$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9919a82b-9fc9-416d-81dc-f6ccfdf9f8ef.roa File: 9919a82b-9fc9-416d-81dc-f6ccfdf9f8ef.roa (raw, json) Hash identifier: vp6wQYfl8+BLY1Q32gXDvLkeAR2I4Exl1Cvgqh3T8JM= Subject key identifier: 99:6F:37:6D:E4:72:99:5C:6D:4C:FD:EA:E5:CE:F9:70:D4:D1:3C:4F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 408354C871F36E1C522CC49EE987CA885B017C05 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9919a82b-9fc9-416d-81dc-f6ccfdf9f8ef.roa Signing time: Sun 19 Oct 2025 09:30:23 +0000 ROA not before: Sun 19 Oct 2025 09:30:23 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.64.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:83:54:c8:71:f3:6e:1c:52:2c:c4:9e:e9:87:ca:88:5b:01:7c:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 09:30:23 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=4157a004962e318b52f508cdf295851745d2a963abefb0f59d1113d95f7fb027, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:01:c9:79:c4:85:d6:b2:11:c3:35:56:8c:d4: 9e:bc:4d:72:6b:af:92:6f:08:bf:e2:a1:74:73:86: 54:d5:d5:8e:da:c2:2b:d0:f7:ad:c4:ff:be:d6:41: fc:11:7b:7a:96:d4:2d:a2:ef:ed:bd:5b:f4:5b:4e: 4a:8a:9c:fa:c2:14:36:27:ec:f0:b8:46:9a:b8:ab: a3:8f:9b:31:9e:ad:1a:d7:46:40:4e:70:6f:97:04: d4:6e:d9:fc:bb:25:3d:44:41:5a:22:88:91:e3:0c: d8:f8:65:e7:a0:72:52:ba:04:13:cb:24:a3:ba:3b: 45:25:b6:00:99:ad:f3:e1:60:5b:ea:1d:13:5c:8b: 74:6c:b2:46:37:70:db:ba:e3:f5:35:d0:18:24:00: 78:9e:6c:81:a0:46:0a:cb:13:72:df:f5:54:d3:db: 19:3a:3d:67:cc:16:c1:ec:3f:d9:45:08:0c:ee:a1: 8c:a6:19:4b:a0:16:88:2f:f2:a1:f7:93:2f:bc:45: 54:56:9a:ff:3f:c6:91:f4:47:96:76:4c:a5:e0:a8: 3b:ed:3d:3c:13:0c:17:af:f1:63:6a:89:10:a7:4f: 20:79:4c:30:e7:ce:36:d3:df:f5:ec:cc:2d:7b:15: 59:a3:f2:f1:35:c7:8c:9d:12:3b:4a:73:f8:82:a1: a9:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:6F:37:6D:E4:72:99:5C:6D:4C:FD:EA:E5:CE:F9:70:D4:D1:3C:4F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9919a82b-9fc9-416d-81dc-f6ccfdf9f8ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.64.76.0/24 Signature Algorithm: sha256WithRSAEncryption 65:fc:fa:d1:88:03:db:4f:9a:ac:31:09:25:a0:02:8a:ca:ee: 0b:17:c1:75:05:44:b8:5c:05:20:98:b0:1f:8a:83:98:92:38: 69:fd:7c:be:21:5a:17:d6:ca:94:b1:af:58:f3:dd:cc:f3:dd: 3e:68:79:3f:1a:68:73:2a:2c:f0:22:a9:9c:e2:8c:e4:7d:87: a9:2a:19:ff:bc:9a:e4:4c:39:fb:c6:35:c9:3d:c5:86:27:7f: 38:f8:00:57:50:1f:26:5f:8b:79:0f:ed:72:8f:e0:78:4e:23: a3:a2:81:b3:21:a6:62:df:dc:0f:09:34:10:86:1d:fa:0a:e5: f9:ac:8a:b5:63:8f:c7:63:74:5f:2e:0e:7f:05:91:0c:e0:e3: f8:f5:10:28:5d:04:a0:31:0f:20:92:23:13:47:ff:3e:8e:56: 79:d1:9c:70:51:7c:eb:70:77:0b:00:61:b8:6e:04:56:7d:c3: 3c:33:0a:cc:04:b9:7d:d3:90:0d:f5:77:7c:62:a3:47:c9:b2: 7f:30:f0:e0:8a:2a:b1:76:9c:aa:bc:d3:57:93:70:d1:b2:87: 71:01:0d:83:97:d3:d9:f8:b5:0f:46:66:09:a7:45:14:eb:c8: c9:27:42:4b:b6:c8:fc:36:11:1a:00:7e:78:28:0a:da:b2:68: 9e:1d:19:69 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQINUyHHzbhxSLMSe6YfKiFsBfAUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MDkzMDIzWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A0MTU3YTAwNDk2MmUzMThiNTJmNTA4Y2RmMjk1ODUxNzQ1 ZDJhOTYzYWJlZmIwZjU5ZDExMTNkOTVmN2ZiMDI3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQChAcl5xIXWshHDNVaM1J68TXJrr5JvCL/ioXRzhlTV1Y7a wivQ963E/77WQfwRe3qW1C2i7+29W/RbTkqKnPrCFDYn7PC4Rpq4q6OPmzGerRrX RkBOcG+XBNRu2fy7JT1EQVoiiJHjDNj4ZeegclK6BBPLJKO6O0UltgCZrfPhYFvq HRNci3RsskY3cNu64/U10BgkAHiebIGgRgrLE3Lf9VTT2xk6PWfMFsHsP9lFCAzu oYymGUugFogv8qH3ky+8RVRWmv8/xpH0R5Z2TKXgqDvtPTwTDBev8WNqiRCnTyB5 TDDnzjbT3/XszC17FVmj8vE1x4ydEjtKc/iCoaknAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUmW83beRymVxtTP3q5c75cNTRPE8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzk5MTlhODJiLTlmYzktNDE2ZC04MWRjLWY2Y2NmZGY5ZjhlZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASQEwwDQYJKoZIhvcNAQELBQADggEBAGX8+tGIA9tPmqwxCSWgAorK7gsX wXUFRLhcBSCYsB+Kg5iSOGn9fL4hWhfWypSxr1jz3czz3T5oeT8aaHMqLPAiqZzi jOR9h6kqGf+8muRMOfvGNck9xYYnfzj4AFdQHyZfi3kP7XKP4HhOI6OigbMhpmLf 3A8JNBCGHfoK5fmsirVjj8djdF8uDn8FkQzg4/j1EChdBKAxDyCSIxNH/z6OVnnR nHBRfOtwdwsAYbhuBFZ9wzwzCswEuX3TkA31d3xio0fJsn8w8OCKKrF2nKq801eT cNGyh3EBDYOX09n4tQ9GZgmnRRTryMknQku2yPw2ERoAfngoCtqyaJ4dGWk= -----END CERTIFICATE-----Generated at Mon Oct 20 19:17:06 2025 by rpki-client