$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f611048c-168f-4beb-a8cd-6d8beb730519.roa File: f611048c-168f-4beb-a8cd-6d8beb730519.roa (raw, json) Hash identifier: CZCt/wvFgXA22QorV1f4NI//O9QTgzEQgZzmoHH4SPQ= Subject key identifier: D6:B6:22:B7:D6:EB:E2:65:92:04:B5:27:D3:00:A7:09:BE:B2:FF:33 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6743037785F29AB7C29A4CCBDDA13E3CCEB8B91C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f611048c-168f-4beb-a8cd-6d8beb730519.roa Signing time: Sat 18 Oct 2025 06:43:22 +0000 ROA not before: Sat 18 Oct 2025 06:43:22 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.165.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:43:03:77:85:f2:9a:b7:c2:9a:4c:cb:dd:a1:3e:3c:ce:b8:b9:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 06:43:22 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=ab30ab6624a20baae49012dc77b817101fdb54e7115ec1c905646eef5220b12b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ab:6e:ec:2c:84:46:31:cc:e9:fd:8c:fb:01: b3:4f:b4:f2:c5:6a:16:f6:c3:76:05:33:00:44:46: e0:f0:01:5f:d4:3a:ac:39:f1:52:f5:9e:e3:2a:98: cc:dc:6c:85:d9:f2:29:31:60:e8:56:40:d5:51:fc: 43:ae:27:0d:41:b5:93:e1:86:bc:4f:3d:d5:59:2b: 50:a3:5f:8f:d1:ea:6d:ca:a9:f0:24:a9:c0:48:63: db:d9:e5:44:42:1f:bd:ec:db:ad:d6:81:84:ce:26: 0a:b5:54:1f:91:45:7b:9d:52:77:d0:fe:17:c6:4b: d9:f1:34:24:b5:f3:a7:1b:53:18:50:f1:a6:9f:13: 27:8f:63:26:2b:c3:49:31:c1:dd:d5:a1:ad:5a:77: 09:b3:19:73:a9:24:fb:82:1b:d5:b1:77:cd:ff:cf: 41:6b:99:db:25:0c:fa:9d:fe:5e:8d:43:8f:5a:14: 44:61:d8:a6:70:6c:26:25:3c:8c:43:74:57:d3:e5: fd:25:23:45:38:2c:08:39:62:de:70:ce:31:a8:30: 29:07:16:5e:f7:8a:c4:5e:19:a8:82:64:46:e0:2c: b4:79:5c:d8:b4:0a:5b:47:b9:4c:66:10:f7:7e:9a: 26:d4:b3:e7:40:32:48:8b:65:c9:61:94:bf:4e:86: 98:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:B6:22:B7:D6:EB:E2:65:92:04:B5:27:D3:00:A7:09:BE:B2:FF:33 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f611048c-168f-4beb-a8cd-6d8beb730519.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.165.31.0/24 Signature Algorithm: sha256WithRSAEncryption a3:37:55:4e:5a:56:c6:f6:2d:96:89:5a:57:9b:fb:df:b9:de: 5b:fa:80:e6:c9:6b:a7:58:39:08:53:ec:f1:52:79:27:23:66: 17:03:d1:83:83:5e:84:dc:c5:66:b4:28:5b:f7:ea:19:cc:02: 38:3c:24:93:0b:34:9a:94:d6:86:e3:6c:86:d8:f9:62:e4:40: 97:a7:53:1e:12:10:a4:5c:27:39:41:7e:3c:34:5e:57:f0:c8: 1f:0c:5e:7f:08:35:62:63:d2:24:78:60:7b:52:9f:ab:4e:46: 2c:ec:80:18:2c:eb:13:d7:8e:6d:db:ad:8b:d6:bc:4b:4a:f8: f7:ec:a0:54:fb:95:22:90:19:65:ba:33:50:3b:00:19:ce:d2: 25:d9:01:84:7d:59:c8:3a:58:13:85:79:14:81:14:68:87:16: 73:6c:81:13:d6:ef:bd:d0:08:c9:6d:f5:32:a3:56:77:f0:a2: d4:21:23:bb:e4:f2:63:10:d5:83:43:58:22:58:8d:69:b8:1b: d0:ef:a6:b3:05:0c:9b:f5:cd:35:15:4a:fe:45:14:40:cc:29: 11:d6:e5:32:79:26:c3:f1:ce:aa:2e:62:a5:e3:27:3f:f1:21: d3:98:c9:ec:0c:5f:45:f7:b2:e0:10:32:30:f4:c7:46:0b:64: 48:ac:7c:06 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZ0MDd4XymrfCmkzL3aE+PM64uRwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MDY0MzIyWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BhYjMwYWI2NjI0YTIwYmFhZTQ5MDEyZGM3N2I4MTcxMDFm ZGI1NGU3MTE1ZWMxYzkwNTY0NmVlZjUyMjBiMTJiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDIq27sLIRGMczp/Yz7AbNPtPLFahb2w3YFMwBERuDwAV/U Oqw58VL1nuMqmMzcbIXZ8ikxYOhWQNVR/EOuJw1BtZPhhrxPPdVZK1CjX4/R6m3K qfAkqcBIY9vZ5URCH73s263WgYTOJgq1VB+RRXudUnfQ/hfGS9nxNCS186cbUxhQ 8aafEyePYyYrw0kxwd3Voa1adwmzGXOpJPuCG9Wxd83/z0FrmdslDPqd/l6NQ49a FERh2KZwbCYlPIxDdFfT5f0lI0U4LAg5Yt5wzjGoMCkHFl73isReGaiCZEbgLLR5 XNi0CltHuUxmEPd+mibUs+dAMkiLZclhlL9OhpjHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU1rYit9br4mWSBLUn0wCnCb6y/zMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2Y2MTEwNDhjLTE2OGYtNGJlYi1hOGNkLTZkOGJlYjczMDUxOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASpR8wDQYJKoZIhvcNAQELBQADggEBAKM3VU5aVsb2LZaJWleb+9+53lv6 gObJa6dYOQhT7PFSeScjZhcD0YODXoTcxWa0KFv36hnMAjg8JJMLNJqU1objbIbY +WLkQJenUx4SEKRcJzlBfjw0XlfwyB8MXn8INWJj0iR4YHtSn6tORizsgBgs6xPX jm3brYvWvEtK+PfsoFT7lSKQGWW6M1A7ABnO0iXZAYR9Wcg6WBOFeRSBFGiHFnNs gRPW773QCMlt9TKjVnfwotQhI7vk8mMQ1YNDWCJYjWm4G9DvprMFDJv1zTUVSv5F FEDMKRHW5TJ5JsPxzqouYqXjJz/xIdOYyewMX0X3suAQMjD0x0YLZEisfAY= -----END CERTIFICATE-----Generated at Mon Oct 20 15:48:24 2025 by rpki-client