$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/21e41022-09cc-4752-83e2-3d3302caf5cf.roa File: 21e41022-09cc-4752-83e2-3d3302caf5cf.roa (raw, json) Hash identifier: DXxpWcqvHl6RSSfYveJfr2/WQr4MossJuK3EAa60+e4= Subject key identifier: 0E:5F:2E:65:C5:36:22:0B:96:B7:28:7A:F0:97:95:FC:1E:05:0A:AD Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7E5666A13060612D9B8FB739D18BDD5028831795 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/21e41022-09cc-4752-83e2-3d3302caf5cf.roa Signing time: Wed 24 Sep 2025 22:41:55 +0000 ROA not before: Wed 24 Sep 2025 22:41:55 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.67.4.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:56:66:a1:30:60:61:2d:9b:8f:b7:39:d1:8b:dd:50:28:83:17:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 22:41:55 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=3f57cf721a8533e7aa4e0fd73e67e293e259bdc3afc9cdaaf02a2b2bbdb33b6d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:62:2c:06:55:c0:e0:d5:31:6b:2e:f7:69:16: f9:15:db:98:45:7d:a9:54:e1:d0:f8:51:60:7e:d2: df:22:c1:08:70:a0:d9:0a:cd:a2:59:20:0c:e9:36: 5d:8c:3d:3f:2a:9a:65:22:7a:a0:ac:13:8d:04:b8: ed:a9:3c:c8:77:4e:c1:7c:06:13:96:9e:92:2d:c1: 2f:60:c8:47:9e:61:f8:e1:c6:84:d5:bb:c1:06:9c: ff:e4:e1:3b:42:1c:f6:18:82:24:77:f4:6a:a7:fc: 61:9a:cf:5a:e4:f0:10:ff:e5:56:3f:35:92:2e:a0: e1:8e:17:d6:54:b7:d0:ed:e6:f9:d6:d6:4f:bb:9e: ec:71:33:cb:1b:9c:1c:fb:15:67:de:81:be:23:33: 5a:41:23:de:ce:43:c6:c0:91:11:c9:39:67:42:c6: 1f:8e:58:8a:26:93:9d:f8:71:da:a9:7f:e5:5f:f3: b1:4f:e1:68:7e:ed:63:87:00:80:08:f3:a0:33:12: 35:bf:c6:1e:d5:c6:52:b8:d0:7c:2c:07:96:1c:c4: a9:85:23:38:55:07:f0:bf:50:a1:ab:d2:a9:8b:5e: 5a:75:b9:93:14:83:34:f8:5f:5a:1b:7e:f0:aa:0c: 89:f7:7e:4e:7b:10:2b:e0:9c:c4:fc:46:a7:e1:f3: 1b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:5F:2E:65:C5:36:22:0B:96:B7:28:7A:F0:97:95:FC:1E:05:0A:AD X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/21e41022-09cc-4752-83e2-3d3302caf5cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.67.4.0/23 Signature Algorithm: sha256WithRSAEncryption 3b:6c:e0:a1:ee:41:00:85:f2:4b:60:89:94:a2:6b:b5:19:7b: a2:15:a9:cf:93:10:31:93:e3:b3:bd:97:46:d0:1d:e0:cc:ab: 97:65:e8:ac:cd:4d:71:cb:a5:50:0b:27:3e:95:3a:96:a6:b1: 23:69:2b:92:31:9f:5e:b1:32:77:b5:24:2d:2f:8c:1c:b6:1e: 7e:52:e2:e1:51:9a:5a:10:fc:71:86:49:74:47:57:9c:aa:31: 6b:5c:c7:32:19:a3:60:ad:02:f8:89:f0:39:24:8b:e4:6e:28: e9:4c:41:ba:ab:9d:e1:3e:fe:74:41:b3:cf:0c:93:41:7f:61: 94:ba:d5:2b:17:b8:82:16:53:dc:01:87:9e:b7:3a:35:d1:cb: 2f:0f:67:0f:23:52:58:1c:3f:67:c9:40:3c:2b:c4:96:4d:20: 72:0c:f8:19:47:b1:fa:45:c6:6e:c9:98:07:30:3b:8d:a6:a0: 32:1e:eb:fb:73:64:d7:37:eb:03:c7:65:29:9d:10:c4:b5:32: 0a:c5:7c:e2:a2:cc:4e:42:27:55:6d:a5:f8:e9:36:ae:a5:fd: 68:1c:a5:13:b4:e1:67:21:ad:46:33:81:e6:6a:be:42:66:35: b8:f5:03:ac:6c:5e:6a:5e:91:ee:55:b4:a5:0f:9a:5a:ec:66: 84:dd:e0:e2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUflZmoTBgYS2bj7c50YvdUCiDF5UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MjI0MTU1WhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0AzZjU3Y2Y3MjFhODUzM2U3YWE0ZTBmZDczZTY3ZTI5M2Uy NTliZGMzYWZjOWNkYWFmMDJhMmIyYmJkYjMzYjZkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCfYiwGVcDg1TFrLvdpFvkV25hFfalU4dD4UWB+0t8iwQhw oNkKzaJZIAzpNl2MPT8qmmUieqCsE40EuO2pPMh3TsF8BhOWnpItwS9gyEeeYfjh xoTVu8EGnP/k4TtCHPYYgiR39Gqn/GGaz1rk8BD/5VY/NZIuoOGOF9ZUt9Dt5vnW 1k+7nuxxM8sbnBz7FWfegb4jM1pBI97OQ8bAkRHJOWdCxh+OWIomk534cdqpf+Vf 87FP4Wh+7WOHAIAI86AzEjW/xh7VxlK40HwsB5YcxKmFIzhVB/C/UKGr0qmLXlp1 uZMUgzT4X1obfvCqDIn3fk57ECvgnMT8Rqfh8xsbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUDl8uZcU2IguWtyh68JeV/B4FCq0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzIxZTQxMDIyLTA5Y2MtNDc1Mi04M2UyLTNkMzMwMmNhZjVjZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESQwQwDQYJKoZIhvcNAQELBQADggEBADts4KHuQQCF8ktgiZSia7UZe6IV qc+TEDGT47O9l0bQHeDMq5dl6KzNTXHLpVALJz6VOpamsSNpK5Ixn16xMne1JC0v jBy2Hn5S4uFRmloQ/HGGSXRHV5yqMWtcxzIZo2CtAviJ8Dkki+RuKOlMQbqrneE+ /nRBs88Mk0F/YZS61SsXuIIWU9wBh563OjXRyy8PZw8jUlgcP2fJQDwrxJZNIHIM +BlHsfpFxm7JmAcwO42moDIe6/tzZNc36wPHZSmdEMS1MgrFfOKizE5CJ1Vtpfjp Nq6l/WgcpRO04WchrUYzgeZqvkJmNbj1A6xsXmpeke5VtKUPmlrsZoTd4OI= -----END CERTIFICATE-----Generated at Sat Oct 18 05:08:51 2025 by rpki-client