$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b8602561-3ed2-41f6-a9f4-c8319a84a4e1.roa File: b8602561-3ed2-41f6-a9f4-c8319a84a4e1.roa (raw, json) Hash identifier: lgpb3R4X4Hb2pT6Stv2E3mW1PGcTlwRE4YQ0xmV/lTw= Subject key identifier: A9:7B:5A:FF:02:26:BE:39:3A:E5:4C:E6:C2:37:DB:90:69:FD:37:D4 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1F99DF24475EFB45A69032A901F796E44C244B2D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b8602561-3ed2-41f6-a9f4-c8319a84a4e1.roa Signing time: Sun 19 Oct 2025 11:13:41 +0000 ROA not before: Sun 19 Oct 2025 11:13:41 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.64.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:99:df:24:47:5e:fb:45:a6:90:32:a9:01:f7:96:e4:4c:24:4b:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 11:13:41 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=572684e54bf61c9810512b4ae16d1e8350f1c6fcc2b618ffa5cc5ae195a90326, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b9:98:d3:4b:4c:31:9d:67:92:15:11:ee:cd: c0:b9:9a:b7:48:91:73:0d:6d:31:bf:92:f5:11:ed: e9:99:e2:d1:dd:bf:c6:90:6b:33:3d:96:74:00:b8: e0:03:5c:f3:f4:44:57:9d:05:74:f7:2f:81:1f:78: 1d:69:4b:9f:7c:71:7f:b4:ba:23:e7:be:77:39:d1: 21:96:28:84:3f:bd:38:46:5a:5c:7d:9b:69:36:11: b9:83:d2:39:d7:aa:55:44:c3:f9:6a:fa:51:3a:a8: 29:78:58:dc:ca:24:48:60:5b:06:1a:23:f2:c7:7f: 1b:f6:cb:64:ee:28:b6:7a:d2:da:16:f8:e5:e5:47: 89:74:b7:c5:bd:e8:9b:a2:94:59:5c:f2:b5:4d:c2: d3:32:86:7f:fa:11:51:77:bd:8f:0c:61:56:f1:a1: f2:dc:1c:2c:81:83:a2:51:9d:f9:f0:20:b1:f9:54: b4:7f:34:e2:50:fd:25:c4:62:09:ad:f3:4f:75:a8: 79:5a:5e:31:d3:d4:41:73:f6:5c:f4:4e:7e:e5:bd: 9a:2c:e7:f2:88:22:e7:78:b7:86:a9:4e:d7:0e:46: 57:d4:89:76:dd:af:68:49:5a:19:7c:74:2e:21:a8: 42:d3:ed:80:7c:ee:2e:82:e5:b9:4b:52:9e:49:09: a0:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:7B:5A:FF:02:26:BE:39:3A:E5:4C:E6:C2:37:DB:90:69:FD:37:D4 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b8602561-3ed2-41f6-a9f4-c8319a84a4e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.64.0.0/14 Signature Algorithm: sha256WithRSAEncryption 37:cd:bb:97:4d:c8:12:4c:73:1b:50:e5:43:2c:e6:01:28:65: 21:ba:af:a5:ca:a0:4c:07:7f:6e:8a:fe:28:d2:1d:eb:82:fb: 21:f1:ca:1c:ec:ef:d8:dc:fc:23:c5:a7:ba:71:c9:e5:60:fa: 51:e2:d6:9f:df:d9:da:26:88:89:dd:19:d6:6d:bb:43:c7:9a: 07:08:de:12:d1:73:64:8a:bb:43:6b:26:17:65:12:99:1b:68: 0c:8c:8e:df:0e:21:31:13:3f:27:e9:56:e5:64:46:98:17:5b: 60:a1:f2:a0:22:72:b8:93:39:f8:60:66:0b:2f:5f:58:b6:05: 08:d6:a1:40:ab:81:54:c9:e6:9e:29:29:77:9d:34:aa:2c:0c: e4:a9:1b:04:da:bf:73:f7:dc:4f:74:01:e6:d5:c6:4e:af:69: ff:92:c8:ae:9c:53:90:56:58:e4:95:3d:fa:ff:be:0f:12:fe: c8:77:f3:ef:7c:17:86:a1:e8:f5:6b:17:66:f8:eb:4c:27:e7: 71:b4:74:d9:2e:9d:ca:c6:73:9f:72:9d:99:83:2c:9c:75:6a: b6:4c:aa:e1:0a:c0:d6:40:f1:a0:9f:28:3c:e0:da:f5:bc:d9: e5:cb:3d:fc:39:3e:a4:92:dc:a5:2f:a2:19:95:3b:84:c4:93: d7:1d:7e:13 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUH5nfJEde+0WmkDKpAfeW5EwkSy0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTExMzQxWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A1NzI2ODRlNTRiZjYxYzk4MTA1MTJiNGFlMTZkMWU4MzUw ZjFjNmZjYzJiNjE4ZmZhNWNjNWFlMTk1YTkwMzI2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCcuZjTS0wxnWeSFRHuzcC5mrdIkXMNbTG/kvUR7emZ4tHd v8aQazM9lnQAuOADXPP0RFedBXT3L4EfeB1pS598cX+0uiPnvnc50SGWKIQ/vThG Wlx9m2k2EbmD0jnXqlVEw/lq+lE6qCl4WNzKJEhgWwYaI/LHfxv2y2TuKLZ60toW +OXlR4l0t8W96JuilFlc8rVNwtMyhn/6EVF3vY8MYVbxofLcHCyBg6JRnfnwILH5 VLR/NOJQ/SXEYgmt8091qHlaXjHT1EFz9lz0Tn7lvZos5/KIIud4t4apTtcORlfU iXbdr2hJWhl8dC4hqELT7YB87i6C5blLUp5JCaBLAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUqXta/wImvjk65UzmwjfbkGn9N9QwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2I4NjAyNTYxLTNlZDItNDFmNi1hOWY0LWM4MzE5YTg0YTRlMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwISQDANBgkqhkiG9w0BAQsFAAOCAQEAN827l03IEkxzG1DlQyzmAShlIbqv pcqgTAd/bor+KNId64L7IfHKHOzv2Nz8I8WnunHJ5WD6UeLWn9/Z2iaIid0Z1m27 Q8eaBwjeEtFzZIq7Q2smF2USmRtoDIyO3w4hMRM/J+lW5WRGmBdbYKHyoCJyuJM5 +GBmCy9fWLYFCNahQKuBVMnmnikpd500qiwM5KkbBNq/c/fcT3QB5tXGTq9p/5LI rpxTkFZY5JU9+v++DxL+yHfz73wXhqHo9WsXZvjrTCfncbR02S6dysZzn3KdmYMs nHVqtkyq4QrA1kDxoJ8oPODa9bzZ5cs9/Dk+pJLcpS+iGZU7hMST1x1+Ew== -----END CERTIFICATE-----Generated at Mon Oct 20 20:26:57 2025 by rpki-client