$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/91a47fdc-052d-4786-9a14-2f4609d1a023.roa File: 91a47fdc-052d-4786-9a14-2f4609d1a023.roa (raw, json) Hash identifier: 6+HMMFsj7QVTXouQUMeTgMbNZRp+p4xmr3Ji71Xtc6M= Subject key identifier: E6:70:EB:EC:BB:25:BE:AF:44:D5:81:60:FF:18:7F:DA:DA:CC:43:23 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6328E3620CA408279D0B53322174E636F00CBADA Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/91a47fdc-052d-4786-9a14-2f4609d1a023.roa Signing time: Sun 19 Oct 2025 11:42:42 +0000 ROA not before: Sun 19 Oct 2025 11:42:42 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.67.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:28:e3:62:0c:a4:08:27:9d:0b:53:32:21:74:e6:36:f0:0c:ba:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 11:42:42 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=0d7846ef7ff78bb8cdea4999cd27ee29e6f0d411522fed86159d6763bae9c4ea, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9c:ae:86:73:5a:7e:86:4c:c9:9f:4e:99:ad: b8:61:22:a4:de:02:20:bd:57:88:c8:74:50:1f:4c: dc:a3:ce:d0:98:5c:4d:96:92:5f:16:32:82:61:55: 58:70:83:29:3b:3d:be:16:01:74:4a:8e:8a:1c:28: 81:ea:9d:a8:53:46:59:29:89:c2:77:4c:cd:d4:03: 96:b4:da:70:4f:93:c7:5a:d5:0a:0f:f1:ce:92:a0: 6b:40:2d:70:80:71:fc:af:89:52:47:e6:75:f1:1d: ee:51:e0:cf:7f:96:13:48:9b:b8:cd:c1:f3:2f:48: 2a:a1:8b:68:eb:52:29:b2:58:fe:6a:a9:24:dc:5c: a1:f6:76:38:f0:e8:2a:a6:53:f5:af:50:9f:9f:da: c4:f5:a7:50:67:e4:bb:b0:23:3f:26:c0:ea:0b:4c: 6e:0b:e1:50:2a:be:fe:84:5a:d3:56:2c:74:bf:84: 26:d8:34:af:4b:e3:36:00:4c:d3:f1:bd:ef:7f:7b: 70:e7:63:6f:c2:da:55:46:1f:26:af:a9:9f:d2:9e: 47:87:fc:dc:1c:60:6b:ef:6d:ad:0f:6a:72:40:61: 6a:1e:3d:6d:e0:60:d7:57:93:38:e2:f1:de:ff:1f: 3c:31:ff:69:6d:c5:51:db:8b:31:57:3d:07:a5:e1: c0:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:70:EB:EC:BB:25:BE:AF:44:D5:81:60:FF:18:7F:DA:DA:CC:43:23 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/91a47fdc-052d-4786-9a14-2f4609d1a023.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.67.0.0/16 Signature Algorithm: sha256WithRSAEncryption 49:4e:02:bf:a5:28:91:d4:5a:2a:c2:60:e2:85:50:7e:71:b9: 6f:e4:0f:d2:ec:f5:f8:02:24:5b:07:4e:26:70:6a:71:bd:19: 80:ca:4f:8f:a2:84:a3:c7:d0:1e:b6:f3:72:83:65:2f:97:94: 70:12:da:60:1f:aa:f5:e4:aa:40:56:94:a6:4e:10:83:03:bd: 69:d8:54:ca:af:ce:7d:f3:76:64:67:ca:64:35:bf:8e:00:ed: 88:66:f6:40:67:73:9e:65:f4:3d:88:03:37:0b:69:56:58:8b: 1c:0f:08:59:42:ce:fc:94:23:1a:f6:14:81:f3:89:d4:b1:e7: 45:c2:db:66:dc:89:2c:ba:02:bd:1c:fa:95:a4:0b:79:3f:fc: b6:1c:e5:00:41:4e:cf:7c:94:65:b6:44:fc:c8:14:1c:be:3b: 6d:a3:8d:42:d6:47:b1:73:b4:e3:09:79:10:c4:08:c5:22:21: 51:08:e3:73:fb:13:6a:ef:65:cf:fd:5c:18:9b:75:69:9c:e3: 46:c5:db:5b:e1:ed:18:1b:ee:98:9c:b1:d0:37:b9:8e:f7:db: c9:e0:b0:e3:54:d5:0c:b4:f3:5f:e0:bb:ed:87:22:7c:ed:c9: 16:c6:ae:98:81:b6:03:c9:c7:9f:48:a2:61:18:bf:77:b4:82: 47:c1:2b:0a -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUYyjjYgykCCedC1MyIXTmNvAMutowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTE0MjQyWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AwZDc4NDZlZjdmZjc4YmI4Y2RlYTQ5OTljZDI3ZWUyOWU2 ZjBkNDExNTIyZmVkODYxNTlkNjc2M2JhZTljNGVhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCmnK6Gc1p+hkzJn06ZrbhhIqTeAiC9V4jIdFAfTNyjztCY XE2Wkl8WMoJhVVhwgyk7Pb4WAXRKjoocKIHqnahTRlkpicJ3TM3UA5a02nBPk8da 1QoP8c6SoGtALXCAcfyviVJH5nXxHe5R4M9/lhNIm7jNwfMvSCqhi2jrUimyWP5q qSTcXKH2djjw6CqmU/WvUJ+f2sT1p1Bn5LuwIz8mwOoLTG4L4VAqvv6EWtNWLHS/ hCbYNK9L4zYATNPxve9/e3DnY2/C2lVGHyavqZ/SnkeH/NwcYGvvba0PanJAYWoe PW3gYNdXkzji8d7/Hzwx/2ltxVHbizFXPQel4cAvAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU5nDr7Lslvq9E1YFg/xh/2trMQyMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzkxYTQ3ZmRjLTA1MmQtNDc4Ni05YTE0LTJmNDYwOWQxYTAyMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwASQzANBgkqhkiG9w0BAQsFAAOCAQEASU4Cv6UokdRaKsJg4oVQfnG5b+QP 0uz1+AIkWwdOJnBqcb0ZgMpPj6KEo8fQHrbzcoNlL5eUcBLaYB+q9eSqQFaUpk4Q gwO9adhUyq/OffN2ZGfKZDW/jgDtiGb2QGdznmX0PYgDNwtpVliLHA8IWULO/JQj GvYUgfOJ1LHnRcLbZtyJLLoCvRz6laQLeT/8thzlAEFOz3yUZbZE/MgUHL47baON QtZHsXO04wl5EMQIxSIhUQjjc/sTau9lz/1cGJt1aZzjRsXbW+HtGBvumJyx0De5 jvfbyeCw41TVDLTzX+C77YcifO3JFsaumIG2A8nHn0iiYRi/d7SCR8ErCg== -----END CERTIFICATE-----Generated at Mon Oct 20 06:07:13 2025 by rpki-client