$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/646ca2ce-9692-42e4-9657-70d79c5090e3.roa File: 646ca2ce-9692-42e4-9657-70d79c5090e3.roa (raw, json) Hash identifier: Z2OBqB3GWoDdlCAtmVN6xsFd17j+0XHqjKFBCc5AS9E= Subject key identifier: E7:E1:BC:FD:C5:E8:FD:49:2C:F0:13:CC:5B:6B:1F:0D:84:97:7C:55 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0E50B793CFFB806AD767A45C3DC946D371937FDD Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/646ca2ce-9692-42e4-9657-70d79c5090e3.roa Signing time: Tue 21 Oct 2025 12:13:45 +0000 ROA not before: Tue 21 Oct 2025 12:13:45 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.162.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:50:b7:93:cf:fb:80:6a:d7:67:a4:5c:3d:c9:46:d3:71:93:7f:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 21 12:13:45 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=fc7b75548d2923224ced19d005e2e7c7399b76b4918231d11818d5b3a27968e5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2b:73:9e:ac:97:88:1f:b5:8a:04:4c:e7:48: 5a:eb:83:32:26:8d:d7:34:9d:5f:70:de:68:bf:da: 80:4a:92:cc:02:b5:89:55:3c:0f:ae:73:66:38:bb: 56:58:31:bd:ce:41:46:61:e3:b3:b6:8b:ce:a2:5b: 2c:ad:df:3b:82:12:5e:1a:00:73:45:c3:06:17:91: 8c:0b:d3:84:03:0c:52:91:fa:d8:a4:49:a9:c5:5d: ad:54:e0:42:a2:3a:bd:5e:36:1a:8c:dc:53:ba:75: 16:67:07:d9:58:73:a0:8e:45:90:35:f7:13:5e:2e: c5:96:08:cb:23:a0:96:ae:3d:01:bb:92:af:04:1b: 2b:5c:12:d3:19:b4:81:c5:a3:d9:28:76:f1:b6:20: e0:06:91:0e:60:03:aa:90:ff:e6:4f:d5:c0:fd:42: d4:18:af:fd:58:d7:64:c5:0d:1e:ea:06:53:84:24: 99:ca:2d:75:c8:7e:ee:09:3c:de:e2:8a:8d:c1:85: 30:5c:a5:e0:41:bc:5c:e2:c5:8b:3a:dd:14:8c:15: 24:9b:bd:82:66:6c:ce:cb:89:de:6d:dd:61:6d:f5: 38:7e:28:33:ea:d9:18:24:26:a9:19:27:db:db:cb: 96:76:3d:88:e1:23:3f:20:0b:9e:da:0e:a3:2c:63: 11:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:E1:BC:FD:C5:E8:FD:49:2C:F0:13:CC:5B:6B:1F:0D:84:97:7C:55 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/646ca2ce-9692-42e4-9657-70d79c5090e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.162.64.0/18 Signature Algorithm: sha256WithRSAEncryption 56:14:b3:5c:7f:00:21:bf:3e:7d:07:c1:6d:84:46:4d:bf:d2: 38:2e:a7:c1:b3:c7:32:5d:98:9b:23:b4:17:59:4c:a7:96:94: 2f:da:01:ce:0a:1c:65:10:1b:80:c6:6b:0b:ee:23:4d:f4:f2: 90:f1:47:3b:d1:17:2f:69:03:de:6a:ae:41:6f:f0:12:58:8a: f5:1b:9d:0e:41:72:87:7a:d5:ac:e1:58:48:cf:53:6c:42:a2: 1e:6c:c4:6c:8e:1e:2a:29:3e:6a:dc:8f:d1:56:71:b1:8d:70: a0:62:16:e4:e9:d6:40:76:53:bb:db:1e:f1:14:8d:98:23:c7: a8:c0:40:9b:fe:3e:88:e1:26:30:e6:46:ca:24:22:19:9c:10: 13:a1:e1:47:61:bc:20:31:18:a2:2d:cb:39:0b:dc:e4:a8:c5: ef:f0:c5:d9:9c:92:25:e7:43:2a:a4:e0:43:4d:26:03:7c:a0: cd:77:34:64:36:dc:f7:11:f2:9d:7b:c7:d8:c7:5e:71:fe:58: ac:38:cf:0e:1f:8a:8b:b0:66:af:4e:c7:66:4e:5b:52:ab:19: a8:cd:e7:3d:99:9f:11:18:8d:17:b5:8a:b5:81:c2:69:21:1b: 3a:50:b0:84:5c:75:c4:99:d8:3c:f3:46:f8:14:cf:f1:98:23: 86:1c:91:07 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDlC3k8/7gGrXZ6RcPclG03GTf90wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDIxMTIxMzQ1WhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BmYzdiNzU1NDhkMjkyMzIyNGNlZDE5ZDAwNWUyZTdjNzM5 OWI3NmI0OTE4MjMxZDExODE4ZDViM2EyNzk2OGU1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2K3OerJeIH7WKBEznSFrrgzImjdc0nV9w3mi/2oBKkswC tYlVPA+uc2Y4u1ZYMb3OQUZh47O2i86iWyyt3zuCEl4aAHNFwwYXkYwL04QDDFKR +tikSanFXa1U4EKiOr1eNhqM3FO6dRZnB9lYc6CORZA19xNeLsWWCMsjoJauPQG7 kq8EGytcEtMZtIHFo9kodvG2IOAGkQ5gA6qQ/+ZP1cD9QtQYr/1Y12TFDR7qBlOE JJnKLXXIfu4JPN7iio3BhTBcpeBBvFzixYs63RSMFSSbvYJmbM7Lid5t3WFt9Th+ KDPq2RgkJqkZJ9vby5Z2PYjhIz8gC57aDqMsYxGJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU5+G8/cXo/Uks8BPMW2sfDYSXfFUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzY0NmNhMmNlLTk2OTItNDJlNC05NjU3LTcwZDc5YzUwOTBlMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYSokAwDQYJKoZIhvcNAQELBQADggEBAFYUs1x/ACG/Pn0HwW2ERk2/0jgu p8GzxzJdmJsjtBdZTKeWlC/aAc4KHGUQG4DGawvuI0308pDxRzvRFy9pA95qrkFv 8BJYivUbnQ5Bcod61azhWEjPU2xCoh5sxGyOHiopPmrcj9FWcbGNcKBiFuTp1kB2 U7vbHvEUjZgjx6jAQJv+PojhJjDmRsokIhmcEBOh4UdhvCAxGKItyzkL3OSoxe/w xdmckiXnQyqk4ENNJgN8oM13NGQ23PcR8p17x9jHXnH+WKw4zw4fiouwZq9Ox2ZO W1KrGajN5z2ZnxEYjRe1irWBwmkhGzpQsIRcdcSZ2DzzRvgUz/GYI4YckQc= -----END CERTIFICATE-----Generated at Wed Nov 5 03:34:00 2025 by rpki-client