$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7535cb6a-ac51-4543-8cd1-65b1e2aa4252.roa File: 7535cb6a-ac51-4543-8cd1-65b1e2aa4252.roa (raw, json) Hash identifier: SNOtcomITbBipdAthDEmEIFYne+OU0JIh/v6v03sjcc= Subject key identifier: BD:F3:8E:0E:BB:5E:49:56:6E:6A:0B:47:38:AB:5C:AA:C2:7C:DC:66 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0F81B566708B33CC3AA7576C985095DB484FFE23 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7535cb6a-ac51-4543-8cd1-65b1e2aa4252.roa Signing time: Sat 18 Oct 2025 21:21:27 +0000 ROA not before: Sat 18 Oct 2025 21:21:27 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.165.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:81:b5:66:70:8b:33:cc:3a:a7:57:6c:98:50:95:db:48:4f:fe:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 21:21:27 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=3659ae766b136d312eff0934b5b9a57bdecc5d32acc95eaaae9a137b1bb70fd9, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:cb:66:db:c7:6e:a4:49:e3:f0:f2:9d:19:05: ec:88:f1:96:e0:f4:7e:e7:68:f6:59:9d:53:a8:ad: 00:58:89:47:61:03:48:9d:6e:bf:19:66:a0:0f:f8: 46:25:1a:69:72:72:95:a2:80:2f:91:9c:e0:99:24: 17:bc:01:bc:a6:15:81:43:81:8c:20:18:7e:15:5c: e9:38:42:87:8c:6d:e7:ec:64:52:73:50:b2:30:88: 5c:cf:fc:1a:f8:78:ca:ff:80:77:56:fd:65:54:13: 5f:fd:3e:21:ef:59:8a:07:66:9a:66:c1:cb:21:8e: df:f8:16:02:ef:ca:38:2e:7e:7d:a7:f0:35:2b:ec: 59:c0:2c:0a:86:db:88:a4:75:cc:e7:2a:a8:d7:d4: db:fa:23:e5:1d:d2:21:fc:26:92:e6:ad:e4:83:df: d3:ab:33:f3:d3:1d:c4:61:d1:ec:2d:7e:28:50:db: ef:88:9d:ba:76:31:35:79:82:22:57:f3:f3:b6:27: 0f:a7:6b:83:3b:d6:d3:76:37:c8:00:e1:9d:0a:97: 18:c4:99:a9:c4:b0:5b:1f:2d:f1:6f:0e:89:13:58: 25:4b:4d:61:ed:41:30:46:3c:d7:77:34:3c:2a:ad: 53:1f:0c:cd:70:ca:77:ff:3c:38:7e:e5:af:dc:fe: fc:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:F3:8E:0E:BB:5E:49:56:6E:6A:0B:47:38:AB:5C:AA:C2:7C:DC:66 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7535cb6a-ac51-4543-8cd1-65b1e2aa4252.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.165.128.0/18 Signature Algorithm: sha256WithRSAEncryption 7a:b8:eb:90:d8:2c:45:b8:5d:73:af:43:51:9d:13:4a:dc:a4: 76:f9:3a:33:d2:09:d0:df:fa:55:31:9e:0e:49:1a:4d:e7:97: f0:89:d5:79:b3:bd:1e:9e:2d:2c:ed:f7:04:37:37:e6:f4:f5: b5:3f:43:4d:de:da:1c:e4:a6:b6:89:1f:39:a8:4f:07:a4:94: e7:39:e9:ca:64:75:59:2b:6f:d6:a7:b1:f4:c4:fb:4a:d8:54: 64:20:3b:27:73:ab:fe:3f:1d:5d:c0:71:e4:2b:c8:f9:e4:e8: e0:84:b5:bf:1b:44:79:d5:ae:e1:8c:32:59:0b:cd:57:a5:6a: c6:aa:63:77:32:5a:86:6a:51:bd:95:0c:49:ff:f4:73:2d:e6: 63:4c:ab:74:a7:e2:28:68:f2:b5:c5:de:d2:77:e6:c6:c7:4e: 78:9f:58:29:d1:76:26:a2:81:10:ad:64:bc:21:30:fd:1c:55: 24:e6:fc:8a:aa:62:a2:24:31:e4:a8:6f:85:b0:2a:85:d6:79: 0b:53:1c:f7:1b:4f:62:9c:0d:98:d5:08:fd:e0:e3:d8:3c:83: d0:6a:bf:12:35:5d:a6:9c:35:48:27:12:da:85:62:b3:e5:c9: 1d:54:ea:94:04:b2:79:54:17:b4:cd:5d:47:9d:0e:0f:0e:60: ed:51:e0:e9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUD4G1ZnCLM8w6p1dsmFCV20hP/iMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MjEyMTI3WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AzNjU5YWU3NjZiMTM2ZDMxMmVmZjA5MzRiNWI5YTU3YmRl Y2M1ZDMyYWNjOTVlYWFhZTlhMTM3YjFiYjcwZmQ5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCMy2bbx26kSePw8p0ZBeyI8Zbg9H7naPZZnVOorQBYiUdh A0idbr8ZZqAP+EYlGmlycpWigC+RnOCZJBe8AbymFYFDgYwgGH4VXOk4QoeMbefs ZFJzULIwiFzP/Br4eMr/gHdW/WVUE1/9PiHvWYoHZppmwcshjt/4FgLvyjgufn2n 8DUr7FnALAqG24ikdcznKqjX1Nv6I+Ud0iH8JpLmreSD39OrM/PTHcRh0ewtfihQ 2++Inbp2MTV5giJX8/O2Jw+na4M71tN2N8gA4Z0KlxjEmanEsFsfLfFvDokTWCVL TWHtQTBGPNd3NDwqrVMfDM1wynf/PDh+5a/c/vylAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUvfOODrteSVZuagtHOKtcqsJ83GYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzc1MzVjYjZhLWFjNTEtNDU0My04Y2QxLTY1YjFlMmFhNDI1Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYSpYAwDQYJKoZIhvcNAQELBQADggEBAHq465DYLEW4XXOvQ1GdE0rcpHb5 OjPSCdDf+lUxng5JGk3nl/CJ1XmzvR6eLSzt9wQ3N+b09bU/Q03e2hzkpraJHzmo TweklOc56cpkdVkrb9ansfTE+0rYVGQgOydzq/4/HV3AceQryPnk6OCEtb8bRHnV ruGMMlkLzVelasaqY3cyWoZqUb2VDEn/9HMt5mNMq3Sn4iho8rXF3tJ35sbHTnif WCnRdiaigRCtZLwhMP0cVSTm/IqqYqIkMeSob4WwKoXWeQtTHPcbT2KcDZjVCP3g 49g8g9BqvxI1XaacNUgnEtqFYrPlyR1U6pQEsnlUF7TNXUedDg8OYO1R4Ok= -----END CERTIFICATE-----Generated at Mon Oct 20 11:13:45 2025 by rpki-client