$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/11cd575b-c11f-4e92-9c49-68c2e837a52d.roa File: 11cd575b-c11f-4e92-9c49-68c2e837a52d.roa (raw, json) Hash identifier: gc7gdyTr9MZMHHi19+5oHWVwpum6CNhfSvm1MGuf9No= Subject key identifier: 77:90:4B:BE:12:82:40:C7:B9:43:91:84:61:33:71:EC:22:F3:31:97 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6B64F606BCF63B0EB4DA74A28FA98EECB9CED10E Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/11cd575b-c11f-4e92-9c49-68c2e837a52d.roa Signing time: Wed 24 Sep 2025 22:07:32 +0000 ROA not before: Wed 24 Sep 2025 22:07:32 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.67.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:64:f6:06:bc:f6:3b:0e:b4:da:74:a2:8f:a9:8e:ec:b9:ce:d1:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 22:07:32 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=b7dc0d227dd3a266deeb936b5623a5ed54eca7d7ed3d8221bf787f9a0da23720, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a4:6d:39:13:8e:3f:c4:6f:ac:d9:3d:cd:e5: 46:03:74:6d:91:25:28:2c:58:25:92:d3:5d:b9:89: d9:3f:f2:0e:c3:30:a9:e3:b7:42:a0:cf:e3:c0:df: 7e:bf:a5:e3:a9:0f:af:47:1f:98:99:51:99:63:72: f6:63:77:b3:f3:29:3a:c6:6b:22:e7:37:34:2a:7d: 80:33:8c:74:ea:0c:bc:f8:8d:df:f8:e5:e4:ac:8c: 49:10:4e:4f:cb:b6:5a:ff:c3:30:a3:f3:14:c6:d1: f8:83:14:7a:2c:38:41:9f:66:de:65:fd:e1:70:f7: eb:4d:33:de:0a:af:85:46:74:82:d0:b5:de:65:d4: b9:d7:5e:85:e0:98:91:d4:fe:ff:47:95:41:f2:81: 33:56:50:8e:3f:2b:a9:f4:6a:0e:6d:94:22:b6:85: 9f:ff:42:b4:0a:37:34:56:50:4f:e5:9c:ba:9b:dc: 80:5d:6b:69:55:11:0e:16:b0:59:a2:0a:75:76:92: e5:65:31:79:35:93:1e:d0:d8:99:0f:f2:05:76:26: 53:39:3f:df:f5:78:91:78:65:e4:c4:27:d4:4c:89: 10:63:c0:43:87:77:ce:bc:6a:0c:3c:e5:ab:2f:f3: 5d:1b:c0:ef:eb:dd:87:28:b0:2e:5f:b3:a4:3a:66: a8:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:90:4B:BE:12:82:40:C7:B9:43:91:84:61:33:71:EC:22:F3:31:97 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/11cd575b-c11f-4e92-9c49-68c2e837a52d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.67.33.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:a8:ab:37:e9:3b:33:e5:1f:de:88:a9:94:e2:9f:6f:02:b8: 05:51:e4:cc:7a:c7:e7:fe:1d:64:51:4b:e3:51:4f:70:a2:17: 93:61:60:e7:ab:15:95:c5:fb:f9:ab:09:9c:7d:c4:0c:2d:9b: de:13:7d:6c:53:5f:7f:ae:65:33:c4:f8:35:ca:c7:10:30:09: 7e:71:4d:18:be:85:88:e9:9b:8f:ab:bf:6f:76:ad:10:34:b6: d3:63:6e:d7:54:29:52:4f:d0:a5:c9:b9:2f:cb:b9:cb:de:da: 32:19:29:d3:bf:89:a0:32:55:a2:1f:9c:cb:57:c0:9d:8f:60: ad:e6:7a:53:b1:e5:25:70:fd:5e:e1:49:f4:2b:d6:cc:ae:12: a4:16:ee:0a:50:ef:71:d9:94:9b:a7:11:2b:03:fa:a2:a7:af: 45:5e:31:0e:2f:24:27:66:e2:08:3d:bf:56:c6:b0:41:58:a9: fc:ac:0b:97:31:01:e2:5a:2c:29:63:54:7d:1c:74:98:d6:ff: b1:57:db:18:a5:89:02:59:22:e1:f8:87:82:b6:53:ba:43:6a: 8a:1e:59:f9:3e:2e:54:c4:d7:41:2d:c3:7b:8d:f5:a2:1f:0f: a5:34:f9:28:ce:c4:c6:05:5a:1d:34:a0:e6:55:15:74:58:54: 4e:da:2a:f8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUa2T2Brz2Ow602nSij6mO7LnO0Q4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MjIwNzMyWhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BiN2RjMGQyMjdkZDNhMjY2ZGVlYjkzNmI1NjIzYTVlZDU0 ZWNhN2Q3ZWQzZDgyMjFiZjc4N2Y5YTBkYTIzNzIwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCepG05E44/xG+s2T3N5UYDdG2RJSgsWCWS0125idk/8g7D MKnjt0Kgz+PA336/peOpD69HH5iZUZljcvZjd7PzKTrGayLnNzQqfYAzjHTqDLz4 jd/45eSsjEkQTk/Ltlr/wzCj8xTG0fiDFHosOEGfZt5l/eFw9+tNM94Kr4VGdILQ td5l1LnXXoXgmJHU/v9HlUHygTNWUI4/K6n0ag5tlCK2hZ//QrQKNzRWUE/lnLqb 3IBda2lVEQ4WsFmiCnV2kuVlMXk1kx7Q2JkP8gV2JlM5P9/1eJF4ZeTEJ9RMiRBj wEOHd868agw85asv810bwO/r3YcosC5fs6Q6ZqhjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUd5BLvhKCQMe5Q5GEYTNx7CLzMZcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzExY2Q1NzViLWMxMWYtNGU5Mi05YzQ5LTY4YzJlODM3YTUyZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASQyEwDQYJKoZIhvcNAQELBQADggEBAJuoqzfpOzPlH96IqZTin28CuAVR 5Mx6x+f+HWRRS+NRT3CiF5NhYOerFZXF+/mrCZx9xAwtm94TfWxTX3+uZTPE+DXK xxAwCX5xTRi+hYjpm4+rv292rRA0ttNjbtdUKVJP0KXJuS/Lucve2jIZKdO/iaAy VaIfnMtXwJ2PYK3melOx5SVw/V7hSfQr1syuEqQW7gpQ73HZlJunESsD+qKnr0Ve MQ4vJCdm4gg9v1bGsEFYqfysC5cxAeJaLCljVH0cdJjW/7FX2xiliQJZIuH4h4K2 U7pDaooeWfk+LlTE10Etw3uN9aIfD6U0+SjOxMYFWh00oOZVFXRYVE7aKvg= -----END CERTIFICATE-----Generated at Fri Oct 17 23:58:21 2025 by rpki-client