$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5f231311-3549-408d-ae35-2626be3ea70a.roa File: 5f231311-3549-408d-ae35-2626be3ea70a.roa (raw, json) Hash identifier: ewAIskeY6L29P1iFJOBCuP3WN+8NPAQBoYGBFNukWeQ= Subject key identifier: 4E:5D:89:89:DF:92:7F:AC:F9:1A:97:F5:6D:50:95:EC:45:D0:4F:9D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 69CE854F44C4B3E2A0F8744997120A9BD521B897 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5f231311-3549-408d-ae35-2626be3ea70a.roa Signing time: Sun 19 Oct 2025 19:11:22 +0000 ROA not before: Sun 19 Oct 2025 19:11:22 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.67.74.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:ce:85:4f:44:c4:b3:e2:a0:f8:74:49:97:12:0a:9b:d5:21:b8:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 19:11:22 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=1c6e6b20eebdd75e828419be0045da2b9d9241301dd1a7fe31150797aeec2151, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:73:1c:32:2f:51:50:d2:43:d7:53:d9:7e:13: 7c:0d:53:88:73:3d:99:77:9a:fe:f9:47:00:1a:a3: 42:56:dd:cf:59:cc:01:d4:55:07:d1:89:ba:ac:7b: 2c:b0:04:e2:ab:56:8a:30:7c:c6:7d:ea:39:ff:2d: 6e:17:75:0c:e5:b3:9a:de:5f:f4:c2:2a:79:a9:50: 95:72:b0:bb:e7:f6:57:4c:43:f1:eb:fe:4d:d4:3a: 55:b9:d4:ce:5c:a0:4b:4e:79:3f:97:de:9a:fe:c7: 36:b4:a9:ae:79:a5:b0:40:49:80:03:47:d8:54:a8: aa:c2:1e:c1:0c:00:09:07:9f:bb:e0:71:57:ed:73: 2a:8b:cc:6a:1d:16:ff:e8:74:36:fe:d1:d1:ee:02: c1:e6:18:a9:4b:aa:75:94:d5:3a:07:40:a3:55:c0: e0:fa:b4:7d:f9:fc:f6:f7:44:05:47:43:e0:29:52: 22:13:b7:39:49:f0:98:69:6e:c9:a7:c2:36:dc:53: ac:58:f5:1f:46:93:f0:31:20:4b:5b:b8:6d:19:0b: 0a:44:e0:90:c0:32:77:6f:25:22:aa:7f:5f:e0:48: 17:27:01:91:b0:a2:61:2f:b0:d7:f0:93:22:cf:2e: 71:b4:4d:b8:ba:18:a8:e4:93:8e:9f:0c:63:60:e7: 44:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:5D:89:89:DF:92:7F:AC:F9:1A:97:F5:6D:50:95:EC:45:D0:4F:9D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5f231311-3549-408d-ae35-2626be3ea70a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.67.74.0/23 Signature Algorithm: sha256WithRSAEncryption 82:08:2a:2b:5e:b6:55:1e:5d:cc:e7:69:80:55:b7:8a:f1:27: b7:a7:9f:60:bd:95:29:c9:17:9c:9b:d2:67:8a:db:1d:4c:f3: c8:cd:47:4d:26:94:da:38:38:da:b4:39:7f:82:6d:e3:d6:4e: 68:30:6e:47:03:1d:c3:62:88:6b:f4:0b:5e:ad:11:8b:be:3f: e5:94:bd:21:44:82:2e:8c:97:11:2f:2e:7a:4a:4a:07:96:e8: 8b:05:6d:c1:ef:da:c6:e5:1b:6b:66:64:1a:19:74:5a:96:3f: 36:6f:05:ba:8a:cc:a0:c3:cb:91:37:d8:6d:15:da:f2:09:54: 87:99:c8:44:06:9a:69:f2:43:17:f3:64:5d:05:8c:2d:16:64: 78:04:29:de:2b:5c:c6:0d:65:61:af:52:99:27:05:ae:31:a1: b1:c3:5a:58:a2:e1:48:aa:d1:ac:a8:b8:c1:d8:e3:f7:74:30: 4a:f1:bb:1a:80:95:39:12:77:b2:2f:59:c9:bf:2b:65:f9:3a: 7b:4e:7a:4f:47:b8:54:eb:a2:42:ce:44:b3:2d:40:d3:88:a9: 18:0b:f5:c4:3d:b4:c7:7c:e6:2c:bd:b5:87:2d:65:1e:db:c6: d5:1f:c9:d2:f3:a3:f1:da:14:b7:43:a7:17:ff:80:05:b7:94: 6a:f0:23:8b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUac6FT0TEs+Kg+HRJlxIKm9UhuJcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTkxMTIyWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AxYzZlNmIyMGVlYmRkNzVlODI4NDE5YmUwMDQ1ZGEyYjlk OTI0MTMwMWRkMWE3ZmUzMTE1MDc5N2FlZWMyMTUxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDncxwyL1FQ0kPXU9l+E3wNU4hzPZl3mv75RwAao0JW3c9Z zAHUVQfRibqseyywBOKrVoowfMZ96jn/LW4XdQzls5reX/TCKnmpUJVysLvn9ldM Q/Hr/k3UOlW51M5coEtOeT+X3pr+xza0qa55pbBASYADR9hUqKrCHsEMAAkHn7vg cVftcyqLzGodFv/odDb+0dHuAsHmGKlLqnWU1ToHQKNVwOD6tH35/Pb3RAVHQ+Ap UiITtzlJ8JhpbsmnwjbcU6xY9R9Gk/AxIEtbuG0ZCwpE4JDAMndvJSKqf1/gSBcn AZGwomEvsNfwkyLPLnG0Tbi6GKjkk46fDGNg50SvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUTl2Jid+Sf6z5Gpf1bVCV7EXQT50wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzVmMjMxMzExLTM1NDktNDA4ZC1hZTM1LTI2MjZiZTNlYTcwYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESQ0owDQYJKoZIhvcNAQELBQADggEBAIIIKitetlUeXcznaYBVt4rxJ7en n2C9lSnJF5yb0meK2x1M88jNR00mlNo4ONq0OX+CbePWTmgwbkcDHcNiiGv0C16t EYu+P+WUvSFEgi6MlxEvLnpKSgeW6IsFbcHv2sblG2tmZBoZdFqWPzZvBbqKzKDD y5E32G0V2vIJVIeZyEQGmmnyQxfzZF0FjC0WZHgEKd4rXMYNZWGvUpknBa4xobHD Wlii4Uiq0ayouMHY4/d0MErxuxqAlTkSd7IvWcm/K2X5OntOek9HuFTrokLORLMt QNOIqRgL9cQ9tMd85iy9tYctZR7bxtUfydLzo/HaFLdDpxf/gAW3lGrwI4s= -----END CERTIFICATE-----Generated at Mon Oct 20 08:43:18 2025 by rpki-client