$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e916f72e-bd1a-40fe-9a62-5fe34b88c177.roa File: e916f72e-bd1a-40fe-9a62-5fe34b88c177.roa (raw, json) Hash identifier: 9KeG/kcByjwHJhyhgBvu7pp5tnfrsKmW72fEVLVssLM= Subject key identifier: 34:39:37:54:92:06:85:64:A6:8A:3E:9C:DD:C1:B2:BE:B9:C0:22:18 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 60CF89F2A7CDFB3EFD70F83BAD4F11691B6444A1 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e916f72e-bd1a-40fe-9a62-5fe34b88c177.roa Signing time: Sat 18 Oct 2025 23:32:43 +0000 ROA not before: Sat 18 Oct 2025 23:32:43 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.165.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:cf:89:f2:a7:cd:fb:3e:fd:70:f8:3b:ad:4f:11:69:1b:64:44:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 23:32:43 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=3349ff45eace20a3df9c4be9e5b7cc517064e2bdaacfb5d471ec8c38a59194ce, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:33:26:6f:53:8b:05:c0:59:e5:0b:bb:27:95: 62:8c:86:5b:d6:03:21:fa:c6:36:03:3d:93:e1:b2: 0e:21:38:7a:e0:f9:8d:50:98:5e:50:ae:b3:82:54: 53:17:15:a7:d9:a5:2e:b4:7a:d1:ec:f9:f7:01:58: 7a:b4:b6:22:63:ea:3d:e2:f1:c0:36:b2:db:c9:6e: 3f:29:55:d3:0f:8f:25:1b:de:34:69:b2:56:55:e1: 91:3d:8b:86:68:7e:d7:5a:04:af:7f:fb:c5:7c:38: b2:e9:3a:59:1b:13:4a:64:23:36:3a:00:90:52:44: 5a:80:e5:b9:1c:ec:4b:9c:f9:87:03:d9:dc:1c:bd: 40:d3:1b:ad:02:99:57:85:89:55:08:70:24:60:87: 7f:c2:66:f0:ac:d2:1d:c0:4e:56:8f:96:74:a8:41: 1a:1a:97:f8:8d:2b:a5:a3:dc:49:aa:b5:b2:38:8e: fc:44:24:e0:67:8f:c1:c2:e7:37:04:cd:b4:35:67: a9:2e:7f:a6:3e:ec:56:fc:75:b9:6b:fd:1f:30:e4: 66:47:bc:a5:33:1f:e2:5c:b5:c8:2b:a2:fb:92:bc: 22:18:51:b9:9f:18:89:85:3f:6e:23:65:8a:24:6e: df:57:ee:16:cd:ff:f4:ff:0a:3d:f3:c5:7e:03:28: 7a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:39:37:54:92:06:85:64:A6:8A:3E:9C:DD:C1:B2:BE:B9:C0:22:18 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e916f72e-bd1a-40fe-9a62-5fe34b88c177.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.165.96.0/24 Signature Algorithm: sha256WithRSAEncryption 49:44:8e:d5:30:9b:4b:4e:05:b9:6f:e1:df:1a:24:78:33:a7: ae:4f:d5:74:94:d0:3e:5e:45:25:ea:21:da:39:b8:42:42:7a: e7:f5:ed:d4:f4:d6:45:e2:27:79:ba:c1:98:56:dc:01:8f:ec: ad:2e:6e:19:cb:67:dc:3c:a7:b3:45:49:dd:71:89:9e:17:66: a4:c2:f9:f9:62:87:83:f1:b8:46:d8:3e:39:52:6c:74:41:a9: 7f:2e:ba:6c:69:0e:f2:fc:ab:85:4c:28:85:1f:33:e2:39:3c: 9e:cb:e8:85:bd:35:31:6b:5a:93:48:f8:b6:64:6b:8d:78:c8: c5:c5:05:5e:db:41:77:7c:0a:92:57:b7:96:d0:1e:a5:0f:3a: 2f:ae:56:99:db:c9:00:81:b4:b9:6f:cd:a0:10:d0:57:ea:3a: 60:b9:f1:17:53:d0:c0:f8:7f:35:a8:20:ca:a0:14:c2:80:9a: 32:bc:21:5b:01:84:3f:a3:c3:3f:ed:94:34:d2:e2:8e:3f:02: e8:23:2c:80:1c:05:b4:58:56:b0:2a:9c:e2:4f:77:44:ec:d4: 7f:54:34:7a:c4:d4:21:dc:db:bb:c8:09:ba:b5:93:79:d3:f1: 37:d7:ec:6f:a9:4e:74:a3:86:de:24:14:88:3c:2d:89:0f:63: 3c:b8:f4:ab -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYM+J8qfN+z79cPg7rU8RaRtkRKEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MjMzMjQzWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AzMzQ5ZmY0NWVhY2UyMGEzZGY5YzRiZTllNWI3Y2M1MTcw NjRlMmJkYWFjZmI1ZDQ3MWVjOGMzOGE1OTE5NGNlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHMyZvU4sFwFnlC7snlWKMhlvWAyH6xjYDPZPhsg4hOHrg +Y1QmF5QrrOCVFMXFafZpS60etHs+fcBWHq0tiJj6j3i8cA2stvJbj8pVdMPjyUb 3jRpslZV4ZE9i4ZoftdaBK9/+8V8OLLpOlkbE0pkIzY6AJBSRFqA5bkc7Euc+YcD 2dwcvUDTG60CmVeFiVUIcCRgh3/CZvCs0h3ATlaPlnSoQRoal/iNK6Wj3EmqtbI4 jvxEJOBnj8HC5zcEzbQ1Z6kuf6Y+7Fb8dblr/R8w5GZHvKUzH+JctcgrovuSvCIY UbmfGImFP24jZYokbt9X7hbN//T/Cj3zxX4DKHqdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUNDk3VJIGhWSmij6c3cGyvrnAIhgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2U5MTZmNzJlLWJkMWEtNDBmZS05YTYyLTVmZTM0Yjg4YzE3Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASpWAwDQYJKoZIhvcNAQELBQADggEBAElEjtUwm0tOBblv4d8aJHgzp65P 1XSU0D5eRSXqIdo5uEJCeuf17dT01kXiJ3m6wZhW3AGP7K0ubhnLZ9w8p7NFSd1x iZ4XZqTC+flih4PxuEbYPjlSbHRBqX8uumxpDvL8q4VMKIUfM+I5PJ7L6IW9NTFr WpNI+LZka414yMXFBV7bQXd8CpJXt5bQHqUPOi+uVpnbyQCBtLlvzaAQ0FfqOmC5 8RdT0MD4fzWoIMqgFMKAmjK8IVsBhD+jwz/tlDTS4o4/AugjLIAcBbRYVrAqnOJP d0Ts1H9UNHrE1CHc27vICbq1k3nT8TfX7G+pTnSjht4kFIg8LYkPYzy49Ks= -----END CERTIFICATE-----Generated at Mon Oct 20 06:04:18 2025 by rpki-client