$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/70c36369-87c0-45d5-8b86-87350ff676d3.roa File: 70c36369-87c0-45d5-8b86-87350ff676d3.roa (raw, json) Hash identifier: 0wG6KnwJ7+6298g1H4yRhUnrCyApMtG5PlmMzL/A5K0= Subject key identifier: 76:7C:45:80:FA:36:E3:0B:44:F4:1C:75:19:6A:50:3C:21:57:77:D3 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5AD6CD58E33D505C196422BE43E61354F1B2EFAF Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/70c36369-87c0-45d5-8b86-87350ff676d3.roa Signing time: Sat 18 Oct 2025 14:41:31 +0000 ROA not before: Sat 18 Oct 2025 14:41:31 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.173.46.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:d6:cd:58:e3:3d:50:5c:19:64:22:be:43:e6:13:54:f1:b2:ef:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 14:41:31 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=7aebe1dbe32d9d000c3dd442b1a839af9e1df484c3a65d6a11c6a5042b1af0d2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1f:d7:24:15:73:c0:86:7a:39:99:6e:18:f9: 69:d4:2a:9f:e3:8d:03:9b:bf:05:58:6d:0b:03:f5: a5:17:21:dc:f8:a9:b2:27:f2:fa:4a:8a:61:16:f0: fe:61:9c:e0:ef:18:b0:8b:2b:09:74:a7:f8:b9:0b: 97:7e:d9:0f:0b:03:b4:fc:8d:3e:7c:5d:8d:90:f9: 64:c7:77:46:dd:ee:02:34:a8:ce:d2:34:8f:1a:63: 69:9a:6e:ee:b5:64:fd:d3:75:62:60:88:7f:2a:e8: 77:f1:5f:60:5e:15:ca:3b:77:94:04:93:5c:10:97: 25:a1:93:b7:03:0e:53:e8:ee:40:9f:af:88:5a:31: 2c:60:80:fb:01:d3:ba:5a:77:d4:36:6b:50:6f:8c: 69:26:65:8b:5b:ab:72:23:3e:9c:fa:8f:d3:92:f1: 96:05:07:be:b1:b7:d3:41:fe:c5:aa:31:d9:a3:7a: 2f:f3:5f:f9:07:44:5a:c3:23:c7:8d:d3:11:13:8f: d6:01:ae:77:21:5c:08:73:9c:48:23:a9:91:7a:59: a2:81:c4:8a:27:e3:7c:b0:be:df:a8:3c:f9:2a:71: 93:7f:dd:69:36:d0:6d:d8:7d:50:52:86:90:ee:b0: 83:cc:7e:7f:c3:eb:35:a6:06:75:96:32:2b:ff:72: fc:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:7C:45:80:FA:36:E3:0B:44:F4:1C:75:19:6A:50:3C:21:57:77:D3 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/70c36369-87c0-45d5-8b86-87350ff676d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.173.46.0/23 Signature Algorithm: sha256WithRSAEncryption 35:45:da:f5:e5:2c:f1:98:84:33:13:08:97:0c:1d:22:42:bb: 83:98:08:f6:d7:d5:fe:ee:b0:eb:71:32:d0:e9:96:ef:d4:96: 0e:a2:ed:c6:34:af:66:63:eb:d0:b3:1a:bd:f7:7d:92:9a:0f: 38:50:ff:fe:12:4e:30:1b:e7:24:fe:2e:2c:a8:da:91:de:ff: 77:52:6b:ad:ec:99:45:7e:ab:0f:37:86:5f:93:c1:78:83:e7: 94:1d:0b:ed:55:1e:b6:cd:c8:e6:d0:cc:10:22:60:ca:02:53: e1:39:23:d1:31:f0:ef:9f:ea:7d:9a:d9:a6:08:05:45:db:d9: ac:5a:dc:7c:c4:e7:5c:ad:64:84:22:dd:99:45:09:31:58:b3: 74:12:af:c7:dd:4c:dd:91:8a:45:ef:b2:d9:22:37:96:a9:a2: 63:e2:32:20:6c:89:ed:60:cb:39:bf:cd:09:38:ff:2e:d6:26: 8e:ea:23:db:da:8e:8b:da:f4:3f:e6:58:a4:c9:59:08:cd:c8: 40:13:30:62:71:34:cf:91:e2:c3:74:d9:e3:a3:93:6e:ce:d8: 8a:f5:3a:92:59:be:67:84:b5:f4:ba:80:0d:35:91:c0:76:96: 48:cf:2c:d4:c5:05:2a:9e:6f:eb:44:6f:c5:dd:3e:35:00:15: fd:d5:60:6e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWtbNWOM9UFwZZCK+Q+YTVPGy768wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTQ0MTMxWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A3YWViZTFkYmUzMmQ5ZDAwMGMzZGQ0NDJiMWE4MzlhZjll MWRmNDg0YzNhNjVkNmExMWM2YTUwNDJiMWFmMGQyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHH9ckFXPAhno5mW4Y+WnUKp/jjQObvwVYbQsD9aUXIdz4 qbIn8vpKimEW8P5hnODvGLCLKwl0p/i5C5d+2Q8LA7T8jT58XY2Q+WTHd0bd7gI0 qM7SNI8aY2mabu61ZP3TdWJgiH8q6HfxX2BeFco7d5QEk1wQlyWhk7cDDlPo7kCf r4haMSxggPsB07pad9Q2a1BvjGkmZYtbq3IjPpz6j9OS8ZYFB76xt9NB/sWqMdmj ei/zX/kHRFrDI8eN0xETj9YBrnchXAhznEgjqZF6WaKBxIon43ywvt+oPPkqcZN/ 3Wk20G3YfVBShpDusIPMfn/D6zWmBnWWMiv/cvw1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUdnxFgPo24wtE9Bx1GWpQPCFXd9MwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzcwYzM2MzY5LTg3YzAtNDVkNS04Yjg2LTg3MzUwZmY2NzZkMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESrS4wDQYJKoZIhvcNAQELBQADggEBADVF2vXlLPGYhDMTCJcMHSJCu4OY CPbX1f7usOtxMtDplu/Ulg6i7cY0r2Zj69CzGr33fZKaDzhQ//4STjAb5yT+Liyo 2pHe/3dSa63smUV+qw83hl+TwXiD55QdC+1VHrbNyObQzBAiYMoCU+E5I9Ex8O+f 6n2a2aYIBUXb2axa3HzE51ytZIQi3ZlFCTFYs3QSr8fdTN2RikXvstkiN5apomPi MiBsie1gyzm/zQk4/y7WJo7qI9vajova9D/mWKTJWQjNyEATMGJxNM+R4sN02eOj k27O2Ir1OpJZvmeEtfS6gA01kcB2lkjPLNTFBSqeb+tEb8XdPjUAFf3VYG4= -----END CERTIFICATE-----Generated at Mon Oct 20 06:09:04 2025 by rpki-client