$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dc1f34be-5eb2-4392-a450-8494253b9e36.roa File: dc1f34be-5eb2-4392-a450-8494253b9e36.roa (raw, json) Hash identifier: 8Jj/1H19agI9vN2OWcurQ6NbSpEEC7FWDMJfmT3J9U4= Subject key identifier: F5:64:B4:DD:F0:13:86:58:53:D0:B0:91:85:17:F3:C0:55:7E:A6:00 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 671B9E31E67E0F3AF53B7F075891CF77F18C589E Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dc1f34be-5eb2-4392-a450-8494253b9e36.roa Signing time: Sun 19 Oct 2025 21:00:13 +0000 ROA not before: Sun 19 Oct 2025 21:00:13 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.64.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:1b:9e:31:e6:7e:0f:3a:f5:3b:7f:07:58:91:cf:77:f1:8c:58:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 21:00:13 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=809a91a4fdaf691c343014cca552dfbd636cd0fac0f9c241bc9082899f3ba637, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:79:37:8d:67:dc:d2:01:fa:10:68:82:d7:93: 5b:2b:7d:68:df:f9:f8:54:86:4e:b8:f5:07:bc:46: 1f:1e:4d:6d:77:5a:ba:64:b2:3a:31:63:8d:a2:66: 32:6f:55:2d:49:2b:6e:d4:d7:82:31:dd:59:1b:ea: 29:9d:44:d4:52:d7:fe:d1:50:43:ec:68:73:ba:48: 44:87:06:a9:1d:a4:26:30:3f:cc:39:bf:4b:12:a3: 8d:e7:2c:21:2e:89:a0:5e:aa:10:f6:c5:f6:34:30: 54:15:58:7f:0c:61:70:c1:6f:87:dc:a3:ae:db:31: d6:4d:cd:4d:9a:d8:70:55:6c:4d:1e:e6:16:0e:c1: 18:06:5a:b2:ef:ff:05:c9:ac:82:a4:66:3d:4e:9e: 2d:c9:ec:e7:ce:b1:63:2d:f8:ab:9a:37:47:f8:c6: 3c:c3:6c:f6:cf:57:95:7c:ed:98:84:f3:d5:ca:ac: 0e:bb:ca:7f:b1:18:ef:63:be:a4:43:a7:57:1c:3d: 66:0f:16:23:f4:80:44:a6:7c:42:bc:b4:75:73:3b: 1b:94:63:7e:20:7e:0a:53:73:99:3b:5d:c8:10:3f: fb:4c:e5:47:96:43:5a:ed:ef:f0:79:19:2d:85:a9: 65:79:61:03:cf:1e:ec:f9:33:9c:c8:ef:22:11:df: 97:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:64:B4:DD:F0:13:86:58:53:D0:B0:91:85:17:F3:C0:55:7E:A6:00 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dc1f34be-5eb2-4392-a450-8494253b9e36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.64.192.0/22 Signature Algorithm: sha256WithRSAEncryption 3b:cb:c2:21:51:f1:74:d8:9b:d6:05:c7:53:da:76:c0:a0:63: 87:2d:d7:3f:25:5e:30:f0:a7:d7:b4:3e:c3:54:58:ed:0c:ea: fb:49:fc:67:6c:52:cf:e7:63:b2:be:18:5c:b0:b7:20:f7:84: 7e:c8:e8:a0:09:60:5d:ec:7f:19:0f:c7:9c:de:96:7a:cb:1f: 65:56:cb:76:d7:33:91:1f:e8:47:34:a2:4c:0b:79:28:ad:8a: b5:a8:77:6a:44:7a:cf:59:0d:cd:11:f6:1b:79:df:2a:8d:8a: 4c:a1:e7:29:2d:c0:c3:4c:0b:e7:6a:6a:81:55:03:c2:32:2a: 8f:90:96:1b:69:8a:26:e4:98:e2:20:45:b3:bc:df:06:fe:3a: ff:0a:da:ba:b9:a6:29:ed:6d:bd:c9:a3:cc:61:8a:48:fb:88: 00:93:74:7e:ec:14:38:95:5e:40:ea:ac:c0:d0:5e:17:a3:0d: 8f:e1:0d:64:82:09:53:b4:4e:6c:c2:92:c8:06:4f:a9:c2:75: 51:7a:41:a5:73:8c:c3:fc:29:f9:69:09:60:a1:52:d3:3b:1f: 53:f3:fe:88:23:7e:c1:ac:1a:b8:06:ea:ac:f9:63:f1:e7:f5: 63:78:e2:36:f1:b9:e3:42:39:d1:31:17:a7:42:cc:b2:29:b0: 97:4f:a6:61 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZxueMeZ+Dzr1O38HWJHPd/GMWJ4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MjEwMDEzWhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A4MDlhOTFhNGZkYWY2OTFjMzQzMDE0Y2NhNTUyZGZiZDYz NmNkMGZhYzBmOWMyNDFiYzkwODI4OTlmM2JhNjM3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyeTeNZ9zSAfoQaILXk1srfWjf+fhUhk649Qe8Rh8eTW13 WrpksjoxY42iZjJvVS1JK27U14Ix3Vkb6imdRNRS1/7RUEPsaHO6SESHBqkdpCYw P8w5v0sSo43nLCEuiaBeqhD2xfY0MFQVWH8MYXDBb4fco67bMdZNzU2a2HBVbE0e 5hYOwRgGWrLv/wXJrIKkZj1Oni3J7OfOsWMt+KuaN0f4xjzDbPbPV5V87ZiE89XK rA67yn+xGO9jvqRDp1ccPWYPFiP0gESmfEK8tHVzOxuUY34gfgpTc5k7XcgQP/tM 5UeWQ1rt7/B5GS2FqWV5YQPPHuz5M5zI7yIR35d5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU9WS03fAThlhT0LCRhRfzwFV+pgAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2RjMWYzNGJlLTVlYjItNDM5Mi1hNDUwLTg0OTQyNTNiOWUzNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAISQMAwDQYJKoZIhvcNAQELBQADggEBADvLwiFR8XTYm9YFx1PadsCgY4ct 1z8lXjDwp9e0PsNUWO0M6vtJ/GdsUs/nY7K+GFywtyD3hH7I6KAJYF3sfxkPx5ze lnrLH2VWy3bXM5Ef6Ec0okwLeSitirWod2pEes9ZDc0R9ht53yqNikyh5yktwMNM C+dqaoFVA8IyKo+QlhtpiibkmOIgRbO83wb+Ov8K2rq5pintbb3Jo8xhikj7iACT dH7sFDiVXkDqrMDQXhejDY/hDWSCCVO0TmzCksgGT6nCdVF6QaVzjMP8KflpCWCh UtM7H1Pz/ogjfsGsGrgG6qz5Y/Hn9WN44jbxueNCOdExF6dCzLIpsJdPpmE= -----END CERTIFICATE-----Generated at Mon Oct 20 06:12:13 2025 by rpki-client