$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/57fd2e02-954e-438f-8376-8906de97e792.roa File: 57fd2e02-954e-438f-8376-8906de97e792.roa (raw, json) Hash identifier: 66B4IRdKWkluok/vwvhDDpEvzSMByJbycpDxN3NhoC8= Subject key identifier: 19:90:B7:86:16:60:7F:A4:6F:FB:03:45:2A:11:33:AA:A7:C6:DB:7E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3E5D939AB5A968BB1F82EAF532E4634FA6AC4E0D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/57fd2e02-954e-438f-8376-8906de97e792.roa Signing time: Wed 24 Sep 2025 21:44:55 +0000 ROA not before: Wed 24 Sep 2025 21:44:55 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.66.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:5d:93:9a:b5:a9:68:bb:1f:82:ea:f5:32:e4:63:4f:a6:ac:4e:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 21:44:55 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=e552fc62de7fd389f9b0ea46b6917e3dcbd6cfc1daeeb17b38fe81b39231bfe5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:60:70:ef:e1:df:2d:37:0d:39:b3:30:5a:ab: a5:a8:4e:04:e2:a1:20:d1:8d:89:50:82:0c:10:e1: 20:3e:1c:af:95:07:dc:bb:8b:4b:f9:79:12:86:d1: da:cb:f0:95:6d:e6:0e:a4:a6:14:f5:0b:c1:61:00: c3:23:b3:32:de:1c:c2:23:96:db:70:1e:b0:55:9b: cd:ce:6b:15:ca:5a:45:fc:f2:06:c3:ee:e3:e9:bd: e0:94:48:f3:4b:cd:cb:8f:59:60:b6:a3:d5:d5:5a: d2:b2:f4:61:9f:7f:eb:0a:d5:49:4c:03:df:aa:e6: 0f:16:b9:df:f3:8e:8f:16:39:42:d5:00:5c:35:4c: 43:b2:95:96:9b:fe:05:86:c9:bf:bc:6e:2a:d3:a4: eb:c2:ea:77:26:f5:b1:00:4f:ef:3b:d8:52:d8:9f: 26:b8:ef:27:96:61:20:5c:34:c5:11:fd:f9:7b:56: 8c:ab:e9:33:67:0c:9e:3a:1d:49:52:d2:19:d1:70: 36:7e:24:50:19:02:e5:82:65:1f:18:9d:b3:f6:87: 44:7a:24:88:3a:64:9a:fb:39:d1:f2:55:bc:b7:9e: 65:23:36:51:6a:6d:e9:53:c6:90:66:f5:9f:17:3b: 2f:f5:af:23:9e:b6:ea:b6:4c:4a:d2:38:74:7e:ee: e4:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:90:B7:86:16:60:7F:A4:6F:FB:03:45:2A:11:33:AA:A7:C6:DB:7E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/57fd2e02-954e-438f-8376-8906de97e792.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.66.172.0/24 Signature Algorithm: sha256WithRSAEncryption 18:f7:a4:6b:08:71:ca:09:2a:05:ed:cd:0b:75:b4:a2:74:85: 5f:94:6c:02:ee:3e:76:db:89:70:b9:be:9d:41:2a:54:9e:d4: 6b:e4:75:61:83:15:22:75:b3:72:c0:c6:be:aa:a8:d5:00:de: 11:1e:7f:c9:48:c9:be:5a:6b:00:b9:6f:e4:0e:d7:ac:49:a8: 3e:13:41:a5:9e:6d:bc:d1:3b:5d:84:20:c6:9f:3a:c1:d1:0c: 88:f2:49:96:94:b4:cc:31:d4:e0:5c:28:77:4c:cd:e0:9b:ba: 51:8b:34:2e:f0:8d:48:96:2d:2f:97:67:45:ba:a7:56:b6:ab: 73:0e:9b:03:6e:f9:f1:04:2c:9c:e6:1e:7a:ac:8c:9d:f5:e7: 56:58:ed:f2:a6:64:85:dd:d9:8c:49:93:ba:22:12:cf:cb:5d: ce:a9:01:f9:af:3e:06:de:ff:d3:23:c8:20:41:f1:0b:18:f9: 0a:97:38:ea:74:3f:53:0f:06:a5:49:da:f0:8f:ac:14:d3:08: 11:9c:79:6c:ec:ab:f7:3a:4a:b4:5e:0a:41:01:94:de:7c:de: fc:16:31:ef:e7:24:f1:56:bf:6f:c0:e2:c6:3a:6a:ff:ae:92: ac:98:92:57:80:c3:a5:5c:ec:58:23:40:c5:1e:40:4b:cc:4e: c0:f7:b5:ec -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPl2TmrWpaLsfgur1MuRjT6asTg0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MjE0NDU1WhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BlNTUyZmM2MmRlN2ZkMzg5ZjliMGVhNDZiNjkxN2UzZGNi ZDZjZmMxZGFlZWIxN2IzOGZlODFiMzkyMzFiZmU1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGYHDv4d8tNw05szBaq6WoTgTioSDRjYlQggwQ4SA+HK+V B9y7i0v5eRKG0drL8JVt5g6kphT1C8FhAMMjszLeHMIjlttwHrBVm83OaxXKWkX8 8gbD7uPpveCUSPNLzcuPWWC2o9XVWtKy9GGff+sK1UlMA9+q5g8Wud/zjo8WOULV AFw1TEOylZab/gWGyb+8birTpOvC6ncm9bEAT+872FLYnya47yeWYSBcNMUR/fl7 Voyr6TNnDJ46HUlS0hnRcDZ+JFAZAuWCZR8YnbP2h0R6JIg6ZJr7OdHyVby3nmUj NlFqbelTxpBm9Z8XOy/1ryOetuq2TErSOHR+7uTJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUGZC3hhZgf6Rv+wNFKhEzqqfG234wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzU3ZmQyZTAyLTk1NGUtNDM4Zi04Mzc2LTg5MDZkZTk3ZTc5Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASQqwwDQYJKoZIhvcNAQELBQADggEBABj3pGsIccoJKgXtzQt1tKJ0hV+U bALuPnbbiXC5vp1BKlSe1GvkdWGDFSJ1s3LAxr6qqNUA3hEef8lIyb5aawC5b+QO 16xJqD4TQaWebbzRO12EIMafOsHRDIjySZaUtMwx1OBcKHdMzeCbulGLNC7wjUiW LS+XZ0W6p1a2q3MOmwNu+fEELJzmHnqsjJ3151ZY7fKmZIXd2YxJk7oiEs/LXc6p AfmvPgbe/9MjyCBB8QsY+QqXOOp0P1MPBqVJ2vCPrBTTCBGceWzsq/c6SrReCkEB lN583vwWMe/nJPFWv2/A4sY6av+ukqyYkleAw6Vc7FgjQMUeQEvMTsD3tew= -----END CERTIFICATE-----Generated at Fri Oct 17 23:50:10 2025 by rpki-client