$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dc6cec2a-de0a-431a-b62b-533de3b3f95d.roa File: dc6cec2a-de0a-431a-b62b-533de3b3f95d.roa (raw, json) Hash identifier: MvPDYtAEQdzfCyb3xpPqkr2xk8aqq2tuWPxqNFrIgew= Subject key identifier: 67:1D:85:40:DD:1C:DC:60:DE:85:16:BC:6A:46:70:22:2E:5B:13:8F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5F1246C9EFDD6E3C36D2D045ABDAB2AE49C18671 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dc6cec2a-de0a-431a-b62b-533de3b3f95d.roa Signing time: Sat 18 Oct 2025 20:20:14 +0000 ROA not before: Sat 18 Oct 2025 20:20:14 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.173.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:12:46:c9:ef:dd:6e:3c:36:d2:d0:45:ab:da:b2:ae:49:c1:86:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 20:20:14 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=14771a3572575256a384cb6a6bb26f42866e5fce30490fb86732063251585919, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:72:b2:4e:f5:18:b3:4f:bb:52:4d:ea:bc:e5: 9e:37:ca:8f:92:6b:da:aa:55:eb:ec:1c:28:6f:7c: 5a:78:13:2f:fe:a4:6f:a7:b7:4b:d4:cd:1d:d1:87: 0d:35:bc:dc:1d:fd:3c:8f:7d:7d:04:b8:d1:21:86: e7:94:32:94:7d:70:a2:63:e9:01:51:42:ba:63:85: 36:f1:d6:51:ec:68:25:cd:99:f3:19:dd:84:c9:dd: 2b:8c:15:a8:c5:10:1d:11:81:6c:4d:39:f3:d5:e4: a1:b7:db:95:24:44:65:e4:29:67:5f:c1:16:69:82: 53:11:a5:6a:01:9e:75:e2:8d:19:bf:d4:0e:7d:c4: f1:90:c4:3d:ee:3c:be:73:17:c7:85:24:ad:3e:bd: c2:5f:43:bf:d2:b3:9c:a2:c1:2f:75:00:78:d1:87: 8b:53:f7:30:0b:a7:fd:25:8a:e9:f6:88:05:88:ba: f5:35:af:e5:33:da:57:13:72:65:a0:92:07:5a:cc: 0d:38:35:19:7b:6d:95:f1:d3:d8:42:73:9c:e8:0d: f5:4b:90:71:df:e0:47:5c:e8:ef:d4:53:47:73:58: 03:23:53:b0:c7:60:0c:6d:4a:9e:c7:77:a4:bc:bd: f8:0a:98:f6:e4:c1:ef:15:2f:ef:58:06:a2:9c:cd: e9:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:1D:85:40:DD:1C:DC:60:DE:85:16:BC:6A:46:70:22:2E:5B:13:8F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dc6cec2a-de0a-431a-b62b-533de3b3f95d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.173.107.0/24 Signature Algorithm: sha256WithRSAEncryption 31:b0:1a:55:1b:9a:6a:6c:4c:a9:80:36:dc:cd:3d:07:7f:4f: 73:4b:a4:e1:ae:b6:8c:b7:6a:5c:63:dd:39:22:03:82:74:cd: 23:57:46:5d:e1:7c:17:b3:85:2a:dc:39:2c:5b:69:7d:d9:9c: 67:72:46:5f:97:17:42:07:ab:a2:e7:44:8a:8b:ef:76:a4:e1: cc:00:80:40:67:82:b2:cf:38:b7:03:25:03:34:a0:e3:00:ce: f5:b8:8c:59:87:f5:cb:3c:8b:fa:e1:3d:86:2d:68:e2:ae:4e: bf:df:e2:57:0d:86:45:de:dc:9f:e4:c0:f4:4f:30:6f:5a:b8: 8e:81:4d:82:23:67:29:8c:cf:60:6b:50:60:f2:e3:d6:1d:4a: aa:41:35:ec:eb:e8:b6:65:d5:6b:d0:0a:a7:91:1a:e0:6b:74: 0c:0c:24:55:82:f6:30:93:d7:f6:6c:4e:10:58:30:61:e3:3e: 85:3f:47:53:0c:bc:ed:bd:27:51:3a:9c:11:31:ca:0d:40:22: 21:7e:97:7d:ee:5b:fa:72:38:fa:94:80:e7:05:e2:29:e5:c6: e8:11:28:8d:49:9b:e9:ee:da:ae:7d:17:bf:8a:e7:48:fb:7f: df:64:29:52:25:5c:89:50:ad:90:c0:f1:05:d6:aa:8d:8f:f6: 26:00:26:ca -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXxJGye/dbjw20tBFq9qyrknBhnEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MjAyMDE0WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AxNDc3MWEzNTcyNTc1MjU2YTM4NGNiNmE2YmIyNmY0Mjg2 NmU1ZmNlMzA0OTBmYjg2NzMyMDYzMjUxNTg1OTE5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDvcrJO9RizT7tSTeq85Z43yo+Sa9qqVevsHChvfFp4Ey/+ pG+nt0vUzR3Rhw01vNwd/TyPfX0EuNEhhueUMpR9cKJj6QFRQrpjhTbx1lHsaCXN mfMZ3YTJ3SuMFajFEB0RgWxNOfPV5KG325UkRGXkKWdfwRZpglMRpWoBnnXijRm/ 1A59xPGQxD3uPL5zF8eFJK0+vcJfQ7/Ss5yiwS91AHjRh4tT9zALp/0liun2iAWI uvU1r+Uz2lcTcmWgkgdazA04NRl7bZXx09hCc5zoDfVLkHHf4Edc6O/UU0dzWAMj U7DHYAxtSp7Hd6S8vfgKmPbkwe8VL+9YBqKczeltAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZx2FQN0c3GDehRa8akZwIi5bE48wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2RjNmNlYzJhLWRlMGEtNDMxYS1iNjJiLTUzM2RlM2IzZjk1ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASrWswDQYJKoZIhvcNAQELBQADggEBADGwGlUbmmpsTKmANtzNPQd/T3NL pOGutoy3alxj3TkiA4J0zSNXRl3hfBezhSrcOSxbaX3ZnGdyRl+XF0IHq6LnRIqL 73ak4cwAgEBngrLPOLcDJQM0oOMAzvW4jFmH9cs8i/rhPYYtaOKuTr/f4lcNhkXe 3J/kwPRPMG9auI6BTYIjZymMz2BrUGDy49YdSqpBNezr6LZl1WvQCqeRGuBrdAwM JFWC9jCT1/ZsThBYMGHjPoU/R1MMvO29J1E6nBExyg1AIiF+l33uW/pyOPqUgOcF 4inlxugRKI1Jm+nu2q59F7+K50j7f99kKVIlXIlQrZDA8QXWqo2P9iYAJso= -----END CERTIFICATE-----Generated at Mon Oct 20 05:16:35 2025 by rpki-client