$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f2812dba-9edd-4757-906c-3b2281489277.roa File: f2812dba-9edd-4757-906c-3b2281489277.roa (raw, json) Hash identifier: raXo2ntQ8IyRJX5b7LBcBypkpwy9VrYEyYAX0tmCSog= Subject key identifier: 66:27:2F:51:C1:C6:B4:32:A9:52:EB:9D:7A:BD:0E:05:19:FA:19:B3 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7F3C64A074C411255A024FC9FC0F11ED754D8CB6 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f2812dba-9edd-4757-906c-3b2281489277.roa Signing time: Sat 18 Oct 2025 23:01:20 +0000 ROA not before: Sat 18 Oct 2025 23:01:20 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.165.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:3c:64:a0:74:c4:11:25:5a:02:4f:c9:fc:0f:11:ed:75:4d:8c:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 23:01:20 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=eabfde47ad734c9e58ebc4478c4bca7d14440c1563c63d37153c855fe6bdd447, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:51:3d:e6:1c:73:ed:a7:17:31:4a:10:3f:76: 9e:02:b8:fc:6e:54:4f:7c:99:db:44:8a:e8:b0:51: 84:c5:18:22:7e:9b:28:0c:38:e6:a9:34:ac:99:f0: e1:00:87:d0:09:39:1c:d7:5c:09:65:24:85:63:7c: aa:41:a0:da:a4:b6:ee:ab:6c:41:bb:39:8f:2f:92: e9:d2:7e:0e:4d:89:27:f9:05:88:92:2f:fb:25:95: f7:15:d8:51:7a:77:3d:ec:1f:98:b0:af:4d:90:a4: 57:94:d6:1b:7e:39:da:c8:7f:56:de:99:5f:8f:d8: e4:dd:d9:d1:e8:16:71:05:c5:d4:8f:c4:82:01:c4: 43:5e:5f:55:4e:a5:cc:e8:73:6a:d8:44:c9:3b:f3: 6e:40:4b:83:71:2f:10:4d:20:a1:e3:73:77:f1:a1: f9:cc:3c:56:f8:5e:64:58:55:22:d4:ab:3e:64:9e: 5e:73:8c:8b:bb:fd:25:32:f1:09:8a:e4:57:28:a1: eb:63:e9:69:d5:b2:eb:95:ab:25:32:a6:12:82:90: 0b:93:ad:3d:64:9f:fe:24:83:39:fe:29:26:3a:8b: a4:29:79:a3:4e:15:e9:5e:94:5c:8c:a8:71:f9:8c: 1d:29:f7:b5:8f:81:2d:cc:07:77:e0:2b:d4:6b:1a: 43:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:27:2F:51:C1:C6:B4:32:A9:52:EB:9D:7A:BD:0E:05:19:FA:19:B3 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f2812dba-9edd-4757-906c-3b2281489277.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.165.217.0/24 Signature Algorithm: sha256WithRSAEncryption 49:02:49:97:f4:70:56:12:3f:54:4f:5f:57:62:3d:88:c4:91: 66:a8:e1:15:ab:12:8c:4e:b3:d8:d9:7c:62:14:2c:87:2b:77: 52:56:62:d8:18:ca:1c:84:f5:dc:f1:b4:15:dd:06:0a:81:51: ac:83:50:90:25:fc:3a:8c:22:ff:7c:98:2b:74:d5:ec:79:8c: b3:28:f9:76:85:19:ea:d5:f6:54:18:81:4f:22:1b:7e:8b:41: ee:64:4f:49:b1:3e:da:ed:e2:15:28:09:7d:8a:7b:3c:82:24: 01:16:9f:75:33:c3:bc:e1:c8:36:6d:ff:ea:c4:0e:a6:1f:16: ed:18:35:25:e8:c2:ad:1b:d6:b7:c4:b1:8e:49:ea:51:4e:13: f8:42:bd:e4:4f:86:b0:3b:30:4b:dd:8e:21:05:a6:8a:4c:c3: ff:b0:3d:57:97:83:b7:bc:ab:40:2c:7c:89:99:b7:67:04:0c: d7:cc:61:17:69:81:53:1f:b9:ae:92:2c:9f:2c:e7:63:31:c3: 7f:87:6e:e2:c1:97:65:34:1a:b8:a6:ee:03:c8:dc:9f:6a:f4: ab:56:48:39:c0:00:d6:5d:2b:4c:c6:a9:b5:cb:79:11:6d:63: 61:32:64:ab:fd:d2:4b:67:54:87:89:54:7d:13:67:4f:56:9a: 7c:aa:e9:a6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfzxkoHTEESVaAk/J/A8R7XVNjLYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MjMwMTIwWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BlYWJmZGU0N2FkNzM0YzllNThlYmM0NDc4YzRiY2E3ZDE0 NDQwYzE1NjNjNjNkMzcxNTNjODU1ZmU2YmRkNDQ3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCUUT3mHHPtpxcxShA/dp4CuPxuVE98mdtEiuiwUYTFGCJ+ mygMOOapNKyZ8OEAh9AJORzXXAllJIVjfKpBoNqktu6rbEG7OY8vkunSfg5NiSf5 BYiSL/sllfcV2FF6dz3sH5iwr02QpFeU1ht+OdrIf1bemV+P2OTd2dHoFnEFxdSP xIIBxENeX1VOpczoc2rYRMk7825AS4NxLxBNIKHjc3fxofnMPFb4XmRYVSLUqz5k nl5zjIu7/SUy8QmK5Fcooetj6WnVsuuVqyUyphKCkAuTrT1kn/4kgzn+KSY6i6Qp eaNOFelelFyMqHH5jB0p97WPgS3MB3fgK9RrGkPNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZicvUcHGtDKpUuuder0OBRn6GbMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2YyODEyZGJhLTllZGQtNDc1Ny05MDZjLTNiMjI4MTQ4OTI3Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASpdkwDQYJKoZIhvcNAQELBQADggEBAEkCSZf0cFYSP1RPX1diPYjEkWao 4RWrEoxOs9jZfGIULIcrd1JWYtgYyhyE9dzxtBXdBgqBUayDUJAl/DqMIv98mCt0 1ex5jLMo+XaFGerV9lQYgU8iG36LQe5kT0mxPtrt4hUoCX2KezyCJAEWn3Uzw7zh yDZt/+rEDqYfFu0YNSXowq0b1rfEsY5J6lFOE/hCveRPhrA7MEvdjiEFpopMw/+w PVeXg7e8q0AsfImZt2cEDNfMYRdpgVMfua6SLJ8s52Mxw3+HbuLBl2U0Grim7gPI 3J9q9KtWSDnAANZdK0zGqbXLeRFtY2EyZKv90ktnVIeJVH0TZ09Wmnyq6aY= -----END CERTIFICATE-----Generated at Mon Oct 20 09:48:52 2025 by rpki-client