$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/70822ea1-88d3-493d-be35-6475a3b061b4.roa File: 70822ea1-88d3-493d-be35-6475a3b061b4.roa (raw, json) Hash identifier: ShAp/+R/rfFP/p0rkHqNTDI4Xjv6nLdBUy82DAsUaHE= Subject key identifier: BB:89:3E:B3:6B:A6:A0:D6:50:55:54:04:36:D1:91:29:ED:48:18:C3 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5B65EF0AD3954EC54188E246A0E6FFBE91DDAD7B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/70822ea1-88d3-493d-be35-6475a3b061b4.roa Signing time: Sun 19 Oct 2025 11:12:34 +0000 ROA not before: Sun 19 Oct 2025 11:12:34 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.65.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:65:ef:0a:d3:95:4e:c5:41:88:e2:46:a0:e6:ff:be:91:dd:ad:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 11:12:34 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=94d76f147b45dede2c8b9c979237a7c44f62a7ca0781b49af43f63542cb0a7f8, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:06:98:8d:ae:f5:d5:96:da:ed:1e:2b:30:ac: de:dd:a3:9e:10:0e:88:41:11:03:22:c7:e2:04:4c: 33:0b:b1:0a:3b:a1:ba:fd:36:6f:e9:00:cd:c2:18: ce:08:69:d9:10:86:5c:c5:12:7c:53:65:39:72:03: a5:0f:7b:83:77:f9:0c:4d:9a:b4:a2:8d:a9:59:83: f5:8c:5f:58:2d:bb:96:47:e1:b1:77:a2:47:ea:68: 8b:89:da:19:d1:9d:fe:9c:d0:95:13:51:7d:85:5e: fd:89:06:07:db:45:f0:7f:fc:d1:42:67:90:2d:12: 22:32:b4:63:32:60:7d:5b:84:a9:df:75:f1:25:a3: b1:20:50:c5:4b:38:2e:85:77:56:5d:2c:88:b8:ca: c0:a0:ab:79:11:8b:d8:49:e3:18:5d:53:d4:bd:66: 00:14:6e:85:34:ab:a4:7a:df:82:3d:6b:fd:08:19: 46:40:a5:15:cd:b4:4e:a1:93:bf:3a:4e:be:ba:bb: 06:89:74:93:8d:4f:78:45:47:e9:fb:9a:0a:fe:29: 3c:6f:75:95:de:28:f2:e7:a5:0d:cf:ca:85:c5:88: 27:ef:53:51:be:5c:b8:18:b9:a1:4b:36:ef:5b:00: 4f:f0:c0:54:e4:59:03:46:cf:db:ef:43:9e:04:2f: b7:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:89:3E:B3:6B:A6:A0:D6:50:55:54:04:36:D1:91:29:ED:48:18:C3 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/70822ea1-88d3-493d-be35-6475a3b061b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.65.139.0/24 Signature Algorithm: sha256WithRSAEncryption 03:57:2a:25:47:d3:c8:bc:a3:58:28:2e:87:d8:58:77:81:d0: 9a:3a:d8:16:d4:8d:9c:1c:bd:f1:00:69:98:42:a2:59:e6:ea: aa:f8:42:03:d5:ec:7a:c3:1a:92:1a:46:ef:7d:4c:d9:3d:b8: dc:65:ce:76:28:76:d0:5b:3b:43:a9:58:72:0e:ba:a8:24:88: 38:26:f9:aa:dc:50:01:a3:80:fb:5c:3e:b8:84:80:86:63:70: e4:9a:ac:ad:75:ae:e6:61:3d:21:c6:e4:91:70:02:14:9f:90: 14:fe:62:5a:36:d1:e0:e8:54:ab:ef:65:e0:e5:57:a6:8c:ae: 07:03:b1:a1:ae:7a:dd:f0:19:08:36:97:24:0a:26:b8:1f:39: 0b:58:51:82:05:52:eb:ae:c4:bc:82:23:36:65:8a:ac:2f:29: 36:2f:5e:dc:f2:65:a8:b2:df:4e:98:e0:49:73:44:6f:fd:fe: 3a:02:00:96:0f:e8:ce:cf:e4:2a:22:f0:7c:95:a8:3c:47:5b: 77:c3:48:a5:84:12:8b:b3:3d:1e:62:22:e6:bb:28:7a:3c:d0: f0:c2:72:dc:83:52:28:82:d6:ed:d3:1a:81:6f:d9:88:05:d1: 56:68:b6:d0:16:cd:ad:76:0f:c3:c5:28:3c:96:bf:36:4d:a9: 47:36:f5:4e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUW2XvCtOVTsVBiOJGoOb/vpHdrXswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTExMjM0WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A5NGQ3NmYxNDdiNDVkZWRlMmM4YjljOTc5MjM3YTdjNDRm NjJhN2NhMDc4MWI0OWFmNDNmNjM1NDJjYjBhN2Y4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCCBpiNrvXVltrtHiswrN7do54QDohBEQMix+IETDMLsQo7 obr9Nm/pAM3CGM4IadkQhlzFEnxTZTlyA6UPe4N3+QxNmrSijalZg/WMX1gtu5ZH 4bF3okfqaIuJ2hnRnf6c0JUTUX2FXv2JBgfbRfB//NFCZ5AtEiIytGMyYH1bhKnf dfElo7EgUMVLOC6Fd1ZdLIi4ysCgq3kRi9hJ4xhdU9S9ZgAUboU0q6R634I9a/0I GUZApRXNtE6hk786Tr66uwaJdJONT3hFR+n7mgr+KTxvdZXeKPLnpQ3PyoXFiCfv U1G+XLgYuaFLNu9bAE/wwFTkWQNGz9vvQ54EL7dBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUu4k+s2umoNZQVVQENtGRKe1IGMMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzcwODIyZWExLTg4ZDMtNDkzZC1iZTM1LTY0NzVhM2IwNjFiNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASQYswDQYJKoZIhvcNAQELBQADggEBAANXKiVH08i8o1goLofYWHeB0Jo6 2BbUjZwcvfEAaZhColnm6qr4QgPV7HrDGpIaRu99TNk9uNxlznYodtBbO0OpWHIO uqgkiDgm+arcUAGjgPtcPriEgIZjcOSarK11ruZhPSHG5JFwAhSfkBT+Ylo20eDo VKvvZeDlV6aMrgcDsaGuet3wGQg2lyQKJrgfOQtYUYIFUuuuxLyCIzZliqwvKTYv XtzyZaiy306Y4ElzRG/9/joCAJYP6M7P5Coi8HyVqDxHW3fDSKWEEouzPR5iIua7 KHo80PDCctyDUiiC1u3TGoFv2YgF0VZottAWza12D8PFKDyWvzZNqUc29U4= -----END CERTIFICATE-----Generated at Mon Oct 20 06:12:00 2025 by rpki-client