$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e8dc33a2-5c23-4573-97b7-54eb0803125c.roa File: e8dc33a2-5c23-4573-97b7-54eb0803125c.roa (raw, json) Hash identifier: CgwX6Y58z2yi6cKFXsxwE2N2ENBBk7d6cS4WaIGEKJk= Subject key identifier: 93:EE:2C:AA:56:29:95:AD:CB:AC:69:5C:B8:86:2E:45:D2:82:66:92 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 51DDE7728E2E05296CB8026E4FE0AE08E9FB3316 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e8dc33a2-5c23-4573-97b7-54eb0803125c.roa Signing time: Sun 19 Oct 2025 22:03:45 +0000 ROA not before: Sun 19 Oct 2025 22:03:45 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.65.38.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:dd:e7:72:8e:2e:05:29:6c:b8:02:6e:4f:e0:ae:08:e9:fb:33:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 22:03:45 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=68c85ff9edb2c1dc3521c49f47b3b05346c732f82257033a7591859b2f2102d8, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c6:a2:ad:18:eb:33:04:98:c8:09:b3:10:42: 33:a6:ff:a5:c6:0c:90:38:19:7c:83:ac:07:e0:d7: cd:af:57:22:98:69:2d:84:4f:3a:b6:49:2e:76:99: 8d:6f:0d:25:a8:28:48:a1:9a:01:fd:35:4f:33:68: 9b:1b:4e:90:f8:c5:e4:88:da:18:0b:71:c7:13:98: 63:06:18:52:16:23:5c:f2:01:1b:02:28:19:09:fd: 1d:ac:59:21:50:24:0d:d2:0e:7f:8f:fe:05:99:36: 09:89:c0:57:3f:43:47:26:8d:61:e4:f5:d7:d9:e0: d9:aa:db:bb:97:93:66:06:55:1e:28:60:64:9c:6f: 5a:c3:31:9d:ef:c8:ac:8d:9c:aa:e9:ca:1f:71:fa: 66:9c:30:89:ed:d2:e0:b6:68:53:4f:cf:e3:7c:48: 03:f0:83:d0:c6:c9:25:0a:56:de:a2:95:9f:f2:0d: 12:88:4c:94:96:78:f9:38:9d:5a:22:08:9c:95:15: ea:36:ef:1d:ca:15:de:1b:b0:26:06:25:9b:e2:00: 44:1e:e6:6a:cd:ce:dd:23:17:34:0b:fa:3c:e3:4a: 48:82:ce:c1:4f:05:ed:fa:1f:d6:d8:ee:db:98:8f: 32:76:4c:25:00:fb:97:aa:02:60:22:24:df:4a:60: 9f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:EE:2C:AA:56:29:95:AD:CB:AC:69:5C:B8:86:2E:45:D2:82:66:92 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e8dc33a2-5c23-4573-97b7-54eb0803125c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.65.38.0/23 Signature Algorithm: sha256WithRSAEncryption 24:94:e9:bf:5c:34:98:60:e8:db:25:91:6f:ac:09:77:3b:89: 28:42:a4:46:61:be:81:40:a4:15:ee:50:95:19:be:a4:df:09: af:c7:f7:7e:67:5d:45:67:aa:a7:c4:32:66:c6:0c:26:a7:95: cd:09:98:62:09:71:95:7c:99:34:6f:79:c0:4a:04:7a:f0:fb: 59:c6:17:b2:b3:3f:f6:9f:bd:32:3a:0d:c4:9d:18:8e:d4:b2: 91:98:b4:ab:a0:65:b8:af:07:61:c0:ea:76:1f:ce:6b:9d:41: f1:d6:80:c3:88:de:be:5a:53:92:15:85:b1:f0:4d:4b:c1:e3: dd:c9:e2:77:8c:8c:80:e8:bc:53:3a:32:77:85:7b:9e:c7:4d: bc:dc:8c:06:c0:9c:47:61:01:8a:2f:32:a2:7f:0a:42:e9:c7: b3:01:31:da:b6:58:5e:a6:c7:8e:2e:7a:65:c8:8e:c5:b6:af: b0:31:5a:00:2e:ce:47:aa:ad:ab:25:ee:85:23:b7:98:2c:af: fe:f7:20:90:c2:ff:1b:73:87:75:77:f6:57:1d:84:0f:1e:ce: 1d:57:05:5e:c7:5f:a0:c6:b8:3b:d1:19:4a:52:c1:07:2b:dc: 4b:fc:27:e1:98:30:db:38:7d:13:22:cc:66:dc:21:b6:d4:2e: 6d:ac:02:b5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUd3nco4uBSlsuAJuT+CuCOn7MxYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MjIwMzQ1WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A2OGM4NWZmOWVkYjJjMWRjMzUyMWM0OWY0N2IzYjA1MzQ2 YzczMmY4MjI1NzAzM2E3NTkxODU5YjJmMjEwMmQ4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCTxqKtGOszBJjICbMQQjOm/6XGDJA4GXyDrAfg182vVyKY aS2ETzq2SS52mY1vDSWoKEihmgH9NU8zaJsbTpD4xeSI2hgLcccTmGMGGFIWI1zy ARsCKBkJ/R2sWSFQJA3SDn+P/gWZNgmJwFc/Q0cmjWHk9dfZ4Nmq27uXk2YGVR4o YGScb1rDMZ3vyKyNnKrpyh9x+macMInt0uC2aFNPz+N8SAPwg9DGySUKVt6ilZ/y DRKITJSWePk4nVoiCJyVFeo27x3KFd4bsCYGJZviAEQe5mrNzt0jFzQL+jzjSkiC zsFPBe36H9bY7tuYjzJ2TCUA+5eqAmAiJN9KYJ8VAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUk+4sqlYpla3LrGlcuIYuRdKCZpIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2U4ZGMzM2EyLTVjMjMtNDU3My05N2I3LTU0ZWIwODAzMTI1Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESQSYwDQYJKoZIhvcNAQELBQADggEBACSU6b9cNJhg6NslkW+sCXc7iShC pEZhvoFApBXuUJUZvqTfCa/H935nXUVnqqfEMmbGDCanlc0JmGIJcZV8mTRvecBK BHrw+1nGF7KzP/afvTI6DcSdGI7UspGYtKugZbivB2HA6nYfzmudQfHWgMOI3r5a U5IVhbHwTUvB493J4neMjIDovFM6MneFe57HTbzcjAbAnEdhAYovMqJ/CkLpx7MB Mdq2WF6mx44uemXIjsW2r7AxWgAuzkeqrasl7oUjt5gsr/73IJDC/xtzh3V39lcd hA8ezh1XBV7HX6DGuDvRGUpSwQcr3Ev8J+GYMNs4fRMizGbcIbbULm2sArU= -----END CERTIFICATE-----Generated at Mon Oct 20 06:04:48 2025 by rpki-client