$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/96ded1d3-7e6e-4eb4-8544-9b55323ce9b6.roa File: 96ded1d3-7e6e-4eb4-8544-9b55323ce9b6.roa (raw, json) Hash identifier: AOcJrQu9fT+LyoimgWXAtiXJI7SNxevZZ1D+SkhEq04= Subject key identifier: C2:7E:29:1B:75:7E:E2:FF:38:CC:96:CD:22:87:B1:9A:1A:63:A3:79 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6B3E2665EAD40FEAF5FE2D973FC924F5D79C1AF2 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/96ded1d3-7e6e-4eb4-8544-9b55323ce9b6.roa Signing time: Sat 18 Oct 2025 11:30:21 +0000 ROA not before: Sat 18 Oct 2025 11:30:21 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.245.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:3e:26:65:ea:d4:0f:ea:f5:fe:2d:97:3f:c9:24:f5:d7:9c:1a:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 11:30:21 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=a0ffa5045ce416516111b295d8ef4a855fe494da1f94f453e988f3111ed26954, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:78:ad:3e:ec:fb:cd:78:7d:c1:ab:19:9e:f8: 81:b5:71:d6:60:62:32:76:a1:5e:55:73:22:0d:01: ea:f1:86:3f:28:7c:bc:cc:ea:dc:09:9b:a8:ba:b9: da:f6:3e:70:ce:32:bd:0e:c8:e4:03:5f:7d:76:38: 47:da:15:9b:f7:60:7e:5e:ad:0e:fb:11:41:ba:40: 2c:31:5f:56:44:ba:6c:37:cd:ef:ab:48:a1:4e:3a: 40:e8:0b:23:c9:22:77:ea:b3:e0:42:d4:a7:77:1f: 78:90:1b:37:5a:db:fc:3a:88:d8:9f:c6:06:b7:e8: 01:3a:7b:80:6c:fe:93:2b:fb:1e:77:b9:bd:b7:25: 36:1b:89:11:30:7e:2c:7d:d4:b7:2c:fa:55:0a:1c: 91:ab:ef:5b:45:9c:af:90:24:23:f8:08:a7:4e:e7: 3b:c4:a4:17:47:08:54:9c:e8:67:03:1f:7b:cb:71: 47:e5:e9:67:5b:1e:bc:cc:2f:6a:d4:63:d7:52:c0: 21:00:67:35:3a:ac:f4:97:1c:7b:89:23:80:c6:68: 48:5f:7b:ef:c3:60:cf:73:b8:d2:b4:71:53:0a:a9: 91:94:46:f2:3c:48:c8:a5:c9:34:83:66:b1:31:bf: 8d:d3:62:b5:3a:77:73:b0:66:ce:61:37:71:ff:a0: 26:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:7E:29:1B:75:7E:E2:FF:38:CC:96:CD:22:87:B1:9A:1A:63:A3:79 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/96ded1d3-7e6e-4eb4-8544-9b55323ce9b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.245.0.0/22 Signature Algorithm: sha256WithRSAEncryption 33:1c:64:0d:f5:d2:4c:0e:38:c4:55:5e:3c:96:e1:82:20:4b: bf:fb:59:bd:b1:7e:56:88:b6:73:09:2d:f3:42:13:6e:f1:12: e6:19:69:ca:bd:8c:a1:9b:01:5b:11:3f:f0:25:f8:9a:98:9f: 4d:42:c7:b6:b6:f6:05:ea:3d:26:16:1d:b3:1f:ad:09:65:28: 4b:f0:60:64:d9:d3:ac:7b:5a:bd:5f:36:b8:2d:1e:8e:53:5e: 63:34:43:75:b2:da:3d:cb:f4:f6:a5:fe:83:19:fd:fe:09:63: 9d:a9:75:b9:3e:45:be:71:f5:31:0d:a7:f6:4d:f7:b9:7e:ce: ff:c0:41:4a:eb:79:8d:12:3d:da:ee:e1:de:4d:2f:d2:18:b3: 2b:da:40:19:7f:2f:d0:cf:8e:a0:dc:34:08:8c:04:e8:05:0b: f9:d2:73:47:4b:e7:5d:e2:c1:1b:2a:27:a6:9a:a9:85:3f:c1: ee:b7:10:6b:b8:33:55:76:26:c4:1b:08:6e:3b:20:7f:8a:bf: ec:81:04:64:ca:51:86:23:01:52:fd:ec:74:85:e2:57:9c:16: ff:c7:70:c1:16:95:2d:70:b6:69:8f:05:b2:ef:b3:36:2b:95: 82:16:d6:74:44:e9:b3:77:a7:0a:0b:ad:c4:42:f3:e4:48:4f: 56:2f:17:5e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUaz4mZerUD+r1/i2XP8kk9decGvIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTEzMDIxWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BhMGZmYTUwNDVjZTQxNjUxNjExMWIyOTVkOGVmNGE4NTVm ZTQ5NGRhMWY5NGY0NTNlOTg4ZjMxMTFlZDI2OTU0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLeK0+7PvNeH3Bqxme+IG1cdZgYjJ2oV5VcyINAerxhj8o fLzM6twJm6i6udr2PnDOMr0OyOQDX312OEfaFZv3YH5erQ77EUG6QCwxX1ZEumw3 ze+rSKFOOkDoCyPJInfqs+BC1Kd3H3iQGzda2/w6iNifxga36AE6e4Bs/pMr+x53 ub23JTYbiREwfix91Lcs+lUKHJGr71tFnK+QJCP4CKdO5zvEpBdHCFSc6GcDH3vL cUfl6WdbHrzML2rUY9dSwCEAZzU6rPSXHHuJI4DGaEhfe+/DYM9zuNK0cVMKqZGU RvI8SMilyTSDZrExv43TYrU6d3OwZs5hN3H/oCYfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUwn4pG3V+4v84zJbNIoexmhpjo3kwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzk2ZGVkMWQzLTdlNmUtNGViNC04NTQ0LTliNTUzMjNjZTliNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIS9QAwDQYJKoZIhvcNAQELBQADggEBADMcZA310kwOOMRVXjyW4YIgS7/7 Wb2xflaItnMJLfNCE27xEuYZacq9jKGbAVsRP/Al+JqYn01Cx7a29gXqPSYWHbMf rQllKEvwYGTZ06x7Wr1fNrgtHo5TXmM0Q3Wy2j3L9Pal/oMZ/f4JY52pdbk+Rb5x 9TENp/ZN97l+zv/AQUrreY0SPdru4d5NL9IYsyvaQBl/L9DPjqDcNAiMBOgFC/nS c0dL513iwRsqJ6aaqYU/we63EGu4M1V2JsQbCG47IH+Kv+yBBGTKUYYjAVL97HSF 4lecFv/HcMEWlS1wtmmPBbLvszYrlYIW1nRE6bN3pwoLrcRC8+RIT1YvF14= -----END CERTIFICATE-----Generated at Mon Oct 20 11:10:02 2025 by rpki-client