$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a13f78a2-6415-4fe9-8990-8c79334b1ab9.roa File: a13f78a2-6415-4fe9-8990-8c79334b1ab9.roa (raw, json) Hash identifier: JtiGjXp0sYgTmWTdDSDi0RcqrLDX0tz+FcWZfiG+Sq8= Subject key identifier: F2:7B:02:B9:76:78:70:86:58:C2:D4:DA:CF:27:D0:1D:99:7F:F6:4B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 189B0F22AD517E01788245D3E14E44ED5EE5D319 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a13f78a2-6415-4fe9-8990-8c79334b1ab9.roa Signing time: Sun 19 Oct 2025 21:41:31 +0000 ROA not before: Sun 19 Oct 2025 21:41:31 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.66.234.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:9b:0f:22:ad:51:7e:01:78:82:45:d3:e1:4e:44:ed:5e:e5:d3:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 21:41:31 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=ffb939f21eb53502f34fbfd1527b933985ae80eb8f5934bd6413d5d4fc0a3d67, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1c:f3:2d:d1:16:98:55:71:ab:82:2f:8c:19: ff:6e:60:6f:72:fb:05:11:34:0b:ee:89:6d:d8:bf: 15:b3:41:31:93:0c:fd:0e:b6:8c:a4:34:98:cb:72: 5b:d9:2b:ea:04:66:33:e6:53:60:9d:51:69:eb:e1: a5:4b:2c:28:2b:c5:ab:ed:7f:d4:e5:72:e7:99:0c: ad:7b:9e:e0:28:f7:a3:e6:8c:50:60:aa:c6:14:53: 9e:f1:a4:79:4f:fc:a8:f1:8a:90:6f:3b:17:55:7b: cf:b0:3e:0d:b5:06:44:e3:09:7e:f2:a8:21:ae:17: 9f:91:9b:ae:29:92:21:06:6e:79:8f:d6:d9:f8:66: 63:77:4a:4e:d7:c6:96:6d:fc:2f:33:e9:80:19:90: b5:7f:4a:af:49:ac:32:0f:84:a2:7e:4f:92:e1:23: 2d:37:3c:2b:68:e1:67:b5:e9:0d:33:fd:90:38:91: fe:52:a8:05:bd:eb:b7:1d:e2:19:c6:73:41:fc:e6: ba:85:bf:e3:23:ce:d8:22:24:12:a2:82:64:69:6f: 74:b6:cf:30:7f:29:9e:4c:9e:cc:89:af:61:86:5a: 32:36:89:6e:1d:d3:a0:37:5b:08:9a:80:4d:3f:f4: 28:a6:df:41:c4:18:e6:d5:88:92:47:09:4e:c8:8d: 48:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:7B:02:B9:76:78:70:86:58:C2:D4:DA:CF:27:D0:1D:99:7F:F6:4B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a13f78a2-6415-4fe9-8990-8c79334b1ab9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.66.234.0/23 Signature Algorithm: sha256WithRSAEncryption 79:db:b2:d0:d7:74:bf:88:65:7a:52:52:1a:c1:04:fb:da:8b: a6:80:76:ec:d1:97:5e:94:2b:f3:db:b8:7c:fa:f9:c1:5c:c8: b3:54:09:d5:40:e2:ef:27:46:a4:3c:a5:d8:7f:68:62:4e:5b: 9b:d0:96:53:68:c3:cf:f2:70:54:24:ef:c5:af:65:d1:9c:2b: 06:58:ca:8b:21:d3:35:b5:9a:26:3d:5a:76:aa:03:c0:32:0d: d7:ba:19:66:7e:90:10:94:25:4c:63:df:06:b9:52:4a:92:ae: 35:99:b9:62:6b:5a:d1:a9:7f:82:66:b1:c0:d4:e8:7a:48:19: dd:46:b2:36:5b:f1:0b:e1:45:40:5b:ba:c1:68:17:94:4f:9a: 6b:bb:e1:d7:b2:10:27:2f:9b:b3:43:80:cd:ec:3b:4e:24:da: 80:a5:0e:04:ab:97:8f:30:ab:9c:5b:96:53:1d:c5:9d:d5:da: 94:11:3e:23:f2:af:09:d5:94:2f:78:90:6b:23:1e:a8:be:ac: be:35:98:ab:d7:6b:cf:43:e0:05:ac:28:20:23:c7:ea:34:65: 0e:70:5a:6c:b9:11:c4:2f:c0:5f:6e:7f:79:51:e3:1d:23:ee: 6f:9a:5e:85:59:1f:45:02:e3:e7:5c:8b:7d:47:03:a3:d0:de: 0f:fd:2c:e0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGJsPIq1RfgF4gkXT4U5E7V7l0xkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MjE0MTMxWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BmZmI5MzlmMjFlYjUzNTAyZjM0ZmJmZDE1MjdiOTMzOTg1 YWU4MGViOGY1OTM0YmQ2NDEzZDVkNGZjMGEzZDY3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8HPMt0RaYVXGrgi+MGf9uYG9y+wURNAvuiW3YvxWzQTGT DP0OtoykNJjLclvZK+oEZjPmU2CdUWnr4aVLLCgrxavtf9TlcueZDK17nuAo96Pm jFBgqsYUU57xpHlP/KjxipBvOxdVe8+wPg21BkTjCX7yqCGuF5+Rm64pkiEGbnmP 1tn4ZmN3Sk7XxpZt/C8z6YAZkLV/Sq9JrDIPhKJ+T5LhIy03PCto4We16Q0z/ZA4 kf5SqAW967cd4hnGc0H85rqFv+MjztgiJBKigmRpb3S2zzB/KZ5MnsyJr2GGWjI2 iW4d06A3WwiagE0/9Cim30HEGObViJJHCU7IjUihAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU8nsCuXZ4cIZYwtTazyfQHZl/9kswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2ExM2Y3OGEyLTY0MTUtNGZlOS04OTkwLThjNzkzMzRiMWFiOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESQuowDQYJKoZIhvcNAQELBQADggEBAHnbstDXdL+IZXpSUhrBBPvai6aA duzRl16UK/PbuHz6+cFcyLNUCdVA4u8nRqQ8pdh/aGJOW5vQllNow8/ycFQk78Wv ZdGcKwZYyosh0zW1miY9WnaqA8AyDde6GWZ+kBCUJUxj3wa5UkqSrjWZuWJrWtGp f4JmscDU6HpIGd1GsjZb8QvhRUBbusFoF5RPmmu74deyECcvm7NDgM3sO04k2oCl DgSrl48wq5xbllMdxZ3V2pQRPiPyrwnVlC94kGsjHqi+rL41mKvXa89D4AWsKCAj x+o0ZQ5wWmy5EcQvwF9uf3lR4x0j7m+aXoVZH0UC4+dci31HA6PQ3g/9LOA= -----END CERTIFICATE-----Generated at Mon Oct 20 03:01:10 2025 by rpki-client