$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d56f57af-3d67-4269-8e24-af2f39542e51.roa File: d56f57af-3d67-4269-8e24-af2f39542e51.roa (raw, json) Hash identifier: s/fuZWMcpXRrMJS1BNS3rERLFFmMT17/TquC3tUfDdg= Subject key identifier: 72:C1:F3:97:96:F6:CB:5E:C8:8B:64:94:CB:2B:52:FF:39:8A:4F:90 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3CAEE488710EA46E9258413542073AD6530DBF3D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d56f57af-3d67-4269-8e24-af2f39542e51.roa Signing time: Sun 19 Oct 2025 19:30:18 +0000 ROA not before: Sun 19 Oct 2025 19:30:18 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.66.110.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:ae:e4:88:71:0e:a4:6e:92:58:41:35:42:07:3a:d6:53:0d:bf:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 19:30:18 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=41baadc2a4d509537c66b8da350939941e887d4e47ac303d3c1a15556d455f7f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:0a:3b:7d:d6:be:15:2b:b9:eb:d2:c0:ce:00: c6:01:a9:7f:4f:27:78:af:77:78:4d:ce:83:35:90: 34:ad:50:07:66:db:65:3a:88:44:24:3d:69:42:58: 22:f4:59:ef:b0:98:ba:a5:76:90:a8:f9:a9:8d:ab: 6b:67:9a:6b:81:ac:5e:61:4d:f2:81:27:b8:04:b5: 7f:13:00:1c:20:df:7b:e5:4e:90:3d:ac:0c:97:44: a0:3e:63:ec:a9:e6:7b:4a:b4:49:00:5c:f7:b0:a3: 55:ff:16:d0:21:35:61:54:40:24:1f:83:9b:b2:00: 8e:18:29:0b:f3:8f:6e:12:d2:b6:1d:64:50:37:ae: 33:2a:fa:ff:55:ce:0a:fe:9f:50:9f:02:b0:a8:63: e3:6e:47:d3:f7:f1:8b:d1:bf:ee:32:b9:87:39:70: 82:0d:53:8e:94:48:06:89:ef:0e:7b:02:11:0d:5c: 1f:d9:96:94:b2:06:8d:a1:ee:5b:65:0b:0b:a8:1b: 43:72:70:b1:63:55:da:1f:85:58:4e:38:5e:60:46: 91:73:34:43:12:1c:a2:80:55:08:1a:16:98:91:21: 65:6b:12:76:4b:61:a7:ff:d9:c3:ef:a4:00:b9:1d: 21:9a:83:6d:59:a6:f0:58:db:ac:a8:14:93:1b:e6: 71:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:C1:F3:97:96:F6:CB:5E:C8:8B:64:94:CB:2B:52:FF:39:8A:4F:90 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d56f57af-3d67-4269-8e24-af2f39542e51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.66.110.0/23 Signature Algorithm: sha256WithRSAEncryption 7b:2e:ca:1d:20:c8:2b:ce:36:79:d3:14:07:00:2e:a4:15:6b: eb:12:a1:c3:87:87:40:d7:c6:f4:17:b9:5e:e0:bd:f2:4e:c7: aa:4d:fd:c7:a9:47:77:c5:c3:41:f8:77:aa:84:ee:d2:95:a9: ff:80:b7:39:49:56:69:45:f7:4c:0f:08:96:d4:8f:a6:03:4d: c3:b7:46:3e:f6:32:9b:fd:1d:f0:fe:2f:e5:e5:b7:e0:b0:b3: 2d:84:ef:39:a6:6f:72:51:36:24:b4:b1:52:e8:17:a9:34:62: 42:0e:25:83:81:30:14:c0:5d:a6:2c:38:d0:7e:df:1c:9a:b3: f1:17:8d:8e:d0:6f:1f:83:2e:19:02:ef:94:43:ee:bc:a2:7e: eb:4e:a2:4a:6b:e5:f6:9a:20:30:33:51:39:4a:a1:84:c6:48: 71:eb:e6:a6:86:49:64:09:78:eb:03:cc:a0:04:c1:f9:9c:c9: 40:f4:2d:80:30:5a:fb:9b:8e:8b:c9:bf:ed:df:98:2a:fb:f7: 26:71:27:89:58:40:9c:55:4d:3f:1a:88:ae:8a:4c:2a:7f:fa: 25:a9:e8:57:6e:2e:0e:a6:1c:33:0c:be:1c:a1:a5:85:d4:80: 1b:13:9d:5a:83:fe:2a:e1:40:23:22:7a:4e:e3:ee:ac:19:68: cf:27:d1:cf -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPK7kiHEOpG6SWEE1Qgc61lMNvz0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTkzMDE4WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A0MWJhYWRjMmE0ZDUwOTUzN2M2NmI4ZGEzNTA5Mzk5NDFl ODg3ZDRlNDdhYzMwM2QzYzFhMTU1NTZkNDU1ZjdmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDVCjt91r4VK7nr0sDOAMYBqX9PJ3ivd3hNzoM1kDStUAdm 22U6iEQkPWlCWCL0We+wmLqldpCo+amNq2tnmmuBrF5hTfKBJ7gEtX8TABwg33vl TpA9rAyXRKA+Y+yp5ntKtEkAXPewo1X/FtAhNWFUQCQfg5uyAI4YKQvzj24S0rYd ZFA3rjMq+v9Vzgr+n1CfArCoY+NuR9P38YvRv+4yuYc5cIINU46USAaJ7w57AhEN XB/ZlpSyBo2h7ltlCwuoG0NycLFjVdofhVhOOF5gRpFzNEMSHKKAVQgaFpiRIWVr EnZLYaf/2cPvpAC5HSGag21ZpvBY26yoFJMb5nGjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUcsHzl5b2y17Ii2SUyytS/zmKT5AwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2Q1NmY1N2FmLTNkNjctNDI2OS04ZTI0LWFmMmYzOTU0MmU1MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESQm4wDQYJKoZIhvcNAQELBQADggEBAHsuyh0gyCvONnnTFAcALqQVa+sS ocOHh0DXxvQXuV7gvfJOx6pN/cepR3fFw0H4d6qE7tKVqf+AtzlJVmlF90wPCJbU j6YDTcO3Rj72Mpv9HfD+L+Xlt+Cwsy2E7zmmb3JRNiS0sVLoF6k0YkIOJYOBMBTA XaYsONB+3xyas/EXjY7Qbx+DLhkC75RD7ryifutOokpr5faaIDAzUTlKoYTGSHHr 5qaGSWQJeOsDzKAEwfmcyUD0LYAwWvubjovJv+3fmCr79yZxJ4lYQJxVTT8aiK6K TCp/+iWp6FduLg6mHDMMvhyhpYXUgBsTnVqD/irhQCMiek7j7qwZaM8n0c8= -----END CERTIFICATE-----Generated at Mon Oct 20 02:59:26 2025 by rpki-client