$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e76ad411-af38-491a-94c3-a12125c54496.roa File: e76ad411-af38-491a-94c3-a12125c54496.roa (raw, json) Hash identifier: u4PS6ZcZy64IG9okYIluKNXWYicuriIstdTKDvpp6xg= Subject key identifier: 1B:4C:ED:83:39:EA:B1:67:D8:4D:6F:3F:22:A5:C5:D3:1E:6F:FB:BF Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0C0B6CC843DBEA896AABCC88F9A59DA083194807 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e76ad411-af38-491a-94c3-a12125c54496.roa Signing time: Sat 18 Oct 2025 07:22:40 +0000 ROA not before: Sat 18 Oct 2025 07:22:40 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.154.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:0b:6c:c8:43:db:ea:89:6a:ab:cc:88:f9:a5:9d:a0:83:19:48:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 07:22:40 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=39adeee138fc4f42dff9b204b63150e012ae5fac414c78bab386c0b4b4a1b173, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3d:dd:d0:52:15:1f:cc:09:e2:91:d8:b6:5f: 3a:c3:b2:26:5a:0e:5c:21:15:a8:b6:d5:9a:7e:36: 64:26:32:21:a6:20:88:63:7b:0c:8c:02:dc:26:3e: 03:94:43:a2:d2:02:be:ac:5b:51:81:fc:a7:35:77: 60:4b:ea:79:c4:d5:fd:a2:91:da:e4:e2:78:bf:e5: 17:16:62:f5:9f:13:88:62:a3:c5:a4:74:32:ca:5b: 35:08:f9:81:a8:b7:0d:a5:10:f3:d2:59:e6:89:3a: 78:e7:4d:2e:4f:9f:56:28:c0:78:61:c1:03:64:ff: 06:5f:4f:a4:5d:16:44:ba:0d:b7:99:18:a3:a4:23: d3:03:ba:c4:71:1b:31:d6:c7:05:45:90:48:28:65: 0e:81:71:d0:c9:a5:89:25:c2:8d:31:0f:fd:63:c6: 6b:93:7a:db:5e:02:18:f7:d3:72:98:54:04:4a:06: b2:52:f2:8a:90:98:cd:b1:43:e7:f6:b4:e2:a6:0c: 35:c5:a6:c6:63:1d:2e:1d:d6:00:47:51:95:80:90: 75:b6:1c:b4:40:c0:b4:0a:fb:98:d3:3f:9b:27:72: 45:0f:60:b6:7b:4c:9e:7b:f5:4a:d1:03:2c:0e:d9: 8c:ae:57:ff:bf:a0:b3:1b:73:e9:87:1d:c4:fa:f1: b5:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:4C:ED:83:39:EA:B1:67:D8:4D:6F:3F:22:A5:C5:D3:1E:6F:FB:BF X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e76ad411-af38-491a-94c3-a12125c54496.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.154.127.0/24 Signature Algorithm: sha256WithRSAEncryption af:99:9b:00:dd:e6:2b:8e:ac:a5:d4:33:ca:11:67:f7:24:6e: 69:a7:d4:24:67:92:0c:81:79:62:34:44:75:26:d0:24:cf:89: 38:48:43:27:76:94:92:78:47:96:7a:d6:2b:fd:c2:22:7f:a1: 14:4a:90:d4:47:19:ee:f9:dd:41:b5:5b:92:f0:39:3f:95:e8: 4f:85:4b:9f:c3:99:28:81:64:9b:2c:b6:8b:49:05:92:02:4b: 11:b1:88:9c:0f:1b:08:c1:f3:65:8e:c9:b6:77:19:b0:68:92: 9a:0a:4c:f9:a8:5e:82:58:01:19:c2:0f:f4:8e:9e:cb:9d:c6: e9:6d:87:c0:41:57:34:42:16:3f:8c:9a:f1:de:59:8f:9f:34: 30:90:10:50:7e:f0:45:4f:71:a5:b7:26:c5:6d:4e:40:66:cc: 48:24:77:73:9c:e1:5c:47:76:ab:15:38:71:d9:35:78:f8:b9: 0c:35:b7:59:63:ac:d8:9f:29:1a:26:4d:cd:51:e0:85:31:ed: df:e3:1f:1c:2f:ff:63:c0:d8:ac:62:29:ba:3b:53:62:7d:24: 09:f9:43:26:12:48:d1:b7:a9:8a:8b:e2:04:c4:69:15:fe:8f: c2:0d:98:64:5d:f7:99:54:eb:40:f6:82:d9:a1:b4:a1:0f:c7: e9:b3:70:dc -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDAtsyEPb6olqq8yI+aWdoIMZSAcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MDcyMjQwWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AzOWFkZWVlMTM4ZmM0ZjQyZGZmOWIyMDRiNjMxNTBlMDEy YWU1ZmFjNDE0Yzc4YmFiMzg2YzBiNGI0YTFiMTczMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2Pd3QUhUfzAnikdi2XzrDsiZaDlwhFai21Zp+NmQmMiGm IIhjewyMAtwmPgOUQ6LSAr6sW1GB/Kc1d2BL6nnE1f2ikdrk4ni/5RcWYvWfE4hi o8WkdDLKWzUI+YGotw2lEPPSWeaJOnjnTS5Pn1YowHhhwQNk/wZfT6RdFkS6DbeZ GKOkI9MDusRxGzHWxwVFkEgoZQ6BcdDJpYklwo0xD/1jxmuTetteAhj303KYVARK BrJS8oqQmM2xQ+f2tOKmDDXFpsZjHS4d1gBHUZWAkHW2HLRAwLQK+5jTP5snckUP YLZ7TJ579UrRAywO2YyuV/+/oLMbc+mHHcT68bWnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUG0ztgznqsWfYTW8/IqXF0x5v+78wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2U3NmFkNDExLWFmMzgtNDkxYS05NGMzLWExMjEyNWM1NDQ5Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASmn8wDQYJKoZIhvcNAQELBQADggEBAK+ZmwDd5iuOrKXUM8oRZ/ckbmmn 1CRnkgyBeWI0RHUm0CTPiThIQyd2lJJ4R5Z61iv9wiJ/oRRKkNRHGe753UG1W5Lw OT+V6E+FS5/DmSiBZJsstotJBZICSxGxiJwPGwjB82WOybZ3GbBokpoKTPmoXoJY ARnCD/SOnsudxulth8BBVzRCFj+MmvHeWY+fNDCQEFB+8EVPcaW3JsVtTkBmzEgk d3Oc4VxHdqsVOHHZNXj4uQw1t1ljrNifKRomTc1R4IUx7d/jHxwv/2PA2KxiKbo7 U2J9JAn5QyYSSNG3qYqL4gTEaRX+j8INmGRd95lU60D2gtmhtKEPx+mzcNw= -----END CERTIFICATE-----Generated at Mon Oct 20 03:07:39 2025 by rpki-client