$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/89e4ecd7-9f8f-47a3-8f80-9fd09676773f.roa File: 89e4ecd7-9f8f-47a3-8f80-9fd09676773f.roa (raw, json) Hash identifier: HacwbrmYTFFb0kFW4VrGKwF/GXBTwCa014uLdTSUX4w= Subject key identifier: BA:63:76:7D:88:DE:8B:6C:9B:FB:59:87:BA:90:F7:DB:BA:F5:58:0D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 299B3BB7090121EB214090736F70415B062FFAB6 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/89e4ecd7-9f8f-47a3-8f80-9fd09676773f.roa Signing time: Sat 18 Oct 2025 11:22:11 +0000 ROA not before: Sat 18 Oct 2025 11:22:11 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.160.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:9b:3b:b7:09:01:21:eb:21:40:90:73:6f:70:41:5b:06:2f:fa:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 11:22:11 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=c5cc8fc64b47ab9eeb176c6dac137978175adac70e84e9833f5de07402232aae, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:2b:42:0d:8f:54:c5:ff:06:8c:30:90:92:6b: b1:b0:d7:6b:95:cd:ce:2a:c9:6d:4b:1d:06:b4:dc: 07:af:a6:f2:59:34:3d:d3:e4:bf:9a:94:5b:a2:11: e5:29:4d:dc:ed:be:00:68:20:cc:8c:46:32:7c:cf: 11:aa:d4:bf:42:cd:ed:25:4d:7d:b8:2b:fd:44:18: f3:3c:16:1d:ea:62:cb:02:36:0d:63:6d:2e:78:7e: 13:40:a0:44:c5:92:a0:05:84:57:d7:04:2a:da:83: a9:2a:80:01:6a:a9:22:28:1c:5a:27:7c:f5:0e:ec: 64:6c:90:27:50:6a:eb:3a:a1:ad:d2:76:ad:ea:9c: 7c:0b:f7:fb:db:09:04:b5:9d:98:bb:29:1a:47:38: a6:23:41:2a:9e:8b:58:61:81:fe:93:3d:c4:ba:9a: bc:3a:56:e3:47:44:ae:29:a0:7b:7c:46:f6:33:38: ac:40:72:63:6b:4d:73:2a:73:95:d4:f8:ec:4b:58: 1a:ec:66:24:c2:8c:78:11:83:0e:b2:49:e9:0c:33: 87:dc:44:43:5e:a9:f2:b6:df:8e:0f:d6:2d:14:6c: 61:24:3c:d8:4d:bf:c0:c3:cf:0a:c3:94:35:e0:de: 13:c5:9b:dd:f3:17:94:cc:b6:66:61:c6:6a:88:d4: 78:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:63:76:7D:88:DE:8B:6C:9B:FB:59:87:BA:90:F7:DB:BA:F5:58:0D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/89e4ecd7-9f8f-47a3-8f80-9fd09676773f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.160.99.0/24 Signature Algorithm: sha256WithRSAEncryption 93:18:2e:87:fd:5d:ac:c9:2e:72:7a:00:be:7c:1e:df:17:9e: 8a:c7:8e:62:b5:5a:28:e4:cb:41:11:69:b3:dd:16:dd:33:0f: 88:ef:9a:19:54:31:87:18:aa:41:c2:35:59:0d:12:67:5d:53: d2:db:80:51:f3:4d:52:f8:44:ce:9c:4f:a6:fa:04:1c:3c:d0: 15:75:b1:48:22:30:02:0f:d1:6f:f0:b3:76:19:a3:a5:c1:72: 12:76:0c:55:bc:20:ab:eb:87:6e:b6:27:15:10:d2:eb:ea:3d: 05:cb:12:85:af:4f:70:54:5c:2b:6d:87:e8:9c:ba:f8:70:55: 30:8b:3e:7a:35:94:06:92:d5:b9:62:7c:f5:3d:04:2b:1d:97: 00:19:05:9f:c9:48:19:ee:0a:08:40:88:51:96:0d:5e:b0:35: 0f:fb:0b:97:33:c8:f6:49:4b:4b:0d:ad:c7:ab:f4:cd:b6:05: c3:29:08:5c:64:5d:0d:72:22:a6:72:99:6c:19:fd:ad:4f:c7: 93:5f:f6:86:73:dc:21:01:5a:80:19:5b:7f:dd:cc:e1:94:4b: 94:d9:31:87:0b:d3:80:d6:1f:86:79:34:9b:37:46:81:34:1b: 0e:04:67:7d:ff:d4:ed:3b:64:b5:b5:cf:f2:46:7e:02:6e:de: 20:b2:2e:b6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKZs7twkBIeshQJBzb3BBWwYv+rYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTEyMjExWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BjNWNjOGZjNjRiNDdhYjllZWIxNzZjNmRhYzEzNzk3ODE3 NWFkYWM3MGU4NGU5ODMzZjVkZTA3NDAyMjMyYWFlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCLK0INj1TF/waMMJCSa7Gw12uVzc4qyW1LHQa03AevpvJZ ND3T5L+alFuiEeUpTdztvgBoIMyMRjJ8zxGq1L9Cze0lTX24K/1EGPM8Fh3qYssC Ng1jbS54fhNAoETFkqAFhFfXBCrag6kqgAFqqSIoHFonfPUO7GRskCdQaus6oa3S dq3qnHwL9/vbCQS1nZi7KRpHOKYjQSqei1hhgf6TPcS6mrw6VuNHRK4poHt8RvYz OKxAcmNrTXMqc5XU+OxLWBrsZiTCjHgRgw6ySekMM4fcRENeqfK2344P1i0UbGEk PNhNv8DDzwrDlDXg3hPFm93zF5TMtmZhxmqI1HgjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUumN2fYjei2yb+1mHupD327r1WA0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzg5ZTRlY2Q3LTlmOGYtNDdhMy04ZjgwLTlmZDA5Njc2NzczZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASoGMwDQYJKoZIhvcNAQELBQADggEBAJMYLof9XazJLnJ6AL58Ht8XnorH jmK1Wijky0ERabPdFt0zD4jvmhlUMYcYqkHCNVkNEmddU9LbgFHzTVL4RM6cT6b6 BBw80BV1sUgiMAIP0W/ws3YZo6XBchJ2DFW8IKvrh262JxUQ0uvqPQXLEoWvT3BU XCtth+icuvhwVTCLPno1lAaS1blifPU9BCsdlwAZBZ/JSBnuCghAiFGWDV6wNQ/7 C5czyPZJS0sNrcer9M22BcMpCFxkXQ1yIqZymWwZ/a1Px5Nf9oZz3CEBWoAZW3/d zOGUS5TZMYcL04DWH4Z5NJs3RoE0Gw4EZ33/1O07ZLW1z/JGfgJu3iCyLrY= -----END CERTIFICATE-----Generated at Mon Oct 20 05:17:10 2025 by rpki-client