$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6f19bf33-708e-4ac0-9528-9b52e5059d65.roa File: 6f19bf33-708e-4ac0-9528-9b52e5059d65.roa (raw, json) Hash identifier: HR6tv64iPs1oLlZ+ZAS4Yx/sKLSn0sWFp1xMftUmyBQ= Subject key identifier: F1:44:45:3E:33:9A:63:17:C7:54:30:D7:41:C1:A8:40:16:9E:6A:8C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 75D820197E46A8C2A10547639CBE53A3AABF762C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6f19bf33-708e-4ac0-9528-9b52e5059d65.roa Signing time: Sun 19 Oct 2025 13:12:52 +0000 ROA not before: Sun 19 Oct 2025 13:12:52 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.67.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:d8:20:19:7e:46:a8:c2:a1:05:47:63:9c:be:53:a3:aa:bf:76:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 13:12:52 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=62380ea60dcea8ac9d1e9af2f6b6a961117a603bc6cf456d8301b839a96426d4, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:4f:a9:cf:05:5c:df:4a:46:c3:e7:82:b7:ad: a6:46:d5:e9:71:37:99:5e:6a:44:f2:92:32:83:9b: 43:a1:53:db:3b:97:19:5e:11:7a:71:34:29:44:d0: 94:32:ad:9f:51:66:58:2d:0f:12:48:2a:58:fa:35: b8:24:a9:e5:ad:f9:8e:ad:97:5b:14:9f:ba:44:b2: 32:ac:97:fd:c3:f5:b3:43:51:49:0d:70:54:bc:43: 43:45:40:f7:d0:28:c1:18:c8:d3:92:f1:9d:3b:eb: 57:0f:a5:77:b3:e8:5b:ff:ef:28:48:76:7d:a8:38: 18:9a:9e:e5:50:99:bc:0e:ed:7e:1a:67:1b:5a:76: 56:15:97:28:fd:c6:fd:81:ee:f6:07:97:cc:de:12: 76:89:d9:a4:ff:b6:ce:b8:e1:39:c0:a9:4a:38:0b: 94:64:17:b7:4b:c7:cc:38:ee:2d:0c:7a:e3:00:e2: 9b:28:d4:48:5a:9c:c7:44:75:f0:e8:5d:59:9e:ac: 50:ce:b8:6d:e2:b4:22:44:04:b2:e1:54:5c:a5:5c: 32:e2:7d:8a:ed:d9:cb:5e:7a:b8:12:db:b4:5d:11: 3f:9c:5d:cb:1f:49:ff:4f:fc:4d:d0:d2:f7:7e:fb: 7a:28:e5:58:da:ca:32:0c:37:af:de:0f:4b:c1:48: 38:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:44:45:3E:33:9A:63:17:C7:54:30:D7:41:C1:A8:40:16:9E:6A:8C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6f19bf33-708e-4ac0-9528-9b52e5059d65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.67.157.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:da:c2:28:4f:03:fd:e9:57:f1:0f:20:e2:a3:82:82:5f:58: a9:3c:8d:bb:14:07:0c:fc:40:33:4b:28:ca:9f:0c:51:ba:65: 01:0e:06:8e:67:80:77:41:dd:97:9b:be:a3:8c:ff:e0:f0:01: f1:b1:fe:59:5f:bd:8a:00:00:c9:e4:0a:ec:07:14:af:81:68: 0e:85:31:ca:65:e4:5a:cb:61:43:e3:d6:79:c4:b4:7c:79:ca: ca:81:86:c6:54:c6:86:3f:5a:69:2e:04:4c:ec:ab:e1:fe:3e: 2a:ec:65:0f:48:69:77:a1:5c:d6:df:ab:fe:69:e9:78:1b:c3: 99:fe:97:a8:52:31:09:7c:3b:c0:94:23:52:a1:cf:e3:71:0b: 09:76:37:ac:4f:a0:6b:af:f5:b9:55:9d:81:84:d2:31:3f:a2: d4:51:ff:01:55:58:e7:f0:29:eb:bb:22:1a:63:0f:09:a1:d3: 94:87:6d:17:14:e7:a2:2c:63:3e:4a:ae:fa:5d:29:c2:f3:c9: f9:7c:e0:a5:50:14:39:7d:d5:04:07:88:95:7a:b8:99:8e:a9: a5:ad:19:fd:d4:85:df:17:d6:9b:9a:33:c6:f3:ac:75:00:22: 78:71:cd:54:98:c3:5a:2c:8c:38:f4:93:8e:b5:a9:7c:37:4f: ae:73:5c:98 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUddggGX5GqMKhBUdjnL5To6q/diwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTMxMjUyWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A2MjM4MGVhNjBkY2VhOGFjOWQxZTlhZjJmNmI2YTk2MTEx N2E2MDNiYzZjZjQ1NmQ4MzAxYjgzOWE5NjQyNmQ0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCiT6nPBVzfSkbD54K3raZG1elxN5leakTykjKDm0OhU9s7 lxleEXpxNClE0JQyrZ9RZlgtDxJIKlj6NbgkqeWt+Y6tl1sUn7pEsjKsl/3D9bND UUkNcFS8Q0NFQPfQKMEYyNOS8Z0761cPpXez6Fv/7yhIdn2oOBianuVQmbwO7X4a ZxtadlYVlyj9xv2B7vYHl8zeEnaJ2aT/ts644TnAqUo4C5RkF7dLx8w47i0MeuMA 4pso1EhanMdEdfDoXVmerFDOuG3itCJEBLLhVFylXDLifYrt2cteergS27RdET+c XcsfSf9P/E3Q0vd++3oo5VjayjIMN6/eD0vBSDgpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU8URFPjOaYxfHVDDXQcGoQBaeaowwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzZmMTliZjMzLTcwOGUtNGFjMC05NTI4LTliNTJlNTA1OWQ2NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASQ50wDQYJKoZIhvcNAQELBQADggEBAG7awihPA/3pV/EPIOKjgoJfWKk8 jbsUBwz8QDNLKMqfDFG6ZQEOBo5ngHdB3ZebvqOM/+DwAfGx/llfvYoAAMnkCuwH FK+BaA6FMcpl5FrLYUPj1nnEtHx5ysqBhsZUxoY/WmkuBEzsq+H+PirsZQ9IaXeh XNbfq/5p6Xgbw5n+l6hSMQl8O8CUI1Khz+NxCwl2N6xPoGuv9blVnYGE0jE/otRR /wFVWOfwKeu7IhpjDwmh05SHbRcU56IsYz5KrvpdKcLzyfl84KVQFDl91QQHiJV6 uJmOqaWtGf3Uhd8X1puaM8bzrHUAInhxzVSYw1osjDj0k461qXw3T65zXJg= -----END CERTIFICATE-----Generated at Mon Oct 20 03:06:11 2025 by rpki-client