$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/25ed586a-7e39-4461-8125-1af714684dbf.roa File: 25ed586a-7e39-4461-8125-1af714684dbf.roa (raw, json) Hash identifier: Fvd/kLCd2PeDBlQRTxCndv0b4t7Oi8taq9aDOjUKZ+g= Subject key identifier: 3E:E4:E8:0C:93:7B:92:D2:23:08:D0:04:DB:91:7C:78:B9:42:BC:4D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 76EAED4DB0149FBEF3636594ADAEDE8A2B47F7D2 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/25ed586a-7e39-4461-8125-1af714684dbf.roa Signing time: Wed 24 Sep 2025 22:59:21 +0000 ROA not before: Wed 24 Sep 2025 22:59:21 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.67.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:ea:ed:4d:b0:14:9f:be:f3:63:65:94:ad:ae:de:8a:2b:47:f7:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 22:59:21 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=a9d2a946372bbdecfbc28430849049402e4c3b3f68241bf70ba78d1fcda4b7a2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2b:d6:f4:fe:3a:23:d6:ce:e4:3b:49:b3:90: db:e8:79:dc:f4:47:b8:1c:40:04:d9:4c:19:6b:b3: 15:c4:1d:24:97:c3:f4:e6:68:9f:21:8f:7f:4d:72: 6b:9c:df:18:56:51:2f:74:4f:1e:14:80:51:c1:c7: df:23:81:0d:3a:17:2e:32:d5:b8:91:3c:17:03:fc: cd:d8:b6:00:0a:1e:4e:0b:5c:a9:c8:3c:d2:11:28: 63:43:ce:47:bc:67:c0:36:ef:7f:8f:14:f8:81:43: e7:32:fb:03:c6:30:d6:0f:2c:16:63:69:55:36:62: 50:cd:40:65:b8:56:f6:64:01:a4:f1:59:5b:af:e3: b6:d7:b4:e7:6d:03:db:1e:c7:a9:73:57:9c:72:59: b6:07:cd:d7:69:dc:d0:f4:04:27:00:c5:0e:05:36: 0b:60:a9:20:28:7a:dc:00:77:33:c0:6c:80:50:67: 8f:41:a3:a8:fa:f6:d5:fb:41:ce:93:87:28:7d:9f: d5:49:95:1b:45:cc:1f:cf:fe:6c:6e:5e:75:3a:4c: 6b:55:fc:03:cf:2f:27:52:ea:2b:b1:b5:06:da:4c: 20:9b:21:d5:4c:cb:f2:2c:e6:85:8b:03:54:2d:4b: 84:00:dd:e3:9d:e4:e4:fb:ff:f1:5f:c8:83:f9:3e: 3e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:E4:E8:0C:93:7B:92:D2:23:08:D0:04:DB:91:7C:78:B9:42:BC:4D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/25ed586a-7e39-4461-8125-1af714684dbf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.67.24.0/22 Signature Algorithm: sha256WithRSAEncryption 06:c6:2c:c3:96:6e:38:4c:ab:95:4e:81:5a:e6:84:1c:bd:d8: 98:b8:f5:30:17:05:12:50:4c:71:65:8a:20:77:35:c8:9b:18: 88:07:39:50:dd:5a:e1:9c:f4:a7:e2:21:61:0b:b3:9b:df:f9: 10:de:9d:35:cb:ed:b6:52:a9:50:a8:a1:2c:6f:21:0e:91:e8: 35:68:e7:2f:8a:27:9c:2c:bf:5f:a0:94:42:ba:3e:e8:f1:89: c4:26:ef:92:3d:d1:e9:9e:55:b9:3c:94:1f:78:64:26:74:ee: fe:14:86:aa:91:0e:48:67:77:58:e1:0a:47:d8:f2:d6:7d:3d: b0:05:d3:ee:16:ef:61:d7:9d:b7:43:d4:69:03:93:e3:e0:0b: 6f:aa:cc:f0:27:6b:31:e9:bc:41:b6:01:d0:ec:17:b8:14:49: 71:6e:a3:ee:2e:15:c4:97:24:15:19:0c:3f:32:9e:d4:c5:e5: 2c:1c:b4:24:b6:6c:5e:13:79:bf:e9:91:13:04:bf:c0:9a:e0: 3c:93:15:ba:a8:01:f0:95:98:95:bb:68:45:7b:65:9c:2d:cc: 1a:a8:be:12:d6:3e:64:4a:a5:0f:1c:05:05:c4:64:63:97:63: 55:2c:e3:01:dd:ba:a9:14:4a:66:64:2e:18:a1:d2:1b:5b:89: 4b:1b:52:00 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdurtTbAUn77zY2WUra7eiitH99IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MjI1OTIxWhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BhOWQyYTk0NjM3MmJiZGVjZmJjMjg0MzA4NDkwNDk0MDJl NGMzYjNmNjgyNDFiZjcwYmE3OGQxZmNkYTRiN2EyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0K9b0/joj1s7kO0mzkNvoedz0R7gcQATZTBlrsxXEHSSX w/TmaJ8hj39Ncmuc3xhWUS90Tx4UgFHBx98jgQ06Fy4y1biRPBcD/M3YtgAKHk4L XKnIPNIRKGNDzke8Z8A273+PFPiBQ+cy+wPGMNYPLBZjaVU2YlDNQGW4VvZkAaTx WVuv47bXtOdtA9sex6lzV5xyWbYHzddp3ND0BCcAxQ4FNgtgqSAoetwAdzPAbIBQ Z49Bo6j69tX7Qc6Thyh9n9VJlRtFzB/P/mxuXnU6TGtV/APPLydS6iuxtQbaTCCb IdVMy/Is5oWLA1QtS4QA3eOd5OT7//FfyIP5Pj7jAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUPuToDJN7ktIjCNAE25F8eLlCvE0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzI1ZWQ1ODZhLTdlMzktNDQ2MS04MTI1LTFhZjcxNDY4NGRiZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAISQxgwDQYJKoZIhvcNAQELBQADggEBAAbGLMOWbjhMq5VOgVrmhBy92Ji4 9TAXBRJQTHFliiB3NcibGIgHOVDdWuGc9KfiIWELs5vf+RDenTXL7bZSqVCooSxv IQ6R6DVo5y+KJ5wsv1+glEK6PujxicQm75I90emeVbk8lB94ZCZ07v4UhqqRDkhn d1jhCkfY8tZ9PbAF0+4W72HXnbdD1GkDk+PgC2+qzPAnazHpvEG2AdDsF7gUSXFu o+4uFcSXJBUZDD8yntTF5SwctCS2bF4Teb/pkRMEv8Ca4DyTFbqoAfCVmJW7aEV7 ZZwtzBqovhLWPmRKpQ8cBQXEZGOXY1Us4wHduqkUSmZkLhih0htbiUsbUgA= -----END CERTIFICATE-----Generated at Sat Oct 18 02:38:02 2025 by rpki-client