$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/21215a3c-cd09-4cef-8b41-f76400228526.roa File: 21215a3c-cd09-4cef-8b41-f76400228526.roa (raw, json) Hash identifier: VbvtJ8eQeMUZ72o1ZFUBPJrfe7YuhFiZVEkNNqdIx+4= Subject key identifier: 6F:1C:98:56:24:01:E4:03:26:03:D1:EC:C9:90:74:A1:56:56:4D:DB Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0D22EA2A8E5AD4538D8C23CC661BCDD6D9FED7C0 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/21215a3c-cd09-4cef-8b41-f76400228526.roa Signing time: Wed 24 Sep 2025 22:34:00 +0000 ROA not before: Wed 24 Sep 2025 22:34:00 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.66.34.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:22:ea:2a:8e:5a:d4:53:8d:8c:23:cc:66:1b:cd:d6:d9:fe:d7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 22:34:00 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=f382a55cc9732df6000fdc3f5d8e3979677457859af99936b8278a4311bbb253, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:72:ee:92:54:7b:f4:ab:5a:55:7e:63:d1:69: f1:99:3b:8b:9b:0b:95:55:45:e9:60:7a:68:be:e1: db:a3:df:83:82:a2:20:05:61:f6:a0:17:6f:e5:59: 4b:c9:8b:c2:b8:fb:99:8a:82:a6:8d:3b:cd:da:c1: a5:a5:09:73:6a:c2:d0:49:fe:60:65:99:8a:2c:b2: f7:23:87:72:41:96:be:f6:85:f0:53:1e:51:9d:8c: af:a6:62:23:81:77:8d:7e:44:1a:95:38:fd:ab:05: 4e:b9:93:e1:2d:70:dd:54:df:96:af:b3:62:8a:0d: 9b:a4:62:97:b0:98:89:94:26:dd:ba:1d:43:3c:d4: 6d:39:02:90:b9:dc:23:5e:37:55:b5:34:1d:00:c0: e5:45:b5:7e:ad:e3:1f:1e:10:ce:38:92:fa:c8:12: 75:57:bd:74:0d:e6:5d:a7:47:da:50:e6:d0:73:6c: 54:dd:a8:0b:3a:95:a3:d7:f7:48:51:83:cd:0f:bf: af:bf:80:93:de:a9:b7:58:c2:b3:f7:0f:69:05:95: 85:b2:c0:e4:8b:64:0d:fa:42:03:10:7a:40:88:23: 0b:a8:ad:44:d4:5c:39:4f:ff:ea:e8:24:46:9e:b3: 4b:d9:aa:0d:55:6d:5b:d4:cc:a0:da:f0:90:64:ca: 93:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:1C:98:56:24:01:E4:03:26:03:D1:EC:C9:90:74:A1:56:56:4D:DB X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/21215a3c-cd09-4cef-8b41-f76400228526.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.66.34.0/23 Signature Algorithm: sha256WithRSAEncryption 63:b3:48:a8:02:e8:ae:d8:17:66:a2:31:ef:3d:e7:2e:48:20: 86:1d:22:27:92:19:71:93:2c:98:80:24:47:54:bc:72:72:87: f3:bc:40:10:a2:91:c0:fe:88:87:42:b7:19:b6:f9:37:30:fc: 6a:b2:5e:cf:fe:af:b0:68:02:3b:3c:71:a3:99:e1:6c:8f:6f: b6:6a:bf:8f:79:48:32:34:e6:b9:1d:6e:26:80:ae:d7:46:fa: 0c:98:4e:2a:af:da:ef:60:57:cb:6e:f3:f8:b1:9e:b1:75:b7: d0:37:38:85:71:15:f8:56:52:75:4c:a6:d3:95:33:24:49:ec: 3e:03:a3:ae:cf:02:7b:59:04:ee:e7:56:ee:c4:e2:ee:ee:c3: f8:7b:10:b6:c7:27:ec:b9:ba:4b:2b:2d:0b:cf:c9:fd:5e:49: e6:1d:23:02:d4:95:4d:24:a1:28:ed:85:1f:aa:69:66:9a:44: e4:9d:8f:47:a6:36:50:29:e8:a9:9a:54:19:c2:82:28:e2:69: 73:02:64:79:85:b7:14:1b:cb:7a:06:06:61:57:33:9a:45:96: 58:d8:df:a6:31:4c:d2:ed:76:af:93:ff:e1:96:3a:35:08:83: 3e:c7:e3:6e:63:4d:7a:f9:b5:79:f0:da:a5:fc:20:74:c1:7d: 16:37:9b:48 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDSLqKo5a1FONjCPMZhvN1tn+18AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MjIzNDAwWhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BmMzgyYTU1Y2M5NzMyZGY2MDAwZmRjM2Y1ZDhlMzk3OTY3 NzQ1Nzg1OWFmOTk5MzZiODI3OGE0MzExYmJiMjUzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCUcu6SVHv0q1pVfmPRafGZO4ubC5VVRelgemi+4duj34OC oiAFYfagF2/lWUvJi8K4+5mKgqaNO83awaWlCXNqwtBJ/mBlmYossvcjh3JBlr72 hfBTHlGdjK+mYiOBd41+RBqVOP2rBU65k+EtcN1U35avs2KKDZukYpewmImUJt26 HUM81G05ApC53CNeN1W1NB0AwOVFtX6t4x8eEM44kvrIEnVXvXQN5l2nR9pQ5tBz bFTdqAs6laPX90hRg80Pv6+/gJPeqbdYwrP3D2kFlYWywOSLZA36QgMQekCIIwuo rUTUXDlP/+roJEaes0vZqg1VbVvUzKDa8JBkypOBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUbxyYViQB5AMmA9HsyZB0oVZWTdswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzIxMjE1YTNjLWNkMDktNGNlZi04YjQxLWY3NjQwMDIyODUyNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESQiIwDQYJKoZIhvcNAQELBQADggEBAGOzSKgC6K7YF2aiMe895y5IIIYd IieSGXGTLJiAJEdUvHJyh/O8QBCikcD+iIdCtxm2+Tcw/GqyXs/+r7BoAjs8caOZ 4WyPb7Zqv495SDI05rkdbiaArtdG+gyYTiqv2u9gV8tu8/ixnrF1t9A3OIVxFfhW UnVMptOVMyRJ7D4Do67PAntZBO7nVu7E4u7uw/h7ELbHJ+y5uksrLQvPyf1eSeYd IwLUlU0koSjthR+qaWaaROSdj0emNlAp6KmaVBnCgijiaXMCZHmFtxQby3oGBmFX M5pFlljY36YxTNLtdq+T/+GWOjUIgz7H425jTXr5tXnw2qX8IHTBfRY3m0g= -----END CERTIFICATE-----Generated at Sat Oct 18 00:13:03 2025 by rpki-client