$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/85ecae42-692f-4f00-b442-e38e3f71ca5a.roa File: 85ecae42-692f-4f00-b442-e38e3f71ca5a.roa (raw, json) Hash identifier: XtJVOd3eh4WfS7CFtG1qpeXyGkUnc7/9sRtbFw6V4S0= Subject key identifier: 5E:42:65:38:23:90:20:B6:FF:54:EA:F7:78:3A:F4:2F:9D:82:57:77 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1E1C5CCB379A639B1CA96AED1AD970C800F0A190 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/85ecae42-692f-4f00-b442-e38e3f71ca5a.roa Signing time: Sun 19 Oct 2025 22:33:40 +0000 ROA not before: Sun 19 Oct 2025 22:33:40 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.65.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:1c:5c:cb:37:9a:63:9b:1c:a9:6a:ed:1a:d9:70:c8:00:f0:a1:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 22:33:40 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=a800bb2d83b4cc7499feb733c477c72d2b6d3979f4901cccf4b2a597d16db03c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:15:37:98:c9:5b:e0:d1:32:8e:d8:10:9f:21: 82:91:c9:5a:72:8a:9f:c8:a3:51:05:39:73:e5:a6: 78:a3:ba:15:4b:a9:d0:f6:27:0e:4b:52:25:24:f3: 27:96:05:1b:a7:61:98:6b:a6:5c:b1:2a:ab:59:10: 1b:b7:2e:70:4a:fd:17:09:2d:d1:e6:a0:bd:92:b3: 29:0f:33:ed:55:52:34:2d:b8:97:88:21:e0:10:ac: 7d:83:58:15:e5:07:bd:a6:af:6f:01:53:d6:c9:f3: 0f:74:59:ef:f3:ad:7a:99:33:3c:61:8e:1e:0a:bd: 6b:ea:e0:de:53:6e:0e:5a:56:b3:fc:6e:61:15:c5: cc:19:dc:89:08:5d:94:a1:48:99:88:88:6f:2c:3b: f5:44:a2:ee:14:33:9a:e2:a3:fe:d4:b0:5f:87:9f: b2:ad:f8:0f:e9:1f:d4:80:95:c7:2a:c6:33:66:07: 82:23:4b:6a:1f:f5:f1:01:88:b4:d3:44:f0:a8:47: 72:f1:c3:f5:bf:a4:63:21:80:63:40:75:d1:2e:65: 5c:3d:ec:a8:e8:3c:21:db:ac:8e:20:16:59:cf:ce: ef:99:d1:f2:08:58:94:d8:3f:bc:19:d2:9b:9d:d2: 51:8b:8a:e4:6b:23:ce:85:dd:b5:6b:b6:d5:03:6e: 0b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:42:65:38:23:90:20:B6:FF:54:EA:F7:78:3A:F4:2F:9D:82:57:77 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/85ecae42-692f-4f00-b442-e38e3f71ca5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.65.224.0/20 Signature Algorithm: sha256WithRSAEncryption a1:50:ae:d9:54:af:5c:37:cc:7b:5c:c4:c6:e9:f2:24:66:5e: 0b:67:42:7e:3e:51:0e:c9:e4:77:65:fe:88:8a:c2:97:9f:48: 3f:1f:92:b6:c9:73:11:8c:3f:07:16:9b:50:c0:87:73:54:db: 74:16:92:b1:ce:30:10:69:9f:96:51:73:c4:e4:2c:ec:43:87: c9:98:c3:bb:8c:05:9f:78:bb:8d:b1:8d:50:b3:b8:0e:ab:4d: dd:87:c8:e1:0d:38:6e:21:9d:19:f0:0a:f0:67:a0:d3:02:e5: a3:f2:a5:cd:03:d6:fc:9f:a5:84:d8:b5:c0:ec:1c:41:e4:0f: 51:70:b2:61:25:a8:e3:f3:7f:1a:60:70:c1:f7:e2:dd:6e:65: 2d:06:42:99:e3:68:ab:d3:a5:78:21:2d:50:a6:15:c1:7f:d3: 52:f4:5a:8e:38:b4:90:05:05:f8:11:3a:52:db:2d:2b:6e:4f: fd:d9:76:39:ce:85:92:b7:e5:16:fb:52:46:ae:4a:84:8a:43: 42:b6:cc:39:b0:ed:dc:45:68:a3:33:4c:50:5d:dd:b3:f4:86: 09:2a:33:fc:bf:9a:a5:9f:3c:63:59:bc:95:e1:21:da:89:fc: 3c:3f:ad:38:b8:f0:77:b2:3c:9a:ba:3b:47:2c:a0:00:54:50: a2:08:97:77 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHhxcyzeaY5scqWrtGtlwyADwoZAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MjIzMzQwWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BhODAwYmIyZDgzYjRjYzc0OTlmZWI3MzNjNDc3YzcyZDJi NmQzOTc5ZjQ5MDFjY2NmNGIyYTU5N2QxNmRiMDNjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrFTeYyVvg0TKO2BCfIYKRyVpyip/Io1EFOXPlpnijuhVL qdD2Jw5LUiUk8yeWBRunYZhrplyxKqtZEBu3LnBK/RcJLdHmoL2SsykPM+1VUjQt uJeIIeAQrH2DWBXlB72mr28BU9bJ8w90We/zrXqZMzxhjh4KvWvq4N5Tbg5aVrP8 bmEVxcwZ3IkIXZShSJmIiG8sO/VEou4UM5rio/7UsF+Hn7Kt+A/pH9SAlccqxjNm B4IjS2of9fEBiLTTRPCoR3Lxw/W/pGMhgGNAddEuZVw97KjoPCHbrI4gFlnPzu+Z 0fIIWJTYP7wZ0pud0lGLiuRrI86F3bVrttUDbguFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUXkJlOCOQILb/VOr3eDr0L52CV3cwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzg1ZWNhZTQyLTY5MmYtNGYwMC1iNDQyLWUzOGUzZjcxY2E1YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQSQeAwDQYJKoZIhvcNAQELBQADggEBAKFQrtlUr1w3zHtcxMbp8iRmXgtn Qn4+UQ7J5Hdl/oiKwpefSD8fkrbJcxGMPwcWm1DAh3NU23QWkrHOMBBpn5ZRc8Tk LOxDh8mYw7uMBZ94u42xjVCzuA6rTd2HyOENOG4hnRnwCvBnoNMC5aPypc0D1vyf pYTYtcDsHEHkD1FwsmElqOPzfxpgcMH34t1uZS0GQpnjaKvTpXghLVCmFcF/01L0 Wo44tJAFBfgROlLbLStuT/3ZdjnOhZK35Rb7UkauSoSKQ0K2zDmw7dxFaKMzTFBd 3bP0hgkqM/y/mqWfPGNZvJXhIdqJ/Dw/rTi48HeyPJq6O0csoABUUKIIl3c= -----END CERTIFICATE-----Generated at Mon Oct 20 21:11:47 2025 by rpki-client