$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8300a8f3-7e39-4e56-ad48-e28ddfe2a161.roa File: 8300a8f3-7e39-4e56-ad48-e28ddfe2a161.roa (raw, json) Hash identifier: JT/O0WYM8WhZl4DidmGqSbkTXR63Kd42a41Z/DGLKKE= Subject key identifier: 3A:DA:39:10:A6:D4:FC:CF:8B:07:35:D2:11:E8:5E:D1:42:08:2B:C5 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 69082508EC20C361B91EC395551C17DF37B6D219 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8300a8f3-7e39-4e56-ad48-e28ddfe2a161.roa Signing time: Sun 19 Oct 2025 14:40:13 +0000 ROA not before: Sun 19 Oct 2025 14:40:13 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.65.126.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:08:25:08:ec:20:c3:61:b9:1e:c3:95:55:1c:17:df:37:b6:d2:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 14:40:13 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=ce35cc69f523dd6e119429ec5dcfa0e2dc2efbed96fb1b358c4e04205e4aef66, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ad:ce:2a:dd:ed:1d:86:fa:89:8a:2e:3b:69: c2:51:5f:8a:e5:bd:fe:81:6f:f7:bd:07:d1:79:94: d6:7b:7f:de:8c:5e:ab:43:06:cb:21:16:a9:1a:1e: 46:e9:f9:5c:aa:5f:3e:a4:74:ec:b3:3d:7f:cf:1d: 1c:2c:da:e1:d6:4d:bd:16:38:9c:3d:68:00:24:26: 81:01:04:e7:76:d4:67:5a:12:62:2b:ea:2b:f7:0c: e8:6a:d9:81:f7:9c:b4:5f:47:87:34:89:55:ce:b3: 6d:72:1e:d4:91:3d:b6:5c:70:90:6e:e8:f9:e3:50: 30:0d:43:c6:11:33:3d:55:7f:aa:dc:84:65:90:ad: 1a:da:5f:37:db:bd:45:8a:c0:e1:11:69:21:5b:b5: 9b:ba:a2:6b:45:d3:25:1b:58:3c:11:6d:90:9f:00: 26:0f:26:b0:41:80:94:f2:e9:18:65:b8:ef:31:0f: c1:73:ee:64:b3:29:3d:9f:d4:03:fa:83:50:68:f3: 9b:10:8c:0c:57:8f:f5:5d:97:51:cc:59:78:9b:f3: a3:be:5a:bc:dd:69:d3:65:2e:f4:06:dc:24:77:80: bb:d4:4d:79:9a:21:21:ea:86:11:b6:4f:7f:83:18: a3:75:15:ae:5d:26:37:f1:7b:1c:0d:ff:08:a0:27: 4b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:DA:39:10:A6:D4:FC:CF:8B:07:35:D2:11:E8:5E:D1:42:08:2B:C5 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8300a8f3-7e39-4e56-ad48-e28ddfe2a161.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.65.126.0/23 Signature Algorithm: sha256WithRSAEncryption 0b:8f:d3:95:f7:f9:31:04:d5:95:40:27:0e:61:61:f1:94:dd: 2b:c8:11:77:86:5e:83:4b:04:82:6c:62:c0:ba:c6:19:e1:03: 77:5f:64:4d:56:aa:c7:b3:46:47:74:6b:03:db:0b:71:70:eb: ba:96:d3:4d:46:85:96:c2:b6:fc:57:fb:5c:3e:62:d7:56:c5: 6b:ed:a7:b7:9b:3a:d6:38:69:02:e3:f0:c5:e9:b6:30:ee:26: 50:f6:77:c5:32:cd:1a:93:7c:fa:ec:61:79:ff:15:75:b9:ce: ae:f8:d1:67:ac:0d:ad:42:7d:b6:d4:8c:87:92:6c:cd:20:ed: ae:75:75:6b:63:2a:23:fd:f6:ef:c0:cb:2e:5c:4a:f3:3c:01: 5c:e1:a4:9a:a1:4a:92:86:17:67:40:0b:6c:1b:ec:75:3a:6d: 4e:05:5b:dd:d7:f8:59:f8:13:81:d6:a4:d4:66:13:de:38:30: b9:53:49:1e:73:a8:9e:db:40:77:bb:56:2d:4c:a9:86:c0:dd: ae:f1:42:6a:cc:af:d0:b1:7f:91:b3:d7:2b:8b:47:55:45:8c: 1b:4b:72:47:04:1a:b9:37:46:ba:bf:65:1e:be:c4:4a:c3:73: 88:05:8d:24:e5:22:f8:f7:ed:69:7a:86:40:a8:8b:54:03:17: 47:21:11:ce -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUaQglCOwgw2G5HsOVVRwX3ze20hkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTQ0MDEzWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BjZTM1Y2M2OWY1MjNkZDZlMTE5NDI5ZWM1ZGNmYTBlMmRj MmVmYmVkOTZmYjFiMzU4YzRlMDQyMDVlNGFlZjY2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCXrc4q3e0dhvqJii47acJRX4rlvf6Bb/e9B9F5lNZ7f96M XqtDBsshFqkaHkbp+VyqXz6kdOyzPX/PHRws2uHWTb0WOJw9aAAkJoEBBOd21Gda EmIr6iv3DOhq2YH3nLRfR4c0iVXOs21yHtSRPbZccJBu6PnjUDANQ8YRMz1Vf6rc hGWQrRraXzfbvUWKwOERaSFbtZu6omtF0yUbWDwRbZCfACYPJrBBgJTy6RhluO8x D8Fz7mSzKT2f1AP6g1Bo85sQjAxXj/Vdl1HMWXib86O+WrzdadNlLvQG3CR3gLvU TXmaISHqhhG2T3+DGKN1Fa5dJjfxexwN/wigJ0s/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUOto5EKbU/M+LBzXSEehe0UIIK8UwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzgzMDBhOGYzLTdlMzktNGU1Ni1hZDQ4LWUyOGRkZmUyYTE2MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESQX4wDQYJKoZIhvcNAQELBQADggEBAAuP05X3+TEE1ZVAJw5hYfGU3SvI EXeGXoNLBIJsYsC6xhnhA3dfZE1WqsezRkd0awPbC3Fw67qW001GhZbCtvxX+1w+ YtdWxWvtp7ebOtY4aQLj8MXptjDuJlD2d8UyzRqTfPrsYXn/FXW5zq740WesDa1C fbbUjIeSbM0g7a51dWtjKiP99u/Ayy5cSvM8AVzhpJqhSpKGF2dAC2wb7HU6bU4F W93X+Fn4E4HWpNRmE944MLlTSR5zqJ7bQHe7Vi1MqYbA3a7xQmrMr9Cxf5Gz1yuL R1VFjBtLckcEGrk3Rrq/ZR6+xErDc4gFjSTlIvj37Wl6hkCoi1QDF0chEc4= -----END CERTIFICATE-----Generated at Mon Oct 20 05:17:13 2025 by rpki-client