$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7b90f78d-da24-47a5-8d98-5c9fd00fd2da.roa File: 7b90f78d-da24-47a5-8d98-5c9fd00fd2da.roa (raw, json) Hash identifier: sg2X3Ro4GtZ2KUcfzoYxXIugwS74KEU1VhvYJlW162I= Subject key identifier: 75:1C:AC:D3:07:BC:DB:1E:8D:7C:E1:AA:48:15:E8:73:0C:60:7B:F6 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 50843D9823616645343E69C09ADB8936FA5881CD Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7b90f78d-da24-47a5-8d98-5c9fd00fd2da.roa Signing time: Sun 19 Oct 2025 12:40:14 +0000 ROA not before: Sun 19 Oct 2025 12:40:14 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.66.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:84:3d:98:23:61:66:45:34:3e:69:c0:9a:db:89:36:fa:58:81:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 12:40:14 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=c39bbaf298aaa4bc2e8220227abc1e7f04cb659de44acd7e9001e4770eb15f9d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ef:a9:5c:08:33:46:82:7a:4c:e4:a8:18:c8: 01:92:78:be:53:03:c2:de:ca:c2:1b:c0:3c:e7:bf: 00:79:a1:93:34:24:14:fe:3e:e7:e6:ed:cd:cf:6e: 32:f3:55:e7:7e:2c:c3:1b:49:85:c9:3d:54:f5:fe: 9f:54:1a:37:52:9e:68:b7:7a:be:5c:e4:a1:ca:c3: 7c:7a:f7:2c:98:30:02:67:1a:cf:3d:e2:25:dd:d5: cf:9b:68:cf:3e:70:ad:73:0b:ed:ed:88:95:0d:54: 10:d2:2c:58:00:b2:d1:4a:50:1c:d9:20:2b:74:dd: 3d:fb:3d:ef:23:6c:68:38:de:eb:74:f1:b2:1c:d9: 23:94:c3:ae:12:70:0e:1a:b9:71:3d:9a:1e:dc:53: 48:90:ff:f4:15:fb:4d:36:12:4d:be:d9:82:34:d1: 48:c8:b8:57:3d:2e:23:ac:77:b6:63:df:4a:3e:42: 4e:4f:c5:a4:37:04:7d:72:5c:96:cb:53:a3:89:7f: ac:0d:15:33:2e:40:b4:87:17:64:76:98:24:b7:79: 45:01:8f:1f:c7:51:e7:27:ea:6d:83:87:e9:10:18: d7:24:32:e3:5f:e1:54:18:59:2a:c2:27:48:5d:fd: e6:5d:2a:30:26:78:fa:24:26:52:ee:9b:9e:ac:85: 84:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:1C:AC:D3:07:BC:DB:1E:8D:7C:E1:AA:48:15:E8:73:0C:60:7B:F6 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7b90f78d-da24-47a5-8d98-5c9fd00fd2da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.66.20.0/23 Signature Algorithm: sha256WithRSAEncryption 58:81:b3:db:0c:5d:b3:b6:ac:eb:42:43:5c:fb:ef:d9:78:1d: f3:b5:f7:0b:51:68:c3:17:d5:1c:cb:27:7b:aa:74:2e:92:64: 57:a3:67:29:77:d9:7b:7c:fa:c8:90:5e:c2:cd:1a:c3:95:a8: 2d:79:4f:ac:1c:97:58:4f:c7:3f:bc:c7:ca:7c:90:2d:28:26: fe:59:be:1e:ba:fa:04:06:41:3f:5d:73:1c:45:e8:6d:b2:14: ac:ab:8e:85:33:be:ac:9c:85:0c:dd:b0:7c:33:12:fc:a5:66: 41:87:d8:86:fa:c5:a9:e6:2b:74:a3:ab:4e:e2:40:08:62:aa: 3c:eb:91:1d:0a:88:66:4a:2d:fc:68:f1:04:e5:da:ce:47:16: c7:bd:b5:4e:6c:9d:dc:9e:69:84:0e:d4:78:71:1e:cb:2c:fa: 53:ac:4d:35:61:0b:e6:58:1a:a0:3f:06:d4:64:1e:48:1b:f7: c9:ff:a1:4b:be:46:cd:c9:ff:91:f9:44:0f:d0:91:04:d4:b3: 32:fe:04:e6:78:01:43:ea:82:b1:5c:7d:36:d9:03:e4:c4:a9: 82:0b:c1:cd:c0:cf:c8:68:7e:b1:c1:e8:9e:8b:80:d2:c4:ef: 1b:7a:f9:d6:c4:67:5a:d0:b7:49:b1:54:af:38:9d:f9:47:ba: 86:a4:eb:6a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUIQ9mCNhZkU0PmnAmtuJNvpYgc0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTI0MDE0WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BjMzliYmFmMjk4YWFhNGJjMmU4MjIwMjI3YWJjMWU3ZjA0 Y2I2NTlkZTQ0YWNkN2U5MDAxZTQ3NzBlYjE1ZjlkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDN76lcCDNGgnpM5KgYyAGSeL5TA8LeysIbwDznvwB5oZM0 JBT+Pufm7c3PbjLzVed+LMMbSYXJPVT1/p9UGjdSnmi3er5c5KHKw3x69yyYMAJn Gs894iXd1c+baM8+cK1zC+3tiJUNVBDSLFgAstFKUBzZICt03T37Pe8jbGg43ut0 8bIc2SOUw64ScA4auXE9mh7cU0iQ//QV+002Ek2+2YI00UjIuFc9LiOsd7Zj30o+ Qk5PxaQ3BH1yXJbLU6OJf6wNFTMuQLSHF2R2mCS3eUUBjx/HUecn6m2Dh+kQGNck MuNf4VQYWSrCJ0hd/eZdKjAmePokJlLum56shYQ/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUdRys0we82x6NfOGqSBXocwxge/YwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzdiOTBmNzhkLWRhMjQtNDdhNS04ZDk4LTVjOWZkMDBmZDJkYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESQhQwDQYJKoZIhvcNAQELBQADggEBAFiBs9sMXbO2rOtCQ1z779l4HfO1 9wtRaMMX1RzLJ3uqdC6SZFejZyl32Xt8+siQXsLNGsOVqC15T6wcl1hPxz+8x8p8 kC0oJv5Zvh66+gQGQT9dcxxF6G2yFKyrjoUzvqychQzdsHwzEvylZkGH2Ib6xanm K3Sjq07iQAhiqjzrkR0KiGZKLfxo8QTl2s5HFse9tU5sndyeaYQO1HhxHsss+lOs TTVhC+ZYGqA/BtRkHkgb98n/oUu+Rs3J/5H5RA/QkQTUszL+BOZ4AUPqgrFcfTbZ A+TEqYILwc3Az8hofrHB6J6LgNLE7xt6+dbEZ1rQt0mxVK84nflHuoak62o= -----END CERTIFICATE-----Generated at Mon Oct 20 03:06:46 2025 by rpki-client