$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/88b13338-29f2-4d22-9496-951c345bbb2d.roa File: 88b13338-29f2-4d22-9496-951c345bbb2d.roa (raw, json) Hash identifier: 5qZDrRBmrkZNr6UXGSCtPUVZjcP4BQ4LoIvf68Z4hvI= Subject key identifier: 46:50:72:CD:9D:04:07:CF:22:A9:FC:9F:16:71:56:9B:43:10:64:9F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5383BB64E1EE425D5C011B5121DAC0F7C05A8175 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/88b13338-29f2-4d22-9496-951c345bbb2d.roa Signing time: Sat 18 Oct 2025 18:43:55 +0000 ROA not before: Sat 18 Oct 2025 18:43:55 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.164.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:83:bb:64:e1:ee:42:5d:5c:01:1b:51:21:da:c0:f7:c0:5a:81:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 18:43:55 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=92b797ce229936ffc59a0c56592c257e00066409d2cd4cbcb24c6cdcd3317835, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:5b:3c:09:96:50:50:b7:ae:a7:8e:fc:fb:35: 94:30:fa:51:97:2d:44:b6:5c:b5:b6:dd:a6:c9:96: 6e:cc:e2:09:c4:b4:33:f3:cd:d6:f1:fe:96:27:c0: 58:ba:21:45:5e:48:fc:17:f8:a7:f4:78:5e:85:f5: 3d:48:ab:67:5f:b7:c0:0f:fa:63:47:ca:76:7b:9b: 73:5b:80:35:d5:11:39:54:41:26:36:b6:52:12:bd: 5f:cc:7d:ea:ea:61:ec:1e:2d:5f:e2:1a:44:0a:df: e6:f8:48:03:c3:9c:b8:a0:eb:80:14:e6:b9:22:dd: 73:c8:97:47:f3:a9:01:aa:c3:86:1a:2c:52:48:f0: 96:82:b0:72:dd:91:4c:88:92:da:32:d0:70:f5:e7: 0e:e2:31:bf:45:ff:6a:13:b0:fb:1c:ce:14:f3:a0: b8:e5:9f:cd:76:50:cd:9d:66:c8:f3:42:be:50:b7: 8a:f4:15:8f:a0:91:bc:1f:cc:81:65:4b:dc:e5:b1: e2:c5:48:2f:9b:be:bd:21:94:84:59:8c:a8:24:27: a7:bc:fc:a4:61:bc:ee:67:8b:b5:8b:54:a3:dc:37: ed:e3:e4:15:fb:55:3f:2d:fc:b6:96:2f:52:10:a6: a7:d5:89:62:b3:44:f3:00:9e:9f:68:b0:60:49:81: 83:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:50:72:CD:9D:04:07:CF:22:A9:FC:9F:16:71:56:9B:43:10:64:9F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/88b13338-29f2-4d22-9496-951c345bbb2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.164.72.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:d6:af:3b:3a:26:a3:15:ca:2c:f3:ce:05:ad:09:b5:4b:fb: 5f:eb:e1:be:47:dd:d9:94:70:76:3c:86:86:10:b0:61:4f:ef: 5f:b5:ee:7f:cc:6f:3c:cc:a0:65:1a:1a:be:29:86:e0:2e:7c: b4:ab:06:65:5a:f9:32:e0:33:17:c1:3c:de:06:df:e4:75:a1: 8b:eb:9d:dd:09:0b:b3:99:56:3e:46:8a:ec:9b:a8:4f:ef:10: d3:07:72:3e:08:9b:63:49:19:1d:af:ce:4b:ef:1f:cb:15:e0: 86:98:4a:2d:21:aa:42:7c:8b:06:79:96:91:f6:50:e5:b8:a6: e4:1c:89:c8:a1:f8:f4:1f:a4:e6:60:56:43:3a:58:0b:0c:20: 12:ee:75:3c:86:60:1c:b8:4d:59:7c:5b:d8:f9:4f:f8:59:4c: 48:ec:74:f1:fd:70:5b:1e:54:09:a9:7c:4e:77:22:ff:db:d0: b1:9e:34:a0:c5:89:69:99:e3:78:fc:51:1e:0e:52:a3:83:3e: 93:c8:f7:82:b1:93:b2:18:32:71:f2:76:98:72:f4:42:a3:75: be:2c:bd:85:d8:65:92:5d:b6:f5:8b:7e:1a:f3:f2:db:0a:4e: c4:27:dd:55:cd:19:14:96:a4:ce:a1:ed:89:49:f6:a7:84:d5: 02:c5:13:0f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUU4O7ZOHuQl1cARtRIdrA98BagXUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTg0MzU1WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A5MmI3OTdjZTIyOTkzNmZmYzU5YTBjNTY1OTJjMjU3ZTAw MDY2NDA5ZDJjZDRjYmNiMjRjNmNkY2QzMzE3ODM1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDOWzwJllBQt66njvz7NZQw+lGXLUS2XLW23abJlm7M4gnE tDPzzdbx/pYnwFi6IUVeSPwX+Kf0eF6F9T1Iq2dft8AP+mNHynZ7m3NbgDXVETlU QSY2tlISvV/MferqYeweLV/iGkQK3+b4SAPDnLig64AU5rki3XPIl0fzqQGqw4Ya LFJI8JaCsHLdkUyIktoy0HD15w7iMb9F/2oTsPsczhTzoLjln812UM2dZsjzQr5Q t4r0FY+gkbwfzIFlS9zlseLFSC+bvr0hlIRZjKgkJ6e8/KRhvO5ni7WLVKPcN+3j 5BX7VT8t/LaWL1IQpqfViWKzRPMAnp9osGBJgYOrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQURlByzZ0EB88iqfyfFnFWm0MQZJ8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzg4YjEzMzM4LTI5ZjItNGQyMi05NDk2LTk1MWMzNDViYmIyZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASpEgwDQYJKoZIhvcNAQELBQADggEBACvWrzs6JqMVyizzzgWtCbVL+1/r 4b5H3dmUcHY8hoYQsGFP71+17n/MbzzMoGUaGr4phuAufLSrBmVa+TLgMxfBPN4G 3+R1oYvrnd0JC7OZVj5GiuybqE/vENMHcj4Im2NJGR2vzkvvH8sV4IaYSi0hqkJ8 iwZ5lpH2UOW4puQcicih+PQfpOZgVkM6WAsMIBLudTyGYBy4TVl8W9j5T/hZTEjs dPH9cFseVAmpfE53Iv/b0LGeNKDFiWmZ43j8UR4OUqODPpPI94Kxk7IYMnHydphy 9EKjdb4svYXYZZJdtvWLfhrz8tsKTsQn3VXNGRSWpM6h7YlJ9qeE1QLFEw8= -----END CERTIFICATE-----Generated at Mon Oct 20 09:16:22 2025 by rpki-client