$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/99864a55-4deb-4146-a0dd-5f832f2b1092.roa File: 99864a55-4deb-4146-a0dd-5f832f2b1092.roa (raw, json) Hash identifier: 7MFky8DovXV8bJh5piZYfMQ0CtY0GaZd3yg/vMyZsM8= Subject key identifier: 81:89:52:2F:34:D3:5B:29:0B:23:CE:DB:50:3F:58:F2:06:F8:10:53 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7D90398B08568E4C776CAFB4539A8A721CDC60B2 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/99864a55-4deb-4146-a0dd-5f832f2b1092.roa Signing time: Sun 19 Oct 2025 14:29:05 +0000 ROA not before: Sun 19 Oct 2025 14:29:05 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.64.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:90:39:8b:08:56:8e:4c:77:6c:af:b4:53:9a:8a:72:1c:dc:60:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 14:29:05 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=557e390df2c8683f50b108a33ab50366918d04f4e0c5d0626b820e8b755c4354, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:02:41:be:b4:21:df:8c:d1:15:79:b1:f2:17: f8:5a:d6:dc:a3:8c:e3:5a:a5:96:a6:2d:41:b0:38: 81:bc:a1:6f:fa:97:08:dd:56:cb:bf:ce:06:ea:10: 83:86:c0:44:b4:94:79:5c:3e:97:17:b5:90:80:c8: 0c:62:5d:76:27:cf:d9:3a:f7:b2:ac:6d:85:e8:e7: 26:96:58:1b:b2:70:2b:ed:4f:4b:b9:76:4d:1c:01: bf:2e:2a:a0:1e:16:b9:e1:fb:0e:59:05:cb:3b:50: 8c:4f:21:96:6f:04:78:44:17:2d:a6:78:20:1b:5a: 60:60:bd:cb:a1:82:d6:9e:16:04:33:42:1d:8e:8c: 12:ac:0e:7f:0f:00:a8:b7:2a:9d:a9:7e:33:9b:52: ed:fe:cf:b0:7a:1a:90:30:e4:88:00:e6:4e:c9:92: 55:6c:4b:2d:20:09:9a:07:a0:20:ec:1f:d7:3f:01: 08:e7:2a:dd:ff:dc:1d:d8:d8:74:e6:99:8d:08:e8: cc:a7:66:7a:9c:e2:77:d9:c3:9b:9e:b4:9d:e1:0c: 09:bb:c3:25:ec:40:2a:98:38:d4:e2:5f:56:2c:bb: 84:03:6b:a4:bb:64:ac:ed:7c:17:73:fd:b0:8f:ff: 44:88:93:54:ea:b8:80:0e:b0:b4:51:4d:63:d4:f4: 38:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:89:52:2F:34:D3:5B:29:0B:23:CE:DB:50:3F:58:F2:06:F8:10:53 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/99864a55-4deb-4146-a0dd-5f832f2b1092.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.64.97.0/24 Signature Algorithm: sha256WithRSAEncryption aa:7a:05:aa:0d:50:80:4c:41:19:47:b3:68:a2:de:58:bd:cc: 44:ce:5c:14:1e:67:13:a6:ff:9d:b7:66:f3:c7:a4:24:f2:40: 23:b4:07:39:63:99:a5:78:2d:62:ed:94:04:82:86:1e:27:e8: 37:15:a5:b3:a4:59:d5:17:2e:7e:67:bb:06:b2:84:b1:89:2a: 75:ad:f6:4d:14:3e:9b:bc:ce:34:b0:b6:98:33:e2:f8:93:c8: 78:b4:87:97:a8:b4:d4:d8:40:2d:f6:95:fd:44:e4:f7:65:60: 16:04:7f:9c:c8:91:90:8d:2e:ba:fc:d4:55:7b:8d:ad:68:99: fd:d2:5e:75:40:10:05:79:a1:dd:62:6b:7c:a1:3e:a4:d9:59: 08:88:a3:6c:e2:d3:16:13:9d:06:7d:87:71:af:31:fb:70:e7: 81:02:76:46:2d:30:f8:29:bf:99:7d:ca:ac:7b:d6:c3:e2:0f: 4e:a4:b9:28:87:6e:db:83:a8:b5:31:db:0f:f7:00:fe:7c:9c: d0:36:b2:3c:b7:bb:43:21:06:a2:f7:5f:3c:cf:02:c5:9e:23: ce:1a:6a:8d:c6:8b:fc:31:bd:05:65:46:b8:27:77:cf:cc:42: 34:0a:ea:cc:ce:c7:42:f1:81:f3:b4:43:79:b1:53:fe:12:ee: 8b:93:1f:34 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfZA5iwhWjkx3bK+0U5qKchzcYLIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTQyOTA1WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A1NTdlMzkwZGYyYzg2ODNmNTBiMTA4YTMzYWI1MDM2Njkx OGQwNGY0ZTBjNWQwNjI2YjgyMGU4Yjc1NWM0MzU0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHAkG+tCHfjNEVebHyF/ha1tyjjONapZamLUGwOIG8oW/6 lwjdVsu/zgbqEIOGwES0lHlcPpcXtZCAyAxiXXYnz9k697KsbYXo5yaWWBuycCvt T0u5dk0cAb8uKqAeFrnh+w5ZBcs7UIxPIZZvBHhEFy2meCAbWmBgvcuhgtaeFgQz Qh2OjBKsDn8PAKi3Kp2pfjObUu3+z7B6GpAw5IgA5k7JklVsSy0gCZoHoCDsH9c/ AQjnKt3/3B3Y2HTmmY0I6MynZnqc4nfZw5uetJ3hDAm7wyXsQCqYONTiX1Ysu4QD a6S7ZKztfBdz/bCP/0SIk1TquIAOsLRRTWPU9DgdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUgYlSLzTTWykLI87bUD9Y8gb4EFMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzk5ODY0YTU1LTRkZWItNDE0Ni1hMGRkLTVmODMyZjJiMTA5Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASQGEwDQYJKoZIhvcNAQELBQADggEBAKp6BaoNUIBMQRlHs2ii3li9zETO XBQeZxOm/523ZvPHpCTyQCO0BzljmaV4LWLtlASChh4n6DcVpbOkWdUXLn5nuway hLGJKnWt9k0UPpu8zjSwtpgz4viTyHi0h5eotNTYQC32lf1E5PdlYBYEf5zIkZCN Lrr81FV7ja1omf3SXnVAEAV5od1ia3yhPqTZWQiIo2zi0xYTnQZ9h3GvMftw54EC dkYtMPgpv5l9yqx71sPiD06kuSiHbtuDqLUx2w/3AP58nNA2sjy3u0MhBqL3XzzP AsWeI84aao3Gi/wxvQVlRrgnd8/MQjQK6szOx0LxgfO0Q3mxU/4S7ouTHzQ= -----END CERTIFICATE-----Generated at Mon Oct 20 02:59:35 2025 by rpki-client