$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/db68ea75-354e-4526-bebc-61cb19d9aba6.roa File: db68ea75-354e-4526-bebc-61cb19d9aba6.roa (raw, json) Hash identifier: 0us2wCrTpa2rWnUhHBJqSQSM1vFtcCe+SMvtH57jgBo= Subject key identifier: DA:D6:AD:12:B3:B6:07:0C:24:91:AB:06:44:8C:76:E1:2F:9E:0F:CF Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 564248856FE36D7C0C90DEC0AC7CDA166AC934B5 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/db68ea75-354e-4526-bebc-61cb19d9aba6.roa Signing time: Sat 18 Oct 2025 13:31:29 +0000 ROA not before: Sat 18 Oct 2025 13:31:29 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.172.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:42:48:85:6f:e3:6d:7c:0c:90:de:c0:ac:7c:da:16:6a:c9:34:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 13:31:29 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=1617245d730fe831735e029619f6c4ddc880c934003ebb97cf654854ee2466ba, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:62:d5:c1:ca:82:33:d2:03:4d:3d:5d:a3:19: 78:8f:1c:66:b3:4b:45:19:11:48:33:1b:a4:05:6a: 3c:44:68:b5:78:f0:1a:78:06:85:47:51:9e:67:f8: 43:f2:34:96:32:8f:6b:c9:63:bc:c4:c2:ca:5c:57: ea:94:ce:5d:c6:56:5d:be:7e:e1:cc:61:71:d1:72: e2:fb:77:0f:2f:80:e2:b9:3c:96:a1:c7:13:ad:55: 7e:39:d3:fe:20:6d:34:4a:d7:91:60:f4:e9:0a:41: 58:e9:3f:3b:fc:71:a9:fe:bd:ec:0b:38:ba:7f:97: 59:38:7c:6b:8a:ac:3f:f6:73:79:ac:14:4e:c8:1b: 2e:99:bc:4d:ff:d7:5e:34:06:e3:e5:ae:37:36:1b: ac:95:51:04:8c:57:7d:a9:09:3a:75:1c:24:81:a8: 43:95:37:98:ce:ec:2d:34:08:bf:09:d8:e4:d7:24: 11:38:76:7f:af:01:75:a1:c9:96:ce:eb:b5:e7:54: b1:c9:97:37:fc:c0:03:31:83:b1:90:8c:b3:6b:86: 2d:d4:75:d8:73:5c:99:30:6c:95:93:2a:6d:85:a1: 27:68:28:15:f2:15:da:48:b9:96:8e:70:42:6f:b8: 21:af:5d:a5:44:d9:5c:19:2f:59:d9:39:77:c9:4c: 57:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:D6:AD:12:B3:B6:07:0C:24:91:AB:06:44:8C:76:E1:2F:9E:0F:CF X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/db68ea75-354e-4526-bebc-61cb19d9aba6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.172.252.0/23 Signature Algorithm: sha256WithRSAEncryption 75:59:7a:75:d8:01:b9:23:cb:8a:94:6d:9e:93:2b:07:c6:a1: df:84:29:43:ed:7f:2b:bc:7e:21:55:e3:13:a2:0b:59:18:9b: 4a:bb:a8:4e:ad:98:34:47:c3:51:4d:19:c7:40:43:09:5a:d9: 69:76:da:48:8b:d6:90:37:72:5a:ea:a9:bb:44:be:b7:27:e7: 01:c1:62:24:dd:37:14:13:9f:0c:9d:ba:76:33:58:e6:44:13: 62:4a:ce:af:04:ed:d3:d8:78:55:02:22:f8:61:33:21:19:a1: c3:95:31:76:42:f2:fc:f7:95:96:9a:1b:15:f9:6c:9d:f7:5b: 45:1f:6c:d3:c0:69:8c:0f:3e:ab:ac:1c:1e:3d:85:8d:02:35: ea:97:1d:25:93:26:89:44:a7:26:d1:52:11:21:70:40:ef:3a: 9a:ff:d9:c4:bf:06:4c:34:64:94:57:d4:ff:9f:b9:e6:96:90: 7b:40:45:eb:d3:cf:5e:cc:32:c5:8c:48:01:96:a7:89:38:f4: bc:fd:ea:c3:93:c4:67:0b:f3:e7:8f:08:df:59:81:8b:00:cc: ac:74:cf:02:42:77:29:64:37:fa:8b:a3:44:1d:e3:a4:7b:18: 94:33:46:e4:72:8b:91:fc:3e:85:1b:31:05:62:28:b4:48:22: dc:cb:fa:91 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVkJIhW/jbXwMkN7ArHzaFmrJNLUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTMzMTI5WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AxNjE3MjQ1ZDczMGZlODMxNzM1ZTAyOTYxOWY2YzRkZGM4 ODBjOTM0MDAzZWJiOTdjZjY1NDg1NGVlMjQ2NmJhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6YtXByoIz0gNNPV2jGXiPHGazS0UZEUgzG6QFajxEaLV4 8Bp4BoVHUZ5n+EPyNJYyj2vJY7zEwspcV+qUzl3GVl2+fuHMYXHRcuL7dw8vgOK5 PJahxxOtVX450/4gbTRK15Fg9OkKQVjpPzv8can+vewLOLp/l1k4fGuKrD/2c3ms FE7IGy6ZvE3/1140BuPlrjc2G6yVUQSMV32pCTp1HCSBqEOVN5jO7C00CL8J2OTX JBE4dn+vAXWhyZbO67XnVLHJlzf8wAMxg7GQjLNrhi3UddhzXJkwbJWTKm2FoSdo KBXyFdpIuZaOcEJvuCGvXaVE2VwZL1nZOXfJTFfxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU2tatErO2BwwkkasGRIx24S+eD88wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2RiNjhlYTc1LTM1NGUtNDUyNi1iZWJjLTYxY2IxOWQ5YWJhNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESrPwwDQYJKoZIhvcNAQELBQADggEBAHVZenXYAbkjy4qUbZ6TKwfGod+E KUPtfyu8fiFV4xOiC1kYm0q7qE6tmDRHw1FNGcdAQwla2Wl22kiL1pA3clrqqbtE vrcn5wHBYiTdNxQTnwydunYzWOZEE2JKzq8E7dPYeFUCIvhhMyEZocOVMXZC8vz3 lZaaGxX5bJ33W0UfbNPAaYwPPqusHB49hY0CNeqXHSWTJolEpybRUhEhcEDvOpr/ 2cS/Bkw0ZJRX1P+fueaWkHtARevTz17MMsWMSAGWp4k49Lz96sOTxGcL8+ePCN9Z gYsAzKx0zwJCdylkN/qLo0Qd46R7GJQzRuRyi5H8PoUbMQViKLRIItzL+pE= -----END CERTIFICATE-----Generated at Mon Oct 20 06:06:40 2025 by rpki-client