$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dd7e2b0c-ba09-458a-9218-dccda18b11a8.roa File: dd7e2b0c-ba09-458a-9218-dccda18b11a8.roa (raw, json) Hash identifier: pTqVaCKjnRnDamahhoPH1xIx7HdbPoFz7LKgdnFbzNg= Subject key identifier: FB:1E:EC:1C:F3:E7:9C:AB:1B:E5:88:4C:7A:4C:30:85:7D:16:4C:C0 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 01BC5D245D48D950ED7FACB37E974C49199581FE Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dd7e2b0c-ba09-458a-9218-dccda18b11a8.roa Signing time: Tue 21 Oct 2025 11:33:52 +0000 ROA not before: Tue 21 Oct 2025 11:33:52 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.162.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:bc:5d:24:5d:48:d9:50:ed:7f:ac:b3:7e:97:4c:49:19:95:81:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Oct 21 11:33:52 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=25aea451ac0b373ae30090e5abc5310b95725988f0b59a33186576a60f53dca4, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:87:75:0d:64:b4:43:4a:24:65:96:f5:ef:8f: c7:d4:2f:1f:c1:98:9f:58:81:20:d6:51:48:fe:54: b0:52:94:8f:04:12:b2:75:74:45:1c:6a:ee:7a:3c: e5:db:7e:13:bf:e2:05:a6:2d:7d:c8:ea:c2:2a:24: 90:e1:7b:8d:1a:62:16:3c:c7:bb:88:97:1c:d5:d9: ea:03:0f:2b:41:60:0c:bc:95:da:d0:f0:d4:c4:17: 96:9e:15:df:f2:84:2f:26:19:08:66:40:d7:4b:64: 03:a5:6a:42:82:40:81:95:01:30:0e:71:8d:04:83: 39:ac:36:d2:bf:73:23:10:96:e4:79:eb:11:b5:78: 71:3b:49:a9:83:e2:68:68:49:0b:e5:83:8f:04:63: fb:87:92:e1:9b:14:17:72:1c:09:b9:fa:76:0f:52: b5:e4:6f:9c:84:74:29:ce:b5:f5:e9:f0:62:f9:a2: a6:05:d2:11:ec:dc:12:fb:1e:ea:d2:d2:63:4b:d0: 09:b1:b2:66:4d:a1:33:2d:37:da:26:ca:a3:86:25: 03:cf:b4:e6:ee:50:4e:e2:92:bc:cc:80:df:fa:75: dc:7c:93:43:65:6c:db:80:d7:15:f6:0f:df:a8:b9: 35:c1:9f:a6:22:81:e7:83:ab:65:52:e4:b7:80:6f: d1:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:1E:EC:1C:F3:E7:9C:AB:1B:E5:88:4C:7A:4C:30:85:7D:16:4C:C0 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dd7e2b0c-ba09-458a-9218-dccda18b11a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.162.0.0/24 Signature Algorithm: sha256WithRSAEncryption b2:f6:8c:00:ad:d7:7d:54:f6:fb:3a:fc:7a:0a:ef:90:79:b9: a9:1c:93:36:b2:2e:35:5e:03:3d:7f:44:fc:79:2c:1b:ab:0d: c3:11:ab:61:84:07:86:bb:4c:1f:c4:ad:cf:78:68:99:5e:e3: af:c4:eb:07:83:eb:cd:62:b2:7a:69:b5:f5:74:b4:af:c0:b0: 15:b0:c9:26:47:eb:7b:fc:0f:6a:6a:b9:d4:05:ad:6f:8c:4f: 7e:94:2c:5e:be:fb:78:20:4b:38:7e:fb:c6:94:5e:83:f1:a7: 82:5e:d4:43:bf:d2:de:ff:85:bc:77:f4:7d:d9:da:6f:ec:c3: d9:a2:1b:05:7a:78:9c:c1:b8:63:2e:b2:f0:33:71:89:b3:4e: 72:e7:2e:2a:d7:47:c4:58:b1:8c:64:0e:fa:f0:b3:c4:d3:ae: e7:68:4a:03:5b:bd:52:97:85:40:09:d7:61:82:2e:d7:24:80: 12:e1:1b:fd:c2:80:27:d0:c8:35:d2:b2:aa:c3:e1:42:49:c5: b8:69:34:ca:ec:ac:67:c0:fa:5f:2f:68:5a:63:4a:27:da:ee: dc:d5:5c:84:33:db:86:a9:4d:fe:41:6c:a6:f8:c0:ef:c5:a3: 60:bf:10:08:76:7c:88:70:b3:38:b2:c4:36:c7:ad:57:b5:b7: 21:dc:e1:a2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAbxdJF1I2VDtf6yzfpdMSRmVgf4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUxMDIxMTEzMzUyWhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AyNWFlYTQ1MWFjMGIzNzNhZTMwMDkwZTVhYmM1MzEwYjk1 NzI1OTg4ZjBiNTlhMzMxODY1NzZhNjBmNTNkY2E0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCsh3UNZLRDSiRllvXvj8fULx/BmJ9YgSDWUUj+VLBSlI8E ErJ1dEUcau56POXbfhO/4gWmLX3I6sIqJJDhe40aYhY8x7uIlxzV2eoDDytBYAy8 ldrQ8NTEF5aeFd/yhC8mGQhmQNdLZAOlakKCQIGVATAOcY0EgzmsNtK/cyMQluR5 6xG1eHE7SamD4mhoSQvlg48EY/uHkuGbFBdyHAm5+nYPUrXkb5yEdCnOtfXp8GL5 oqYF0hHs3BL7HurS0mNL0AmxsmZNoTMtN9omyqOGJQPPtObuUE7ikrzMgN/6ddx8 k0NlbNuA1xX2D9+ouTXBn6YigeeDq2VS5LeAb9GvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU+x7sHPPnnKsb5YhMekwwhX0WTMAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2RkN2UyYjBjLWJhMDktNDU4YS05MjE4LWRjY2RhMThiMTFhOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASogAwDQYJKoZIhvcNAQELBQADggEBALL2jACt131U9vs6/HoK75B5uakc kzayLjVeAz1/RPx5LBurDcMRq2GEB4a7TB/Erc94aJle46/E6weD681isnpptfV0 tK/AsBWwySZH63v8D2pqudQFrW+MT36ULF6++3ggSzh++8aUXoPxp4Je1EO/0t7/ hbx39H3Z2m/sw9miGwV6eJzBuGMusvAzcYmzTnLnLirXR8RYsYxkDvrws8TTrudo SgNbvVKXhUAJ12GCLtckgBLhG/3CgCfQyDXSsqrD4UJJxbhpNMrsrGfA+l8vaFpj Sifa7tzVXIQz24apTf5BbKb4wO/Fo2C/EAh2fIhwsziyxDbHrVe1tyHc4aI= -----END CERTIFICATE-----Generated at Wed Nov 5 01:47:15 2025 by rpki-client