$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b17b262c-cf54-41ec-8c19-066c7c196a34.roa File: b17b262c-cf54-41ec-8c19-066c7c196a34.roa (raw, json) Hash identifier: HUal0erOyfraeu8AKIOGVhPl4u5TW6VOtH/vW9XImDg= Subject key identifier: A9:AC:13:58:7D:BB:41:DA:70:C0:A9:7D:7A:95:1C:49:F5:5E:D9:1E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 72F977CBB0F7F9F18426CBAA21BDCC6A14E36BDF Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b17b262c-cf54-41ec-8c19-066c7c196a34.roa Signing time: Sun 19 Oct 2025 14:26:53 +0000 ROA not before: Sun 19 Oct 2025 14:26:53 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.64.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:f9:77:cb:b0:f7:f9:f1:84:26:cb:aa:21:bd:cc:6a:14:e3:6b:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 14:26:53 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=efbb8149d7ea576b4eb1f66cbdbfe45856810ddfedc01f2fe2006ff2b335b898, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c2:16:cf:f3:30:ab:a6:2b:cf:79:d5:c7:94: 9c:b0:f4:7e:a2:0d:76:b4:fc:4e:0a:5a:7b:0e:5d: 9b:9e:f0:14:f2:fc:a6:4e:12:43:e9:bd:b9:c0:b8: e1:66:d1:27:80:04:85:17:df:d0:ac:9c:a4:57:1e: b0:08:90:67:ea:00:94:4a:fa:51:1f:11:ab:f6:59: 76:72:d3:2c:39:dc:3b:0b:72:9c:9d:d0:ef:fe:e7: b0:04:82:75:ba:86:09:54:3d:a2:ac:39:84:fb:38: 58:b4:75:ff:48:c2:7b:d0:d4:f2:91:7c:8e:cb:7f: 0d:24:19:46:87:df:6b:d8:70:16:5a:17:08:15:b0: f1:d4:5d:36:a2:d7:06:f0:25:54:fd:94:b5:f7:40: e5:9e:c2:f2:bd:f4:83:1d:c6:d6:bd:77:32:1a:d3: bd:7d:33:a0:62:ad:c0:87:d1:99:01:cb:be:eb:6c: e1:e0:6b:f2:b2:1c:2a:bb:e9:df:2a:9b:e5:19:02: 13:f4:a3:c1:c7:5f:0a:d8:a0:da:b5:3d:85:fd:00: 8f:2c:6e:ba:5d:c6:fa:e9:29:a9:7a:4b:7b:74:6c: 48:a2:58:0f:cc:bd:85:c9:1a:58:9a:9c:7b:be:02: c7:cf:c2:27:11:cb:57:ff:f1:82:81:33:60:31:a7: dc:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:AC:13:58:7D:BB:41:DA:70:C0:A9:7D:7A:95:1C:49:F5:5E:D9:1E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b17b262c-cf54-41ec-8c19-066c7c196a34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.64.242.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:13:5e:8a:bd:b3:76:d0:84:22:cb:3b:ec:8a:85:e9:71:53: 6e:1c:d2:aa:3e:1f:23:94:75:4f:43:0e:3e:2c:c3:8b:c9:dd: 13:95:7d:61:9a:a7:2e:56:33:de:9f:c1:d5:d0:c5:bf:dc:34: ba:8d:97:88:04:a4:cb:87:7a:15:c3:7b:ce:74:a5:b9:77:4f: 2a:0b:df:ad:28:49:28:72:8d:98:4a:79:e6:99:82:2f:60:75: 1c:57:f8:7a:5a:d5:fc:b3:8a:00:a2:f2:d4:23:10:db:ad:8f: 49:6e:2e:ad:a3:c5:a1:2b:2b:e4:3b:7b:92:f2:84:50:6d:4c: 54:77:d0:19:06:c9:cd:e8:e3:4b:09:7d:93:3d:9d:44:c1:85: 42:f3:c4:85:d9:4c:17:c9:cd:d8:56:4a:52:7e:9e:1b:e9:d1: 5a:38:49:b9:b8:8b:93:1a:85:cd:59:ae:de:c2:09:a3:5d:99: 25:56:13:98:d7:96:cf:bb:3a:32:2b:1a:fa:31:fb:c5:2e:12: 2b:43:cf:5d:f5:c4:37:8a:fb:99:88:82:71:3d:8f:05:c6:79: 1c:21:29:f6:9d:5a:2d:9f:b8:5e:a2:94:60:a3:94:b1:58:e8: af:33:a5:2d:17:04:22:bb:65:04:f7:5f:fb:34:62:63:d8:20: 2e:50:94:85 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcvl3y7D3+fGEJsuqIb3MahTja98wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTQyNjUzWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BlZmJiODE0OWQ3ZWE1NzZiNGViMWY2NmNiZGJmZTQ1ODU2 ODEwZGRmZWRjMDFmMmZlMjAwNmZmMmIzMzViODk4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCswhbP8zCrpivPedXHlJyw9H6iDXa0/E4KWnsOXZue8BTy /KZOEkPpvbnAuOFm0SeABIUX39CsnKRXHrAIkGfqAJRK+lEfEav2WXZy0yw53DsL cpyd0O/+57AEgnW6hglUPaKsOYT7OFi0df9IwnvQ1PKRfI7Lfw0kGUaH32vYcBZa FwgVsPHUXTai1wbwJVT9lLX3QOWewvK99IMdxta9dzIa0719M6BircCH0ZkBy77r bOHga/KyHCq76d8qm+UZAhP0o8HHXwrYoNq1PYX9AI8sbrpdxvrpKal6S3t0bEii WA/MvYXJGlianHu+AsfPwicRy1f/8YKBM2Axp9xxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUqawTWH27QdpwwKl9epUcSfVe2R4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2IxN2IyNjJjLWNmNTQtNDFlYy04YzE5LTA2NmM3YzE5NmEzNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASQPIwDQYJKoZIhvcNAQELBQADggEBAB4TXoq9s3bQhCLLO+yKhelxU24c 0qo+HyOUdU9DDj4sw4vJ3ROVfWGapy5WM96fwdXQxb/cNLqNl4gEpMuHehXDe850 pbl3TyoL360oSShyjZhKeeaZgi9gdRxX+Hpa1fyzigCi8tQjENutj0luLq2jxaEr K+Q7e5LyhFBtTFR30BkGyc3o40sJfZM9nUTBhULzxIXZTBfJzdhWSlJ+nhvp0Vo4 Sbm4i5Mahc1Zrt7CCaNdmSVWE5jXls+7OjIrGvox+8UuEitDz131xDeK+5mIgnE9 jwXGeRwhKfadWi2fuF6ilGCjlLFY6K8zpS0XBCK7ZQT3X/s0YmPYIC5QlIU= -----END CERTIFICATE-----Generated at Mon Oct 20 15:48:27 2025 by rpki-client