$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fce879ef-8764-4521-acde-2989eebccfb6.roa File: fce879ef-8764-4521-acde-2989eebccfb6.roa (raw, json) Hash identifier: /NSCT4LVYjpcdUKSCuSiI2WVEJEC8vu1o7pUiZdTOSU= Subject key identifier: 8E:4A:00:1F:30:D6:2E:3D:EB:81:D1:4F:FC:B8:39:4C:15:8B:FE:CE Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0E9F1155EF34D97B10C6CF496DE7484A6D3D253E Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fce879ef-8764-4521-acde-2989eebccfb6.roa Signing time: Sat 18 Oct 2025 22:42:31 +0000 ROA not before: Sat 18 Oct 2025 22:42:31 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.164.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:9f:11:55:ef:34:d9:7b:10:c6:cf:49:6d:e7:48:4a:6d:3d:25:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 22:42:31 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=5f930f433fe9ca98bb1763406d980b500a8cebbb5c7d693c508c0f0a7c9a5063, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:fa:8b:7d:e7:98:33:ee:1f:bd:1d:78:a8:a0: 25:b2:cd:fc:6e:f2:45:b2:d2:3d:b6:40:bb:8b:85: d1:9e:2f:6a:44:f4:c7:64:eb:56:19:f8:39:d1:24: c9:cc:25:e7:38:fa:4d:17:d1:42:f0:7a:0f:e7:98: 63:e6:29:ac:d7:3f:42:a9:6d:1a:5a:45:f3:57:56: b5:be:b3:c0:7c:79:05:07:9e:ec:fd:e6:31:54:49: 4b:58:3b:73:6a:f2:a6:f9:be:77:14:8c:7b:5a:d4: 25:9e:32:64:2e:99:f7:c3:eb:24:5a:fe:d6:e6:a0: 2e:5a:97:4f:c7:a8:79:d6:e1:a7:53:6a:c6:a6:2b: cb:a9:66:99:ea:15:cb:fb:2c:95:ca:86:d2:09:62: 8a:7e:2c:c8:bd:3d:9a:e9:02:f7:08:ee:a4:f4:71: ce:db:d9:74:f4:37:b9:9f:bf:bf:49:f5:7b:89:2c: 62:b4:17:55:f3:35:93:b9:f3:e1:f0:e7:75:dd:da: af:7d:87:57:b2:24:39:be:ca:43:0c:fa:62:6e:02: 5c:45:09:c1:21:83:26:99:1d:3e:37:96:e2:f9:f3: 90:6a:d7:18:76:81:b8:5c:93:26:f5:a5:44:e9:96: 67:d2:3c:09:72:77:ee:de:34:04:3a:21:e9:74:0b: e4:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:4A:00:1F:30:D6:2E:3D:EB:81:D1:4F:FC:B8:39:4C:15:8B:FE:CE X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fce879ef-8764-4521-acde-2989eebccfb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.164.132.0/22 Signature Algorithm: sha256WithRSAEncryption 6d:99:bb:31:07:eb:49:a9:66:01:38:68:26:b0:8a:52:2d:35: 31:af:e9:6f:29:bc:47:65:d9:8e:e4:5b:4c:fe:a8:e7:4d:fa: 77:08:2c:70:e4:d3:54:2a:e5:5a:8f:f0:1b:1f:9a:4d:61:3b: e9:1b:e9:ae:42:88:44:35:7d:ad:ab:0d:29:30:2b:fe:04:94: f8:54:0a:1c:67:16:7d:47:bd:4e:f3:62:37:16:8e:8e:72:46: cd:64:95:05:4a:f6:98:10:e5:84:7e:62:99:da:bb:1e:f4:f7: 3d:97:5a:64:38:2e:66:e5:75:44:34:63:15:ee:0f:aa:1a:33: ab:f1:c0:a8:7e:1e:6a:7f:e0:1d:6a:94:91:92:0c:fc:bd:fd: 0e:cb:57:94:df:88:d4:9b:54:d9:23:04:1d:65:75:a1:13:b2: 26:56:65:0f:eb:4f:06:7d:91:2f:c6:07:53:b9:27:cf:38:d8: bd:5b:af:72:be:2d:a3:21:a2:c2:7d:f1:34:d9:36:53:0a:e4: 00:6f:fd:4c:1a:54:22:de:5c:d4:ab:c2:05:08:ca:e5:b4:ec: 27:13:0b:4c:f8:f5:90:02:4d:13:3e:8f:09:3e:22:cd:52:38: ef:b5:10:55:7f:50:6a:08:d6:a5:07:57:73:9d:6a:f7:ba:88: c5:b6:12:7d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDp8RVe802XsQxs9JbedISm09JT4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MjI0MjMxWhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZjkzMGY0MzNmZTljYTk4YmIxNzYzNDA2ZDk4MGI1MDBh OGNlYmJiNWM3ZDY5M2M1MDhjMGYwYTdjOWE1MDYzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCQ+ot955gz7h+9HXiooCWyzfxu8kWy0j22QLuLhdGeL2pE 9Mdk61YZ+DnRJMnMJec4+k0X0ULweg/nmGPmKazXP0KpbRpaRfNXVrW+s8B8eQUH nuz95jFUSUtYO3Nq8qb5vncUjHta1CWeMmQumffD6yRa/tbmoC5al0/HqHnW4adT asamK8upZpnqFcv7LJXKhtIJYop+LMi9PZrpAvcI7qT0cc7b2XT0N7mfv79J9XuJ LGK0F1XzNZO58+Hw53Xd2q99h1eyJDm+ykMM+mJuAlxFCcEhgyaZHT43luL585Bq 1xh2gbhckyb1pUTplmfSPAlyd+7eNAQ6Iel0C+R7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUjkoAHzDWLj3rgdFP/Lg5TBWL/s4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2ZjZTg3OWVmLTg3NjQtNDUyMS1hY2RlLTI5ODllZWJjY2ZiNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAISpIQwDQYJKoZIhvcNAQELBQADggEBAG2ZuzEH60mpZgE4aCawilItNTGv 6W8pvEdl2Y7kW0z+qOdN+ncILHDk01Qq5VqP8Bsfmk1hO+kb6a5CiEQ1fa2rDSkw K/4ElPhUChxnFn1HvU7zYjcWjo5yRs1klQVK9pgQ5YR+Ypnaux709z2XWmQ4Lmbl dUQ0YxXuD6oaM6vxwKh+Hmp/4B1qlJGSDPy9/Q7LV5TfiNSbVNkjBB1ldaETsiZW ZQ/rTwZ9kS/GB1O5J8842L1br3K+LaMhosJ98TTZNlMK5ABv/UwaVCLeXNSrwgUI yuW07CcTC0z49ZACTRM+jwk+Is1SOO+1EFV/UGoI1qUHV3Odave6iMW2En0= -----END CERTIFICATE-----Generated at Mon Oct 20 21:11:40 2025 by rpki-client