$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8feae47b-19d1-4853-9b4e-eb91ade4aa2d.roa File: 8feae47b-19d1-4853-9b4e-eb91ade4aa2d.roa (raw, json) Hash identifier: xxbyHUony8xW7+FmC4AzjIgBE+wtQZQLUInUx8nKWg8= Subject key identifier: 96:35:E5:91:BC:87:86:45:7C:49:86:95:80:47:88:6F:96:96:67:BE Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7C00DD64212C28B700681486A55733524AFBD5E0 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8feae47b-19d1-4853-9b4e-eb91ade4aa2d.roa Signing time: Sat 18 Oct 2025 14:03:44 +0000 ROA not before: Sat 18 Oct 2025 14:03:44 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.239.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:00:dd:64:21:2c:28:b7:00:68:14:86:a5:57:33:52:4a:fb:d5:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 14:03:44 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=4972a3536eb29d9e15a5b4d4caede4bf3f7a1ee94cff7b167928144af9f9a822, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:72:a3:94:96:75:af:09:f4:75:b2:5f:48:c7: 29:da:c3:08:db:80:1a:1e:07:41:3f:fb:39:f8:e2: 13:25:cb:47:e6:97:7d:17:69:7e:f0:f9:66:21:9e: f2:65:aa:d4:23:82:d9:1e:4b:23:f8:f1:80:8b:8f: d3:3d:83:97:da:85:e0:48:8b:13:4a:c0:80:03:15: c5:5e:6b:9c:91:b9:b9:f2:e7:11:39:4a:5e:35:41: a6:0d:13:b8:1e:ae:4c:c4:6a:3d:93:7b:db:08:2e: a4:06:07:13:b7:16:1a:fb:95:a3:9c:c8:e3:d3:2a: cf:6e:71:92:cd:c7:b0:22:92:14:7c:19:68:04:6d: 43:89:8c:bb:fe:af:c0:66:99:af:9a:0d:ec:5b:5d: c7:ba:bb:fb:f1:7d:58:9c:53:18:d0:ad:77:3e:cd: 98:35:7d:ce:18:34:5f:6a:b3:53:0c:56:4d:f4:2d: b8:11:f7:da:88:47:2a:45:73:3f:56:b6:b8:98:56: 40:86:d0:51:76:38:c9:e6:36:90:0c:0b:5e:47:a6: c3:f5:e2:25:6e:ca:bb:62:10:10:18:78:93:3c:92: af:42:02:30:c7:6d:85:2a:89:43:cc:38:c9:97:89: f8:53:6b:50:b5:83:52:c6:32:6d:c5:36:8a:96:41: 81:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:35:E5:91:BC:87:86:45:7C:49:86:95:80:47:88:6F:96:96:67:BE X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8feae47b-19d1-4853-9b4e-eb91ade4aa2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.239.80.0/20 Signature Algorithm: sha256WithRSAEncryption 65:51:6e:74:a4:1f:bc:69:9d:8c:74:ea:d0:7d:25:a3:a3:0f: 25:cd:98:51:c5:16:04:a8:f2:3f:be:e2:cf:ee:cc:10:c6:65: 44:2d:79:2a:aa:6a:44:18:b2:4b:a0:0d:06:36:ff:74:ba:cd: fb:fd:75:80:fb:2d:e8:c2:13:1e:13:d4:30:ee:fc:2c:9d:4e: fb:da:99:dd:a2:67:19:80:5c:a2:fc:e9:7f:8a:53:d4:6d:fb: 18:37:40:ac:bb:17:b9:10:3e:47:89:f8:0b:90:5c:9c:db:14: 81:d1:ca:27:35:60:57:05:d3:96:d2:97:49:c7:1f:4e:60:9e: 80:b5:a4:16:82:37:19:7a:92:f0:7c:8a:dc:da:d9:31:a8:99: 95:d3:74:1b:1d:e8:51:ae:d5:4a:60:3e:d7:47:43:ae:4a:12: cd:8d:07:4d:6a:10:8f:3a:68:e2:8d:d3:2e:9f:b3:fb:6e:41: 06:48:a5:52:b0:4e:1f:03:69:6e:b6:e3:ac:3e:78:06:36:5a: d9:1e:60:fb:2c:f7:94:a2:6d:dc:50:15:e4:ab:36:b2:ce:af: 7c:fe:47:b8:a1:46:5a:f8:8f:33:b2:7a:21:29:e1:db:95:92: 0e:d3:25:6e:bb:d7:3c:4c:57:36:a6:06:0b:7d:64:1b:93:ab: 41:6b:cd:83 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfADdZCEsKLcAaBSGpVczUkr71eAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTQwMzQ0WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A0OTcyYTM1MzZlYjI5ZDllMTVhNWI0ZDRjYWVkZTRiZjNm N2ExZWU5NGNmZjdiMTY3OTI4MTQ0YWY5ZjlhODIyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCucqOUlnWvCfR1sl9IxynawwjbgBoeB0E/+zn44hMly0fm l30XaX7w+WYhnvJlqtQjgtkeSyP48YCLj9M9g5faheBIixNKwIADFcVea5yRubny 5xE5Sl41QaYNE7gerkzEaj2Te9sILqQGBxO3Fhr7laOcyOPTKs9ucZLNx7AikhR8 GWgEbUOJjLv+r8Bmma+aDexbXce6u/vxfVicUxjQrXc+zZg1fc4YNF9qs1MMVk30 LbgR99qIRypFcz9WtriYVkCG0FF2OMnmNpAMC15HpsP14iVuyrtiEBAYeJM8kq9C AjDHbYUqiUPMOMmXifhTa1C1g1LGMm3FNoqWQYFBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUljXlkbyHhkV8SYaVgEeIb5aWZ74wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzhmZWFlNDdiLTE5ZDEtNDg1My05YjRlLWViOTFhZGU0YWEyZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQS71AwDQYJKoZIhvcNAQELBQADggEBAGVRbnSkH7xpnYx06tB9JaOjDyXN mFHFFgSo8j++4s/uzBDGZUQteSqqakQYskugDQY2/3S6zfv9dYD7LejCEx4T1DDu /CydTvvamd2iZxmAXKL86X+KU9Rt+xg3QKy7F7kQPkeJ+AuQXJzbFIHRyic1YFcF 05bSl0nHH05gnoC1pBaCNxl6kvB8itza2TGomZXTdBsd6FGu1UpgPtdHQ65KEs2N B01qEI86aOKN0y6fs/tuQQZIpVKwTh8DaW6246w+eAY2WtkeYPss95SibdxQFeSr NrLOr3z+R7ihRlr4jzOyeiEp4duVkg7TJW671zxMVzamBgt9ZBuTq0FrzYM= -----END CERTIFICATE-----Generated at Mon Oct 20 02:59:05 2025 by rpki-client