$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5ebe3e28-f868-4ce9-b74a-a4f6dd4092dd.roa File: 5ebe3e28-f868-4ce9-b74a-a4f6dd4092dd.roa (raw, json) Hash identifier: sJnN8yjMozZmttgvXPjsEsU30sKkGa4BHJLnIpEkxbw= Subject key identifier: 77:08:40:57:39:06:03:86:3C:69:16:E6:EC:9E:12:DB:70:B8:28:10 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5EFF3479A8646741BB46FAE5AFED076B28E655FE Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5ebe3e28-f868-4ce9-b74a-a4f6dd4092dd.roa Signing time: Sat 18 Oct 2025 13:32:39 +0000 ROA not before: Sat 18 Oct 2025 13:32:39 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.164.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:ff:34:79:a8:64:67:41:bb:46:fa:e5:af:ed:07:6b:28:e6:55:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 13:32:39 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=ef8291e21dcf25d38c13675252df368ae1222db08220b644eb05a024534e2de7, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4c:98:e6:41:0b:01:6a:16:d7:04:0f:96:7a: 5d:ad:d2:f9:ba:e3:bb:7e:c8:22:82:11:a9:2b:a5: 1d:90:05:93:e9:f5:72:5d:52:6c:44:1e:af:ed:8d: ba:a6:7e:70:d3:40:7b:ac:0a:44:b8:73:82:f8:a6: cd:13:6e:42:88:13:be:76:b5:1b:3b:8a:d1:6f:03: b7:a9:46:5d:39:56:17:55:0d:df:fc:88:31:ab:90: 38:08:c6:53:8c:da:2b:2c:1e:36:49:bb:98:e7:0b: 9a:1b:29:d5:1b:94:72:99:d5:e0:dc:24:36:2b:4f: 90:7b:e4:55:0b:20:2a:3a:bf:b7:53:80:1b:d4:77: e5:a5:7b:a9:cf:ac:38:5d:4e:a2:68:d1:de:26:7e: 52:f2:c4:9a:d0:f4:2c:d3:98:39:cd:fa:52:23:29: d4:a8:47:a9:c0:51:cf:7f:8f:3b:7f:ea:c8:37:b8: 6d:16:bf:92:bc:8f:25:7d:2a:07:40:15:a1:99:94: 4c:07:23:2e:eb:6a:da:91:2e:2c:67:b5:bb:a9:51: d2:5d:29:3b:91:fc:2b:25:be:3e:ca:10:05:95:95: c3:f8:f7:b8:50:4f:f8:8b:c7:2c:bd:63:6f:76:06: 0f:b7:b1:08:28:fa:49:03:6b:0e:a4:13:2d:12:95: f1:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:08:40:57:39:06:03:86:3C:69:16:E6:EC:9E:12:DB:70:B8:28:10 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5ebe3e28-f868-4ce9-b74a-a4f6dd4092dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.164.112.0/22 Signature Algorithm: sha256WithRSAEncryption 3b:d9:bb:71:a9:37:7e:c5:5c:13:d4:27:58:cd:93:82:43:ea: 51:4d:82:ac:c6:74:c0:83:c0:dd:db:21:8a:39:f9:3e:16:36: 91:72:f0:06:21:dc:bc:2d:01:77:cc:9f:6e:36:d1:c2:1a:41: bf:06:8c:09:b9:17:d7:26:89:19:55:4a:56:a6:96:c4:4e:2a: 8b:81:36:29:0b:9e:eb:47:09:ec:60:22:55:58:58:e1:47:0a: 9d:6c:5f:21:8f:2f:62:a4:45:46:3c:b5:c0:46:75:d8:64:b7: 59:45:60:7c:bf:8f:01:4c:01:9b:3e:5a:4e:0b:80:e0:df:36: 30:56:33:ea:31:f8:6b:9b:e8:df:aa:01:0e:e3:c6:9f:18:2f: ea:68:df:2d:0b:d5:a2:8b:95:05:98:d2:87:77:d8:0f:fd:2b: 6c:06:c4:09:cd:b8:de:8c:59:46:f3:16:05:55:5f:87:26:65: 58:c2:f5:8b:6e:e1:5f:16:30:5f:74:61:a1:70:ff:08:33:b9: 48:8f:a1:21:44:52:e9:a5:9a:a9:6a:cb:a7:b5:82:d2:73:f3: 25:91:77:d6:fa:3b:ba:43:f2:12:d8:af:a2:40:ff:b1:49:00: 4c:db:51:54:d2:32:98:cb:e2:3f:a3:64:20:7f:ca:39:39:a6: 11:87:43:59 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXv80eahkZ0G7Rvrlr+0HayjmVf4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTMzMjM5WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BlZjgyOTFlMjFkY2YyNWQzOGMxMzY3NTI1MmRmMzY4YWUx MjIyZGIwODIyMGI2NDRlYjA1YTAyNDUzNGUyZGU3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8TJjmQQsBahbXBA+Wel2t0vm647t+yCKCEakrpR2QBZPp 9XJdUmxEHq/tjbqmfnDTQHusCkS4c4L4ps0TbkKIE752tRs7itFvA7epRl05VhdV Dd/8iDGrkDgIxlOM2issHjZJu5jnC5obKdUblHKZ1eDcJDYrT5B75FULICo6v7dT gBvUd+Wle6nPrDhdTqJo0d4mflLyxJrQ9CzTmDnN+lIjKdSoR6nAUc9/jzt/6sg3 uG0Wv5K8jyV9KgdAFaGZlEwHIy7ratqRLixntbupUdJdKTuR/Cslvj7KEAWVlcP4 97hQT/iLxyy9Y292Bg+3sQgo+kkDaw6kEy0SlfHbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUdwhAVzkGA4Y8aRbm7J4S23C4KBAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzVlYmUzZTI4LWY4NjgtNGNlOS1iNzRhLWE0ZjZkZDQwOTJkZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAISpHAwDQYJKoZIhvcNAQELBQADggEBADvZu3GpN37FXBPUJ1jNk4JD6lFN gqzGdMCDwN3bIYo5+T4WNpFy8AYh3LwtAXfMn2420cIaQb8GjAm5F9cmiRlVSlam lsROKouBNikLnutHCexgIlVYWOFHCp1sXyGPL2KkRUY8tcBGddhkt1lFYHy/jwFM AZs+Wk4LgODfNjBWM+ox+Gub6N+qAQ7jxp8YL+po3y0L1aKLlQWY0od32A/9K2wG xAnNuN6MWUbzFgVVX4cmZVjC9Ytu4V8WMF90YaFw/wgzuUiPoSFEUumlmqlqy6e1 gtJz8yWRd9b6O7pD8hLYr6JA/7FJAEzbUVTSMpjL4j+jZCB/yjk5phGHQ1k= -----END CERTIFICATE-----Generated at Mon Oct 20 03:00:33 2025 by rpki-client