$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5f48fead-2015-4e4a-8722-6dd54d68ca17.roa File: 5f48fead-2015-4e4a-8722-6dd54d68ca17.roa (raw, json) Hash identifier: o38nhOoMOP43bbAAuXKCNBzBJ+0R+psxDYM80O7d2LU= Subject key identifier: 2D:51:96:E0:DD:2F:A4:3D:11:D5:87:0C:8C:F4:3F:F9:73:66:11:0C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6796400C99FE2766DF562F167B65B91268145A0C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5f48fead-2015-4e4a-8722-6dd54d68ca17.roa Signing time: Wed 24 Sep 2025 23:06:59 +0000 ROA not before: Wed 24 Sep 2025 23:06:59 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.67.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:96:40:0c:99:fe:27:66:df:56:2f:16:7b:65:b9:12:68:14:5a:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 23:06:59 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=762dcdcaf5d67c36741a4559e6bb69890fb0ea836f29ef68d5fee14134e2743d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:46:8e:4f:80:77:7c:31:dc:fb:d1:15:bb:f7: d6:27:89:51:90:0c:41:dd:c2:b3:06:7c:5b:5e:1a: ed:21:3d:d6:7c:f4:ed:0b:ab:77:22:f4:4c:89:4d: 9b:cc:2e:c3:df:08:bf:d9:88:d9:e1:4a:63:f1:8e: 9f:7b:d1:0b:82:72:f0:5d:e8:12:9d:cb:37:47:38: c5:ec:27:7d:6d:6b:6e:a8:c6:6b:ab:20:69:b4:65: c9:fe:f4:9c:ff:fa:2e:84:32:da:03:29:f6:da:9f: 63:f4:e3:51:d0:77:a0:f4:0d:e7:72:ee:b4:02:5d: ac:cd:b7:a9:a8:91:73:76:db:8a:bb:20:cf:00:1a: 96:d3:c8:5d:56:d8:a0:23:71:d3:04:b7:3c:d3:ca: 2e:6f:41:e4:b7:a9:fe:fb:17:09:ec:4c:94:49:8f: 51:de:64:11:a6:ba:b4:e7:e9:fe:96:ac:8c:7f:b4: 08:8a:bd:26:fe:46:8a:20:0f:e5:09:5d:0f:3f:21: 95:11:e1:fd:cf:8e:16:9d:2d:60:dd:a3:26:5e:51: 1b:30:02:be:7d:fd:8b:3c:d4:64:14:fa:27:22:80: fa:d1:29:e5:12:f4:11:1a:c8:8e:34:ba:ec:60:84: 41:79:81:ba:e8:a0:f8:7a:9e:08:da:5b:00:01:d6: 7d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:51:96:E0:DD:2F:A4:3D:11:D5:87:0C:8C:F4:3F:F9:73:66:11:0C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5f48fead-2015-4e4a-8722-6dd54d68ca17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.67.224.0/21 Signature Algorithm: sha256WithRSAEncryption 19:65:4d:06:f3:f4:9c:2d:92:7c:67:31:3d:16:ab:fb:f7:af: 59:27:32:c9:0c:01:19:51:64:46:c7:6d:93:5a:5b:ef:a6:92: c7:34:03:4e:57:99:58:86:dc:fb:93:fa:60:0a:32:5b:7e:08: 39:57:f0:da:b1:74:ec:d3:77:ae:c8:92:ea:dd:22:1e:e7:f0: 35:c4:b2:cd:97:9d:ee:aa:8f:85:df:9f:33:a9:2f:24:1f:07: bb:df:fd:99:2c:30:a3:b2:b7:90:35:2f:ea:b7:fa:26:fb:9a: ba:43:8e:e5:84:25:d0:11:f2:7e:41:2a:da:35:08:a1:e3:c7: a1:2b:22:1c:96:2e:44:60:6f:b7:54:5e:f0:56:15:34:c0:7d: 84:56:74:fb:5f:6f:f3:08:b4:70:18:0f:cc:05:21:8f:1b:f0: 22:f6:f1:b7:88:a4:72:07:d9:78:82:7e:7d:b2:6d:69:db:67: 32:15:b3:5e:e3:87:e2:65:0e:f9:a1:61:65:7e:25:5b:6f:d4: e3:90:7f:b0:64:cc:fe:a1:ba:da:8a:9b:8a:9d:6b:09:36:36: f7:7e:85:a3:df:0b:83:66:61:df:34:92:eb:4b:b5:ce:05:d9: f7:1a:27:01:13:ff:87:25:8d:57:45:2b:32:43:df:e4:54:d6: 52:ee:31:11 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZ5ZADJn+J2bfVi8We2W5EmgUWgwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MjMwNjU5WhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A3NjJkY2RjYWY1ZDY3YzM2NzQxYTQ1NTllNmJiNjk4OTBm YjBlYTgzNmYyOWVmNjhkNWZlZTE0MTM0ZTI3NDNkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCkRo5PgHd8Mdz70RW799YniVGQDEHdwrMGfFteGu0hPdZ8 9O0Lq3ci9EyJTZvMLsPfCL/ZiNnhSmPxjp970QuCcvBd6BKdyzdHOMXsJ31ta26o xmurIGm0Zcn+9Jz/+i6EMtoDKfban2P041HQd6D0Dedy7rQCXazNt6mokXN224q7 IM8AGpbTyF1W2KAjcdMEtzzTyi5vQeS3qf77FwnsTJRJj1HeZBGmurTn6f6WrIx/ tAiKvSb+RoogD+UJXQ8/IZUR4f3PjhadLWDdoyZeURswAr59/Ys81GQU+icigPrR KeUS9BEayI40uuxghEF5gbrooPh6ngjaWwAB1n3nAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQULVGW4N0vpD0R1YcMjPQ/+XNmEQwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzVmNDhmZWFkLTIwMTUtNGU0YS04NzIyLTZkZDU0ZDY4Y2ExNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMSQ+AwDQYJKoZIhvcNAQELBQADggEBABllTQbz9JwtknxnMT0Wq/v3r1kn MskMARlRZEbHbZNaW++mksc0A05XmViG3PuT+mAKMlt+CDlX8NqxdOzTd67Ikurd Ih7n8DXEss2Xne6qj4XfnzOpLyQfB7vf/ZksMKOyt5A1L+q3+ib7mrpDjuWEJdAR 8n5BKto1CKHjx6ErIhyWLkRgb7dUXvBWFTTAfYRWdPtfb/MItHAYD8wFIY8b8CL2 8beIpHIH2XiCfn2ybWnbZzIVs17jh+JlDvmhYWV+JVtv1OOQf7BkzP6hutqKm4qd awk2Nvd+haPfC4NmYd80kutLtc4F2fcaJwET/4cljVdFKzJD3+RU1lLuMRE= -----END CERTIFICATE-----Generated at Fri Oct 17 23:50:19 2025 by rpki-client