$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f061f737-deaa-4cbe-8344-f664ebd30058.roa File: f061f737-deaa-4cbe-8344-f664ebd30058.roa (raw, json) Hash identifier: frrcDHLPAxCLnZqyZq2+WyxUFqZXtkW8HP4d79fkD0E= Subject key identifier: C9:06:4E:69:AE:99:7D:52:BE:58:08:F1:6C:4B:EC:74:8C:A9:A2:08 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0D75A78E0101F46BE077348AC1564A2454CB96DF Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f061f737-deaa-4cbe-8344-f664ebd30058.roa Signing time: Sun 19 Oct 2025 08:44:06 +0000 ROA not before: Sun 19 Oct 2025 08:44:06 +0000 ROA not after: Sun 23 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.67.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:75:a7:8e:01:01:f4:6b:e0:77:34:8a:c1:56:4a:24:54:cb:96:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 19 08:44:06 2025 GMT Not After : Nov 23 23:59:59 2025 GMT Subject: serialNumber=d96ba7dd49c59cbcf069a359adcedd027e623e5d9938f20028741befd5060d69, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:41:7a:96:bd:a9:da:27:b3:b2:26:7f:c8:9c: 6e:b5:89:68:51:10:9f:4e:dd:3b:a0:b4:12:7c:12: ae:2d:9b:32:12:78:b7:59:68:df:44:95:00:a4:b4: 87:77:bc:ce:16:bb:f3:02:64:10:1d:8e:ff:01:27: ad:3b:f8:87:9e:d0:74:4a:15:ca:3e:63:37:7a:55: 2d:3b:e6:cb:2f:ac:66:3d:27:e2:51:fe:68:5f:db: 27:fb:08:43:5d:8e:c9:46:af:ab:2e:92:69:7a:eb: 97:25:ff:08:0e:45:49:89:f4:81:1d:30:a3:7c:96: ce:96:ed:6d:ab:e9:a4:a0:57:68:9a:ab:44:f8:e4: 05:eb:df:45:5f:e7:d2:44:e9:a5:d9:b2:0a:40:68: fc:96:0a:3a:a0:1c:77:92:5e:f6:fa:c5:99:ea:50: 4d:7b:06:ad:14:4e:c4:4e:41:ae:b0:3c:c8:77:a6: f0:b5:31:28:93:84:e2:66:d5:2b:b3:6b:90:f3:57: 96:26:52:96:06:fe:e6:16:3d:dd:3c:88:a9:fe:88: 01:ad:45:1e:72:40:f4:cc:78:3b:f4:1b:7a:c6:4f: 6c:25:ad:98:65:70:53:6d:33:e1:2d:a7:75:db:14: 5d:0c:c2:c7:96:ac:4e:23:9e:30:a3:b4:00:e3:19: 8b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:06:4E:69:AE:99:7D:52:BE:58:08:F1:6C:4B:EC:74:8C:A9:A2:08 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f061f737-deaa-4cbe-8344-f664ebd30058.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.67.204.0/24 Signature Algorithm: sha256WithRSAEncryption 22:68:c6:b5:6b:08:90:89:eb:40:10:75:2c:f4:d9:66:a7:3c: 2c:fc:65:9f:c1:27:73:55:dc:bb:e7:a0:4c:bc:a4:b2:4b:72: 5e:f4:1f:0c:4f:ae:8d:61:5e:fd:b5:6b:5f:74:68:b4:51:a5: 27:87:f7:f6:d3:62:d7:0d:7d:8d:6d:b4:e1:f7:d2:e4:bf:0f: 3a:08:5c:d0:64:c0:21:9c:14:8d:61:30:60:29:5e:37:a0:af: 83:d5:fd:b4:20:ee:cd:7c:3d:a8:a4:af:9b:07:af:0b:a6:7b: 0d:ad:cc:a7:c1:e4:3b:9a:24:33:bb:f1:fc:06:13:09:58:0e: 13:8b:f9:12:78:11:b7:d0:39:89:03:82:1e:4f:81:21:f3:07: d2:3d:9e:ad:34:c7:4f:ab:19:9b:57:e3:c8:2e:c6:1d:03:55: 92:48:4f:95:6f:c0:3c:4f:90:cc:60:73:3b:1a:75:8e:a9:87: e5:cb:ff:5f:48:18:80:7d:34:ea:6b:de:4a:33:04:48:90:e8: 2b:2e:8d:eb:29:29:76:6a:64:65:f8:57:18:95:e5:e2:e7:c7: 6b:12:d4:e8:55:0e:21:06:cf:f1:48:a7:9d:60:41:60:bd:2c: b1:76:f2:c2:94:0c:9a:7c:e9:98:80:bc:38:99:5c:df:b3:f7: 85:96:4a:e6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDXWnjgEB9GvgdzSKwVZKJFTLlt8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE5MDg0NDA2WhcNMjUxMTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BkOTZiYTdkZDQ5YzU5Y2JjZjA2OWEzNTlhZGNlZGQwMjdl NjIzZTVkOTkzOGYyMDAyODc0MWJlZmQ1MDYwZDY5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDfQXqWvanaJ7OyJn/InG61iWhREJ9O3TugtBJ8Eq4tmzIS eLdZaN9ElQCktId3vM4Wu/MCZBAdjv8BJ607+Iee0HRKFco+Yzd6VS075ssvrGY9 J+JR/mhf2yf7CENdjslGr6sukml665cl/wgORUmJ9IEdMKN8ls6W7W2r6aSgV2ia q0T45AXr30Vf59JE6aXZsgpAaPyWCjqgHHeSXvb6xZnqUE17Bq0UTsROQa6wPMh3 pvC1MSiThOJm1Suza5DzV5YmUpYG/uYWPd08iKn+iAGtRR5yQPTMeDv0G3rGT2wl rZhlcFNtM+Etp3XbFF0MwseWrE4jnjCjtADjGYuZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUyQZOaa6ZfVK+WAjxbEvsdIypoggwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2YwNjFmNzM3LWRlYWEtNGNiZS04MzQ0LWY2NjRlYmQzMDA1OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASQ8wwDQYJKoZIhvcNAQELBQADggEBACJoxrVrCJCJ60AQdSz02WanPCz8 ZZ/BJ3NV3LvnoEy8pLJLcl70HwxPro1hXv21a190aLRRpSeH9/bTYtcNfY1ttOH3 0uS/DzoIXNBkwCGcFI1hMGApXjegr4PV/bQg7s18Paikr5sHrwumew2tzKfB5Dua JDO78fwGEwlYDhOL+RJ4EbfQOYkDgh5PgSHzB9I9nq00x0+rGZtX48guxh0DVZJI T5VvwDxPkMxgczsadY6ph+XL/19IGIB9NOpr3kozBEiQ6CsujespKXZqZGX4VxiV 5eLnx2sS1OhVDiEGz/FIp51gQWC9LLF28sKUDJp86ZiAvDiZXN+z94WWSuY= -----END CERTIFICATE-----Generated at Mon Oct 20 11:13:27 2025 by rpki-client