$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7541b537-f396-4e3e-acd3-2d422b56380d.roa File: 7541b537-f396-4e3e-acd3-2d422b56380d.roa (raw, json) Hash identifier: QTFM51dPgP5ti8JVZgtsYJoetsiwfzRYI8HsQ5Hfoz8= Subject key identifier: FD:20:95:B0:C8:8F:41:0C:3C:5A:59:57:1C:5C:95:95:E6:43:4D:31 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4F1BED89B4C99F8CBA5CC22D99A87CEF0658EB15 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7541b537-f396-4e3e-acd3-2d422b56380d.roa Signing time: Sun 19 Oct 2025 19:30:19 +0000 ROA not before: Sun 19 Oct 2025 19:30:19 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.66.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:1b:ed:89:b4:c9:9f:8c:ba:5c:c2:2d:99:a8:7c:ef:06:58:eb:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 19:30:19 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=c3afe66dc9272308d8d7b136d0a645a090f8f7d01e22ba600a0926b96bbb41bf, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:77:bf:5d:25:ed:f2:ae:b2:2f:f9:9e:d6:8f: 6f:f7:ab:43:51:8c:15:c8:58:c7:dd:67:f5:51:bb: 4c:5d:fe:de:46:b3:46:17:25:06:b4:4f:d3:7f:3c: 46:37:5d:1f:c7:0a:74:7d:cf:e1:eb:9e:77:b3:d6: 9a:eb:fb:56:84:b2:4a:30:45:a7:34:5b:3c:ee:8b: 3b:0a:76:c9:33:1c:d6:1b:9f:06:4a:05:1a:64:e2: a9:87:66:12:19:5a:74:99:c3:b8:ac:17:80:58:57: 79:19:62:70:ee:d8:89:72:a5:dd:a6:e2:d1:c0:08: 94:b9:03:e7:59:af:f8:5a:42:f2:2a:0d:4b:90:ac: 50:81:bd:2e:41:4b:31:1f:f3:2f:7b:de:70:9a:38: a2:fb:4c:65:7f:b2:17:d6:d8:dd:33:f2:30:ab:3e: 53:d0:b2:63:7b:b0:ab:b9:e4:89:b7:91:b4:d3:57: cf:39:37:6e:22:aa:ee:b9:3b:63:5b:50:54:50:ef: 9f:f4:29:28:2d:3b:25:5f:b8:f9:42:3f:4c:72:a3: b3:8c:b5:85:71:db:c3:fb:d5:e8:c8:39:b0:45:f6: 86:5a:e6:22:ec:e3:ce:32:fd:5b:57:ea:0c:fa:05: 22:2d:b5:87:29:14:a9:c0:f1:93:01:fc:9a:01:f3: a3:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:20:95:B0:C8:8F:41:0C:3C:5A:59:57:1C:5C:95:95:E6:43:4D:31 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7541b537-f396-4e3e-acd3-2d422b56380d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.66.196.0/24 Signature Algorithm: sha256WithRSAEncryption 93:48:06:25:28:df:96:89:b9:d4:05:f1:98:f8:88:c4:6e:13: 86:f5:42:93:b0:2f:15:73:20:23:ac:8d:d5:27:ce:3e:33:fd: d4:ac:f5:f6:03:53:9f:e0:e6:23:fe:2d:37:de:5e:bf:87:1a: 38:83:85:bc:65:be:9e:47:b4:79:22:96:89:45:2e:6e:78:02: cb:71:1b:ff:c6:82:ea:63:3e:75:1e:f3:6e:c2:94:7a:62:ba: 6f:0d:4c:9e:26:ce:89:b4:99:2f:85:5e:e8:7e:87:f6:10:87: db:91:6e:eb:6b:f2:d8:c7:c3:9d:20:4d:1a:41:4f:8c:7d:6f: 49:f2:7c:ce:14:e9:8b:94:48:d2:5d:b2:08:49:0c:2e:f7:00: 00:9b:76:a7:08:31:c0:f4:04:a2:e0:c0:f8:ab:a0:ba:ad:fb: be:44:69:2b:db:03:a0:0c:85:d2:3e:db:93:bb:e7:97:ef:f8: 5f:47:8d:ba:bb:e7:2b:50:5e:d7:24:33:55:46:ab:e5:5b:d8: 57:53:50:f1:77:b0:91:35:57:71:15:1f:42:dc:38:36:e7:94: c0:fa:40:b7:cb:63:d3:ec:97:41:bb:1d:a3:48:b7:b9:93:f7: 13:a3:a8:37:11:9b:ad:a9:af:b5:db:67:44:56:f0:8b:c6:16: b7:f3:c2:3f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTxvtibTJn4y6XMItmah87wZY6xUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTkzMDE5WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BjM2FmZTY2ZGM5MjcyMzA4ZDhkN2IxMzZkMGE2NDVhMDkw ZjhmN2QwMWUyMmJhNjAwYTA5MjZiOTZiYmI0MWJmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCld79dJe3yrrIv+Z7Wj2/3q0NRjBXIWMfdZ/VRu0xd/t5G s0YXJQa0T9N/PEY3XR/HCnR9z+Hrnnez1prr+1aEskowRac0WzzuizsKdskzHNYb nwZKBRpk4qmHZhIZWnSZw7isF4BYV3kZYnDu2Ilypd2m4tHACJS5A+dZr/haQvIq DUuQrFCBvS5BSzEf8y973nCaOKL7TGV/shfW2N0z8jCrPlPQsmN7sKu55Im3kbTT V885N24iqu65O2NbUFRQ75/0KSgtOyVfuPlCP0xyo7OMtYVx28P71ejIObBF9oZa 5iLs484y/VtX6gz6BSIttYcpFKnA8ZMB/JoB86MdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU/SCVsMiPQQw8WllXHFyVleZDTTEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzc1NDFiNTM3LWYzOTYtNGUzZS1hY2QzLTJkNDIyYjU2MzgwZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASQsQwDQYJKoZIhvcNAQELBQADggEBAJNIBiUo35aJudQF8Zj4iMRuE4b1 QpOwLxVzICOsjdUnzj4z/dSs9fYDU5/g5iP+LTfeXr+HGjiDhbxlvp5HtHkilolF Lm54AstxG//GgupjPnUe827ClHpium8NTJ4mzom0mS+FXuh+h/YQh9uRbutr8tjH w50gTRpBT4x9b0nyfM4U6YuUSNJdsghJDC73AACbdqcIMcD0BKLgwPiroLqt+75E aSvbA6AMhdI+25O755fv+F9Hjbq75ytQXtckM1VGq+Vb2FdTUPF3sJE1V3EVH0Lc ODbnlMD6QLfLY9Psl0G7HaNIt7mT9xOjqDcRm62pr7XbZ0RW8IvGFrfzwj8= -----END CERTIFICATE-----Generated at Mon Oct 20 06:09:39 2025 by rpki-client