$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/96276718-eeb5-4687-a639-401a59b936f5.roa File: 96276718-eeb5-4687-a639-401a59b936f5.roa (raw, json) Hash identifier: RAC/J8XV6USn6DSvw9qc6UakYDeYiisHV5DtWGORYN0= Subject key identifier: B4:8D:A8:1B:54:61:A7:CB:46:01:8D:01:DE:44:15:D3:76:21:CA:BE Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 21FD456E7B4CF5536AD80A487DFE698BBC9D7D12 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/96276718-eeb5-4687-a639-401a59b936f5.roa Signing time: Sat 18 Oct 2025 20:42:37 +0000 ROA not before: Sat 18 Oct 2025 20:42:37 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.244.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:fd:45:6e:7b:4c:f5:53:6a:d8:0a:48:7d:fe:69:8b:bc:9d:7d:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 20:42:37 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=9039d36ba85971abd785b78f2bb8e7bcbd7867bd2a16acafebea69b30eb03685, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e3:17:70:fa:47:1a:16:5c:9c:f6:09:77:e4: 1c:2c:68:94:42:50:7c:ea:28:17:2b:2a:07:6d:36: 1c:34:4d:25:3f:b9:3b:68:4f:1d:1d:5a:21:4c:50: 16:4a:43:67:54:52:5f:8a:33:de:4f:c1:23:ad:d6: e1:7e:cf:28:ec:f4:30:e4:1d:d3:7f:c2:0c:d3:44: 04:50:a7:6c:e9:f2:65:66:92:8c:37:f0:9e:9f:6d: dc:41:ed:d9:3a:9a:44:de:76:2b:51:95:4c:4f:0a: 9f:ad:94:2d:85:d9:79:13:fe:53:22:9f:8e:15:08: a7:ba:fc:37:81:d3:96:c2:ad:9f:fa:8e:59:45:15: 80:e9:52:78:48:30:5c:89:2c:e3:c6:3d:72:1f:07: 56:29:43:6e:d8:cd:5b:27:89:bb:03:37:de:1c:e5: 18:e8:d7:2f:8c:3c:1c:ff:e2:b0:82:21:6f:a6:7d: 07:17:a8:fa:81:48:4d:0a:f8:0c:7d:53:4f:48:de: 0b:d8:36:7d:73:1a:af:d6:bb:f1:a4:db:71:d6:07: 21:75:2a:87:10:e1:ec:0a:b5:8c:44:54:bb:47:f4: 62:42:ba:e9:3c:e9:7f:ec:cd:b5:31:61:5b:cc:83: 82:1a:72:e9:5b:37:a5:6f:52:10:1c:cb:f9:b5:e1: 2b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:8D:A8:1B:54:61:A7:CB:46:01:8D:01:DE:44:15:D3:76:21:CA:BE X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/96276718-eeb5-4687-a639-401a59b936f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.244.96.0/21 Signature Algorithm: sha256WithRSAEncryption a6:67:61:b0:d3:50:01:26:3d:59:3e:92:97:d1:e6:9f:e2:10: ee:c6:f9:9f:7a:2c:c6:8a:d4:30:ed:2c:4c:40:bf:e9:72:69: e6:bb:96:84:62:7f:5f:d1:29:a6:28:66:f3:39:50:b5:04:de: 1c:39:d6:2b:ba:a7:bd:d2:10:ad:0b:29:57:94:43:e1:57:61: 20:39:e6:1d:cc:c4:08:ee:0e:21:f8:ca:5b:e4:77:01:3f:b1: e9:ca:0b:e2:b4:6d:55:05:a7:71:8f:ec:e5:c2:aa:b8:4a:84: 4e:35:d1:25:1a:8f:0f:91:3f:32:fa:9a:70:b7:ab:72:d6:d8: 0f:9d:b3:80:57:77:18:60:e9:18:8a:b5:47:b4:87:3d:c3:77: b1:1c:99:05:32:ea:d2:05:f4:56:a3:b8:9d:a8:81:0c:98:03: 1a:ae:02:71:df:85:b6:93:3b:37:c1:73:23:21:34:94:5a:99: 19:c7:78:0a:06:d6:60:86:85:bb:49:d2:8a:87:31:e2:18:ac: ec:71:04:79:6f:b0:dc:c9:1d:38:d7:72:4f:6c:02:bf:80:3d: 7f:c3:66:a4:85:44:87:b7:9c:c4:48:91:97:b2:c9:c2:00:ff: bf:b9:04:2d:e9:ec:f2:d6:72:c4:dc:09:6d:9b:48:75:e6:d8: 36:e1:26:e4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIf1FbntM9VNq2ApIff5pi7ydfRIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MjA0MjM3WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A5MDM5ZDM2YmE4NTk3MWFiZDc4NWI3OGYyYmI4ZTdiY2Jk Nzg2N2JkMmExNmFjYWZlYmVhNjliMzBlYjAzNjg1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCp4xdw+kcaFlyc9gl35BwsaJRCUHzqKBcrKgdtNhw0TSU/ uTtoTx0dWiFMUBZKQ2dUUl+KM95PwSOt1uF+zyjs9DDkHdN/wgzTRARQp2zp8mVm kow38J6fbdxB7dk6mkTeditRlUxPCp+tlC2F2XkT/lMin44VCKe6/DeB05bCrZ/6 jllFFYDpUnhIMFyJLOPGPXIfB1YpQ27YzVsnibsDN94c5Rjo1y+MPBz/4rCCIW+m fQcXqPqBSE0K+Ax9U09I3gvYNn1zGq/Wu/Gk23HWByF1KocQ4ewKtYxEVLtH9GJC uuk86X/szbUxYVvMg4IaculbN6VvUhAcy/m14SszAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUtI2oG1Rhp8tGAY0B3kQV03Yhyr4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzk2Mjc2NzE4LWVlYjUtNDY4Ny1hNjM5LTQwMWE1OWI5MzZmNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMS9GAwDQYJKoZIhvcNAQELBQADggEBAKZnYbDTUAEmPVk+kpfR5p/iEO7G +Z96LMaK1DDtLExAv+lyaea7loRif1/RKaYoZvM5ULUE3hw51iu6p73SEK0LKVeU Q+FXYSA55h3MxAjuDiH4ylvkdwE/senKC+K0bVUFp3GP7OXCqrhKhE410SUajw+R PzL6mnC3q3LW2A+ds4BXdxhg6RiKtUe0hz3Dd7EcmQUy6tIF9FajuJ2ogQyYAxqu AnHfhbaTOzfBcyMhNJRamRnHeAoG1mCGhbtJ0oqHMeIYrOxxBHlvsNzJHTjXck9s Ar+APX/DZqSFRIe3nMRIkZeyycIA/7+5BC3p7PLWcsTcCW2bSHXm2DbhJuQ= -----END CERTIFICATE-----Generated at Mon Oct 20 03:02:42 2025 by rpki-client