$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/84b9cc7f-6065-4f73-9cba-8187d1b57d65.roa File: 84b9cc7f-6065-4f73-9cba-8187d1b57d65.roa (raw, json) Hash identifier: z0HciY2u2/ZrkF/kVrswX7vcJp7oLa0Q0eirokH/Nhc= Subject key identifier: 0F:FB:F4:2E:99:1D:55:8B:27:C2:AA:DC:FA:53:89:10:2B:C0:97:20 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 022D04DB0734D33F39BAD1D1122B67883AC8D9D5 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/84b9cc7f-6065-4f73-9cba-8187d1b57d65.roa Signing time: Sat 18 Oct 2025 18:32:53 +0000 ROA not before: Sat 18 Oct 2025 18:32:53 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.165.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:2d:04:db:07:34:d3:3f:39:ba:d1:d1:12:2b:67:88:3a:c8:d9:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 18:32:53 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=0dcad15bdb3404e7035a431787af275990dd45f02ac7a0df820a4cf44cfd7a6e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e4:ef:67:8f:7d:2c:10:3f:51:81:b7:93:56: 78:cc:3e:b0:7b:6b:1c:98:36:5d:ed:62:67:d3:53: 7b:36:b8:4c:e1:13:53:9b:6c:1a:bd:44:6b:93:d8: 47:ed:1d:51:5c:38:fb:dd:f7:00:b6:bd:f3:91:76: c2:55:d1:90:2c:c6:17:a7:fa:90:24:67:4a:1a:23: d8:ee:60:f2:97:67:29:4c:33:80:94:c2:0f:06:a1: 94:dc:ed:21:2b:cf:33:49:60:a3:88:e3:d7:d8:af: af:f3:52:95:9e:bc:fd:b1:ba:c5:30:e8:df:78:c2: c6:4a:d1:97:60:31:85:8b:a9:e4:e8:c8:76:1b:bf: 05:f5:b3:2f:b7:d3:27:7f:12:49:71:e5:ce:6b:6f: f5:25:e5:1d:66:87:73:4c:d4:4c:e2:98:8d:8b:a1: c9:36:f3:8c:4f:34:0f:d5:eb:07:2c:83:13:73:11: 59:60:c6:e7:51:4e:5b:4f:8d:bf:c2:f7:63:36:79: 4f:30:2c:82:eb:02:9f:65:c6:1d:a5:4c:cf:48:c9: 3c:57:72:ea:9c:ca:98:9b:41:f3:c8:ac:0e:34:ef: 11:ca:52:c8:0e:84:0f:53:60:9c:7b:56:21:6a:55: 83:e4:31:fc:83:ad:00:39:91:78:ea:ab:a7:58:94: 4e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:FB:F4:2E:99:1D:55:8B:27:C2:AA:DC:FA:53:89:10:2B:C0:97:20 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/84b9cc7f-6065-4f73-9cba-8187d1b57d65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.165.224.0/20 Signature Algorithm: sha256WithRSAEncryption 65:50:9a:ba:50:ca:75:3c:c4:2c:3f:bb:82:40:bf:1d:f7:d7: de:8e:24:d5:b3:31:8a:8a:c1:f2:7a:5c:17:51:4c:46:4b:0f: 19:39:83:89:78:e0:0d:04:59:0b:ea:f9:02:a3:2e:98:3f:e5: d7:b2:f8:e8:f6:69:9f:5d:9c:f1:95:26:d9:55:a5:79:09:b4: ec:8e:b8:af:81:2c:13:c1:66:7e:52:62:2f:b7:b9:6f:f0:8b: b6:9e:86:4f:b8:ae:f0:1e:9a:90:9f:70:c2:08:41:bf:6d:a7: 63:4b:09:9a:64:4c:38:03:f5:bd:4d:ba:e6:a4:6e:24:68:eb: d7:38:21:30:b2:e7:17:c6:34:dc:88:ba:df:3d:d3:36:e8:b6: f1:76:7e:d5:f4:62:51:62:fa:49:1d:11:cf:8e:80:c2:b7:43: 40:64:e9:15:2a:b6:09:70:77:01:35:a6:3c:08:fa:2c:51:f4: f8:60:ed:a9:52:2d:87:1e:3a:10:92:4a:9d:9b:8d:c7:5d:88: 69:76:aa:76:78:fe:47:ca:c7:d8:0d:c3:eb:23:ba:8c:b4:4b: 76:5d:62:61:09:03:0d:31:84:5d:86:e6:8d:af:a7:ac:03:13: 0c:24:5e:4a:9d:af:25:79:b0:24:a8:1f:97:45:3c:36:f6:72: 91:47:ca:66 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAi0E2wc00z85utHREitniDrI2dUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTgzMjUzWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AwZGNhZDE1YmRiMzQwNGU3MDM1YTQzMTc4N2FmMjc1OTkw ZGQ0NWYwMmFjN2EwZGY4MjBhNGNmNDRjZmQ3YTZlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDA5O9nj30sED9RgbeTVnjMPrB7axyYNl3tYmfTU3s2uEzh E1ObbBq9RGuT2EftHVFcOPvd9wC2vfORdsJV0ZAsxhen+pAkZ0oaI9juYPKXZylM M4CUwg8GoZTc7SErzzNJYKOI49fYr6/zUpWevP2xusUw6N94wsZK0ZdgMYWLqeTo yHYbvwX1sy+30yd/Eklx5c5rb/Ul5R1mh3NM1EzimI2Lock284xPNA/V6wcsgxNz EVlgxudRTltPjb/C92M2eU8wLILrAp9lxh2lTM9IyTxXcuqcypibQfPIrA407xHK UsgOhA9TYJx7ViFqVYPkMfyDrQA5kXjqq6dYlE6BAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUD/v0LpkdVYsnwqrc+lOJECvAlyAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzg0YjljYzdmLTYwNjUtNGY3My05Y2JhLTgxODdkMWI1N2Q2NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQSpeAwDQYJKoZIhvcNAQELBQADggEBAGVQmrpQynU8xCw/u4JAvx33196O JNWzMYqKwfJ6XBdRTEZLDxk5g4l44A0EWQvq+QKjLpg/5dey+Oj2aZ9dnPGVJtlV pXkJtOyOuK+BLBPBZn5SYi+3uW/wi7aehk+4rvAempCfcMIIQb9tp2NLCZpkTDgD 9b1NuuakbiRo69c4ITCy5xfGNNyIut890zbotvF2ftX0YlFi+kkdEc+OgMK3Q0Bk 6RUqtglwdwE1pjwI+ixR9Phg7alSLYceOhCSSp2bjcddiGl2qnZ4/kfKx9gNw+sj uoy0S3ZdYmEJAw0xhF2G5o2vp6wDEwwkXkqdryV5sCSoH5dFPDb2cpFHymY= -----END CERTIFICATE-----Generated at Mon Oct 20 08:29:17 2025 by rpki-client