$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/99f16102-07c9-484e-a95f-40a6fcff7521.roa File: 99f16102-07c9-484e-a95f-40a6fcff7521.roa (raw, json) Hash identifier: FQ9RFnG4TQvS2zsCpNOxbcklncdaSjmFoAuAhslBdEY= Subject key identifier: B8:77:E7:60:FE:E8:AD:B8:B4:8F:F5:4E:5B:B7:79:43:A6:9E:85:D8 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 40B91A78C703E88BA2332DEF65FA13E237CBE447 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/99f16102-07c9-484e-a95f-40a6fcff7521.roa Signing time: Sat 18 Oct 2025 19:02:30 +0000 ROA not before: Sat 18 Oct 2025 19:02:30 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.165.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:b9:1a:78:c7:03:e8:8b:a2:33:2d:ef:65:fa:13:e2:37:cb:e4:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 19:02:30 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=79b8697d57f7e9d5d746914127d25e5aa3f29f5f3741f69a58563aae0358f321, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4d:e4:d9:85:79:9f:9b:60:2b:34:72:58:1e: d6:79:f3:77:cf:e3:0e:02:56:4b:f9:e6:84:c3:05: 40:33:be:69:58:c7:df:50:56:7d:41:92:59:ad:96: af:9c:84:63:fe:59:68:9c:83:64:98:34:23:9c:a6: 52:c9:5b:f2:4a:bc:d2:0a:0b:f1:0d:40:e0:48:ac: f3:d3:6a:65:9c:8f:7b:04:97:84:d9:ad:31:28:ed: 66:d2:01:fe:e0:77:bb:66:a9:4d:ff:54:ce:82:df: e6:5c:c1:dd:fc:73:a8:a3:f9:43:64:14:59:09:ce: cf:e8:87:16:ef:19:59:76:9f:9a:d2:5e:26:1c:ca: 5d:b8:1e:68:1b:97:8b:82:bc:38:15:76:bf:6b:8e: f4:ad:ff:d5:8a:81:3d:ad:45:7a:52:bf:8f:0c:83: 51:13:8f:2f:05:f2:63:0d:1b:35:b1:14:1f:41:9d: c5:1d:99:ed:ae:b3:3b:86:04:fa:02:9a:e9:5d:eb: 96:51:7c:ed:a3:76:6b:54:2b:4b:ca:29:df:ee:09: 36:47:c2:54:24:2c:b9:bf:d9:fc:9c:63:36:fc:96: c8:b6:4e:49:e8:a0:03:1a:00:d8:14:52:25:0d:c8: bb:98:cc:b3:41:05:ad:de:b8:47:6a:bc:4d:e8:e5: 85:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:77:E7:60:FE:E8:AD:B8:B4:8F:F5:4E:5B:B7:79:43:A6:9E:85:D8 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/99f16102-07c9-484e-a95f-40a6fcff7521.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.165.60.0/22 Signature Algorithm: sha256WithRSAEncryption 2d:04:3b:73:a8:69:c8:12:6c:8b:28:10:91:d6:e3:51:05:3f: 47:b6:1f:ec:35:05:c3:2f:b3:dc:90:1d:ef:88:cb:97:f5:ed: 36:eb:3d:79:82:dd:4f:9a:b0:c2:d0:18:97:54:6a:a3:d0:49: 06:fa:d1:ce:1c:ed:31:9f:e1:75:70:96:84:34:ee:a3:df:9b: 9b:2d:05:31:2a:22:a7:35:2e:28:a2:df:3e:de:a8:6e:a0:fb: bc:d6:2b:ef:86:a8:1f:f8:ae:59:91:ab:e0:ac:f6:b9:02:a4: 7d:a4:48:63:28:3b:8d:a1:18:df:2d:ec:5e:81:b5:11:4c:3d: 9b:bb:04:91:56:90:46:5b:19:8c:da:8b:5a:81:b6:3b:e1:b2: 1a:53:86:76:7d:65:86:bc:63:2b:cd:04:83:df:f4:6e:7a:c7: 82:2d:86:d9:40:e8:7b:f1:88:de:ff:e3:30:86:1f:08:59:38: 50:40:c0:a6:81:ce:0f:3f:79:c3:4b:80:ee:07:ff:db:cb:98: 22:1d:f9:99:af:a2:48:7a:17:57:7d:b2:a7:51:c4:88:25:3d: 62:4c:f9:9e:eb:75:21:9b:fa:ea:42:57:cf:22:5b:61:5f:73: 68:af:8a:7c:c7:19:3d:d4:b7:6c:6b:f8:9c:eb:1b:56:9e:4b: cc:6b:a2:e2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQLkaeMcD6IuiMy3vZfoT4jfL5EcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTkwMjMwWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A3OWI4Njk3ZDU3ZjdlOWQ1ZDc0NjkxNDEyN2QyNWU1YWEz ZjI5ZjVmMzc0MWY2OWE1ODU2M2FhZTAzNThmMzIxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCqTeTZhXmfm2ArNHJYHtZ583fP4w4CVkv55oTDBUAzvmlY x99QVn1Bklmtlq+chGP+WWicg2SYNCOcplLJW/JKvNIKC/ENQOBIrPPTamWcj3sE l4TZrTEo7WbSAf7gd7tmqU3/VM6C3+Zcwd38c6ij+UNkFFkJzs/ohxbvGVl2n5rS XiYcyl24Hmgbl4uCvDgVdr9rjvSt/9WKgT2tRXpSv48Mg1ETjy8F8mMNGzWxFB9B ncUdme2uszuGBPoCmuld65ZRfO2jdmtUK0vKKd/uCTZHwlQkLLm/2fycYzb8lsi2 TknooAMaANgUUiUNyLuYzLNBBa3euEdqvE3o5YWfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUuHfnYP7orbi0j/VOW7d5Q6aehdgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzk5ZjE2MTAyLTA3YzktNDg0ZS1hOTVmLTQwYTZmY2ZmNzUyMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAISpTwwDQYJKoZIhvcNAQELBQADggEBAC0EO3OoacgSbIsoEJHW41EFP0e2 H+w1BcMvs9yQHe+Iy5f17TbrPXmC3U+asMLQGJdUaqPQSQb60c4c7TGf4XVwloQ0 7qPfm5stBTEqIqc1Liii3z7eqG6g+7zWK++GqB/4rlmRq+Cs9rkCpH2kSGMoO42h GN8t7F6BtRFMPZu7BJFWkEZbGYzai1qBtjvhshpThnZ9ZYa8YyvNBIPf9G56x4It htlA6HvxiN7/4zCGHwhZOFBAwKaBzg8/ecNLgO4H/9vLmCId+Zmvokh6F1d9sqdR xIglPWJM+Z7rdSGb+upCV88iW2Ffc2ivinzHGT3Ut2xr+JzrG1aeS8xrouI= -----END CERTIFICATE-----Generated at Mon Oct 20 10:59:14 2025 by rpki-client