$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/91c4759a-70ca-4ab0-a6c0-dd4aabf1652b.roa File: 91c4759a-70ca-4ab0-a6c0-dd4aabf1652b.roa (raw, json) Hash identifier: LRdapOX5Hgg6b1SC1N6icGRGkm0DjmhXwo871xlHfHE= Subject key identifier: E4:D0:07:98:1C:BE:48:DC:94:A7:42:D8:88:7F:00:CD:0C:63:84:9B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 011CA5BE4C3B93615C2EA78F436B71480A8D6CE0 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/91c4759a-70ca-4ab0-a6c0-dd4aabf1652b.roa Signing time: Sat 18 Oct 2025 22:22:36 +0000 ROA not before: Sat 18 Oct 2025 22:22:36 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.238.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:1c:a5:be:4c:3b:93:61:5c:2e:a7:8f:43:6b:71:48:0a:8d:6c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 22:22:36 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=f7833911a1849dc6a346759a216ca2f738faf34edee92eb7f38e7ecd6c398780, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f0:1e:02:92:5e:a4:26:00:5e:16:34:71:cd: 3e:f0:f9:f7:c9:45:e0:79:94:63:39:0a:84:2d:b4: 3e:eb:0f:83:77:a5:28:c0:c2:bb:ae:e5:2c:58:32: 81:09:a2:7a:71:a3:ae:71:d9:c0:85:c5:18:da:c3: a3:46:4c:33:15:25:3d:f9:33:25:10:84:4f:90:09: 74:6a:ab:b2:88:b9:8f:70:08:71:f7:35:64:ec:2c: 9d:19:f4:83:04:75:16:d3:0c:92:62:5b:0a:7d:f1: db:5c:a9:72:9c:2f:55:68:38:79:d6:1a:63:b3:e1: 44:02:82:84:6b:e6:e2:e3:7b:eb:03:67:3b:ff:de: 7d:9b:be:b8:02:43:af:4e:59:be:65:4a:5a:d5:5f: 62:39:09:3c:a1:22:f4:0a:33:1e:25:2b:a8:1a:7c: 5b:86:f4:95:5a:cc:00:a4:ed:4a:de:39:7c:09:49: 3b:5a:fd:a2:d2:bd:8b:c8:c8:bb:a5:9e:a5:70:f2: b9:fb:70:37:d6:aa:a8:03:2b:dc:54:67:b3:e1:cf: ba:d0:73:c7:c5:0b:10:69:ca:66:52:5c:c6:3d:74: 96:25:71:2d:6c:ca:21:a9:65:6d:4e:9b:5d:2c:04: da:0f:fa:60:6e:b2:fe:9a:06:8b:eb:65:fd:61:43: 11:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:D0:07:98:1C:BE:48:DC:94:A7:42:D8:88:7F:00:CD:0C:63:84:9B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/91c4759a-70ca-4ab0-a6c0-dd4aabf1652b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.238.88.0/21 Signature Algorithm: sha256WithRSAEncryption ac:1e:0f:90:b7:6b:97:2a:04:f3:25:98:44:41:65:f1:c0:75: 3b:bb:07:8f:21:e0:6a:63:1f:52:bf:96:83:b1:c4:d1:01:e5: eb:fa:56:1e:fd:c4:8e:7b:33:d6:3e:5a:3b:1a:e9:96:a3:6d: cb:42:97:ce:14:e0:5d:14:f0:c1:02:3d:c9:22:5c:b8:f8:42: 85:a1:29:f3:4a:31:ee:bf:86:54:7c:bf:e5:e7:3a:18:72:2a: cb:19:9b:25:66:be:59:a8:cc:f5:c9:d8:bf:90:54:60:5a:a2: 38:12:e4:4d:2e:ef:11:f6:a3:6f:94:f4:cf:47:d5:61:4c:f5: 07:d9:80:01:be:c6:bf:b4:a4:c9:c3:6d:cf:6b:e1:9d:7d:f6: e6:f7:9d:ff:51:db:13:fb:21:49:ae:03:e1:3b:cd:fd:e4:00: b5:13:ed:a0:25:f2:bd:d3:06:54:1e:16:c8:d3:7c:6c:b0:7e: 09:b3:ac:53:89:f7:38:db:44:18:90:ef:99:ef:9c:6f:6d:b4: 06:09:e2:d3:97:ae:18:9e:aa:1c:5b:99:45:2f:4e:c2:58:ba: 79:b7:e0:cc:46:b5:74:79:9a:0d:4e:3a:ad:72:c2:04:d6:24: 0b:b5:9c:03:ba:15:e0:ab:86:e9:48:88:4a:31:26:b4:4e:41: 2f:d2:b9:f2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUARylvkw7k2FcLqePQ2txSAqNbOAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MjIyMjM2WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BmNzgzMzkxMWExODQ5ZGM2YTM0Njc1OWEyMTZjYTJmNzM4 ZmFmMzRlZGVlOTJlYjdmMzhlN2VjZDZjMzk4NzgwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCr8B4Ckl6kJgBeFjRxzT7w+ffJReB5lGM5CoQttD7rD4N3 pSjAwruu5SxYMoEJonpxo65x2cCFxRjaw6NGTDMVJT35MyUQhE+QCXRqq7KIuY9w CHH3NWTsLJ0Z9IMEdRbTDJJiWwp98dtcqXKcL1VoOHnWGmOz4UQCgoRr5uLje+sD Zzv/3n2bvrgCQ69OWb5lSlrVX2I5CTyhIvQKMx4lK6gafFuG9JVazACk7UreOXwJ STta/aLSvYvIyLulnqVw8rn7cDfWqqgDK9xUZ7Phz7rQc8fFCxBpymZSXMY9dJYl cS1syiGpZW1Om10sBNoP+mBusv6aBovrZf1hQxETAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU5NAHmBy+SNyUp0LYiH8AzQxjhJswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzkxYzQ3NTlhLTcwY2EtNGFiMC1hNmMwLWRkNGFhYmYxNjUyYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMS7lgwDQYJKoZIhvcNAQELBQADggEBAKweD5C3a5cqBPMlmERBZfHAdTu7 B48h4GpjH1K/loOxxNEB5ev6Vh79xI57M9Y+Wjsa6ZajbctCl84U4F0U8MECPcki XLj4QoWhKfNKMe6/hlR8v+XnOhhyKssZmyVmvlmozPXJ2L+QVGBaojgS5E0u7xH2 o2+U9M9H1WFM9QfZgAG+xr+0pMnDbc9r4Z199ub3nf9R2xP7IUmuA+E7zf3kALUT 7aAl8r3TBlQeFsjTfGywfgmzrFOJ9zjbRBiQ75nvnG9ttAYJ4tOXrhieqhxbmUUv TsJYunm34MxGtXR5mg1OOq1ywgTWJAu1nAO6FeCrhulIiEoxJrROQS/SufI= -----END CERTIFICATE-----Generated at Mon Oct 20 21:12:31 2025 by rpki-client