$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/99985dea-0fcf-4159-a8cc-3fac5dd780d2.roa File: 99985dea-0fcf-4159-a8cc-3fac5dd780d2.roa (raw, json) Hash identifier: afTz30l37SartE/0jHA4gTA6Lnv+zRYF6KUzFpRi0UA= Subject key identifier: 97:83:B0:2B:60:EC:3C:EE:AF:E7:27:99:56:EE:DE:E7:38:7A:8B:15 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 34DDF3C62F819AE290FD642948BBFF8D650FE2D9 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/99985dea-0fcf-4159-a8cc-3fac5dd780d2.roa Signing time: Sat 18 Oct 2025 21:23:39 +0000 ROA not before: Sat 18 Oct 2025 21:23:39 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.244.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:dd:f3:c6:2f:81:9a:e2:90:fd:64:29:48:bb:ff:8d:65:0f:e2:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 21:23:39 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=22ac9d76aac905e9c56b6c8fc64388475fcbbd6478e70a2ec0db1edd47bdde0a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:7f:62:92:82:7a:ca:ea:4d:c4:07:7b:d0:5a: d7:f9:c2:79:9a:53:40:2d:46:05:e0:f4:20:2b:2f: f8:21:54:e5:3f:b8:87:09:a9:4d:99:fb:e8:06:1f: b9:44:95:5b:31:3a:0d:5b:70:c8:62:bf:22:b1:b5: 2f:b6:fb:d4:d0:b5:46:32:e8:e5:ad:d9:99:b4:81: 5b:d9:42:27:2f:46:7f:4d:fe:85:ae:c0:7f:9b:b8: 43:20:04:55:a7:1f:af:ab:25:98:08:a8:42:d6:e8: a6:d1:f6:d2:b4:30:36:32:20:12:10:2d:8b:53:11: a0:29:f9:60:71:07:6c:59:ac:0f:5f:36:5f:77:1e: ef:a9:dc:14:cf:2f:e3:eb:a3:08:34:f2:2d:4c:c9: 03:59:c6:ba:cb:af:71:6a:36:52:78:3d:0f:31:23: fa:d7:67:05:c0:d1:de:4c:2a:f7:ca:b2:41:13:46: 41:d6:00:42:c7:0e:69:61:84:82:3e:7a:70:ab:79: 2a:eb:cb:2a:82:11:b2:c1:58:1b:b9:09:ba:0a:94: d8:3e:78:5a:b6:73:a2:8c:7d:f3:a9:88:a7:3e:79: c0:73:de:17:7b:01:70:b4:47:f4:e7:11:7f:15:f3: 79:47:02:d9:fe:96:0b:16:05:dd:3d:42:2a:3f:bf: ed:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:83:B0:2B:60:EC:3C:EE:AF:E7:27:99:56:EE:DE:E7:38:7A:8B:15 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/99985dea-0fcf-4159-a8cc-3fac5dd780d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.244.32.0/21 Signature Algorithm: sha256WithRSAEncryption 6c:62:5a:46:e1:6e:e4:44:9c:97:55:7b:10:77:db:8c:36:f9: 02:56:c2:b0:f0:d1:68:9e:5b:ff:16:21:fe:cc:15:cc:21:d3: 61:6a:22:3c:23:db:8c:55:01:93:86:d2:b9:1b:f7:42:8f:c2: d0:05:a4:e3:44:18:5e:d9:cc:d7:0f:68:a6:0a:1e:be:3b:93: a4:96:95:3c:57:63:d0:21:4e:cb:d0:f0:66:45:03:25:2a:88: 1f:d4:91:47:d4:b6:ef:04:6b:ab:65:fa:e4:11:ed:b3:d1:ce: ff:76:91:c3:df:bd:1b:75:87:9b:10:df:31:1b:71:e9:90:d6: 74:dd:8c:d4:6c:20:4a:c0:60:1a:84:19:2d:5a:dc:28:a0:44: 1b:36:d3:59:4b:bf:4b:78:b3:95:5d:95:4c:2d:90:41:49:ad: 16:03:36:f8:ec:58:cc:87:c3:ba:cc:44:f6:09:ca:9e:ac:de: c9:c6:7c:1a:b2:75:14:e4:8c:50:62:f7:e1:e8:3d:1e:02:d7: 3f:3f:76:e3:e1:21:e0:cc:7f:0d:15:5d:6a:9a:c8:75:e7:ac: 2b:5a:a9:c5:7c:b0:23:20:7d:1e:60:83:72:68:16:24:86:a1: 68:7d:7f:3a:33:7f:44:e7:5c:78:a6:eb:5e:de:f1:0b:41:98: ca:bd:f3:23 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNN3zxi+BmuKQ/WQpSLv/jWUP4tkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MjEyMzM5WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AyMmFjOWQ3NmFhYzkwNWU5YzU2YjZjOGZjNjQzODg0NzVm Y2JiZDY0NzhlNzBhMmVjMGRiMWVkZDQ3YmRkZTBhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD5f2KSgnrK6k3EB3vQWtf5wnmaU0AtRgXg9CArL/ghVOU/ uIcJqU2Z++gGH7lElVsxOg1bcMhivyKxtS+2+9TQtUYy6OWt2Zm0gVvZQicvRn9N /oWuwH+buEMgBFWnH6+rJZgIqELW6KbR9tK0MDYyIBIQLYtTEaAp+WBxB2xZrA9f Nl93Hu+p3BTPL+Prowg08i1MyQNZxrrLr3FqNlJ4PQ8xI/rXZwXA0d5MKvfKskET RkHWAELHDmlhhII+enCreSrryyqCEbLBWBu5CboKlNg+eFq2c6KMffOpiKc+ecBz 3hd7AXC0R/TnEX8V83lHAtn+lgsWBd09Qio/v+2dAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUl4OwK2DsPO6v5yeZVu7e5zh6ixUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzk5OTg1ZGVhLTBmY2YtNDE1OS1hOGNjLTNmYWM1ZGQ3ODBkMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMS9CAwDQYJKoZIhvcNAQELBQADggEBAGxiWkbhbuREnJdVexB324w2+QJW wrDw0WieW/8WIf7MFcwh02FqIjwj24xVAZOG0rkb90KPwtAFpONEGF7ZzNcPaKYK Hr47k6SWlTxXY9AhTsvQ8GZFAyUqiB/UkUfUtu8Ea6tl+uQR7bPRzv92kcPfvRt1 h5sQ3zEbcemQ1nTdjNRsIErAYBqEGS1a3CigRBs201lLv0t4s5VdlUwtkEFJrRYD NvjsWMyHw7rMRPYJyp6s3snGfBqydRTkjFBi9+HoPR4C1z8/duPhIeDMfw0VXWqa yHXnrCtaqcV8sCMgfR5gg3JoFiSGoWh9fzozf0TnXHim617e8QtBmMq98yM= -----END CERTIFICATE-----Generated at Mon Oct 20 06:04:58 2025 by rpki-client