$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/84d656f0-06b7-41e9-afe8-32b69baa2f3e.roa File: 84d656f0-06b7-41e9-afe8-32b69baa2f3e.roa (raw, json) Hash identifier: YzDgXIHaBKoPhlH2CeS5fCSHZt0SgYefcg/kaFRgDj0= Subject key identifier: F8:02:91:E2:76:FB:C3:7D:40:E4:9D:17:15:D1:E1:19:66:3D:3E:17 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 32F637C9938A64C8DCA16E9E2F0E62E19596C939 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/84d656f0-06b7-41e9-afe8-32b69baa2f3e.roa Signing time: Sun 19 Oct 2025 08:50:13 +0000 ROA not before: Sun 19 Oct 2025 08:50:13 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.67.216.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:f6:37:c9:93:8a:64:c8:dc:a1:6e:9e:2f:0e:62:e1:95:96:c9:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 08:50:13 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=27007268de4ce8364e561390f26c5357e2cc88b9a415187c30c1ff790be1bf1f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:39:ac:e7:ea:92:35:4b:08:19:a5:44:79:13: 1c:38:16:08:b1:3e:6e:48:f1:54:69:93:5f:89:7a: d2:8d:d1:da:fc:c6:d5:6d:a6:0a:0d:38:23:66:33: 0c:4d:9f:8b:5e:70:83:40:b4:cd:41:f1:e7:b3:24: a4:3d:8d:29:8a:cf:98:43:95:0a:ec:01:98:f5:12: 90:20:f5:87:ea:cc:07:2e:8f:39:98:f6:7f:7c:c9: bc:93:6a:75:79:ae:c8:81:5a:42:1f:d0:e1:f7:e2: 23:94:38:e8:2a:30:75:75:53:bb:52:ba:f7:14:0f: e8:86:f8:80:2c:4b:cc:60:46:d0:d9:ab:ed:42:75: a6:c4:1c:ce:e9:4c:c7:bd:5b:dc:0f:e1:bf:09:ed: 87:e8:f4:6f:88:7b:46:bf:2f:d6:56:aa:ad:2e:d6: 8d:ce:6b:12:b5:a4:b5:bb:5c:8c:05:2d:e2:bf:d4: 78:f6:96:4b:b0:a5:30:52:18:cd:2d:79:84:ec:9d: 02:0d:4d:ff:f6:5d:ef:50:31:a2:a0:19:e6:6a:20: 92:87:bc:58:d3:ea:d3:39:f4:c2:45:4a:03:9e:53: 73:3f:8d:8b:fb:fa:4b:0d:f4:70:d0:13:6e:52:8f: 35:96:83:d9:55:ec:ec:91:51:ed:d8:3f:be:e0:20: 25:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:02:91:E2:76:FB:C3:7D:40:E4:9D:17:15:D1:E1:19:66:3D:3E:17 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/84d656f0-06b7-41e9-afe8-32b69baa2f3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.67.216.0/23 Signature Algorithm: sha256WithRSAEncryption 92:bb:b6:27:7c:36:18:a8:8f:b4:07:43:41:ed:e2:16:c3:73: 0d:be:cd:a4:ff:35:94:a9:65:fc:71:b7:3a:61:aa:53:36:79: d1:1e:6c:6d:ad:6a:6d:3e:f3:a6:0c:30:29:05:15:21:44:b0: 51:bc:78:74:7e:3f:97:00:17:da:c5:53:b5:21:8c:70:2c:30: 7c:da:81:2d:2c:ec:f5:71:0a:ab:63:95:1c:d1:6e:ab:80:e8: 96:a1:5f:ef:5e:d0:b5:01:ae:56:05:f8:69:af:0d:f3:55:2c: 8f:9d:50:6c:38:7d:1e:1e:bd:dc:b1:a0:11:ac:fe:50:cd:ea: 5f:0f:e0:7e:10:30:25:e4:8c:a5:c9:9e:bb:29:65:37:db:da: 67:58:67:46:ef:24:d5:f2:f3:e4:2a:a6:3c:d5:74:2b:8a:5a: 7c:42:e7:2d:41:56:20:9c:51:0b:2c:81:f5:1d:e3:5e:10:66: b9:03:d5:0c:72:42:0e:38:7a:d4:ec:35:d3:88:ae:32:49:27: 64:c6:8f:fc:34:c3:ef:f4:ec:da:36:be:dc:36:b7:b9:aa:92: cf:cc:5d:fb:d0:f3:e0:86:4e:b9:33:ae:51:f9:db:c8:02:b6: 88:50:24:54:58:e2:35:4a:98:fa:15:02:68:5e:8f:ae:0b:21: f2:33:7e:6d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMvY3yZOKZMjcoW6eLw5i4ZWWyTkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MDg1MDEzWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AyNzAwNzI2OGRlNGNlODM2NGU1NjEzOTBmMjZjNTM1N2Uy Y2M4OGI5YTQxNTE4N2MzMGMxZmY3OTBiZTFiZjFmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3Oazn6pI1SwgZpUR5Exw4FgixPm5I8VRpk1+JetKN0dr8 xtVtpgoNOCNmMwxNn4tecINAtM1B8eezJKQ9jSmKz5hDlQrsAZj1EpAg9YfqzAcu jzmY9n98ybyTanV5rsiBWkIf0OH34iOUOOgqMHV1U7tSuvcUD+iG+IAsS8xgRtDZ q+1CdabEHM7pTMe9W9wP4b8J7Yfo9G+Ie0a/L9ZWqq0u1o3OaxK1pLW7XIwFLeK/ 1Hj2lkuwpTBSGM0teYTsnQINTf/2Xe9QMaKgGeZqIJKHvFjT6tM59MJFSgOeU3M/ jYv7+ksN9HDQE25SjzWWg9lV7OyRUe3YP77gICVTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU+AKR4nb7w31A5J0XFdHhGWY9PhcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzg0ZDY1NmYwLTA2YjctNDFlOS1hZmU4LTMyYjY5YmFhMmYzZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESQ9gwDQYJKoZIhvcNAQELBQADggEBAJK7tid8Nhioj7QHQ0Ht4hbDcw2+ zaT/NZSpZfxxtzphqlM2edEebG2tam0+86YMMCkFFSFEsFG8eHR+P5cAF9rFU7Uh jHAsMHzagS0s7PVxCqtjlRzRbquA6JahX+9e0LUBrlYF+GmvDfNVLI+dUGw4fR4e vdyxoBGs/lDN6l8P4H4QMCXkjKXJnrspZTfb2mdYZ0bvJNXy8+QqpjzVdCuKWnxC 5y1BViCcUQssgfUd414QZrkD1QxyQg44etTsNdOIrjJJJ2TGj/w0w+/07No2vtw2 t7mqks/MXfvQ8+CGTrkzrlH528gCtohQJFRY4jVKmPoVAmhej64LIfIzfm0= -----END CERTIFICATE-----Generated at Mon Oct 20 12:21:06 2025 by rpki-client