$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/de8a546d-212e-4feb-b991-0060e9112593.roa File: de8a546d-212e-4feb-b991-0060e9112593.roa (raw, json) Hash identifier: VYTDBNC8MFsvrxPP58kpiIQhdeEi71vUcQOrKs8k8m8= Subject key identifier: 01:97:1D:65:5A:C6:0F:E0:65:D2:01:FC:AD:91:8B:E7:56:AC:8A:DE Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5DD776749A13E8D6176605DFB28E0BB42F53A3DB Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/de8a546d-212e-4feb-b991-0060e9112593.roa Signing time: Sun 19 Oct 2025 11:11:19 +0000 ROA not before: Sun 19 Oct 2025 11:11:19 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.66.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:d7:76:74:9a:13:e8:d6:17:66:05:df:b2:8e:0b:b4:2f:53:a3:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 11:11:19 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=72f319fad897b1b8467201361ef9c2a87a7c82e982f63520f82bd93cf441c6ec, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4d:d1:f9:03:70:9b:df:6b:f1:67:50:42:42: 99:6d:ca:f0:25:52:99:ef:11:8c:24:0c:f7:5d:9c: 6b:ea:cc:2a:4b:b7:1c:8d:73:19:6d:10:53:12:d9: 4f:4a:77:8d:d8:a7:73:db:7e:45:9a:dd:a6:17:25: 41:20:8a:8a:a7:16:7d:15:57:55:cb:19:d4:26:27: 82:42:5e:e3:50:54:20:b1:85:1f:08:ca:35:e7:bf: 1c:03:ec:80:0e:c5:58:c3:06:39:93:61:93:3a:67: 84:d4:33:27:f0:d0:30:7d:24:82:a1:99:5d:19:bd: 40:6d:64:d7:c3:6b:6c:35:6a:e9:5f:4d:32:24:a4: 55:f1:af:aa:36:fe:37:9a:bf:51:f9:8a:f4:0d:40: 9c:0d:9b:5a:66:26:c9:c4:b2:64:5a:cb:17:51:36: e0:73:40:0a:05:6b:a1:8b:d2:14:45:29:0c:9a:54: 45:a0:a8:6e:3b:d5:9c:d8:8f:ce:89:59:9d:a7:c9: fb:3f:03:f5:ac:df:00:88:7b:55:82:72:ef:02:fb: 05:19:25:6a:83:ea:21:0e:a1:f2:42:51:a8:a6:4a: 0f:6d:9f:84:6b:12:3d:79:22:83:34:c3:89:b6:35: 3b:39:f6:aa:aa:f3:b7:fb:d4:c7:e3:69:bf:5b:0a: 4e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:97:1D:65:5A:C6:0F:E0:65:D2:01:FC:AD:91:8B:E7:56:AC:8A:DE X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/de8a546d-212e-4feb-b991-0060e9112593.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.66.160.0/21 Signature Algorithm: sha256WithRSAEncryption 1e:a0:18:cc:5c:d5:5e:cb:86:2c:24:53:e8:a3:96:b4:f3:e2: ef:74:53:42:ba:bd:ee:91:80:8b:e6:8a:48:6f:56:8f:6a:72: e5:6f:c8:41:41:50:eb:0c:f5:73:8b:19:e7:28:98:ce:25:8f: 2b:bc:62:8a:6b:9d:9c:82:76:b9:5a:ee:a0:69:0d:e8:89:3e: ed:b4:0a:e3:95:ee:ff:30:82:0f:e5:e2:d7:5b:e4:2f:09:f3: a5:75:6d:cf:52:8b:48:37:05:44:e3:0a:c8:cf:df:4d:79:99: 8d:40:da:55:46:03:7e:ac:3e:0a:90:dc:08:61:eb:7f:3e:54: 7f:e8:66:f9:6d:d3:72:31:3c:a1:15:40:52:3d:eb:4a:99:61: b6:e3:db:00:03:47:1e:a4:c5:5c:f1:52:ca:d9:4b:6b:77:87: b0:cd:34:45:f0:d0:57:0a:ac:05:1d:7d:51:8f:25:80:2b:fb: 21:fd:ab:85:97:e4:9e:b2:ea:fa:0c:58:f1:2b:d4:ce:6f:b5: b6:aa:72:8a:40:b7:9f:15:d4:67:c9:d1:13:18:cb:36:b2:26: 93:57:41:62:fa:25:87:4c:26:53:32:db:b1:7a:8b:14:0c:d8: 7e:77:21:4e:7a:93:ff:b0:5f:5d:52:9f:ab:0e:77:f1:93:d7: 23:30:1c:d4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXdd2dJoT6NYXZgXfso4LtC9To9swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MTExMTE5WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A3MmYzMTlmYWQ4OTdiMWI4NDY3MjAxMzYxZWY5YzJhODdh N2M4MmU5ODJmNjM1MjBmODJiZDkzY2Y0NDFjNmVjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9TdH5A3Cb32vxZ1BCQpltyvAlUpnvEYwkDPddnGvqzCpL txyNcxltEFMS2U9Kd43Yp3PbfkWa3aYXJUEgioqnFn0VV1XLGdQmJ4JCXuNQVCCx hR8IyjXnvxwD7IAOxVjDBjmTYZM6Z4TUMyfw0DB9JIKhmV0ZvUBtZNfDa2w1aulf TTIkpFXxr6o2/jeav1H5ivQNQJwNm1pmJsnEsmRayxdRNuBzQAoFa6GL0hRFKQya VEWgqG471ZzYj86JWZ2nyfs/A/Ws3wCIe1WCcu8C+wUZJWqD6iEOofJCUaimSg9t n4RrEj15IoM0w4m2NTs59qqq87f71Mfjab9bCk4vAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUAZcdZVrGD+Bl0gH8rZGL51asit4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2RlOGE1NDZkLTIxMmUtNGZlYi1iOTkxLTAwNjBlOTExMjU5My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMSQqAwDQYJKoZIhvcNAQELBQADggEBAB6gGMxc1V7LhiwkU+ijlrTz4u90 U0K6ve6RgIvmikhvVo9qcuVvyEFBUOsM9XOLGecomM4ljyu8YoprnZyCdrla7qBp DeiJPu20CuOV7v8wgg/l4tdb5C8J86V1bc9Si0g3BUTjCsjP3015mY1A2lVGA36s PgqQ3Ahh638+VH/oZvlt03IxPKEVQFI960qZYbbj2wADRx6kxVzxUsrZS2t3h7DN NEXw0FcKrAUdfVGPJYAr+yH9q4WX5J6y6voMWPEr1M5vtbaqcopAt58V1GfJ0RMY yzayJpNXQWL6JYdMJlMy27F6ixQM2H53IU56k/+wX11Sn6sOd/GT1yMwHNQ= -----END CERTIFICATE-----Generated at Mon Oct 20 03:08:36 2025 by rpki-client