$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/91655631-45a8-48b0-addf-52ab2c3fe938.roa File: 91655631-45a8-48b0-addf-52ab2c3fe938.roa (raw, json) Hash identifier: rpZkO9fWiqE9W6Zk2kr+kyfYmqNchMkZT1qL7CJSmUY= Subject key identifier: A7:B1:2A:00:94:61:FA:2E:02:27:79:E1:34:1A:CD:DC:1B:81:5D:9D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 53CC1DD269894B531408A3B699F1D711F46BB976 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/91655631-45a8-48b0-addf-52ab2c3fe938.roa Signing time: Sat 18 Oct 2025 16:31:32 +0000 ROA not before: Sat 18 Oct 2025 16:31:32 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.165.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:cc:1d:d2:69:89:4b:53:14:08:a3:b6:99:f1:d7:11:f4:6b:b9:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 16:31:32 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=068a5ca687c1616869845f0b34d4ad67672113e0134ab5e1eb44aa1ac7522718, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0d:4d:46:18:d7:b6:b3:61:a8:cc:d6:da:23: 37:90:72:87:71:72:b3:f7:c8:26:55:bd:12:b6:f6: 44:8e:f3:c2:bd:d2:7b:61:30:ff:be:1f:83:8e:04: 5d:bc:3a:3f:8e:36:65:11:c7:02:97:e3:0f:63:e8: a4:95:36:c4:a3:44:7b:2c:fc:4b:72:88:16:c6:f6: 21:c2:57:a3:54:8e:2c:14:78:c0:4e:63:3c:e1:18: 32:4d:1b:43:0d:d4:01:cb:65:55:45:b4:c2:90:7f: 60:50:37:97:ac:7b:25:54:51:85:30:8d:96:ba:ba: 75:1f:03:97:41:38:8a:bd:ff:80:45:c8:64:38:f6: a8:e8:54:b8:dd:ce:d2:56:a5:53:91:8c:5d:03:72: 84:91:5c:c2:bf:0a:c9:81:6d:f2:72:ac:e3:1f:09: f4:17:50:76:67:87:66:eb:b3:46:5e:06:e4:9f:cc: a8:4f:b5:ff:60:9d:77:8d:fd:95:3e:58:2e:1a:54: b2:cd:d4:d2:fe:12:b8:ce:33:64:e1:9b:d6:1a:ba: b8:2a:df:00:eb:fa:5b:7c:6a:b6:7d:09:9d:5f:1a: 4a:f4:2e:a1:50:b1:1d:81:02:3f:5f:64:64:46:3c: b9:82:6e:ac:6d:73:3b:29:f7:fb:8e:ef:f1:e7:2b: 57:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:B1:2A:00:94:61:FA:2E:02:27:79:E1:34:1A:CD:DC:1B:81:5D:9D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/91655631-45a8-48b0-addf-52ab2c3fe938.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.165.152.0/21 Signature Algorithm: sha256WithRSAEncryption 01:76:74:b2:db:bb:1e:6c:ac:da:de:d6:d3:49:6f:72:8f:93: 3e:b3:f7:03:0b:da:06:6e:12:93:d8:ad:3d:ac:e3:48:be:25: 09:58:19:04:d8:40:d9:a6:1d:92:33:05:2d:55:a9:0f:cd:d8: 3b:d6:85:8a:34:39:bb:36:2e:81:3f:31:a2:2e:82:64:7d:43: 07:68:ac:c8:88:8d:45:46:a0:00:39:e4:d7:a4:75:6c:e5:e2: 43:91:61:42:b6:70:72:17:11:c8:68:74:37:62:69:bf:11:e6: aa:46:d6:cc:c4:c1:cf:d2:e9:6a:5f:d9:32:54:94:dd:8a:6a: b4:db:fe:c0:82:e3:f7:f7:57:4f:04:8e:ee:84:14:da:e5:1f: 21:2d:9e:ac:e3:1b:67:d4:5c:1c:f3:bb:d5:58:af:ab:25:96: 39:e6:31:1d:39:24:c3:c0:eb:48:de:5e:e6:e6:98:d7:2c:a1: 3f:78:3c:58:c5:8c:9a:b3:be:c5:eb:be:21:ab:9a:6a:04:90: 50:24:8e:10:0d:ac:39:c6:4b:82:31:97:7d:ba:ce:31:85:67: 8b:e7:62:2f:ba:f8:8f:09:34:bd:3a:94:8e:92:68:eb:fe:c8: 57:30:c2:86:45:cb:94:f1:41:c4:17:45:0e:31:64:98:76:8e: 5b:2b:af:f6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUU8wd0mmJS1MUCKO2mfHXEfRruXYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTYzMTMyWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AwNjhhNWNhNjg3YzE2MTY4Njk4NDVmMGIzNGQ0YWQ2NzY3 MjExM2UwMTM0YWI1ZTFlYjQ0YWExYWM3NTIyNzE4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyDU1GGNe2s2GozNbaIzeQcodxcrP3yCZVvRK29kSO88K9 0nthMP++H4OOBF28Oj+ONmURxwKX4w9j6KSVNsSjRHss/EtyiBbG9iHCV6NUjiwU eMBOYzzhGDJNG0MN1AHLZVVFtMKQf2BQN5eseyVUUYUwjZa6unUfA5dBOIq9/4BF yGQ49qjoVLjdztJWpVORjF0DcoSRXMK/CsmBbfJyrOMfCfQXUHZnh2brs0ZeBuSf zKhPtf9gnXeN/ZU+WC4aVLLN1NL+ErjOM2Thm9Yaurgq3wDr+lt8arZ9CZ1fGkr0 LqFQsR2BAj9fZGRGPLmCbqxtczsp9/uO7/HnK1cXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUp7EqAJRh+i4CJ3nhNBrN3BuBXZ0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzkxNjU1NjMxLTQ1YTgtNDhiMC1hZGRmLTUyYWIyYzNmZTkzOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMSpZgwDQYJKoZIhvcNAQELBQADggEBAAF2dLLbux5srNre1tNJb3KPkz6z 9wML2gZuEpPYrT2s40i+JQlYGQTYQNmmHZIzBS1VqQ/N2DvWhYo0Obs2LoE/MaIu gmR9QwdorMiIjUVGoAA55NekdWzl4kORYUK2cHIXEchodDdiab8R5qpG1szEwc/S 6Wpf2TJUlN2KarTb/sCC4/f3V08Eju6EFNrlHyEtnqzjG2fUXBzzu9VYr6slljnm MR05JMPA60jeXubmmNcsoT94PFjFjJqzvsXrviGrmmoEkFAkjhANrDnGS4Ixl326 zjGFZ4vnYi+6+I8JNL06lI6SaOv+yFcwwoZFy5TxQcQXRQ4xZJh2jlsrr/Y= -----END CERTIFICATE-----Generated at Mon Oct 20 11:55:17 2025 by rpki-client