$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/681ef11a-fb85-480f-ab00-03c9aaa9fc5e.roa File: 681ef11a-fb85-480f-ab00-03c9aaa9fc5e.roa (raw, json) Hash identifier: k+tCfMbUKvXHYdlCSuukN76WOTgbZgmttGZE+vIUsjQ= Subject key identifier: B5:E8:BD:C8:A3:B5:E4:73:4E:C1:0A:E9:23:C0:D6:F8:2E:9E:B2:E9 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 067F3C95D84AD67826142E2435DADF500E48E5C2 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/681ef11a-fb85-480f-ab00-03c9aaa9fc5e.roa Signing time: Sat 18 Oct 2025 21:01:29 +0000 ROA not before: Sat 18 Oct 2025 21:01:29 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.238.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:7f:3c:95:d8:4a:d6:78:26:14:2e:24:35:da:df:50:0e:48:e5:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 21:01:29 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=d9363e75039726aa3f87135702dc51e031b078a542228472fc49995c769eb102, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:16:a2:9b:03:ad:bf:d6:6b:13:a3:a9:1c:28: a3:b4:0f:90:23:b0:ad:96:27:6d:a7:1d:18:75:c9: 51:85:9a:fe:82:88:ce:99:c0:fc:57:00:e7:44:4e: c5:d8:5d:d2:81:71:04:6f:a2:0e:05:ee:a8:8d:16: 91:25:1f:7a:31:1c:97:1f:ab:9a:2a:04:cb:9b:48: b5:96:c7:9f:33:9c:c5:27:49:1c:5d:00:a2:61:8c: af:c5:16:38:7f:d7:d7:a1:55:6c:c4:26:d1:e2:a3: b8:40:f5:8e:2d:68:c9:dc:37:51:36:15:b2:56:91: 9b:39:c9:86:ef:89:f8:bd:22:df:99:88:64:e7:17: 37:31:d1:94:f4:4b:44:fb:00:96:9c:6f:75:e0:be: d1:0e:99:a7:c3:08:1d:af:0f:8c:9c:28:00:c6:ba: c1:44:53:df:13:6b:c8:99:c5:51:d9:d2:15:67:23: 2f:e8:2c:7a:92:25:75:b0:b9:58:5d:e4:06:2e:e5: d8:f4:5b:1e:dc:7f:e9:ac:d7:ee:7c:e0:29:f5:28: ee:c8:fe:8e:64:ab:df:66:cd:57:ce:67:f8:e2:76: bd:4b:dd:b7:1d:02:a8:9f:86:4b:b9:30:da:79:60: ea:4c:69:46:22:4a:2a:bd:bc:f6:a3:da:12:4e:09: cd:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:E8:BD:C8:A3:B5:E4:73:4E:C1:0A:E9:23:C0:D6:F8:2E:9E:B2:E9 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/681ef11a-fb85-480f-ab00-03c9aaa9fc5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.238.92.0/24 Signature Algorithm: sha256WithRSAEncryption a4:f6:7e:8e:e3:73:82:28:82:0a:93:bc:cf:6f:27:7a:8d:68: 47:65:ea:99:41:ec:ce:7a:60:c1:b3:f3:00:46:27:4d:c0:8b: 8b:53:09:9e:00:09:2f:e9:cd:13:2b:bb:09:18:c0:be:f1:a0: 64:a6:c4:69:0a:b8:2f:76:69:a9:6a:91:e5:bb:ab:ca:c7:e4: 2c:a4:3b:b1:69:97:b0:d8:e4:c6:1a:75:3a:13:fa:82:fa:55: fa:a4:68:66:39:18:7c:35:b6:d3:28:ea:b6:50:c5:c7:c4:e7: d8:a9:2f:28:a3:36:c8:bd:2e:9d:94:77:ae:d5:28:55:8c:d7: b7:db:a2:90:a6:d0:ea:05:81:32:a0:9b:c1:39:22:7f:ad:64: 24:c3:c6:ca:02:6b:6f:25:6b:da:c2:11:ee:e1:9b:4b:6a:b3: fe:bb:16:84:2f:25:a0:33:83:76:39:e3:43:72:ef:9a:e0:99: 0b:b3:b0:3b:02:5a:34:ff:53:84:fd:3f:23:7e:60:63:de:29: d7:02:1b:ff:f8:8f:10:a2:cb:88:c6:6a:16:01:56:32:d3:52: ee:2c:91:20:d0:62:64:ba:22:5a:3b:16:39:ff:ff:33:73:48: 74:49:2a:f8:db:ab:22:1d:12:23:c9:ff:7b:02:41:54:16:15: 76:3e:6f:ce -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBn88ldhK1ngmFC4kNdrfUA5I5cIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MjEwMTI5WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BkOTM2M2U3NTAzOTcyNmFhM2Y4NzEzNTcwMmRjNTFlMDMx YjA3OGE1NDIyMjg0NzJmYzQ5OTk1Yzc2OWViMTAyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCWFqKbA62/1msTo6kcKKO0D5AjsK2WJ22nHRh1yVGFmv6C iM6ZwPxXAOdETsXYXdKBcQRvog4F7qiNFpElH3oxHJcfq5oqBMubSLWWx58znMUn SRxdAKJhjK/FFjh/19ehVWzEJtHio7hA9Y4taMncN1E2FbJWkZs5yYbvifi9It+Z iGTnFzcx0ZT0S0T7AJacb3XgvtEOmafDCB2vD4ycKADGusFEU98Ta8iZxVHZ0hVn Iy/oLHqSJXWwuVhd5AYu5dj0Wx7cf+ms1+584Cn1KO7I/o5kq99mzVfOZ/jidr1L 3bcdAqifhku5MNp5YOpMaUYiSiq9vPaj2hJOCc1PAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUtei9yKO15HNOwQrpI8DW+C6esukwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzY4MWVmMTFhLWZiODUtNDgwZi1hYjAwLTAzYzlhYWE5ZmM1ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAS7lwwDQYJKoZIhvcNAQELBQADggEBAKT2fo7jc4IoggqTvM9vJ3qNaEdl 6plB7M56YMGz8wBGJ03Ai4tTCZ4ACS/pzRMruwkYwL7xoGSmxGkKuC92aalqkeW7 q8rH5CykO7Fpl7DY5MYadToT+oL6VfqkaGY5GHw1ttMo6rZQxcfE59ipLyijNsi9 Lp2Ud67VKFWM17fbopCm0OoFgTKgm8E5In+tZCTDxsoCa28la9rCEe7hm0tqs/67 FoQvJaAzg3Y540Ny75rgmQuzsDsCWjT/U4T9PyN+YGPeKdcCG//4jxCiy4jGahYB VjLTUu4skSDQYmS6Ilo7Fjn//zNzSHRJKvjbqyIdEiPJ/3sCQVQWFXY+b84= -----END CERTIFICATE-----Generated at Mon Oct 20 21:11:48 2025 by rpki-client