$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aa576697-de11-4cde-bb4e-a0fa8b6437c2.roa File: aa576697-de11-4cde-bb4e-a0fa8b6437c2.roa (raw, json) Hash identifier: 5SLE6aURruJV+2yZb4Jy79XOvomhhjwtugmph2q32Fo= Subject key identifier: 5B:55:67:0E:92:8F:D8:B8:3B:0F:5D:32:D2:CE:08:19:A4:3B:34:6D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5C86A4F9A049C1BD904DF7914C7885493979DAF6 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aa576697-de11-4cde-bb4e-a0fa8b6437c2.roa Signing time: Sat 18 Oct 2025 10:33:39 +0000 ROA not before: Sat 18 Oct 2025 10:33:39 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.165.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:86:a4:f9:a0:49:c1:bd:90:4d:f7:91:4c:78:85:49:39:79:da:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 10:33:39 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=fff36788e9292d67df516b4a8a3e5d5e2feecea59e16d0c4b8a0f9a7d546386c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b1:f1:4a:93:50:b8:c5:14:59:f1:a7:8b:45: 02:da:80:34:b5:40:15:7d:91:af:6b:2e:41:47:cf: e0:1e:17:b8:7d:48:e8:54:aa:7e:1e:f1:90:26:d5: d2:2d:ef:39:7e:b4:a7:58:1c:12:e4:3a:33:56:85: eb:af:ff:15:79:93:59:04:cd:d2:53:52:9e:c1:4b: 53:34:f7:a5:f6:fd:f6:8a:d6:55:2d:63:b0:d0:5f: e4:cb:f6:28:83:93:98:53:6f:c5:4b:dc:90:31:1f: c9:86:42:97:c3:97:47:06:ec:e7:71:22:a3:ba:ce: b7:4c:c3:c3:4c:71:ec:cb:f7:ff:06:dc:0e:92:48: be:c8:53:57:fa:96:4b:8c:88:be:8a:56:51:3a:eb: eb:e8:fd:f2:a8:f6:fb:55:4e:ee:2f:ad:88:fd:40: f5:9a:7e:86:96:13:28:81:0f:27:c9:f3:6a:25:41: f4:fc:ee:2b:a6:99:79:2c:f1:64:18:7d:7a:f2:3e: ee:85:44:1a:d2:78:c1:e7:ee:42:ed:a8:3d:e5:77: e0:2e:35:b9:15:51:e3:c6:63:ff:62:e5:33:58:62: 21:dd:7a:97:13:29:4a:22:63:cf:6e:fb:61:eb:c9: 44:95:5a:53:40:25:f8:28:6f:78:ca:39:7b:4a:b3: 1d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:55:67:0E:92:8F:D8:B8:3B:0F:5D:32:D2:CE:08:19:A4:3B:34:6D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aa576697-de11-4cde-bb4e-a0fa8b6437c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.165.64.0/18 Signature Algorithm: sha256WithRSAEncryption 43:6b:49:4e:6b:5f:88:95:92:81:f0:4e:05:b1:f8:da:79:8e: 95:f2:6e:48:ea:27:bd:03:7c:ea:bf:d6:56:19:8f:b8:d3:ab: be:da:0e:07:54:08:91:a7:9c:12:92:35:52:16:51:00:c6:61: f0:15:e2:49:f3:a1:da:6c:89:6f:72:e7:f5:8c:79:4c:af:85: fd:b6:49:f6:b6:33:e8:0e:26:ae:78:66:33:fd:58:07:ce:ed: 6a:a9:55:17:da:2f:8f:8a:9e:33:b3:4d:5a:b0:4f:8a:56:56: 8d:f0:5d:00:f0:3d:72:3a:e0:02:ee:65:2b:2a:f9:24:0b:43: a1:64:6b:4b:6c:f5:12:51:b9:42:e1:fe:24:49:cb:61:9d:9b: ae:88:1f:0e:01:5e:7f:49:39:17:d8:ca:e8:bf:d8:f3:16:63: 6f:7d:d0:56:fd:a8:5f:1a:ef:0a:83:9e:89:76:33:75:89:5e: 8e:00:3b:0f:06:6a:3f:e0:34:9a:80:ed:5e:79:05:5c:4d:67: e4:b2:bc:e2:3f:f7:10:d5:2a:e2:c0:56:d0:59:1c:d4:fd:7f: fc:b7:1d:d2:b4:05:25:67:cf:79:5b:2f:ed:f1:f1:39:d7:73: eb:fd:7b:00:ae:c0:05:09:b8:eb:67:7a:21:b2:d9:e5:75:0b: 2c:46:25:73 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXIak+aBJwb2QTfeRTHiFSTl52vYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTAzMzM5WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BmZmYzNjc4OGU5MjkyZDY3ZGY1MTZiNGE4YTNlNWQ1ZTJm ZWVjZWE1OWUxNmQwYzRiOGEwZjlhN2Q1NDYzODZjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtsfFKk1C4xRRZ8aeLRQLagDS1QBV9ka9rLkFHz+AeF7h9 SOhUqn4e8ZAm1dIt7zl+tKdYHBLkOjNWheuv/xV5k1kEzdJTUp7BS1M096X2/faK 1lUtY7DQX+TL9iiDk5hTb8VL3JAxH8mGQpfDl0cG7OdxIqO6zrdMw8NMcezL9/8G 3A6SSL7IU1f6lkuMiL6KVlE66+vo/fKo9vtVTu4vrYj9QPWafoaWEyiBDyfJ82ol QfT87iummXks8WQYfXryPu6FRBrSeMHn7kLtqD3ld+AuNbkVUePGY/9i5TNYYiHd epcTKUoiY89u+2HryUSVWlNAJfgob3jKOXtKsx1RAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUW1VnDpKP2Lg7D10y0s4IGaQ7NG0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2FhNTc2Njk3LWRlMTEtNGNkZS1iYjRlLWEwZmE4YjY0MzdjMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYSpUAwDQYJKoZIhvcNAQELBQADggEBAENrSU5rX4iVkoHwTgWx+Np5jpXy bkjqJ70DfOq/1lYZj7jTq77aDgdUCJGnnBKSNVIWUQDGYfAV4knzodpsiW9y5/WM eUyvhf22Sfa2M+gOJq54ZjP9WAfO7WqpVRfaL4+KnjOzTVqwT4pWVo3wXQDwPXI6 4ALuZSsq+SQLQ6Fka0ts9RJRuULh/iRJy2Gdm66IHw4BXn9JORfYyui/2PMWY299 0Fb9qF8a7wqDnol2M3WJXo4AOw8Gaj/gNJqA7V55BVxNZ+SyvOI/9xDVKuLAVtBZ HNT9f/y3HdK0BSVnz3lbL+3x8TnXc+v9ewCuwAUJuOtneiGy2eV1CyxGJXM= -----END CERTIFICATE-----Generated at Mon Oct 20 19:16:34 2025 by rpki-client