$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/20101105-7631-426e-aaee-282fa6a1981b.roa File: 20101105-7631-426e-aaee-282fa6a1981b.roa (raw, json) Hash identifier: l5ATGO/eRnYKS/pIrhpL0e818gX/FHYcJ1/cnYQg2u4= Subject key identifier: 99:5C:7C:1B:AC:42:D0:0B:E9:9D:58:26:84:CC:38:E7:04:23:50:59 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 357D5E1833799C1F652C879580B9699D4E94D177 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/20101105-7631-426e-aaee-282fa6a1981b.roa Signing time: Mon 22 Sep 2025 19:44:59 +0000 ROA not before: Mon 22 Sep 2025 19:44:59 +0000 ROA not after: Mon 27 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.165.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:7d:5e:18:33:79:9c:1f:65:2c:87:95:80:b9:69:9d:4e:94:d1:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 22 19:44:59 2025 GMT Not After : Oct 27 23:59:59 2025 GMT Subject: serialNumber=25f4068d26e3631ef007c1d2cfaf760d45628fbc9c60d390b49cd5c1d52d9ca2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5a:b0:39:18:65:14:cf:a3:b7:17:2c:33:82: 9d:ff:8e:2f:a0:73:02:dd:6c:ae:6f:e7:11:1e:31: 8b:c9:45:8d:91:0d:24:3a:26:0e:c9:f2:85:4b:1a: ce:49:e2:98:74:b7:31:32:fb:b6:7f:02:55:5d:96: 45:8f:97:4f:3b:4d:2f:33:d9:7c:5c:50:30:05:5a: 36:c0:9f:15:c7:8b:12:a8:1f:2c:85:68:df:af:e2: 31:cb:fe:ed:20:9a:ee:9d:01:4f:dc:e2:c1:f4:bf: fb:6f:22:2d:cd:5f:e9:26:fe:26:dc:13:70:25:99: c1:0b:58:94:a1:e1:61:4c:46:f5:7d:02:0e:04:7a: 58:32:29:5e:3e:ad:ea:0d:99:90:61:b5:20:ad:3c: 28:5c:5c:5c:ad:15:8a:72:73:23:f0:75:be:38:f0: 4c:81:4f:46:42:76:03:af:d1:97:f1:cb:1f:6a:be: 63:02:fb:cd:18:f2:c4:a3:fd:e2:56:67:fc:aa:d0: 03:8d:d3:be:8b:48:17:3a:a7:db:71:12:05:e7:f5: f9:68:d9:43:d6:3b:27:0c:b9:3e:fc:20:f9:b9:11: 43:49:37:c4:77:a0:c1:a4:b4:5a:0e:ce:e7:f1:b7: 5e:fb:92:e3:6e:3b:0b:70:d1:bd:b6:2a:67:a2:d9: 37:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:5C:7C:1B:AC:42:D0:0B:E9:9D:58:26:84:CC:38:E7:04:23:50:59 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/20101105-7631-426e-aaee-282fa6a1981b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.165.50.0/24 Signature Algorithm: sha256WithRSAEncryption ac:af:35:38:fd:bd:ca:2f:42:ba:67:17:79:aa:d6:9d:3c:51: 6c:53:9b:5b:23:a3:ab:bc:94:b9:c0:bd:ea:e6:01:7a:9e:7d: e7:9a:1a:96:0b:df:e4:58:88:b4:24:aa:39:8c:70:2b:f1:82: a6:7a:40:2f:03:aa:1e:15:3e:bc:aa:a4:70:ca:a9:a5:c8:2b: 84:17:b4:fa:ca:48:6c:da:d3:00:e2:d7:a6:65:d6:70:64:92: d3:3a:8c:e7:fb:b5:6e:c4:80:9b:a2:b5:33:85:90:07:d5:98: 2b:a7:9c:3e:3a:58:41:53:7c:da:60:6c:3d:b8:47:ef:3e:bc: c2:35:26:0e:fa:c9:8d:d4:c4:8b:7a:aa:6f:54:23:6b:b9:64: 0a:18:5d:be:47:09:ec:4e:2c:13:c0:5d:d1:71:a3:5d:4b:2e: e9:e1:fb:28:b3:40:ec:3c:e0:17:10:c6:54:d7:a6:b0:12:b3: 27:34:70:1b:e5:51:9c:26:36:3f:b4:45:a8:1e:55:73:5e:12: f9:f2:36:5a:9b:66:c1:ac:33:ee:5e:c0:a3:87:3e:d7:49:e3: 79:d2:27:ab:08:28:ac:db:5f:7d:79:1f:46:01:28:f7:df:6d: 06:9f:be:c8:a2:e7:e0:f7:b5:59:5e:23:a8:3a:ae:dc:92:bf: c0:42:e6:05 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNX1eGDN5nB9lLIeVgLlpnU6U0XcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTIyMTk0NDU5WhcNMjUxMDI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AyNWY0MDY4ZDI2ZTM2MzFlZjAwN2MxZDJjZmFmNzYwZDQ1 NjI4ZmJjOWM2MGQzOTBiNDljZDVjMWQ1MmQ5Y2EyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDAWrA5GGUUz6O3Fywzgp3/ji+gcwLdbK5v5xEeMYvJRY2R DSQ6Jg7J8oVLGs5J4ph0tzEy+7Z/AlVdlkWPl087TS8z2XxcUDAFWjbAnxXHixKo HyyFaN+v4jHL/u0gmu6dAU/c4sH0v/tvIi3NX+km/ibcE3AlmcELWJSh4WFMRvV9 Ag4EelgyKV4+reoNmZBhtSCtPChcXFytFYpycyPwdb448EyBT0ZCdgOv0Zfxyx9q vmMC+80Y8sSj/eJWZ/yq0AON076LSBc6p9txEgXn9flo2UPWOycMuT78IPm5EUNJ N8R3oMGktFoOzufxt177kuNuOwtw0b22Kmei2TeVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUmVx8G6xC0AvpnVgmhMw45wQjUFkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzIwMTAxMTA1LTc2MzEtNDI2ZS1hYWVlLTI4MmZhNmExOTgxYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASpTIwDQYJKoZIhvcNAQELBQADggEBAKyvNTj9vcovQrpnF3mq1p08UWxT m1sjo6u8lLnAvermAXqefeeaGpYL3+RYiLQkqjmMcCvxgqZ6QC8Dqh4VPryqpHDK qaXIK4QXtPrKSGza0wDi16Zl1nBkktM6jOf7tW7EgJuitTOFkAfVmCunnD46WEFT fNpgbD24R+8+vMI1Jg76yY3UxIt6qm9UI2u5ZAoYXb5HCexOLBPAXdFxo11LLunh +yizQOw84BcQxlTXprASsyc0cBvlUZwmNj+0RageVXNeEvnyNlqbZsGsM+5ewKOH PtdJ43nSJ6sIKKzbX315H0YBKPffbQafvsii5+D3tVleI6g6rtySv8BC5gU= -----END CERTIFICATE-----Generated at Sat Oct 18 02:36:29 2025 by rpki-client