$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fd69c157-e92e-4def-963c-de4fc60846d2.roa File: fd69c157-e92e-4def-963c-de4fc60846d2.roa (raw, json) Hash identifier: BEr2ePr4aPtn9sxSUZOHU5xS9kX6b15X2ub2LEJGOCo= Subject key identifier: 81:D1:35:53:08:CC:9F:35:A8:AD:55:7A:2D:F2:30:5F:84:C6:67:2F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 03366AE838D5809709C76FE3FE8C1E2BC18F5691 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fd69c157-e92e-4def-963c-de4fc60846d2.roa Signing time: Sat 18 Oct 2025 14:42:36 +0000 ROA not before: Sat 18 Oct 2025 14:42:36 +0000 ROA not after: Sat 22 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.173.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:36:6a:e8:38:d5:80:97:09:c7:6f:e3:fe:8c:1e:2b:c1:8f:56:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 18 14:42:36 2025 GMT Not After : Nov 22 23:59:59 2025 GMT Subject: serialNumber=7db2109f4ce52b1786b5cde686979979c34d22f39c473db1c634c83a5b828e55, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:02:b3:1f:83:e3:a0:37:be:a8:02:b8:e8:f7: e1:a3:48:39:6b:e5:98:2d:60:02:5c:84:8d:23:7f: e5:e8:29:71:56:1b:a0:2c:cc:4f:0b:53:97:84:15: d4:6d:12:9b:46:30:13:47:df:8c:66:d0:4b:80:c5: 8c:b5:cd:4c:e9:98:ed:e9:fb:2a:64:98:8e:da:36: ed:0a:95:19:d2:b4:f9:80:93:3a:85:10:a1:84:9c: 28:99:fd:da:95:94:f7:e7:cc:d2:22:d8:c1:d6:18: e6:28:e4:9f:ca:14:31:95:6d:b3:5b:58:ce:3b:2c: 9b:5f:c9:4e:04:f4:8b:97:54:47:fe:8c:c5:46:fa: af:23:5c:e3:bb:fa:ca:e2:e9:fb:d5:d6:98:25:0b: 89:62:33:67:59:7b:c5:9b:58:94:a2:df:32:87:94: ff:42:db:7a:06:0d:4f:84:0f:ed:23:b3:8c:eb:1c: 6a:e5:ce:f8:8c:51:a5:cd:26:09:a8:9d:e9:e3:ee: 92:b2:ae:59:b0:bd:82:31:20:1a:fd:b5:5a:56:1b: 48:20:95:89:b6:ee:65:56:2c:a3:33:66:39:a9:aa: 30:ac:a0:ea:ae:54:e0:39:e0:fe:ce:ad:d9:a3:16: 53:89:b1:00:9e:cc:9f:ab:77:3d:b8:b7:65:40:b4: ae:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:D1:35:53:08:CC:9F:35:A8:AD:55:7A:2D:F2:30:5F:84:C6:67:2F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fd69c157-e92e-4def-963c-de4fc60846d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.173.241.0/24 Signature Algorithm: sha256WithRSAEncryption 07:4d:fa:fd:37:ff:5f:e3:ae:95:fb:4e:96:b1:f3:04:ff:97: 67:00:1f:94:56:ac:b7:c8:da:d6:4b:1e:0c:8c:6e:bc:e8:92: a4:b3:1d:a1:31:74:7d:13:67:0b:91:9a:de:ce:dd:6e:ed:0d: a4:4b:5f:80:57:c1:c5:06:20:cc:28:11:97:d8:bc:a1:20:28: 02:1d:b6:43:b6:8e:c3:2e:5f:27:17:8d:ae:b8:4b:47:be:1d: 03:4a:29:dc:58:d6:c5:e2:1f:45:ff:55:47:66:69:ff:f0:62: 37:e8:ea:bf:ad:8d:a9:90:1b:5d:a6:2c:e0:b9:96:5b:58:6f: f7:c3:b4:70:2d:30:a2:3d:c6:c7:bf:53:0c:fa:dc:7e:5b:3f: ad:63:6e:e8:fc:6b:9d:32:1d:44:fa:f8:6a:35:12:1d:5a:1c: 09:6b:e5:d2:ed:73:e4:10:ca:05:cd:bf:a1:c7:2c:8c:61:12: 85:a3:dc:2d:0a:4b:c6:48:96:6f:9a:7a:4d:f1:ab:f8:ed:f9: c4:ec:b0:61:0a:39:37:39:57:6d:78:e1:b5:26:19:d5:90:72: 79:09:c5:e1:5d:76:65:d9:00:a0:5c:de:43:0d:c6:65:2c:9c: f4:e7:4f:11:2f:29:49:d2:24:fa:18:8a:a0:0a:db:57:bb:4a: 29:50:94:bd -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAzZq6DjVgJcJx2/j/oweK8GPVpEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDE4MTQ0MjM2WhcNMjUxMTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZGIyMTA5ZjRjZTUyYjE3ODZiNWNkZTY4Njk3OTk3OWMz NGQyMmYzOWM0NzNkYjFjNjM0YzgzYTViODI4ZTU1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNArMfg+OgN76oArjo9+GjSDlr5ZgtYAJchI0jf+XoKXFW G6AszE8LU5eEFdRtEptGMBNH34xm0EuAxYy1zUzpmO3p+ypkmI7aNu0KlRnStPmA kzqFEKGEnCiZ/dqVlPfnzNIi2MHWGOYo5J/KFDGVbbNbWM47LJtfyU4E9IuXVEf+ jMVG+q8jXOO7+sri6fvV1pglC4liM2dZe8WbWJSi3zKHlP9C23oGDU+ED+0js4zr HGrlzviMUaXNJgmonenj7pKyrlmwvYIxIBr9tVpWG0gglYm27mVWLKMzZjmpqjCs oOquVOA54P7OrdmjFlOJsQCezJ+rdz24t2VAtK6xAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUgdE1UwjMnzWorVV6LfIwX4TGZy8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2ZkNjljMTU3LWU5MmUtNGRlZi05NjNjLWRlNGZjNjA4NDZkMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASrfEwDQYJKoZIhvcNAQELBQADggEBAAdN+v03/1/jrpX7Tpax8wT/l2cA H5RWrLfI2tZLHgyMbrzokqSzHaExdH0TZwuRmt7O3W7tDaRLX4BXwcUGIMwoEZfY vKEgKAIdtkO2jsMuXycXja64S0e+HQNKKdxY1sXiH0X/VUdmaf/wYjfo6r+tjamQ G12mLOC5lltYb/fDtHAtMKI9xse/Uwz63H5bP61jbuj8a50yHUT6+Go1Eh1aHAlr 5dLtc+QQygXNv6HHLIxhEoWj3C0KS8ZIlm+aek3xq/jt+cTssGEKOTc5V2144bUm GdWQcnkJxeFddmXZAKBc3kMNxmUsnPTnTxEvKUnSJPoYiqAK21e7SilQlL0= -----END CERTIFICATE-----Generated at Mon Oct 20 15:48:36 2025 by rpki-client