$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aef3432e-bd93-4421-a488-604fb43a48a5.roa File: aef3432e-bd93-4421-a488-604fb43a48a5.roa (raw, json) Hash identifier: O9P5tHU63oD8nT4E4HeBl8k181NqAxyGUbUW59MQI9s= Subject key identifier: 81:B1:52:CA:82:CE:B8:89:B5:56:4C:D2:2D:F7:E6:06:6F:78:3D:9E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5321FC3FEF45DA1B8923336EC4A694C825FBB5F7 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aef3432e-bd93-4421-a488-604fb43a48a5.roa Signing time: Sun 19 Oct 2025 14:30:19 +0000 ROA not before: Sun 19 Oct 2025 14:30:19 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.66.92.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:21:fc:3f:ef:45:da:1b:89:23:33:6e:c4:a6:94:c8:25:fb:b5:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 14:30:19 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=b387ec7bdd9cc519a00f12884b4901e2b39d3fe1cf3aac34f905d4d39f697b46, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c3:67:55:78:8f:1a:c6:89:6f:00:da:b7:38: b1:8c:b5:72:a0:ba:f6:1e:8b:76:f2:49:f4:76:cd: 87:d9:74:8e:4e:d3:43:d8:66:8e:1b:a6:33:52:5e: 45:00:bb:ca:25:17:27:65:ed:47:37:e9:e8:c8:32: da:db:33:ea:41:d5:2d:77:d5:99:d2:80:6f:48:9c: f1:be:28:02:12:49:0a:b7:8e:fe:18:88:7c:3e:1c: bf:d3:2e:1a:cb:a4:81:39:29:86:6a:c2:35:96:1b: 84:2c:59:f6:66:fe:fb:4b:23:ee:33:4a:c0:9e:1a: 86:0e:64:72:63:b8:43:e4:ba:74:38:5f:a9:5f:42: 78:92:ae:eb:85:98:0b:31:61:11:1b:25:70:85:d5: 01:82:50:75:ef:2f:5d:51:40:bf:61:10:75:7f:6c: 66:65:11:79:e6:c6:2c:4a:43:99:c4:4a:49:51:3f: b7:9b:31:78:00:39:65:49:71:d6:eb:7e:80:93:fa: 42:c5:f7:08:c3:dd:72:0c:f5:63:0f:67:66:9a:73: cc:58:dc:a5:fa:8c:96:43:fb:eb:c9:d4:29:b8:d8: 31:55:a4:fb:95:fc:1f:5d:02:ee:9f:55:ef:2f:91: 6a:e5:18:ea:27:2c:fa:ad:76:20:84:55:9e:5a:d6: 81:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:B1:52:CA:82:CE:B8:89:B5:56:4C:D2:2D:F7:E6:06:6F:78:3D:9E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aef3432e-bd93-4421-a488-604fb43a48a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.66.92.0/22 Signature Algorithm: sha256WithRSAEncryption 33:50:eb:88:0b:9b:92:30:b1:31:50:97:b2:33:cf:6b:a9:b2: 1e:a1:fe:34:14:cd:38:de:b2:0d:f6:a4:1d:f0:a4:a4:c2:08: 3c:77:4c:55:c1:e2:32:72:d7:e3:41:c2:c8:13:0b:9e:fa:c9: d8:18:a5:d6:19:ca:d0:a2:cd:62:11:45:66:69:ce:42:e6:f8: d1:b0:96:fc:c7:27:ce:ce:22:87:14:b9:73:72:de:b3:ef:3c: 69:ea:95:56:e3:82:01:af:a0:97:e0:72:2f:e0:cc:f2:88:39: 57:4f:0f:fd:e5:d3:07:5b:29:a2:c9:f8:b7:5d:cc:15:72:0b: 65:43:aa:d6:3c:e7:35:88:bd:4c:26:4f:ee:37:f3:1e:df:a3: 1f:96:1c:d4:a5:e9:56:10:52:85:9a:13:95:c7:62:c3:f3:c3: 2d:00:f9:31:2d:08:21:88:c8:33:49:08:bd:7f:ad:3d:1e:d7: 86:cf:ed:32:2f:f7:6a:95:f5:33:12:7c:cc:a2:fe:51:c0:64: d0:e3:fc:6f:d8:8e:e5:1c:1d:c5:f4:f0:8e:cd:56:88:1d:6d: 0e:f8:1f:33:e4:da:56:a5:22:53:d1:e6:da:77:e3:c4:aa:91: 51:d0:24:1a:ac:36:99:05:1c:28:f6:39:f3:fe:cf:f9:b3:9f: 37:fa:81:bf -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUyH8P+9F2huJIzNuxKaUyCX7tfcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTQzMDE5WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BiMzg3ZWM3YmRkOWNjNTE5YTAwZjEyODg0YjQ5MDFlMmIz OWQzZmUxY2YzYWFjMzRmOTA1ZDRkMzlmNjk3YjQ2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxw2dVeI8axolvANq3OLGMtXKguvYei3bySfR2zYfZdI5O 00PYZo4bpjNSXkUAu8olFydl7Uc36ejIMtrbM+pB1S131ZnSgG9InPG+KAISSQq3 jv4YiHw+HL/TLhrLpIE5KYZqwjWWG4QsWfZm/vtLI+4zSsCeGoYOZHJjuEPkunQ4 X6lfQniSruuFmAsxYREbJXCF1QGCUHXvL11RQL9hEHV/bGZlEXnmxixKQ5nESklR P7ebMXgAOWVJcdbrfoCT+kLF9wjD3XIM9WMPZ2aac8xY3KX6jJZD++vJ1Cm42DFV pPuV/B9dAu6fVe8vkWrlGOonLPqtdiCEVZ5a1oFTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUgbFSyoLOuIm1VkzSLffmBm94PZ4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2FlZjM0MzJlLWJkOTMtNDQyMS1hNDg4LTYwNGZiNDNhNDhhNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAISQlwwDQYJKoZIhvcNAQELBQADggEBADNQ64gLm5IwsTFQl7Izz2upsh6h /jQUzTjesg32pB3wpKTCCDx3TFXB4jJy1+NBwsgTC576ydgYpdYZytCizWIRRWZp zkLm+NGwlvzHJ87OIocUuXNy3rPvPGnqlVbjggGvoJfgci/gzPKIOVdPD/3l0wdb KaLJ+LddzBVyC2VDqtY85zWIvUwmT+438x7fox+WHNSl6VYQUoWaE5XHYsPzwy0A +TEtCCGIyDNJCL1/rT0e14bP7TIv92qV9TMSfMyi/lHAZNDj/G/YjuUcHcX08I7N VogdbQ74HzPk2lalIlPR5tp348SqkVHQJBqsNpkFHCj2OfP+z/mznzf6gb8= -----END CERTIFICATE-----Generated at Mon Oct 20 02:59:58 2025 by rpki-client