$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/65c55fbf-49f3-46cb-b1f6-9dc083b37ebf.roa File: 65c55fbf-49f3-46cb-b1f6-9dc083b37ebf.roa (raw, json) Hash identifier: TXTBKDtcc1U4mqMoEppIMO4SvCJ+4G+pnUAYRfca7JQ= Subject key identifier: EB:1F:47:DC:9B:00:A8:03:0B:FB:7E:18:D5:D4:5D:6F:FB:C1:25:85 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2F8B41411729B56B35548E0384F5520AA50C9C9F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/65c55fbf-49f3-46cb-b1f6-9dc083b37ebf.roa Signing time: Sat 18 Oct 2025 07:50:12 +0000 ROA not before: Sat 18 Oct 2025 07:50:12 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.164.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:8b:41:41:17:29:b5:6b:35:54:8e:03:84:f5:52:0a:a5:0c:9c:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 07:50:12 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=0f16d9ad3e8e6a870a7693510a4717f925caeed1c875b6c801c611e5b5eb4d03, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d6:5c:e9:fd:a7:5e:24:76:03:6f:b7:b2:3a: 45:ec:29:68:c5:de:54:74:d5:a1:77:16:d4:c4:57: af:bb:6b:16:14:05:8a:fb:55:03:02:c5:33:75:35: 92:88:44:38:9f:79:84:ce:12:57:7a:b3:83:d4:f0: 7b:77:5e:0d:d4:e7:02:50:e2:25:a1:2a:62:ce:c6: 22:2a:65:a2:88:55:72:9e:da:6c:f0:48:4a:46:04: 0e:fd:3f:51:d5:59:fe:99:4e:84:ca:b7:84:2a:8c: 48:71:41:8e:b3:0b:66:70:8a:d6:d5:03:ad:7b:93: ef:06:33:51:76:c2:7c:38:78:b5:97:6c:aa:0d:c6: 25:34:20:a9:5b:4e:8c:bc:68:0b:2f:88:0f:9b:37: a2:63:b7:8c:c3:24:33:bd:b2:a8:85:78:d6:78:f5: cf:33:d1:b8:fd:30:8f:1d:a9:10:85:40:5d:3c:4d: 79:18:b3:e2:e7:93:7f:21:5b:94:4f:59:0f:71:ae: ff:52:69:89:69:0d:d5:8c:f1:e1:c1:97:e0:95:5e: 38:48:3b:22:68:ba:b5:95:78:e4:ee:97:82:e4:32: 11:f2:6f:c6:4e:d3:b8:52:fe:82:a9:45:7b:96:e3: 5b:18:66:48:79:02:d1:2f:35:36:0a:5c:12:8e:3e: 54:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:1F:47:DC:9B:00:A8:03:0B:FB:7E:18:D5:D4:5D:6F:FB:C1:25:85 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/65c55fbf-49f3-46cb-b1f6-9dc083b37ebf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.164.237.0/24 Signature Algorithm: sha256WithRSAEncryption 52:8d:5b:01:dd:44:03:4e:f9:89:23:01:a5:54:1e:f3:e8:13: 68:ad:65:5d:87:0f:34:69:22:66:43:31:bb:de:02:0c:31:34: bf:fe:9f:c1:ba:b6:29:ac:ee:de:06:6d:1b:b4:ba:79:c7:55: 77:19:17:eb:b3:8e:f4:56:d4:6d:e3:16:0b:58:e4:90:37:b4: 76:e8:e6:01:86:6f:2e:21:c8:a3:97:15:78:7a:5e:b6:3d:d1: 00:36:70:03:05:41:12:73:f9:fb:4d:e9:db:b3:c3:1a:6a:d9: a9:fd:49:77:86:00:26:9e:98:66:9c:e8:43:aa:c3:f8:87:b1: e5:f3:1f:e5:57:c3:23:f7:2c:c0:90:b3:3e:1a:04:05:b1:8a: ea:18:e5:51:a2:cf:4b:0d:d6:cb:2d:54:b2:96:77:e2:21:96: c2:2f:f1:11:8d:02:8e:fe:d1:bc:79:4c:5b:48:e4:41:13:3d: 5f:7f:78:96:69:78:9f:73:37:51:70:1e:8f:8b:a3:ce:e6:c0: d8:08:3d:96:6c:85:21:16:40:f6:71:47:3c:89:c0:94:be:ae: 22:b2:ea:c2:03:f7:a7:90:06:c5:01:24:1e:f6:63:47:50:87: 49:91:1e:c4:fe:25:07:b3:f8:88:44:d0:61:da:8d:48:a6:c8: 92:58:57:5e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUL4tBQRcptWs1VI4DhPVSCqUMnJ8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MDc1MDEyWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AwZjE2ZDlhZDNlOGU2YTg3MGE3NjkzNTEwYTQ3MTdmOTI1 Y2FlZWQxYzg3NWI2YzgwMWM2MTFlNWI1ZWI0ZDAzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDX1lzp/adeJHYDb7eyOkXsKWjF3lR01aF3FtTEV6+7axYU BYr7VQMCxTN1NZKIRDifeYTOEld6s4PU8Ht3Xg3U5wJQ4iWhKmLOxiIqZaKIVXKe 2mzwSEpGBA79P1HVWf6ZToTKt4QqjEhxQY6zC2ZwitbVA617k+8GM1F2wnw4eLWX bKoNxiU0IKlbToy8aAsviA+bN6Jjt4zDJDO9sqiFeNZ49c8z0bj9MI8dqRCFQF08 TXkYs+Lnk38hW5RPWQ9xrv9SaYlpDdWM8eHBl+CVXjhIOyJourWVeOTul4LkMhHy b8ZO07hS/oKpRXuW41sYZkh5AtEvNTYKXBKOPlSPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU6x9H3JsAqAML+34Y1dRdb/vBJYUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzY1YzU1ZmJmLTQ5ZjMtNDZjYi1iMWY2LTlkYzA4M2IzN2ViZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASpO0wDQYJKoZIhvcNAQELBQADggEBAFKNWwHdRANO+YkjAaVUHvPoE2it ZV2HDzRpImZDMbveAgwxNL/+n8G6tims7t4GbRu0unnHVXcZF+uzjvRW1G3jFgtY 5JA3tHbo5gGGby4hyKOXFXh6XrY90QA2cAMFQRJz+ftN6duzwxpq2an9SXeGACae mGac6EOqw/iHseXzH+VXwyP3LMCQsz4aBAWxiuoY5VGiz0sN1sstVLKWd+IhlsIv 8RGNAo7+0bx5TFtI5EETPV9/eJZpeJ9zN1FwHo+Lo87mwNgIPZZshSEWQPZxRzyJ wJS+riKy6sID96eQBsUBJB72Y0dQh0mRHsT+JQez+IhE0GHajUimyJJYV14= -----END CERTIFICATE-----Generated at Mon Oct 20 06:07:07 2025 by rpki-client