$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/85b73ce7-cbfb-4e7f-ad79-a910c17b2197.roa File: 85b73ce7-cbfb-4e7f-ad79-a910c17b2197.roa (raw, json) Hash identifier: xoKQpjcH1QYdtx1p4gJB7prazWyDY+PXWffqxDIbBXA= Subject key identifier: E5:1B:2D:ED:50:EC:FD:48:3D:D8:78:8D:94:D2:39:3B:3D:65:55:26 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 411A0E2104C02987719B3FE1DC30472B0FFD9353 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/85b73ce7-cbfb-4e7f-ad79-a910c17b2197.roa Signing time: Wed 24 Sep 2025 22:56:37 +0000 ROA not before: Wed 24 Sep 2025 22:56:37 +0000 ROA not after: Wed 29 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.66.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:1a:0e:21:04:c0:29:87:71:9b:3f:e1:dc:30:47:2b:0f:fd:93:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 24 22:56:37 2025 GMT Not After : Oct 29 23:59:59 2025 GMT Subject: serialNumber=b423d60898575da77aaa8cc2c2ae5eee460763e01a47cd18483a224ded284d5b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:72:39:2c:66:a9:c4:6e:c9:58:43:b9:6f:23: 48:f7:ab:87:49:ce:c1:07:6f:39:50:6c:9b:c0:f7: c8:c9:93:0d:4d:eb:13:9f:f3:d1:2e:99:69:c6:dc: cb:42:ae:f7:f5:c0:df:e2:9a:4f:bc:3f:bd:d7:ad: f1:0a:90:a4:03:b6:7b:04:f7:c5:83:ec:f3:7a:3f: fa:4c:0d:4c:95:db:8d:59:a9:ab:1e:06:f3:19:8d: 20:54:d4:5b:53:da:86:5e:34:e2:90:47:6a:0f:14: ee:ea:25:6b:73:34:7f:13:fc:0e:99:4a:8d:d8:60: 4a:e9:87:c6:a8:b5:ae:9d:66:48:d3:2e:87:11:43: 2b:b7:11:b9:57:83:b9:54:c0:65:14:ce:7e:e3:4c: b9:0f:39:0b:fb:94:fe:07:29:5b:46:d3:81:9a:9a: f2:ee:03:a1:c0:83:ee:21:62:f2:d9:47:be:02:87: bd:b7:3e:39:4f:38:fb:63:c6:a9:87:15:b6:52:f0: 4f:43:59:6c:77:6c:6b:42:fd:67:97:87:c5:4d:14: 3d:5b:1a:29:aa:53:fc:77:4b:57:6a:29:29:43:6b: 05:63:3a:2c:c8:34:82:05:c5:f8:e1:f3:22:2b:bd: 09:d6:34:6a:d6:88:ec:b4:06:4f:50:9a:c5:fc:77: 87:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:1B:2D:ED:50:EC:FD:48:3D:D8:78:8D:94:D2:39:3B:3D:65:55:26 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/85b73ce7-cbfb-4e7f-ad79-a910c17b2197.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.66.88.0/22 Signature Algorithm: sha256WithRSAEncryption 27:b6:a4:63:0c:df:00:84:26:f4:e9:c8:5c:f5:cf:ab:98:d3: b0:60:d1:97:fb:4d:e3:e8:ce:af:b0:f9:fc:7c:9e:f1:c8:a4: f0:a5:f3:ba:11:d2:35:69:d3:87:1e:8a:06:bd:b3:ec:a2:93: a2:fe:70:bb:7e:e5:68:3b:e2:a3:fc:87:fc:51:c3:57:d2:bf: dd:ff:9c:83:f6:21:7e:7f:9e:2d:3b:8f:6c:a8:4a:ca:ac:8b: d2:cd:66:16:9a:6c:5e:0f:4c:6e:35:ca:a6:d7:ad:21:15:4a: 49:db:fe:e6:98:25:ae:1d:6b:bd:68:0a:4d:b3:af:cd:58:f3: dd:33:8e:83:aa:b2:89:e8:2c:22:a0:44:d5:7c:1c:05:91:ef: 25:10:d1:50:8d:44:aa:1b:bd:50:c3:42:0b:79:b0:2c:65:da: 6f:b9:a4:bc:30:c5:42:f0:37:2f:84:c2:e5:f2:6d:c5:5c:39: 32:34:e2:63:8f:1a:2c:f0:1d:3e:b4:df:2d:e5:62:e0:18:1a: 06:c5:e7:7f:d8:d9:4c:94:e4:79:fa:f0:27:c7:c0:71:2f:d5: 51:6f:0a:e5:b1:77:47:f6:68:fa:a3:8c:c3:6c:52:29:8e:16: ae:33:b5:3c:b9:c7:17:f6:f1:8d:37:4e:b2:48:d9:74:4e:93: b0:82:09:a8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQRoOIQTAKYdxmz/h3DBHKw/9k1MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTI0MjI1NjM3WhcNMjUxMDI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BiNDIzZDYwODk4NTc1ZGE3N2FhYThjYzJjMmFlNWVlZTQ2 MDc2M2UwMWE0N2NkMTg0ODNhMjI0ZGVkMjg0ZDViMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQChcjksZqnEbslYQ7lvI0j3q4dJzsEHbzlQbJvA98jJkw1N 6xOf89EumWnG3MtCrvf1wN/imk+8P73XrfEKkKQDtnsE98WD7PN6P/pMDUyV241Z qaseBvMZjSBU1FtT2oZeNOKQR2oPFO7qJWtzNH8T/A6ZSo3YYErph8aota6dZkjT LocRQyu3EblXg7lUwGUUzn7jTLkPOQv7lP4HKVtG04GamvLuA6HAg+4hYvLZR74C h723PjlPOPtjxqmHFbZS8E9DWWx3bGtC/WeXh8VNFD1bGimqU/x3S1dqKSlDawVj OizINIIFxfjh8yIrvQnWNGrWiOy0Bk9QmsX8d4f7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU5Rst7VDs/Ug92HiNlNI5Oz1lVSYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzg1YjczY2U3LWNiZmItNGU3Zi1hZDc5LWE5MTBjMTdiMjE5Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAISQlgwDQYJKoZIhvcNAQELBQADggEBACe2pGMM3wCEJvTpyFz1z6uY07Bg 0Zf7TePozq+w+fx8nvHIpPCl87oR0jVp04ceiga9s+yik6L+cLt+5Wg74qP8h/xR w1fSv93/nIP2IX5/ni07j2yoSsqsi9LNZhaabF4PTG41yqbXrSEVSknb/uaYJa4d a71oCk2zr81Y890zjoOqsonoLCKgRNV8HAWR7yUQ0VCNRKobvVDDQgt5sCxl2m+5 pLwwxULwNy+EwuXybcVcOTI04mOPGizwHT603y3lYuAYGgbF53/Y2UyU5Hn68CfH wHEv1VFvCuWxd0f2aPqjjMNsUimOFq4ztTy5xxf28Y03TrJI2XROk7CCCag= -----END CERTIFICATE-----Generated at Fri Oct 17 23:43:50 2025 by rpki-client