$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7811de3e-69d9-492c-8ec4-17bdcd0ec3e7.roa File: 7811de3e-69d9-492c-8ec4-17bdcd0ec3e7.roa (raw, json) Hash identifier: AEV6I+TzaYoYeLAevoOLu1qqR9kWoP1D6un+4umnaW4= Subject key identifier: 6B:B2:E9:8F:D6:DA:AA:AD:75:5F:9E:5B:51:AD:15:2F:88:F7:BE:AB Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 096093D05714DC90A5D37F3725D79DA10EDCD609 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7811de3e-69d9-492c-8ec4-17bdcd0ec3e7.roa Signing time: Sun 19 Oct 2025 21:12:31 +0000 ROA not before: Sun 19 Oct 2025 21:12:31 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.66.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:60:93:d0:57:14:dc:90:a5:d3:7f:37:25:d7:9d:a1:0e:dc:d6:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 21:12:31 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=fcd3b55ad658203cd5373e46d9896053014e2f18734ab9ea80318e780f716f35, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:39:b6:a7:fe:11:cd:fe:e0:77:41:f4:6e:c0: b8:61:75:bc:fe:40:29:4b:dd:ef:af:ed:4d:a0:e3: b9:25:24:49:a4:be:be:0b:67:71:d2:8c:cf:db:85: 71:14:52:b1:c4:22:97:01:ff:ee:83:93:0d:a0:9b: 70:3c:ec:f5:1c:56:f3:a4:5b:aa:34:af:ea:f9:5a: 34:ed:e3:f5:46:f3:b8:2c:f5:af:b6:c6:5a:d2:92: dc:b5:76:9c:66:36:e5:6b:41:93:12:4f:26:91:ff: ea:51:f5:42:80:27:8b:9f:e5:03:c7:57:31:8a:33: 3f:05:cb:5a:ca:7b:ec:44:41:b7:ff:bb:87:0c:8a: f6:f9:b4:7f:95:d4:3b:2a:d6:82:4a:d0:7a:83:57: 03:b7:b8:89:0b:a4:29:8b:04:b4:8e:b3:ee:62:03: 18:dc:33:45:97:33:4d:84:d5:a3:3f:ce:de:75:33: a2:cf:ce:b4:57:45:13:23:0f:a4:71:31:88:2d:e4: 8c:97:c6:36:10:fb:a3:81:45:f4:cc:6b:d1:7b:8a: c3:52:d4:f1:1f:82:e4:12:b5:9e:84:f4:e2:1b:40: 43:c6:57:1b:6a:4e:1b:8c:3a:8a:41:63:5a:a0:a5: b4:dd:d9:55:7a:9c:3b:69:dd:0a:5b:ac:1a:dc:21: 00:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:B2:E9:8F:D6:DA:AA:AD:75:5F:9E:5B:51:AD:15:2F:88:F7:BE:AB X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7811de3e-69d9-492c-8ec4-17bdcd0ec3e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.66.64.0/20 Signature Algorithm: sha256WithRSAEncryption 2b:86:28:0a:1f:c6:19:d6:75:ed:6e:45:85:63:5d:90:f6:b8: f1:2c:c1:a6:fa:b8:18:91:5b:f1:c8:13:c1:9f:ec:c1:49:b3: 5e:a5:60:07:bc:16:da:fc:4a:f8:5a:cd:30:45:53:f3:31:c0: 88:86:a9:32:ef:de:6b:38:3f:52:0f:5d:a6:54:40:9b:b8:c6: 3d:0d:45:8f:24:81:19:b5:3e:40:c3:73:e5:cb:4c:45:dc:e4: 2f:6f:f0:31:1e:55:ec:d9:75:03:75:88:0b:14:31:0d:d9:71: 4f:33:a2:20:4f:ab:db:50:c6:ae:a8:ad:5e:4d:57:c8:6b:2d: 18:a5:d1:e8:3f:d7:62:ff:d0:50:84:2c:5e:7a:93:d8:98:0a: 4d:95:f2:70:61:3a:03:e4:1f:7d:17:cf:c2:0c:51:e1:43:0d: 38:d4:48:29:6d:e7:c2:34:13:4e:e0:96:32:57:99:1c:0a:4f: d4:0e:a1:a4:d2:5c:c7:be:42:9d:57:23:34:6f:9a:50:d2:fc: 42:79:f8:e5:26:e4:b1:15:9d:2c:c5:36:3c:f0:58:0b:4f:48: 29:14:19:0e:7d:2f:9e:56:ba:cd:ed:e5:25:ea:84:82:52:7b: c2:6d:2d:63:77:87:9c:2f:04:41:a0:f0:37:ab:2e:df:8f:b8: 95:32:da:1e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCWCT0FcU3JCl0383JdedoQ7c1gkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MjExMjMxWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BmY2QzYjU1YWQ2NTgyMDNjZDUzNzNlNDZkOTg5NjA1MzAx NGUyZjE4NzM0YWI5ZWE4MDMxOGU3ODBmNzE2ZjM1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/Oban/hHN/uB3QfRuwLhhdbz+QClL3e+v7U2g47klJEmk vr4LZ3HSjM/bhXEUUrHEIpcB/+6Dkw2gm3A87PUcVvOkW6o0r+r5WjTt4/VG87gs 9a+2xlrSkty1dpxmNuVrQZMSTyaR/+pR9UKAJ4uf5QPHVzGKMz8Fy1rKe+xEQbf/ u4cMivb5tH+V1Dsq1oJK0HqDVwO3uIkLpCmLBLSOs+5iAxjcM0WXM02E1aM/zt51 M6LPzrRXRRMjD6RxMYgt5IyXxjYQ+6OBRfTMa9F7isNS1PEfguQStZ6E9OIbQEPG VxtqThuMOopBY1qgpbTd2VV6nDtp3QpbrBrcIQD3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUa7Lpj9baqq11X55bUa0VL4j3vqswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzc4MTFkZTNlLTY5ZDktNDkyYy04ZWM0LTE3YmRjZDBlYzNlNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQSQkAwDQYJKoZIhvcNAQELBQADggEBACuGKAofxhnWde1uRYVjXZD2uPEs wab6uBiRW/HIE8Gf7MFJs16lYAe8Ftr8SvhazTBFU/MxwIiGqTLv3ms4P1IPXaZU QJu4xj0NRY8kgRm1PkDDc+XLTEXc5C9v8DEeVezZdQN1iAsUMQ3ZcU8zoiBPq9tQ xq6orV5NV8hrLRil0eg/12L/0FCELF56k9iYCk2V8nBhOgPkH30Xz8IMUeFDDTjU SClt58I0E07gljJXmRwKT9QOoaTSXMe+Qp1XIzRvmlDS/EJ5+OUm5LEVnSzFNjzw WAtPSCkUGQ59L55Wus3t5SXqhIJSe8JtLWN3h5wvBEGg8DerLt+PuJUy2h4= -----END CERTIFICATE-----Generated at Mon Oct 20 10:59:23 2025 by rpki-client