$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6bfaef17-3460-495d-a550-04c64dffbaf7.roa File: 6bfaef17-3460-495d-a550-04c64dffbaf7.roa (raw, json) Hash identifier: 4PnJP3kqcDLiCGt9WSAm3JfwJxhYkWEG74hPl/TAjMs= Subject key identifier: 20:6E:96:4E:71:45:1C:45:E7:C5:67:CC:C6:52:A1:28:DD:BC:8D:68 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7232D8AE2575963D38FC9658B0D446491A14D4E0 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6bfaef17-3460-495d-a550-04c64dffbaf7.roa Signing time: Sat 18 Oct 2025 11:52:11 +0000 ROA not before: Sat 18 Oct 2025 11:52:11 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.172.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:32:d8:ae:25:75:96:3d:38:fc:96:58:b0:d4:46:49:1a:14:d4:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 11:52:11 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=3ace22ba3147ff0639557d6581d097d68a865d8bd3c4cb5af3a2b808e23602b5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a4:8b:dd:17:2e:ed:68:d9:14:77:3f:fc:b4: 30:10:2d:bd:e4:49:fd:b3:4a:c7:7a:43:22:e8:b9: a8:9a:e6:f0:b3:56:3c:a8:ca:ca:72:68:ba:57:e7: ab:97:e1:74:ed:f0:41:54:76:b4:36:52:9c:e7:7d: a8:6d:9f:d3:39:0d:7c:91:f2:01:ec:e7:f2:3e:b2: a2:9f:ac:f7:30:41:5d:33:8d:82:ba:ff:91:47:90: bf:6d:e0:a9:7e:ae:0b:f4:ca:1a:f6:79:f0:9d:e3: 43:13:ba:1b:d8:a1:00:9c:fd:4f:b8:5d:fb:7e:76: 46:15:d9:53:3c:3a:5c:13:a1:57:60:fa:3b:8a:6e: 7f:6b:c8:fc:c3:85:38:0e:e9:5f:eb:e4:4d:87:80: b6:e9:1c:3a:61:1e:d7:0b:8e:b1:82:2d:20:73:ed: cb:bc:68:6b:17:fc:6f:d2:c1:9a:3f:63:d1:33:31: 4b:39:69:fe:5f:da:02:97:6d:74:af:dc:e2:b6:14: 56:65:55:f5:5c:89:6a:43:a1:db:a5:30:ad:42:35: c7:ac:13:1e:2e:c4:80:83:9b:86:2b:85:58:d2:36: a1:23:70:ad:e0:ee:97:2b:2b:52:7e:4c:50:52:32: c7:49:74:37:63:b0:56:62:d6:2a:47:b3:ea:cc:49: 65:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:6E:96:4E:71:45:1C:45:E7:C5:67:CC:C6:52:A1:28:DD:BC:8D:68 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6bfaef17-3460-495d-a550-04c64dffbaf7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.172.212.0/22 Signature Algorithm: sha256WithRSAEncryption 01:eb:7a:c4:dd:d6:74:ed:4e:fe:1a:9b:7f:4a:e5:0f:5e:b3: 4d:6a:e2:22:79:ec:6c:6f:6b:54:62:bc:95:d5:3a:39:16:23: 96:a5:96:8c:fd:6c:d5:fa:b6:12:72:f8:75:2a:62:3d:53:8d: 76:53:17:21:58:f2:06:da:14:16:c3:7f:55:ce:f4:3d:99:83: b1:ed:88:0f:ad:cc:8a:9d:11:17:74:f9:11:d3:cd:be:4b:28: 14:62:2d:c5:a6:e7:92:3d:b6:c0:e8:e2:cc:7e:8a:e5:6c:0b: f9:e5:51:b4:36:79:d0:f9:3f:97:da:d5:e2:4d:20:c4:38:a1: 15:ad:9e:e0:c3:ba:96:85:8d:82:06:d0:7c:67:24:9d:69:75: 5a:e1:c2:75:df:6a:e8:f9:44:9f:00:5b:44:72:7f:97:42:2c: 94:a8:d0:94:63:20:64:28:2a:29:74:c5:06:de:5d:71:c0:3b: 65:47:18:35:2c:c5:dc:18:d3:0c:40:d3:26:f4:3e:03:d8:61: 8d:6a:a3:b8:73:7b:dc:e8:32:43:94:24:97:9e:56:2f:91:6a: ac:84:8c:be:22:0b:5f:a5:04:eb:c3:bb:d7:be:e7:39:00:7e: 06:1d:6f:dd:9e:80:d1:b1:16:44:f1:a9:ec:3b:d9:8c:79:fc: 25:20:ca:c7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcjLYriV1lj04/JZYsNRGSRoU1OAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTE1MjExWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AzYWNlMjJiYTMxNDdmZjA2Mzk1NTdkNjU4MWQwOTdkNjhh ODY1ZDhiZDNjNGNiNWFmM2EyYjgwOGUyMzYwMmI1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3pIvdFy7taNkUdz/8tDAQLb3kSf2zSsd6QyLouaia5vCz VjyoyspyaLpX56uX4XTt8EFUdrQ2Upznfahtn9M5DXyR8gHs5/I+sqKfrPcwQV0z jYK6/5FHkL9t4Kl+rgv0yhr2efCd40MTuhvYoQCc/U+4Xft+dkYV2VM8OlwToVdg +juKbn9ryPzDhTgO6V/r5E2HgLbpHDphHtcLjrGCLSBz7cu8aGsX/G/SwZo/Y9Ez MUs5af5f2gKXbXSv3OK2FFZlVfVciWpDodulMK1CNcesEx4uxICDm4YrhVjSNqEj cK3g7pcrK1J+TFBSMsdJdDdjsFZi1ipHs+rMSWXLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUIG6WTnFFHEXnxWfMxlKhKN28jWgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzZiZmFlZjE3LTM0NjAtNDk1ZC1hNTUwLTA0YzY0ZGZmYmFmNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAISrNQwDQYJKoZIhvcNAQELBQADggEBAAHresTd1nTtTv4am39K5Q9es01q 4iJ57Gxva1RivJXVOjkWI5alloz9bNX6thJy+HUqYj1TjXZTFyFY8gbaFBbDf1XO 9D2Zg7HtiA+tzIqdERd0+RHTzb5LKBRiLcWm55I9tsDo4sx+iuVsC/nlUbQ2edD5 P5fa1eJNIMQ4oRWtnuDDupaFjYIG0HxnJJ1pdVrhwnXfauj5RJ8AW0Ryf5dCLJSo 0JRjIGQoKil0xQbeXXHAO2VHGDUsxdwY0wxA0yb0PgPYYY1qo7hze9zoMkOUJJee Vi+RaqyEjL4iC1+lBOvDu9e+5zkAfgYdb92egNGxFkTxqew72Yx5/CUgysc= -----END CERTIFICATE-----Generated at Mon Oct 20 13:17:17 2025 by rpki-client