 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5df3c943-628a-41dc-9f90-87b0fb762860.roa Signing time: Sun 19 Oct 2025 11:32:38 +0000 ROA not before: Sun 19 Oct 2025 11:32:38 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.66.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:f2:94:79:4e:7f:70:0f:61:e4:68:61:11:7e:9a:44:f5:49:d0:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 11:32:38 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=3380be99e116313aa5617fa1a4d8992dd2be8146b1621d529baf2d73adf36006, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:96:9c:56:6e:50:d8:fb:ca:4f:8d:1e:d2:0f: de:25:bf:71:f9:d5:89:d9:f6:99:a8:53:e1:c0:4b: 63:70:b5:70:f9:75:28:06:4a:a6:81:78:7f:2a:cf: 7b:55:a9:19:57:66:ea:46:e8:b9:4a:5c:26:f0:e5: b2:9d:80:ce:c5:e5:0b:13:22:d4:40:06:7a:64:95: 97:d4:85:cc:c2:b0:b5:7d:1f:44:1b:ff:c9:2b:e9: 08:17:fa:5e:a9:5f:04:d3:46:5a:df:4f:a9:fb:dd: 05:7d:bd:d1:e7:f9:6a:07:54:c7:59:66:f7:75:6b: 77:fd:ae:79:3b:c3:b2:e2:8e:db:ea:36:12:f2:57: 47:ed:29:31:52:b0:42:4b:f7:a4:c4:92:a7:f1:4f: 15:3c:32:e8:27:b3:32:38:25:34:cb:01:b7:68:f1: d3:77:8b:05:14:f9:cc:ed:4b:8c:8a:49:2b:eb:9b: d4:db:6d:3d:25:5c:00:b8:05:77:6e:b9:51:95:f1: ef:a6:ee:99:a4:62:0a:57:9b:8e:2e:42:f5:01:9c: 22:50:7d:99:dc:c8:57:cf:eb:1d:a8:97:86:d0:2f: 13:2a:e7:02:dd:09:15:26:5b:a4:d2:c4:73:e6:a0: c5:dd:47:ef:a6:0b:b9:a6:e8:9d:53:e3:a9:72:f3: da:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:17:2C:93:49:74:8E:C1:64:02:C5:32:EC:F8:5C:A9:0D:47:36:9B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5df3c943-628a-41dc-9f90-87b0fb762860.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.66.184.0/22 Signature Algorithm: sha256WithRSAEncryption 73:64:0e:a5:ab:0a:b4:8e:f6:b7:e7:ac:5c:bf:15:0f:46:f7: ea:2e:32:71:2d:17:6a:5a:1f:16:fa:4e:af:20:ce:fd:b6:76: 15:41:f5:b2:d6:a7:85:2e:0c:87:5a:74:e9:01:de:af:d3:ba: 5a:94:4d:81:52:b4:09:60:fc:4b:76:e4:ff:82:82:32:19:a5: 01:76:67:68:62:d0:f4:17:bb:2c:38:94:b0:c5:c0:22:26:ce: 62:af:4b:5f:e1:51:00:46:b1:b5:01:d8:71:78:0d:11:bd:5e: e0:8b:af:00:ee:73:17:fc:36:35:e8:6c:17:5c:8d:d4:15:c4: 1c:8b:9c:ae:bd:ae:8a:24:86:7f:38:f4:4d:30:99:8a:15:bb: 33:59:c1:9a:87:1d:35:69:4f:ce:63:d3:22:f3:de:9a:05:04: 9a:87:28:b7:38:30:27:e4:25:08:b6:d7:bb:4b:a9:23:42:b4: d1:96:fc:fb:a3:f9:34:dc:67:68:db:0f:9d:38:33:38:0d:08: 56:0c:08:fa:2d:f5:5a:6e:64:6f:4f:11:71:b0:84:7b:d7:0f: 72:51:2b:99:e5:f4:af:d5:6b:6d:01:de:c0:d0:10:fa:f9:02: 0f:2e:87:b6:dd:de:75:7a:39:66:39:0b:ef:de:93:46:3e:90: d9:3b:4c:f4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBPKUeU5/cA9h5GhhEX6aRPVJ0IcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTEzMjM4WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AzMzgwYmU5OWUxMTYzMTNhYTU2MTdmYTFhNGQ4OTkyZGQy YmU4MTQ2YjE2MjFkNTI5YmFmMmQ3M2FkZjM2MDA2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCflpxWblDY+8pPjR7SD94lv3H51YnZ9pmoU+HAS2NwtXD5 dSgGSqaBeH8qz3tVqRlXZupG6LlKXCbw5bKdgM7F5QsTItRABnpklZfUhczCsLV9 H0Qb/8kr6QgX+l6pXwTTRlrfT6n73QV9vdHn+WoHVMdZZvd1a3f9rnk7w7Lijtvq NhLyV0ftKTFSsEJL96TEkqfxTxU8MugnszI4JTTLAbdo8dN3iwUU+cztS4yKSSvr m9TbbT0lXAC4BXduuVGV8e+m7pmkYgpXm44uQvUBnCJQfZncyFfP6x2ol4bQLxMq 5wLdCRUmW6TSxHPmoMXdR++mC7mm6J1T46ly89orAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUBhcsk0l0jsFkAsUy7PhcqQ1HNpswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzVkZjNjOTQzLTYyOGEtNDFkYy05ZjkwLTg3YjBmYjc2Mjg2MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAISQrgwDQYJKoZIhvcNAQELBQADggEBAHNkDqWrCrSO9rfnrFy/FQ9G9+ou MnEtF2paHxb6Tq8gzv22dhVB9bLWp4UuDIdadOkB3q/TulqUTYFStAlg/Et25P+C gjIZpQF2Z2hi0PQXuyw4lLDFwCImzmKvS1/hUQBGsbUB2HF4DRG9XuCLrwDucxf8 NjXobBdcjdQVxByLnK69rookhn849E0wmYoVuzNZwZqHHTVpT85j0yLz3poFBJqH KLc4MCfkJQi217tLqSNCtNGW/Puj+TTcZ2jbD504MzgNCFYMCPot9VpuZG9PEXGw hHvXD3JRK5nl9K/Va20B3sDQEPr5Ag8uh7bd3nV6OWY5C+/ek0Y+kNk7TPQ= -----END CERTIFICATE-----Generated at Mon Oct 20 08:41:29 2025 by rpki-client