$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/70a46f5f-467c-4825-96b7-f4c7e2bd665f.roa File: 70a46f5f-467c-4825-96b7-f4c7e2bd665f.roa (raw, json) Hash identifier: aGBEpoZaIb3qAVh2M0wUqVn1K9dtbBLJrjLK6P8Y8aY= Subject key identifier: F2:7B:41:75:13:F8:BA:2D:17:36:C1:0A:5C:38:64:6A:97:8C:75:E2 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 66AC4C6F5BDA8877523A201EF8DEEEAE94052392 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/70a46f5f-467c-4825-96b7-f4c7e2bd665f.roa Signing time: Wed 24 Sep 2025 22:54:05 +0000 ROA not before: Wed 24 Sep 2025 22:54:05 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.66.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:ac:4c:6f:5b:da:88:77:52:3a:20:1e:f8:de:ee:ae:94:05:23:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 22:54:05 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=6d8d448ea58f7c45712361281a7df91ff03eb423589bc3fe48f7656ff307ffd8, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9f:c9:ee:47:b0:fa:3a:67:09:b7:08:4f:40: b8:30:b5:95:33:09:3f:09:4b:5a:75:41:fa:52:f3: 1b:23:cd:97:8f:38:54:c1:b7:25:f9:b4:6c:80:7f: 04:45:29:e7:33:7c:c5:59:8b:f5:58:7c:20:01:bb: 20:8e:57:0a:b6:89:77:0c:1a:b1:9b:e9:2b:cb:64: 50:51:89:ca:43:80:c5:82:19:72:bd:fd:2e:0d:08: 01:8d:36:de:f6:f5:df:d2:4d:53:1a:bd:9f:f0:12: ac:e2:86:9c:21:bb:14:57:09:c5:ef:f5:c7:8c:4d: c8:bd:88:35:59:bb:91:24:29:9e:e9:f0:b4:1d:37: 70:76:f6:87:bf:f8:68:57:b9:19:c5:69:3f:da:12: 3d:cb:86:0b:fa:fc:ee:d2:f7:75:9a:77:7a:19:31: 44:e5:23:e0:5f:4b:e3:c8:22:b5:77:0e:9d:9a:fd: 8d:5a:d5:22:02:c0:8e:af:28:45:b7:d9:a9:e8:67: 80:cd:c5:72:26:90:20:0f:41:82:9e:dc:c9:4e:2c: 2c:3d:e6:6b:6e:46:c8:58:26:d5:db:46:1c:30:0d: fc:8c:c0:3c:80:b2:c2:ce:37:a6:d5:f5:1b:92:31: 8f:99:e0:79:e8:50:8b:7d:3d:82:05:56:d9:46:36: ad:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:7B:41:75:13:F8:BA:2D:17:36:C1:0A:5C:38:64:6A:97:8C:75:E2 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/70a46f5f-467c-4825-96b7-f4c7e2bd665f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.66.204.0/22 Signature Algorithm: sha256WithRSAEncryption 54:99:b3:ff:4f:fe:cc:fd:7f:75:31:b4:eb:09:70:09:d9:31: 7e:89:f4:52:33:2f:f0:31:4a:88:5b:8b:db:c4:d8:65:9d:ec: 86:a5:8d:9f:60:30:19:05:9b:b7:46:98:ab:6b:9b:c1:29:eb: a9:7e:8b:a3:e9:42:5d:4e:78:52:f3:b7:53:c9:28:a4:08:6f: 2d:fa:2c:a6:92:b5:fc:60:e8:3a:68:e3:57:d7:fb:2f:2d:aa: 9e:f3:c7:70:76:e4:a1:30:aa:6c:10:e9:81:c7:ad:e7:32:48: b9:aa:73:57:86:19:f5:a3:84:39:a3:03:b1:01:96:83:33:c7: 87:77:1b:81:cc:f7:aa:fa:e3:72:36:f5:25:b9:d1:61:cb:3f: 83:c1:46:6e:46:ff:8c:da:94:06:30:c8:47:12:42:d3:02:ff: 8a:89:8a:3d:2c:2b:7b:fe:18:be:a9:f5:ac:0f:b0:62:4b:bc: fb:40:13:65:01:ad:44:a1:dc:28:86:3a:cd:b8:ca:50:4e:bd: 1c:89:a6:d9:34:4a:8c:4f:b1:48:71:b5:50:c1:22:75:85:34: 62:e6:5d:06:11:ad:2f:24:2a:ee:a3:96:ea:f0:7a:c6:52:0a: 79:bd:23:ac:bd:a7:46:8c:57:91:7d:0f:8e:26:a3:a9:f2:32: 42:c5:e9:19 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZqxMb1vaiHdSOiAe+N7urpQFI5IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MjI1NDA1WhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZDhkNDQ4ZWE1OGY3YzQ1NzEyMzYxMjgxYTdkZjkxZmYw M2ViNDIzNTg5YmMzZmU0OGY3NjU2ZmYzMDdmZmQ4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCon8nuR7D6OmcJtwhPQLgwtZUzCT8JS1p1QfpS8xsjzZeP OFTBtyX5tGyAfwRFKeczfMVZi/VYfCABuyCOVwq2iXcMGrGb6SvLZFBRicpDgMWC GXK9/S4NCAGNNt729d/STVMavZ/wEqzihpwhuxRXCcXv9ceMTci9iDVZu5EkKZ7p 8LQdN3B29oe/+GhXuRnFaT/aEj3Lhgv6/O7S93Wad3oZMUTlI+BfS+PIIrV3Dp2a /Y1a1SICwI6vKEW32anoZ4DNxXImkCAPQYKe3MlOLCw95mtuRshYJtXbRhwwDfyM wDyAssLON6bV9RuSMY+Z4HnoUIt9PYIFVtlGNq0tAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU8ntBdRP4ui0XNsEKXDhkapeMdeIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzcwYTQ2ZjVmLTQ2N2MtNDgyNS05NmI3LWY0YzdlMmJkNjY1Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAISQswwDQYJKoZIhvcNAQELBQADggEBAFSZs/9P/sz9f3UxtOsJcAnZMX6J 9FIzL/AxSohbi9vE2GWd7IaljZ9gMBkFm7dGmKtrm8Ep66l+i6PpQl1OeFLzt1PJ KKQIby36LKaStfxg6Dpo41fX+y8tqp7zx3B25KEwqmwQ6YHHrecySLmqc1eGGfWj hDmjA7EBloMzx4d3G4HM96r643I29SW50WHLP4PBRm5G/4zalAYwyEcSQtMC/4qJ ij0sK3v+GL6p9awPsGJLvPtAE2UBrUSh3CiGOs24ylBOvRyJptk0SoxPsUhxtVDB InWFNGLmXQYRrS8kKu6jlurwesZSCnm9I6y9p0aMV5F9D44mo6nyMkLF6Rk= -----END CERTIFICATE-----Generated at Fri Oct 17 22:03:04 2025 by rpki-client