$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5a3aa766-6892-41c2-a19a-e3f79b4342a3.roa File: 5a3aa766-6892-41c2-a19a-e3f79b4342a3.roa (raw, json) Hash identifier: KE1WIvFArXbYBHMeFl3QljMgBAfE7qgZ/4Hs4gg/noE= Subject key identifier: 30:8D:21:84:9F:85:19:F4:4F:8C:63:C2:79:D1:8C:4A:A4:1F:1F:89 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 24C0FFF04B382093451609ED4C47749716A00A23 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5a3aa766-6892-41c2-a19a-e3f79b4342a3.roa Signing time: Wed 24 Sep 2025 21:54:24 +0000 ROA not before: Wed 24 Sep 2025 21:54:24 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.66.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:c0:ff:f0:4b:38:20:93:45:16:09:ed:4c:47:74:97:16:a0:0a:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 21:54:24 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=d7ce27b50969a7b3b9c6308d14edfbeec033379e783bfbad413e018f884042ca, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:51:8c:2b:c5:9e:83:74:67:f6:16:4a:16:3e: b7:d8:cc:9d:80:a4:a3:41:9c:df:b9:5d:d7:72:9c: 4b:67:b4:4c:fc:fb:be:ec:f9:ea:40:ae:05:59:37: 2a:8c:5a:c4:55:61:55:3f:e1:6a:86:a4:32:b9:a5: 69:5e:fb:25:0f:11:3e:d5:65:1f:d6:78:0a:24:f8: 36:f9:ae:b7:cb:de:89:3e:2c:c3:a1:65:0b:bc:f0: 59:18:4f:cf:42:95:b9:c2:e9:e4:44:12:e9:e3:dc: 49:47:3d:ec:d9:e6:24:ed:52:05:84:a1:5d:d7:09: 7e:e4:38:3e:07:97:7b:c9:f2:88:9e:cb:37:07:e4: 65:cf:bb:79:69:5f:d1:1f:7d:39:b1:7c:9d:95:17: db:38:8f:e6:1b:d1:fe:8b:35:b4:c8:54:da:f2:0b: 37:e8:e7:84:81:9a:9d:4c:71:c8:89:86:ab:93:15: c1:09:f0:66:05:b6:af:dd:7c:77:d0:9e:58:e1:1e: d7:48:8e:1e:4b:96:44:00:1e:d6:cc:75:34:40:95: 42:a5:bb:28:98:1e:f5:9b:c1:77:62:02:9a:91:08: 1f:00:aa:f3:06:aa:a7:96:5a:b7:71:72:ba:c8:9b: c6:ea:d5:1b:46:65:03:dc:1b:69:c1:04:81:0b:be: 73:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:8D:21:84:9F:85:19:F4:4F:8C:63:C2:79:D1:8C:4A:A4:1F:1F:89 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5a3aa766-6892-41c2-a19a-e3f79b4342a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.66.6.0/24 Signature Algorithm: sha256WithRSAEncryption 51:b8:60:38:dc:44:9e:1e:41:34:8b:10:11:fa:ad:b2:42:d7: 0f:f1:42:80:f2:56:8e:40:de:9b:cf:cd:e7:69:67:8a:a8:a5: 23:bd:53:43:71:4d:7b:b5:4d:27:d8:f1:70:9f:40:7b:77:ab: 4e:ce:86:ae:d9:30:a0:7b:fc:16:a3:97:2f:67:62:e4:31:3b: f4:dd:2e:56:57:45:e7:f3:b8:7f:ea:77:2a:0f:ec:98:87:89: 96:d1:d2:8b:ef:b0:73:40:35:35:76:ad:3b:d7:88:00:8a:df: 5e:ec:71:b4:6d:dc:06:f9:ee:5c:75:1e:c9:74:54:e4:02:34: ce:01:7c:cc:b9:78:f9:ab:d7:4b:30:43:6d:85:00:8b:fa:c4: 96:5e:2d:86:4d:2d:65:5f:43:28:7f:e7:4b:73:c3:85:a2:f0: a3:d3:24:31:4d:c5:ff:58:54:8a:3a:a3:59:d7:13:21:a3:26: 01:98:07:c2:bf:45:13:15:c7:43:33:6c:a9:aa:b3:01:f0:f2: de:45:9d:37:bb:1c:25:5b:25:ef:04:e4:d3:a8:75:28:46:7f: aa:34:de:0c:4a:2f:57:cb:c3:db:1c:c2:bb:e4:08:7c:c2:6c: 24:1b:6f:b7:04:14:0c:ef:98:a2:44:a6:ca:40:1f:7c:40:39: 22:fd:d3:23 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJMD/8Es4IJNFFgntTEd0lxagCiMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MjE1NDI0WhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BkN2NlMjdiNTA5NjlhN2IzYjljNjMwOGQxNGVkZmJlZWMw MzMzNzllNzgzYmZiYWQ0MTNlMDE4Zjg4NDA0MmNhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDDUYwrxZ6DdGf2FkoWPrfYzJ2ApKNBnN+5XddynEtntEz8 +77s+epArgVZNyqMWsRVYVU/4WqGpDK5pWle+yUPET7VZR/WeAok+Db5rrfL3ok+ LMOhZQu88FkYT89ClbnC6eREEunj3ElHPezZ5iTtUgWEoV3XCX7kOD4Hl3vJ8oie yzcH5GXPu3lpX9EffTmxfJ2VF9s4j+Yb0f6LNbTIVNryCzfo54SBmp1McciJhquT FcEJ8GYFtq/dfHfQnljhHtdIjh5LlkQAHtbMdTRAlUKluyiYHvWbwXdiApqRCB8A qvMGqqeWWrdxcrrIm8bq1RtGZQPcG2nBBIELvnNvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUMI0hhJ+FGfRPjGPCedGMSqQfH4kwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzVhM2FhNzY2LTY4OTItNDFjMi1hMTlhLWUzZjc5YjQzNDJhMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASQgYwDQYJKoZIhvcNAQELBQADggEBAFG4YDjcRJ4eQTSLEBH6rbJC1w/x QoDyVo5A3pvPzedpZ4qopSO9U0NxTXu1TSfY8XCfQHt3q07Ohq7ZMKB7/Bajly9n YuQxO/TdLlZXRefzuH/qdyoP7JiHiZbR0ovvsHNANTV2rTvXiACK317scbRt3Ab5 7lx1Hsl0VOQCNM4BfMy5ePmr10swQ22FAIv6xJZeLYZNLWVfQyh/50tzw4Wi8KPT JDFNxf9YVIo6o1nXEyGjJgGYB8K/RRMVx0MzbKmqswHw8t5FnTe7HCVbJe8E5NOo dShGf6o03gxKL1fLw9scwrvkCHzCbCQbb7cEFAzvmKJEpspAH3xAOSL90yM= -----END CERTIFICATE-----Generated at Fri Oct 17 23:41:44 2025 by rpki-client