$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bbac8000-1c57-4ab4-b3aa-f4d82f03769f.roa File: bbac8000-1c57-4ab4-b3aa-f4d82f03769f.roa (raw, json) Hash identifier: 5C9LN+r3jc0sE2iEnZHO2MyYN57zjQyIKC094gjNvnU= Subject key identifier: 46:21:E3:AA:D3:7B:3C:26:F7:DC:C5:16:71:83:46:20:00:EF:DB:E2 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0D5D56239E16CCF67EC00446DE151400760DD6E4 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bbac8000-1c57-4ab4-b3aa-f4d82f03769f.roa Signing time: Sun 19 Oct 2025 16:41:33 +0000 ROA not before: Sun 19 Oct 2025 16:41:33 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.67.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:5d:56:23:9e:16:cc:f6:7e:c0:04:46:de:15:14:00:76:0d:d6:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 16:41:33 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=55362e7d6f31d0ffce0ed7e5e9b2282cac2af4d6ef7346e4a4624d056c7a5362, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1a:6b:9e:6d:67:48:9d:c2:04:61:94:6f:c1: 50:df:36:b3:6e:47:44:4d:61:ec:d3:b3:06:12:53: 3a:02:a0:31:4e:89:16:8d:fd:fe:63:00:b8:1e:60: 10:3e:ba:b6:a3:41:3f:37:c5:a4:35:6c:a6:52:f9: 78:be:e2:f9:ea:1f:db:a1:82:14:d6:8f:d9:0d:04: 25:b9:ad:5e:6d:9f:f4:4a:44:9f:01:82:7a:62:28: a6:42:0e:f8:19:ed:9c:5c:b3:51:95:13:5e:3b:a9: 1d:e1:27:e2:fa:3e:c1:85:c1:91:9e:43:ac:bd:21: 3a:25:38:10:37:64:ba:a1:ce:19:f9:21:73:11:af: c9:3b:2f:af:94:97:a2:65:1c:88:63:d8:92:df:79: 5a:6c:8a:ec:ba:2c:bc:f6:bc:5a:35:c3:2a:ac:0a: 0e:02:67:6f:0f:0e:5e:e6:99:57:d8:0a:62:f5:50: ab:98:51:37:bf:96:1f:ad:3b:f7:4e:cf:9f:1c:9f: aa:4c:36:60:df:02:78:ad:cf:9b:f1:4a:6c:78:ba: 40:6e:0e:1e:c1:05:d5:b9:5a:f4:84:24:26:5f:c0: e8:d1:3d:4b:18:0a:59:5a:5d:bc:d8:4e:bd:61:0c: 03:41:2e:1f:d4:46:cc:1a:eb:d9:16:7e:9a:30:c9: a3:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:21:E3:AA:D3:7B:3C:26:F7:DC:C5:16:71:83:46:20:00:EF:DB:E2 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bbac8000-1c57-4ab4-b3aa-f4d82f03769f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.67.65.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:69:c5:f4:96:cf:30:22:59:e6:8b:b8:12:4c:3a:0d:66:c3: 7f:7d:db:50:46:25:52:15:c1:3b:e4:24:a3:a8:97:10:9f:9e: 56:01:c6:6e:c1:60:f8:38:77:87:6f:52:d4:19:37:9a:91:17: e3:7e:eb:18:71:35:a1:5a:44:2b:1b:55:55:0a:75:2d:32:78: b9:e1:2c:bc:c7:be:2b:b4:23:d5:c6:eb:6a:e5:7c:54:50:f3: ee:b3:3f:0b:87:94:45:a6:23:10:bf:91:80:04:23:02:fc:a2: d8:95:bf:3e:fd:e0:47:4c:49:fd:18:e1:23:f7:65:e3:36:fb: 8e:76:78:12:cb:94:6c:d9:8d:a8:86:38:bf:f2:ea:71:10:b3: fb:1d:15:f8:8d:b1:fd:b4:f6:06:af:ee:61:a0:a0:e8:66:85: e2:7f:3f:20:32:ef:01:e5:0d:6d:1f:0e:47:19:af:bc:c7:2e: 11:7f:41:0f:e7:a2:ef:bf:e9:0e:30:19:f4:7c:bf:c2:d6:44: 7e:34:99:0d:ab:c5:dc:40:4b:85:80:2a:36:a2:ea:d0:99:e4: 13:84:1f:8d:d2:fb:fb:16:0e:96:c1:91:ee:79:28:c6:c0:85: f5:1d:7f:a8:35:29:e4:52:fb:7e:f7:a9:b5:26:fa:9a:57:23: 4a:87:df:2e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDV1WI54WzPZ+wARG3hUUAHYN1uQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTY0MTMzWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A1NTM2MmU3ZDZmMzFkMGZmY2UwZWQ3ZTVlOWIyMjgyY2Fj MmFmNGQ2ZWY3MzQ2ZTRhNDYyNGQwNTZjN2E1MzYyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpGmuebWdIncIEYZRvwVDfNrNuR0RNYezTswYSUzoCoDFO iRaN/f5jALgeYBA+urajQT83xaQ1bKZS+Xi+4vnqH9uhghTWj9kNBCW5rV5tn/RK RJ8BgnpiKKZCDvgZ7Zxcs1GVE147qR3hJ+L6PsGFwZGeQ6y9ITolOBA3ZLqhzhn5 IXMRr8k7L6+Ul6JlHIhj2JLfeVpsiuy6LLz2vFo1wyqsCg4CZ28PDl7mmVfYCmL1 UKuYUTe/lh+tO/dOz58cn6pMNmDfAnitz5vxSmx4ukBuDh7BBdW5WvSEJCZfwOjR PUsYCllaXbzYTr1hDANBLh/URswa69kWfpowyaP1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQURiHjqtN7PCb33MUWcYNGIADv2+IwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2JiYWM4MDAwLTFjNTctNGFiNC1iM2FhLWY0ZDgyZjAzNzY5Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASQ0EwDQYJKoZIhvcNAQELBQADggEBAHppxfSWzzAiWeaLuBJMOg1mw399 21BGJVIVwTvkJKOolxCfnlYBxm7BYPg4d4dvUtQZN5qRF+N+6xhxNaFaRCsbVVUK dS0yeLnhLLzHviu0I9XG62rlfFRQ8+6zPwuHlEWmIxC/kYAEIwL8otiVvz794EdM Sf0Y4SP3ZeM2+452eBLLlGzZjaiGOL/y6nEQs/sdFfiNsf209gav7mGgoOhmheJ/ PyAy7wHlDW0fDkcZr7zHLhF/QQ/nou+/6Q4wGfR8v8LWRH40mQ2rxdxAS4WAKjai 6tCZ5BOEH43S+/sWDpbBke55KMbAhfUdf6g1KeRS+373qbUm+ppXI0qH3y4= -----END CERTIFICATE-----Generated at Mon Oct 20 11:09:26 2025 by rpki-client