$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/72a95330-c9dd-4119-b352-5c8259b14e52.roa File: 72a95330-c9dd-4119-b352-5c8259b14e52.roa (raw, json) Hash identifier: Q7stWMTn9Vc8NoCk9wTOAjNqHce1Rg0fmikZYgsR1NQ= Subject key identifier: 1F:97:43:7F:82:84:40:B7:DA:6A:15:AE:46:FD:3D:C8:0A:14:CD:D8 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 11BE3B11DB315B39CB89177E4A0A834FCA40D686 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/72a95330-c9dd-4119-b352-5c8259b14e52.roa Signing time: Sat 18 Oct 2025 14:53:23 +0000 ROA not before: Sat 18 Oct 2025 14:53:23 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.245.222.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:be:3b:11:db:31:5b:39:cb:89:17:7e:4a:0a:83:4f:ca:40:d6:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 14:53:23 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=779902434294fed7bbf6a6369b30046dfd6078ef75f827c0fc1925fe73c2eaff, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:de:e9:c8:6c:ab:f4:70:64:49:2e:2a:28:67: 68:2f:0d:b0:b2:0a:f0:35:0b:e6:06:1b:f0:02:69: cd:50:c2:f8:57:26:85:55:13:b8:1e:70:cb:df:29: 83:01:a4:2e:61:c8:f6:48:c5:2e:1a:89:09:ac:77: ac:89:bb:4b:c5:96:ac:0b:1b:da:55:b0:10:a1:5a: f9:85:71:ad:36:c0:7d:a8:56:6c:33:86:63:66:84: 95:ba:14:bf:df:72:3a:d7:25:c3:db:c6:d8:4a:e4: 5b:47:fe:b2:f0:26:b8:fb:44:72:e8:b3:ba:d4:8a: 3a:67:14:78:c0:36:32:d5:3f:64:d6:e9:6a:1d:0b: 00:2e:02:d0:a4:51:ba:94:81:55:12:ed:b4:a3:2a: 0b:52:91:26:17:d8:5e:bd:a6:4b:c2:89:1a:ad:fc: 22:3a:2c:78:ea:5f:e6:96:e1:8d:80:d0:42:3c:a7: 98:1e:f6:47:51:39:ab:35:d1:7a:2f:2f:86:64:ff: 53:9f:7e:5d:5e:ff:96:1a:eb:02:cc:b6:21:6c:8d: 14:30:ab:fb:b3:04:bb:89:d2:91:66:ae:17:df:8e: bd:2b:7f:5a:44:71:b2:6d:fa:75:63:c9:94:d2:90: e5:47:0e:d7:24:1d:9c:a2:89:5d:27:0a:fb:b6:db: ab:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:97:43:7F:82:84:40:B7:DA:6A:15:AE:46:FD:3D:C8:0A:14:CD:D8 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/72a95330-c9dd-4119-b352-5c8259b14e52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.245.222.0/23 Signature Algorithm: sha256WithRSAEncryption 18:a2:9a:f3:f8:2d:bd:08:b0:ff:c3:3a:35:4a:2a:6e:e5:d4: 10:cc:2f:d9:47:dd:44:5a:de:93:b3:8d:fb:d6:c2:1f:aa:d7: 56:f7:8f:21:7e:a2:56:b2:1f:b8:d1:de:96:c8:7c:5d:f1:92: 22:e8:c2:5c:32:0c:80:16:5d:81:6b:a6:ba:f5:e9:a0:fb:55: 15:6c:a3:93:ed:2f:48:ea:09:a2:a8:2f:99:95:28:3c:05:3c: 39:00:f6:af:d0:d1:81:ea:5a:64:1e:08:0b:21:ac:23:d4:9d: 85:25:2c:1e:de:cd:83:31:d8:f1:2e:1b:dd:69:aa:20:6a:32: 9e:08:7a:94:5e:13:0b:a5:fe:37:83:41:5f:fe:6b:02:53:17: ce:ba:ab:e9:8d:d1:7a:88:e9:f3:e1:5a:7a:ee:f4:15:ca:a9: 55:f0:6e:3f:d8:31:ae:21:88:74:11:79:c3:33:9d:3f:05:5c: e4:96:be:cc:93:3f:7a:81:42:dd:4f:cf:1a:a5:09:87:62:6e: fa:bb:0a:f0:17:a1:e0:cf:d5:90:d1:a4:b2:db:0f:41:b1:2a: b1:25:dc:86:ba:38:da:06:68:7a:62:c3:7d:aa:82:33:f0:69: 61:48:ce:2d:83:7c:ac:b0:25:0b:f6:ed:12:33:6b:c8:e6:7d: a6:34:f2:ee -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEb47EdsxWznLiRd+SgqDT8pA1oYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTQ1MzIzWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A3Nzk5MDI0MzQyOTRmZWQ3YmJmNmE2MzY5YjMwMDQ2ZGZk NjA3OGVmNzVmODI3YzBmYzE5MjVmZTczYzJlYWZmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDM3unIbKv0cGRJLiooZ2gvDbCyCvA1C+YGG/ACac1QwvhX JoVVE7gecMvfKYMBpC5hyPZIxS4aiQmsd6yJu0vFlqwLG9pVsBChWvmFca02wH2o VmwzhmNmhJW6FL/fcjrXJcPbxthK5FtH/rLwJrj7RHLos7rUijpnFHjANjLVP2TW 6WodCwAuAtCkUbqUgVUS7bSjKgtSkSYX2F69pkvCiRqt/CI6LHjqX+aW4Y2A0EI8 p5ge9kdROas10XovL4Zk/1Offl1e/5Ya6wLMtiFsjRQwq/uzBLuJ0pFmrhffjr0r f1pEcbJt+nVjyZTSkOVHDtckHZyiiV0nCvu226uzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUH5dDf4KEQLfaahWuRv09yAoUzdgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzcyYTk1MzMwLWM5ZGQtNDExOS1iMzUyLTVjODI1OWIxNGU1Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAES9d4wDQYJKoZIhvcNAQELBQADggEBABiimvP4Lb0IsP/DOjVKKm7l1BDM L9lH3URa3pOzjfvWwh+q11b3jyF+olayH7jR3pbIfF3xkiLowlwyDIAWXYFrprr1 6aD7VRVso5PtL0jqCaKoL5mVKDwFPDkA9q/Q0YHqWmQeCAshrCPUnYUlLB7ezYMx 2PEuG91pqiBqMp4IepReEwul/jeDQV/+awJTF866q+mN0XqI6fPhWnru9BXKqVXw bj/YMa4hiHQRecMznT8FXOSWvsyTP3qBQt1PzxqlCYdibvq7CvAXoeDP1ZDRpLLb D0GxKrEl3Ia6ONoGaHpiw32qgjPwaWFIzi2DfKywJQv27RIza8jmfaY08u4= -----END CERTIFICATE-----Generated at Mon Oct 20 03:02:49 2025 by rpki-client