$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7750d95d-05bd-4669-b474-2f5d50aaa7c5.roa File: 7750d95d-05bd-4669-b474-2f5d50aaa7c5.roa (raw, json) Hash identifier: SMl6vCEJdbIy+vG2sxwE8uHdOvU+kFkgK5LFIPYB5+8= Subject key identifier: 12:48:3C:82:28:66:46:B7:36:63:C3:BD:9F:36:DA:34:72:EE:F8:94 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 40EAAFC3A8D856BD6A1381F6C15F7BD77A4D1834 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7750d95d-05bd-4669-b474-2f5d50aaa7c5.roa Signing time: Sun 19 Oct 2025 14:03:34 +0000 ROA not before: Sun 19 Oct 2025 14:03:34 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.67.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:ea:af:c3:a8:d8:56:bd:6a:13:81:f6:c1:5f:7b:d7:7a:4d:18:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 14:03:34 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=f87864d0b840d41839608d88554381ad08aa8219734a02ceecda6014086cdbba, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:11:fd:ae:84:22:de:0d:ed:97:9a:de:ce:95: 24:f0:ea:c0:0b:66:ed:13:60:7b:d2:29:5d:5d:65: b4:72:34:db:65:df:1f:65:c0:f4:3a:a0:0d:4e:b0: b9:31:83:ac:1b:88:15:75:7f:b5:bf:c4:da:a1:bd: 27:8f:01:98:ac:8d:c5:8e:dd:2e:9f:15:3d:eb:98: 3a:fe:f5:44:c1:c8:57:49:95:5f:c6:f3:14:c7:db: 3a:6b:e6:1d:4c:e2:e7:36:82:37:2f:11:57:ef:41: 6a:dc:c0:8e:29:7c:eb:60:85:a9:2d:48:fa:97:0f: b2:64:dc:11:9d:eb:84:4d:5c:fe:87:85:4e:15:92: fd:28:23:7f:6f:6d:c6:9d:97:e9:b3:93:56:43:18: 37:d0:bd:d6:04:77:fc:25:d6:c0:c8:0b:4d:f6:9f: 15:31:8b:c4:bc:95:27:11:c0:32:d4:3f:22:98:41: 0f:e8:b0:4b:43:09:4e:aa:57:6b:e6:b9:1b:c4:a9: cc:79:e6:ad:01:6d:43:9f:e6:ae:54:32:6b:9c:da: 3f:85:83:0d:e8:5c:bf:6b:5b:b5:6f:ca:15:5e:f8: 98:c3:7c:63:4d:f1:e5:c6:ef:c5:f5:18:6e:da:8f: 73:a7:80:ac:c6:40:24:67:99:2d:e2:0b:10:41:de: 8f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:48:3C:82:28:66:46:B7:36:63:C3:BD:9F:36:DA:34:72:EE:F8:94 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7750d95d-05bd-4669-b474-2f5d50aaa7c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.67.215.0/24 Signature Algorithm: sha256WithRSAEncryption 05:92:dc:de:69:19:24:4d:23:ca:67:e4:58:40:a3:22:46:98: 0f:fd:9c:69:ba:67:5e:28:b8:4d:b5:86:8a:30:82:60:a0:dd: 56:f7:4c:f8:31:7e:f4:4f:0f:9d:16:be:4a:f6:73:51:a0:24: 4f:82:ac:64:31:ce:b5:7e:ca:c8:cc:d5:93:0d:5f:ef:67:c4: 3a:f0:05:ad:de:ad:2b:e4:75:a7:45:9d:dc:ea:1e:0d:2e:f1: 1f:5d:89:be:12:96:f4:8b:a1:93:97:8c:0c:f0:00:5f:33:ab: c6:8c:5d:1b:e7:37:c3:fb:c3:4b:00:3d:2c:5e:f6:4c:05:90: 67:28:21:9f:fe:45:c6:49:22:11:ff:cb:34:cb:26:3e:eb:de: 56:3b:72:7b:3e:59:71:55:ee:c5:97:b1:be:7d:51:5e:76:f0: 69:35:f6:18:d4:b7:f7:2f:34:78:cf:33:ef:74:56:59:9b:ae: 5a:31:b6:73:e3:d1:4c:91:bc:62:d1:99:19:10:01:73:2c:ec: 76:fe:c4:e8:5b:fd:57:77:bd:cc:64:97:01:e1:e2:be:d7:7a: f8:0f:20:18:4f:0e:4a:e1:7f:13:2a:37:7a:91:c2:4a:c2:42: c0:2b:84:2b:00:d1:be:06:d0:67:f5:af:af:fc:e1:b8:76:f1: 86:eb:80:0f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQOqvw6jYVr1qE4H2wV9713pNGDQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTQwMzM0WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BmODc4NjRkMGI4NDBkNDE4Mzk2MDhkODg1NTQzODFhZDA4 YWE4MjE5NzM0YTAyY2VlY2RhNjAxNDA4NmNkYmJhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLEf2uhCLeDe2Xmt7OlSTw6sALZu0TYHvSKV1dZbRyNNtl 3x9lwPQ6oA1OsLkxg6wbiBV1f7W/xNqhvSePAZisjcWO3S6fFT3rmDr+9UTByFdJ lV/G8xTH2zpr5h1M4uc2gjcvEVfvQWrcwI4pfOtghaktSPqXD7Jk3BGd64RNXP6H hU4Vkv0oI39vbcadl+mzk1ZDGDfQvdYEd/wl1sDIC032nxUxi8S8lScRwDLUPyKY QQ/osEtDCU6qV2vmuRvEqcx55q0BbUOf5q5UMmuc2j+Fgw3oXL9rW7VvyhVe+JjD fGNN8eXG78X1GG7aj3OngKzGQCRnmS3iCxBB3o+JAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUEkg8gihmRrc2Y8O9nzbaNHLu+JQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzc3NTBkOTVkLTA1YmQtNDY2OS1iNDc0LTJmNWQ1MGFhYTdjNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASQ9cwDQYJKoZIhvcNAQELBQADggEBAAWS3N5pGSRNI8pn5FhAoyJGmA/9 nGm6Z14ouE21hoowgmCg3Vb3TPgxfvRPD50Wvkr2c1GgJE+CrGQxzrV+ysjM1ZMN X+9nxDrwBa3erSvkdadFndzqHg0u8R9dib4SlvSLoZOXjAzwAF8zq8aMXRvnN8P7 w0sAPSxe9kwFkGcoIZ/+RcZJIhH/yzTLJj7r3lY7cns+WXFV7sWXsb59UV528Gk1 9hjUt/cvNHjPM+90VlmbrloxtnPj0UyRvGLRmRkQAXMs7Hb+xOhb/Vd3vcxklwHh 4r7XevgPIBhPDkrhfxMqN3qRwkrCQsArhCsA0b4G0Gf1r6/84bh28YbrgA8= -----END CERTIFICATE-----Generated at Mon Oct 20 21:11:47 2025 by rpki-client