$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7842f075-6425-43a8-be13-c5aaf00b0eda.roa File: 7842f075-6425-43a8-be13-c5aaf00b0eda.roa (raw, json) Hash identifier: 7d4soOFHR3JXJdPQEYBWN6Evj8A+zlrIrLrQuoIeY6E= Subject key identifier: 63:72:8B:54:67:FB:4C:90:A3:B1:AB:B1:86:D1:3C:53:1B:AB:49:21 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7A97CDB64AC0FAA2BFCD5FF79596ED40EF52952C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7842f075-6425-43a8-be13-c5aaf00b0eda.roa Signing time: Sun 19 Oct 2025 11:31:27 +0000 ROA not before: Sun 19 Oct 2025 11:31:27 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.65.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:97:cd:b6:4a:c0:fa:a2:bf:cd:5f:f7:95:96:ed:40:ef:52:95:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 11:31:27 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=c35063c3cf7e6168335f454ec86d179704d5a54ed4c0231b4bda86538f3af9ea, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d3:32:0f:16:86:86:42:93:01:30:25:50:43: b9:c7:83:22:c6:1a:3a:f2:cd:d6:5c:65:d1:e6:a2: 7f:53:f3:85:d0:bf:30:33:c2:1a:27:17:08:6a:29: a3:ea:d4:e4:ed:ac:cf:46:ac:67:61:3d:b7:20:cc: 1c:b3:ce:a3:2a:32:b5:3c:2b:06:a1:21:8e:ac:d8: 58:dc:54:cf:3d:61:8f:1f:ed:91:67:12:44:3d:cc: 1d:75:23:71:6f:1c:44:b9:d9:17:8d:3a:fa:ab:bd: e9:64:f3:7c:4d:17:00:96:92:66:23:45:50:cc:c9: 8e:4a:e0:c1:59:63:0b:c3:05:3f:b0:79:79:18:5a: 04:9a:39:b1:9b:93:6d:ea:82:a2:28:be:b0:8e:85: 63:13:e9:74:29:ef:cf:46:ca:02:8e:6d:08:83:fb: f0:6d:9c:36:92:e4:26:fa:7d:69:2f:de:8f:a3:dd: a7:1e:f7:e7:7e:94:33:59:c6:fe:b3:a0:82:b4:d0: e0:00:41:cc:f4:27:d7:0c:e0:a4:26:ad:77:f2:d4: 18:13:fe:8f:1b:b4:cf:65:6b:82:27:08:33:ec:ef: e8:78:75:57:91:6c:f6:50:63:49:42:f2:92:25:4d: e9:f3:04:75:4e:8d:85:de:d6:5d:b5:26:23:f3:be: 66:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:72:8B:54:67:FB:4C:90:A3:B1:AB:B1:86:D1:3C:53:1B:AB:49:21 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7842f075-6425-43a8-be13-c5aaf00b0eda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.65.128.0/20 Signature Algorithm: sha256WithRSAEncryption 10:f7:38:33:c3:76:b4:88:8f:f3:03:bf:f8:f4:4c:ff:84:42: 9f:b5:c4:b6:d4:c1:5c:24:c0:6d:17:9f:64:00:d1:25:4c:67: 06:8e:f1:ac:d7:4d:78:f2:d2:25:b5:a1:ad:90:60:39:b3:62: 13:a8:1b:ba:91:bb:c8:50:2b:9b:5a:66:15:03:f8:de:c9:d4: a6:3a:d8:61:d9:51:c9:5a:f7:d8:21:7c:60:30:36:37:a4:4e: 0d:b9:cb:a4:da:57:1e:10:2b:a1:b0:73:8c:e0:ab:f3:d9:37: c7:1f:ff:2d:68:a7:e3:a1:1e:29:bd:39:a6:3f:78:d3:44:d2: 25:56:7b:0d:bc:c5:07:86:ed:1c:d2:ee:f6:f8:cf:02:60:f5: 3f:75:7d:78:23:44:aa:85:07:f5:33:9a:19:eb:7f:d9:f2:8c: 74:75:3f:19:1c:ca:51:6f:72:9d:d2:c7:b3:67:c5:7f:06:ce: d8:c9:c7:9e:46:4f:9c:f6:e7:d6:6f:0c:30:79:40:55:5e:cc: 58:57:4f:fd:60:75:fc:2a:f7:6c:53:fc:6e:66:ed:5f:a1:d6: 84:f8:da:47:4a:1e:db:94:80:ea:e5:ac:58:3b:97:e1:d1:e9: 2b:5a:e1:c0:7c:2a:10:01:a1:02:74:63:3c:76:a6:be:fa:c4: 26:8c:23:f5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUepfNtkrA+qK/zV/3lZbtQO9SlSwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTEzMTI3WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BjMzUwNjNjM2NmN2U2MTY4MzM1ZjQ1NGVjODZkMTc5NzA0 ZDVhNTRlZDRjMDIzMWI0YmRhODY1MzhmM2FmOWVhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDA0zIPFoaGQpMBMCVQQ7nHgyLGGjryzdZcZdHmon9T84XQ vzAzwhonFwhqKaPq1OTtrM9GrGdhPbcgzByzzqMqMrU8KwahIY6s2FjcVM89YY8f 7ZFnEkQ9zB11I3FvHES52ReNOvqrvelk83xNFwCWkmYjRVDMyY5K4MFZYwvDBT+w eXkYWgSaObGbk23qgqIovrCOhWMT6XQp789GygKObQiD+/BtnDaS5Cb6fWkv3o+j 3ace9+d+lDNZxv6zoIK00OAAQcz0J9cM4KQmrXfy1BgT/o8btM9la4InCDPs7+h4 dVeRbPZQY0lC8pIlTenzBHVOjYXe1l21JiPzvmZ1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUY3KLVGf7TJCjsauxhtE8UxurSSEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzc4NDJmMDc1LTY0MjUtNDNhOC1iZTEzLWM1YWFmMDBiMGVkYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQSQYAwDQYJKoZIhvcNAQELBQADggEBABD3ODPDdrSIj/MDv/j0TP+EQp+1 xLbUwVwkwG0Xn2QA0SVMZwaO8azXTXjy0iW1oa2QYDmzYhOoG7qRu8hQK5taZhUD +N7J1KY62GHZUcla99ghfGAwNjekTg25y6TaVx4QK6Gwc4zgq/PZN8cf/y1op+Oh Him9OaY/eNNE0iVWew28xQeG7RzS7vb4zwJg9T91fXgjRKqFB/Uzmhnrf9nyjHR1 PxkcylFvcp3Sx7NnxX8GztjJx55GT5z259ZvDDB5QFVezFhXT/1gdfwq92xT/G5m 7V+h1oT42kdKHtuUgOrlrFg7l+HR6Sta4cB8KhABoQJ0Yzx2pr76xCaMI/U= -----END CERTIFICATE-----Generated at Mon Oct 20 02:59:16 2025 by rpki-client