$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c7c94200-cf1d-430e-b6e2-9f99af4d93ac.roa File: c7c94200-cf1d-430e-b6e2-9f99af4d93ac.roa (raw, json) Hash identifier: gWgbYRMTcPCe8505l6bov3r5/fWzQTb4GS22HBTevvI= Subject key identifier: A7:27:F4:E0:B7:F7:AB:B2:EC:F8:57:0E:88:D3:BA:D8:25:BB:70:1F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 29148EB87FD302F6F72E75A6805FF64103C81068 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c7c94200-cf1d-430e-b6e2-9f99af4d93ac.roa Signing time: Sun 19 Oct 2025 19:21:33 +0000 ROA not before: Sun 19 Oct 2025 19:21:33 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.64.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:14:8e:b8:7f:d3:02:f6:f7:2e:75:a6:80:5f:f6:41:03:c8:10:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 19:21:33 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=ec45849f720eae80b108f0d82225755278221c94dad20ef5f3f9fdc683a96afd, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:87:b4:b9:cb:11:21:dc:d4:c8:11:07:e7:0a: ea:3e:9b:46:59:5e:4b:49:de:23:84:e7:1a:94:80: f0:e7:71:1c:24:40:6f:70:ea:61:6a:3f:36:5e:7c: 9e:b4:48:e1:c9:25:fb:a1:f5:77:53:30:bd:7d:9d: d4:5c:a9:a6:dd:c0:59:6f:06:9d:e2:a9:d5:a6:2f: ed:77:70:0b:f4:62:ee:de:44:2b:ef:3f:92:92:9b: bc:d6:96:c8:83:3a:b3:b0:c5:4b:05:80:ed:dc:4e: 88:22:d6:1b:21:28:97:9e:e5:4a:a9:53:bc:17:5e: b1:90:c7:00:e0:78:02:35:25:d5:38:e1:88:15:49: 18:46:c7:78:a1:22:b5:b0:b6:33:05:df:5b:8e:4a: 45:c2:b9:d1:d4:e0:5a:70:75:ff:a1:89:c1:64:26: 3a:a0:2c:86:6c:a4:f2:d5:85:bd:18:bd:0b:29:b3: 00:53:56:55:52:79:f2:e7:69:ae:a1:6b:a2:0e:cc: e7:72:d3:b6:70:ca:0a:95:0b:e9:bc:23:4b:10:2c: 11:f5:8f:9a:55:1e:5c:3c:84:ff:95:8f:f0:e2:2b: f6:1d:b5:3f:40:b7:d3:9d:c2:68:11:2b:94:a6:39: f1:c2:7f:b9:7a:39:3d:e4:44:9e:79:97:f0:bb:4a: e4:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:27:F4:E0:B7:F7:AB:B2:EC:F8:57:0E:88:D3:BA:D8:25:BB:70:1F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c7c94200-cf1d-430e-b6e2-9f99af4d93ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.64.32.0/21 Signature Algorithm: sha256WithRSAEncryption 03:4f:25:6d:02:e6:1e:18:01:c8:f5:6f:af:f6:d2:d6:0e:ad: 78:35:cc:10:18:af:f5:b6:73:c1:d8:c8:bf:50:42:35:f7:01: ad:6b:f6:24:1b:43:f8:bb:ed:85:9d:eb:8d:f0:ba:52:65:a9: 2e:26:1f:95:a0:f9:e9:01:11:85:05:38:63:bd:96:6d:f2:90: d0:1c:55:e9:4d:10:3d:22:78:7c:46:a1:5a:03:7d:d7:fd:a5: 32:93:01:9a:37:ac:db:db:a8:a8:a0:14:5f:b9:bc:3e:04:37: 1b:0b:37:bc:e8:9a:a4:80:95:e0:8a:27:99:fd:ef:aa:5c:35: f7:9a:55:85:51:f2:61:4e:ed:9f:e9:32:2d:1d:b9:66:e5:c7: a3:0d:0c:11:a4:66:2d:8c:8a:47:23:c6:2f:73:9b:d8:70:43: a3:ae:70:5e:ad:ea:8c:0b:64:e9:54:ef:aa:aa:ae:0a:67:90: f1:85:e0:4a:1d:12:5b:d6:90:ac:7d:0d:9d:cc:4a:eb:82:79: 2b:3e:10:22:76:67:af:8e:18:e8:0b:3d:95:41:0b:68:ee:a6: 87:f1:ec:95:7d:44:1a:32:99:9c:33:43:65:4e:3c:04:34:e6: 70:2e:01:cc:7c:a2:ef:74:ca:e5:28:bb:33:4d:ac:60:46:1b: 0b:30:95:37 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKRSOuH/TAvb3LnWmgF/2QQPIEGgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTkyMTMzWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BlYzQ1ODQ5ZjcyMGVhZTgwYjEwOGYwZDgyMjI1NzU1Mjc4 MjIxYzk0ZGFkMjBlZjVmM2Y5ZmRjNjgzYTk2YWZkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCah7S5yxEh3NTIEQfnCuo+m0ZZXktJ3iOE5xqUgPDncRwk QG9w6mFqPzZefJ60SOHJJfuh9XdTML19ndRcqabdwFlvBp3iqdWmL+13cAv0Yu7e RCvvP5KSm7zWlsiDOrOwxUsFgO3cTogi1hshKJee5UqpU7wXXrGQxwDgeAI1JdU4 4YgVSRhGx3ihIrWwtjMF31uOSkXCudHU4Fpwdf+hicFkJjqgLIZspPLVhb0YvQsp swBTVlVSefLnaa6ha6IOzOdy07ZwygqVC+m8I0sQLBH1j5pVHlw8hP+Vj/DiK/Yd tT9At9OdwmgRK5SmOfHCf7l6OT3kRJ55l/C7SuTPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUpyf04Lf3q7Ls+FcOiNO62CW7cB8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2M3Yzk0MjAwLWNmMWQtNDMwZS1iNmUyLTlmOTlhZjRkOTNhYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMSQCAwDQYJKoZIhvcNAQELBQADggEBAANPJW0C5h4YAcj1b6/20tYOrXg1 zBAYr/W2c8HYyL9QQjX3Aa1r9iQbQ/i77YWd643wulJlqS4mH5Wg+ekBEYUFOGO9 lm3ykNAcVelNED0ieHxGoVoDfdf9pTKTAZo3rNvbqKigFF+5vD4ENxsLN7zomqSA leCKJ5n976pcNfeaVYVR8mFO7Z/pMi0duWblx6MNDBGkZi2Mikcjxi9zm9hwQ6Ou cF6t6owLZOlU76qqrgpnkPGF4EodElvWkKx9DZ3MSuuCeSs+ECJ2Z6+OGOgLPZVB C2jupofx7JV9RBoymZwzQ2VOPAQ05nAuAcx8ou90yuUouzNNrGBGGwswlTc= -----END CERTIFICATE-----Generated at Mon Oct 20 15:44:19 2025 by rpki-client